Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-12-2016
Ran by Jerry (administrator) on JERRY-1A1033F2B (18-12-2016 14:29:55)
Running from C:\Documents and Settings\Jerry\My Documents\Downloads
Loaded Profiles: Jerry (Available Profiles: Jerry)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\WINDOWS\system32\WLTRYSVC.EXE
(Dell Inc.) C:\WINDOWS\system32\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files\Motorola Media Link\Lite\NServiceEntry.exe
(SigmaTel, Inc.) C:\WINDOWS\stsystra.exe
() C:\Program Files\Wireless-G Portable USB Adapter Wireless Network Monitor\InfoMyCa.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Citrix Systems, Inc.) C:\Program Files\Citrix\ICA Client\concentr.exe
(Dell Inc.) C:\WINDOWS\system32\WLTRAY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(iolo technologies, LLC) C:\Program Files\iolo\System Mechanic\ioloGovernor.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
() C:\Documents and Settings\Jerry\Local Settings\Application Data\MalwareProtectionLive\MalwareProtectionClient.exe
(Citrix Systems, Inc.) C:\Program Files\Citrix\ICA Client\wfcrun32.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
() C:\Program Files\Hawking\HWU8DD\HWU8DD.exe
(Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Nico Mak Computing) C:\Program Files\WinZip\FAHWindow32.exe
(iolo technologies, LLC) C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Motorola Mobility LLC) C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Motorola Mobility LLC) C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe
(Wondershare) C:\Program Files\Wondershare\WAF\2.2.0.5\WsAppService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [WUSB54GPv4] => C:\Program Files\Wireless-G Portable USB Adapter Wireless Network Monitor\InvokeSvc3.exe [24576 2004-04-19] ()
HKLM\...\Run: [SigmatelSysTrayApp] => C:\WINDOWS\stsystra.exe [282624 2006-07-27] (SigmaTel, Inc.)
HKLM\...\Run: [ISUSScheduler] => C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [86960 2006-11-16] (Macrovision Corporation)
HKLM\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [226224 2006-11-16] (Macrovision Corporation)
HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [ehTray] => C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation)
HKLM\...\Run: [ConnectionCenter] => C:\Program Files\Citrix\ICA Client\concentr.exe [309184 2012-03-28] (Citrