Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:27-09-2015 01
Ran by Gncomputers (administrator) on ADIL (28-09-2015 01:39:13)
Running from C:\Users\Gncomputers\Downloads
Loaded Profiles: Gncomputers (Available Profiles: Gncomputers & Guest)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(WordWeb Software) C:\Program Files\WordWeb\wweb32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(BitTorrent Inc.) C:\Users\Gncomputers\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(BitTorrent Inc.) C:\Users\Gncomputers\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe
(BitTorrent Inc.) C:\Users\Gncomputers\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(http://getfireshot.com) C:\Users\Gncomputers\AppData\Roaming\FireShot\fireshot-chrome-plugin.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-23] (AVAST Software)
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\...\Run: [WordWeb] => C:\Program Files\WordWeb\wweb32.exe [65216 2009-11-09] (WordWeb Software)
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\...\Run: [uTorrent] => C:\Users\Gncomputers\AppData\Roaming\uTorrent\uTorrent.exe [1774432 2015-09-24] (BitTorrent Inc.)
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Gncomputers\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-09-23] (AVAST Software)
Startup: C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2013-02-18]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * aswBoot.exe /M:49c457bb2 /dir:"C:\Program Files\AVAST Software\Avast"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B688520E-E894-4DEF-A86F-34F950C9F57B}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-2123204161-853072409-3690002975-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2123204161-853072409-3690002975-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2123204161-853072409-3690002975-1000 -> {52db1893-8a90-4192-aede-08e00b8f8473} URL = 
SearchScopes: HKU\S-1-5-21-2123204161-853072409-3690002975-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-23] (AVAST Software)
BHO: No Name -> {B9F4DC10-7E40-403A-A5EA-383548FB0AEF} ->  No File
BHO: No Name -> {CBB84B88-3E21-414B-B170-6E9315762E65} ->  No File
BHO: No Name -> {E8C15560-18F5-4DD6-827F-0FFB78A2C824} ->  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: WSISAllmytubechrome - No CLSID Value - 
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Gncomputers\AppData\Roaming\Mozilla\Firefox\Profiles\c9gad0gc.default-1442953932501
FF Homepage: about:home
FF NetworkProxy: "type", 
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Gncomputers\AppData\Roaming\Mozilla\Firefox\Profiles\c9gad0gc.default-1442953932501\user.js [2015-09-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-23]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HomePage: Profile 3 -> hxxp://www.google.com/
CHR NewTab: Profile 3 -> "chrome-extension://hejpfkbgdacbcjfpdigeobmllafojhgk/flipper2.html"
CHR DefaultSearchKeyword: Profile 3 -> delicious
CHR Profile: C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Ancient Map) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2015-09-23]
CHR Extension: (Avast SafePrice) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-09-23]
CHR Extension: (Avast Online Security) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-09-23]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-23]
CHR Profile: C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Ancient Map) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2015-09-25]
CHR Extension: (Avast SafePrice) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-09-25]
CHR Extension: (Avast Online Security) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-09-24]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-24]
CHR Extension: (Pocket) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-09-25]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-24]
CHR Profile: C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Google Docs) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-25]
CHR Extension: (Google Drive) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-25]
CHR Extension: (YouTube) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google Search) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-25]
CHR Extension: (iVocab: GRE, TOEFL and SAT) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ddbfkngjokojcmmadaaipmjiacnnmgbl [2015-09-25]
CHR Extension: (Nitrous) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efdcneeepllhjlbejkfnaolelbpdacai [2015-09-25]
CHR Extension: (Video Downloader professional) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-09-25]
CHR Extension: (Avast SafePrice) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-09-25]
CHR Extension: (Stopwatch & Timer) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eoiibkbchfmgmhlodifjceiginokllbj [2015-09-25]
CHR Extension: (Polarr Plugin: Edit Any Photo on the Internet) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fhggacdeldojnpbgknpipalghlkbcimk [2015-09-25]
CHR Extension: (Pluto TV: TV for the Internet) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fjimjcdcjpelckcneochchfmnojdhdkh [2015-09-25]
CHR Extension: (Caret) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fljalecfjciodhpcledpamjachpmelml [2015-09-25]
CHR Extension: (CouponSumo - Coupon Codes Finder) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fpejcbkagieplniapfehhhogoiihheoc [2015-09-25]
CHR Extension: (Google Docs Offline) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-25]
CHR Extension: (Avast Online Security) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-09-25]
CHR Extension: (Flipper - A Beautiful New Tab) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hejpfkbgdacbcjfpdigeobmllafojhgk [2015-09-25]
CHR Extension: (feedly) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2015-09-25]
CHR Extension: (Cavalia Theme) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ikjonfccnlgefbgmmcdfhcncfiapkbbg [2015-09-25]
CHR Extension: (SoundCloud) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ipebkipbeggmmkjjljenoblnfaenambp [2015-09-25]
CHR Extension: (Grammarly Spell Checker & Grammar Checker) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2015-09-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-25]
CHR Extension: (Capture Webpage Screenshot Entirely. FireShot) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2015-09-25]
CHR Extension: (AdRemover for Google Chrome™) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mcefmojpghnaceadnghednjhbmphipkb [2015-09-25]
CHR Extension: (Pocket) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-09-25]
CHR Extension: (Delicious Bookmarks Extension) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mnaelnkmidnndgikjbiifihgklnocljd [2015-09-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25]
CHR Extension: (Fox News) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pamidlfalnpbkhdhbbepaibgehibgmna [2015-09-25]
CHR Extension: (Tab Snooze) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pdiebiamhaleloakpcgmpnenggpjbcbm [2015-09-25]
CHR Extension: (Draw.io Desktop) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pebppomjfocnoigkeepgbmcifnnlndla [2015-09-25]
CHR Extension: (Gmail) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25]
CHR Extension: (YouiDraw Logo Creator) - C:\Users\Gncomputers\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pmdikniemaokeigdgfkaihkldilkjmgi [2015-09-25]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-09-23]
CHR HKLM\...\Chrome\Extension: [ngidnflhjnpcfbcbmmkcfpniopmpgoga] - C:\ProgramData\Codecv\ngidnflhjnpcfbcbmmkcfpniopmpgoga.crx <not found>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-23] (AVAST Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-09-23] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-09-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-09-23] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-09-23] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [789296 2015-09-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [434184 2015-09-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115640 2015-09-23] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-09-23] (AVAST Software)
S3 DroidCam; C:\Windows\System32\drivers\droidcam.sys [22656 2012-08-14] (Dev47Apps)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2014-07-01] () [File not signed]
S3 ddsxeiservice; \??\C:\Program Files\sXe Injected\ddsxei.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 taphss; system32\DRIVERS\taphss.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 usbcamcl; system32\DRIVERS\usbcamcl.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-28 01:39 - 2015-09-28 01:39 - 00020915 _____ C:\Users\Gncomputers\Downloads\FRST.txt
2015-09-28 01:38 - 2015-09-28 01:38 - 01696256 _____ (Farbar) C:\Users\Gncomputers\Downloads\FRST.exe
2015-09-28 00:48 - 2015-09-28 01:39 - 00000000 ____D C:\FRST
2015-09-27 13:52 - 2015-09-27 13:52 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVAST Software
2015-09-27 13:52 - 2015-09-27 13:52 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVAST Software
2015-09-27 13:27 - 2015-09-27 13:27 - 00003560 ____N C:\bootsqm.dat
2015-09-27 09:47 - 2015-09-27 09:47 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\vlc
2015-09-27 09:46 - 2015-09-27 09:46 - 00000000 ____D C:\Program Files\VideoLAN
2015-09-27 08:22 - 2015-09-27 08:22 - 00000000 ____D C:\Users\TEMP\AppData\Roaming\AVAST Software
2015-09-27 08:20 - 2015-09-27 08:22 - 00000000 ____D C:\Users\TEMP
2015-09-27 06:51 - 2015-09-27 06:51 - 00000820 _____ C:\Windows\PFRO.log
2015-09-27 06:28 - 2015-09-27 06:29 - 00000000 ____D C:\ProgramData\Astroburn Lite
2015-09-26 20:27 - 2015-09-26 20:27 - 00152304 _____ C:\Windows\Minidump\092615-24741-01.dmp
2015-09-26 10:59 - 2015-09-28 01:22 - 00001916 _____ C:\Windows\setupact.log
2015-09-26 10:59 - 2015-09-26 10:59 - 00000000 _____ C:\Windows\setuperr.log
2015-09-26 10:32 - 2015-09-26 10:35 - 00000000 ____D C:\Users\Gncomputers\Documents\Backups
2015-09-26 06:16 - 2015-09-26 06:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-09-26 06:16 - 2015-09-26 06:16 - 00000000 ____D C:\Program Files\Adobe
2015-09-26 04:44 - 2015-09-26 04:44 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\PDAppFlex
2015-09-26 04:15 - 2015-09-26 04:15 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
2015-09-26 02:46 - 2015-09-26 02:46 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\CEF
2015-09-25 11:10 - 2015-09-25 11:14 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\FireShot
2015-09-25 09:05 - 2015-09-25 09:05 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-09-25 08:56 - 2015-09-25 08:56 - 00001284 _____ C:\Users\Gncomputers\Desktop\Dimmer.lnk
2015-09-25 08:56 - 2015-09-25 08:56 - 00000000 ____D C:\Program Files\Dimmer
2015-09-25 00:22 - 2015-09-25 00:22 - 00000000 ____D C:\Program Files\IVONA
2015-09-25 00:21 - 2015-09-25 00:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVONA
2015-09-24 20:05 - 2015-07-30 18:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-24 13:28 - 2015-09-24 13:23 - 00000030 _____ C:\AVScanner.ini
2015-09-24 12:56 - 2015-09-24 12:56 - 00000998 _____ C:\Users\Public\Desktop\Vegas Pro 11.0.lnk
2015-09-24 12:56 - 2015-09-24 12:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-09-24 12:56 - 2015-09-24 12:56 - 00000000 ____D C:\Program Files\Sony
2015-09-24 10:18 - 2015-09-24 10:18 - 00002659 _____ C:\Users\Gncomputers\Desktop\µTorrent.lnk
2015-09-24 10:18 - 2015-09-24 10:18 - 00002659 _____ C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-09-24 10:16 - 2015-09-28 01:37 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\uTorrent
2015-09-24 09:32 - 2015-09-24 09:32 - 00001713 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-09-24 09:32 - 2015-09-24 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-09-24 09:31 - 2015-09-24 09:32 - 00000000 ____D C:\Program Files\iTunes
2015-09-24 09:31 - 2015-09-24 09:31 - 00000000 ____D C:\Program Files\iPod
2015-09-24 09:28 - 2015-09-24 09:28 - 00000000 ____D C:\Program Files\Bonjour
2015-09-24 09:19 - 2015-09-27 01:33 - 00000000 ____D C:\Windows\pss
2015-09-24 09:10 - 2015-09-24 09:10 - 00000000 ____D C:\Users\Gncomputers\Downloads\Video
2015-09-24 09:10 - 2015-09-24 09:10 - 00000000 ____D C:\Users\Gncomputers\Downloads\Compressed
2015-09-24 08:41 - 2015-09-24 08:42 - 00000000 ____D C:\Users\Gncomputers\Documents\Miscellaneous
2015-09-24 08:08 - 2015-09-24 08:08 - 00000906 _____ C:\Users\Gncomputers\Desktop\Ultimate.lnk
2015-09-24 06:28 - 2015-08-18 06:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-24 06:28 - 2015-08-15 11:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-24 06:28 - 2015-08-15 10:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-24 06:28 - 2015-08-15 10:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-24 06:28 - 2015-08-15 10:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-24 06:28 - 2015-08-15 10:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-24 06:28 - 2015-08-15 10:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-24 06:28 - 2015-08-15 10:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-24 06:28 - 2015-08-15 10:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-24 06:28 - 2015-08-15 10:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-24 06:28 - 2015-08-15 10:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-24 06:28 - 2015-08-15 10:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-24 06:28 - 2015-08-15 10:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-24 06:28 - 2015-08-15 10:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-24 06:28 - 2015-08-15 10:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-24 06:28 - 2015-08-15 10:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-24 06:28 - 2015-08-15 10:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-24 06:28 - 2015-08-15 10:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-24 06:28 - 2015-08-15 10:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-24 06:28 - 2015-08-15 10:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-24 06:28 - 2015-08-15 10:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-24 06:28 - 2015-08-15 10:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-24 06:28 - 2015-08-15 10:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-24 06:28 - 2015-08-15 10:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-24 06:28 - 2015-08-15 10:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-24 06:28 - 2015-08-15 10:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-24 06:28 - 2015-08-15 10:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-24 06:28 - 2015-08-15 10:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-24 06:28 - 2015-08-15 10:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-24 06:28 - 2015-08-15 09:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-24 06:28 - 2015-08-15 09:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-24 06:28 - 2015-08-15 09:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-24 06:28 - 2015-08-05 22:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-24 06:12 - 2015-08-27 22:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-24 06:12 - 2015-08-27 22:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-24 06:12 - 2015-08-27 22:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-24 06:12 - 2015-08-27 22:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-24 06:12 - 2015-07-29 01:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-09-24 06:12 - 2015-07-29 01:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-09-24 06:12 - 2015-07-29 01:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-09-24 06:12 - 2015-07-29 01:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-09-24 06:12 - 2015-07-29 01:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-09-24 06:12 - 2015-07-29 01:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-09-24 06:12 - 2015-07-29 01:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-09-24 06:12 - 2015-07-29 00:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-09-24 06:12 - 2015-07-09 22:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-09-24 06:12 - 2015-07-09 22:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-09-24 06:12 - 2015-06-04 01:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-09-24 06:11 - 2015-08-05 22:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-24 06:11 - 2015-08-05 22:40 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-24 06:11 - 2015-07-10 22:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-09-24 06:11 - 2015-07-10 22:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-09-24 06:11 - 2015-07-10 22:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-09-24 06:11 - 2015-07-02 01:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-09-24 06:11 - 2015-07-02 01:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-09-24 06:11 - 2015-06-16 02:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-09-24 06:11 - 2015-06-16 02:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-09-24 06:11 - 2015-06-16 02:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-09-24 06:11 - 2015-06-16 02:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-09-24 06:10 - 2015-07-15 22:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-09-24 06:10 - 2015-07-15 22:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-09-24 06:10 - 2015-07-15 22:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-09-24 06:10 - 2015-06-11 22:57 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-09-24 06:10 - 2015-06-11 22:15 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-09-24 06:10 - 2015-06-11 22:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-09-24 05:43 - 2015-08-04 22:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-24 05:43 - 2015-08-04 22:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-24 05:43 - 2015-08-04 22:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-24 05:43 - 2015-08-04 22:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-24 05:43 - 2015-08-04 22:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-24 05:43 - 2015-08-04 21:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-24 05:42 - 2015-09-02 07:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-24 05:42 - 2015-09-02 07:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-24 05:42 - 2015-09-02 07:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-24 05:42 - 2015-09-02 07:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-24 05:42 - 2015-09-02 06:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-24 05:42 - 2015-09-02 06:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-24 05:42 - 2015-07-22 22:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-09-24 05:42 - 2015-07-22 22:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-24 05:42 - 2015-07-22 22:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-24 05:42 - 2015-07-22 22:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-24 05:42 - 2015-07-22 22:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-24 05:42 - 2015-07-22 22:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-24 05:42 - 2015-07-22 22:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-24 05:42 - 2015-07-22 22:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-24 05:42 - 2015-07-22 22:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-24 05:42 - 2015-07-22 22:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-24 05:42 - 2015-07-22 22:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-24 05:42 - 2015-07-22 22:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-24 05:42 - 2015-07-22 22:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-24 05:42 - 2015-07-22 22:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-24 05:42 - 2015-07-22 21:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-24 05:42 - 2015-07-22 21:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-24 05:42 - 2015-07-22 21:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-24 05:42 - 2015-07-22 21:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-24 05:42 - 2015-07-04 22:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-09-24 05:42 - 2015-04-11 08:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-09-24 05:41 - 2015-07-30 22:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-09-24 05:41 - 2015-07-30 22:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-09-24 05:41 - 2015-07-30 22:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-09-24 05:41 - 2015-07-09 22:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-24 05:41 - 2015-07-09 22:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-24 05:41 - 2015-06-17 22:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-09-24 05:41 - 2015-04-28 00:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-09-24 05:41 - 2015-04-28 00:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-09-24 05:41 - 2015-04-28 00:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-09-24 05:41 - 2015-04-28 00:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-09-24 05:40 - 2015-07-10 22:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-09-24 05:37 - 2015-06-25 14:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-24 05:37 - 2015-06-25 14:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-24 05:37 - 2015-06-25 14:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-24 05:36 - 2015-07-15 07:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-24 05:35 - 2015-08-26 22:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-24 05:35 - 2015-08-26 22:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-24 05:35 - 2015-08-26 22:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-24 05:35 - 2015-08-26 22:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-24 05:35 - 2015-08-26 22:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-24 05:35 - 2015-06-02 04:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-09-24 05:25 - 2015-07-15 07:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-24 03:13 - 2015-09-24 03:13 - 00000000 ____D C:\AVAST Software
2015-09-23 10:20 - 2015-09-25 18:26 - 00002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-23 10:20 - 2015-09-23 10:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-09-23 10:10 - 2015-09-28 01:21 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-23 10:10 - 2015-09-27 15:25 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-23 09:56 - 2015-09-23 09:56 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\NCH Swift Sound
2015-09-23 09:56 - 2015-09-23 09:56 - 00000000 ____D C:\ProgramData\NCH Swift Sound
2015-09-23 09:39 - 2015-09-23 09:39 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Deployment
2015-09-23 09:39 - 2015-09-23 09:39 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Apps\2.0
2015-09-23 09:28 - 2015-09-23 09:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-23 09:07 - 2015-09-23 09:07 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-09-23 09:04 - 2015-09-28 01:09 - 00000942 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2123204161-853072409-3690002975-1000UA.job
2015-09-23 09:04 - 2015-09-27 09:16 - 00000890 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2123204161-853072409-3690002975-1000Core.job
2015-09-23 09:04 - 2015-09-23 09:04 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Dropbox
2015-09-23 09:04 - 2015-09-23 09:04 - 00000000 ____D C:\ProgramData\Dropbox
2015-09-23 06:11 - 2015-09-23 06:11 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-09-23 06:11 - 2015-09-23 06:11 - 00000000 ____D C:\Program Files\ASIO4ALL v2
2015-09-23 06:10 - 2015-09-24 01:41 - 00001946 _____ C:\Users\Gncomputers\Desktop\FL Studio 11.lnk
2015-09-23 06:10 - 2015-09-23 06:10 - 00000000 ____D C:\Program Files\VstPlugins
2015-09-23 06:10 - 2015-09-23 06:10 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-09-23 06:09 - 2015-09-24 09:01 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-09-23 06:09 - 2015-09-23 06:09 - 00000000 ____D C:\Users\Gncomputers\Documents\Image-Line
2015-09-23 06:09 - 2015-09-23 06:09 - 00000000 ____D C:\Program Files\DSPRobotics
2015-09-23 06:01 - 2015-09-24 09:01 - 00000000 ____D C:\Program Files\Image-Line
2015-09-23 04:19 - 2015-09-24 01:42 - 00001957 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-09-23 04:18 - 2015-09-23 04:17 - 00313472 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-09-23 04:17 - 2015-09-23 04:17 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-09-23 03:42 - 2015-09-23 03:42 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\AVAST Software
2015-09-23 03:40 - 2015-09-23 04:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-23 03:38 - 2015-09-23 04:18 - 00434184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-09-23 03:38 - 2015-09-23 04:18 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-09-23 03:38 - 2015-09-23 04:17 - 00789296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-09-23 03:35 - 2015-09-23 03:35 - 00000000 ____D C:\Program Files\AVAST Software
2015-09-23 03:31 - 2015-09-23 03:31 - 00000000 ____D C:\ProgramData\AVAST Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-28 01:25 - 2012-07-07 19:13 - 00786474 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-28 01:05 - 2012-07-08 06:54 - 01761484 _____ C:\Windows\WindowsUpdate.log
2015-09-28 00:44 - 2009-07-14 09:34 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-28 00:44 - 2009-07-14 09:34 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-27 15:24 - 2009-07-14 09:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-27 10:48 - 2015-03-12 18:50 - 00000000 ___RD C:\Users\Gncomputers\Dropbox
2015-09-27 10:48 - 2014-06-11 02:00 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Dropbox
2015-09-27 10:30 - 2012-07-07 22:26 - 00000000 ____D C:\Users\Gncomputers\Documents\Books
2015-09-27 08:59 - 2012-07-07 19:09 - 00000000 ____D C:\Program Files\WinRAR
2015-09-27 08:22 - 2009-07-14 09:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-09-27 06:52 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-09-27 06:12 - 2015-03-13 02:18 - 00000000 ____D C:\Program Files\Ultimate
2015-09-27 06:00 - 2014-07-01 04:21 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\DAEMON Tools Lite
2015-09-26 21:31 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\rescache
2015-09-26 20:27 - 2012-09-19 22:34 - 00000000 ____D C:\Windows\Minidump
2015-09-26 10:22 - 2012-07-07 19:00 - 00000000 ____D C:\Users\Gncomputers
2015-09-26 09:39 - 2009-07-14 09:33 - 03764368 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-26 06:47 - 2012-07-07 19:35 - 00110080 _____ C:\Users\Gncomputers\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-26 06:17 - 2012-07-16 03:15 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-09-26 06:16 - 2012-07-16 03:14 - 00000000 ____D C:\ProgramData\Adobe
2015-09-26 05:22 - 2012-10-07 22:02 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Adobe
2015-09-26 04:13 - 2013-08-08 15:53 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-09-26 04:13 - 2012-07-17 13:25 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Adobe
2015-09-25 11:30 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-09-25 08:36 - 2012-07-07 22:28 - 00000000 ____D C:\Users\Gncomputers\Documents\Notes
2015-09-25 00:22 - 2009-07-14 07:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-09-25 00:09 - 2015-04-29 17:59 - 00000000 ____D C:\Windows\system32\appraiser
2015-09-25 00:09 - 2015-04-11 03:01 - 00000000 ___SD C:\Windows\system32\GWX
2015-09-25 00:09 - 2014-05-16 03:22 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-09-25 00:09 - 2009-07-14 12:50 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-24 23:26 - 2012-07-07 19:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-24 23:25 - 2013-10-05 03:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-09-24 23:25 - 2013-10-05 03:12 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-09-24 12:58 - 2012-07-25 22:43 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Sony
2015-09-24 10:06 - 2012-07-07 19:09 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\WinRAR
2015-09-24 09:31 - 2015-03-12 18:57 - 00000000 ____D C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-09-24 09:31 - 2013-08-31 05:51 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-09-24 09:27 - 2013-08-31 05:51 - 00000000 ____D C:\ProgramData\Apple
2015-09-24 09:21 - 2013-08-01 05:56 - 00007601 _____ C:\Users\Gncomputers\AppData\Local\Resmon.ResmonCfg
2015-09-24 08:20 - 2013-08-31 05:54 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Apple Computer
2015-09-24 08:11 - 2012-12-12 03:41 - 00000000 ____D C:\Users\Guest
2015-09-24 08:00 - 2014-01-29 22:46 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Microsoft Games
2015-09-24 07:28 - 2014-06-30 18:01 - 00000000 ____D C:\Users\Gncomputers\Documents\My Games
2015-09-24 01:51 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\Help
2015-09-24 01:43 - 2013-08-08 16:11 - 00001392 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-09-24 01:43 - 2012-07-23 04:52 - 00001864 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WordWeb.lnk
2015-09-24 01:43 - 2012-07-08 06:54 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-09-24 01:43 - 2012-07-08 06:54 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-09-24 01:43 - 2009-07-14 09:42 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-09-24 01:43 - 2009-07-14 09:42 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2015-09-24 01:43 - 2009-07-14 09:42 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2015-09-24 01:42 - 2015-03-14 18:35 - 00001978 _____ C:\Users\Public\Desktop\FoneLab.lnk
2015-09-24 01:42 - 2014-07-01 01:44 - 00000977 _____ C:\Users\Public\Desktop\Democracy 3.lnk
2015-09-24 01:41 - 2014-06-11 02:49 - 00001019 _____ C:\Users\Gncomputers\Desktop\Dropbox.lnk
2015-09-24 01:41 - 2012-07-08 01:39 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-09-24 01:41 - 2012-07-07 19:00 - 00001413 _____ C:\Users\Gncomputers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-24 01:41 - 2009-07-14 09:46 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2015-09-24 01:41 - 2009-07-14 09:37 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2015-09-24 01:40 - 2015-04-08 15:08 - 00000000 ____D C:\ProgramData\BlockIt Ad remover
2015-09-24 01:40 - 2014-02-22 04:10 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\genienext
2015-09-24 01:40 - 2012-07-25 11:21 - 00000000 ____D C:\ProgramData\InstallMate
2015-09-23 10:20 - 2012-07-07 19:11 - 00000000 ____D C:\Users\Gncomputers\AppData\Local\Google
2015-09-23 10:19 - 2013-10-18 23:05 - 00000000 ____D C:\Program Files\Google
2015-09-23 03:51 - 2015-03-06 02:02 - 00000000 ____D C:\ProgramData\{3b2dc8c5-e032-cfc2-3b2d-dc8c5e032317}
2015-09-23 03:44 - 2015-06-14 15:51 - 00000000 ____D C:\ProgramData\{4e943bd8-1f1a-0ab1-4e94-43bd81f1ef60}
2015-09-23 03:44 - 2013-11-23 21:53 - 00000000 ____D C:\Users\Gncomputers\AppData\Roaming\Ovi
2015-09-23 01:10 - 2015-05-15 02:36 - 00000024 _____ C:\Users\Gncomputers\AppData\Roaming\appdataFr25.bin
2015-09-23 01:04 - 2015-03-14 02:31 - 00000000 ____D C:\ProgramData\{421dba37-6d47-7680-421d-dba376d4e8dd}
2015-09-23 01:04 - 2015-03-14 02:19 - 00000000 ____D C:\ProgramData\{52760116-c12f-069b-5276-60116c12045b}

==================== Files in the root of some directories =======

2013-08-12 02:37 - 2013-08-26 18:50 - 0000132 _____ () C:\Users\Gncomputers\AppData\Roaming\Adobe BMP Format CS5 Prefs
2013-08-12 02:37 - 2013-10-09 00:04 - 0000132 _____ () C:\Users\Gncomputers\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-15 02:36 - 2015-09-23 01:10 - 0000024 _____ () C:\Users\Gncomputers\AppData\Roaming\appdataFr25.bin
2015-03-11 00:08 - 2015-03-13 02:48 - 0000020 _____ () C:\Users\Gncomputers\AppData\Roaming\appdataFr3.bin
2013-08-01 05:56 - 2015-09-24 09:21 - 0007601 _____ () C:\Users\Gncomputers\AppData\Local\Resmon.ResmonCfg
2015-03-13 02:24 - 2015-03-14 00:57 - 0000402 _____ () C:\Users\Gncomputers\AppData\Local\Temp-log.txt
2012-08-14 02:19 - 2012-08-14 02:19 - 0000020 _____ () C:\ProgramData\droidcam-settings

Some files in TEMP:
====================
C:\Users\Gncomputers\AppData\Local\Temp\bassmod.dll
C:\Users\Gncomputers\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpazn9r6.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-24 15:03

==================== End of FRST.txt ============================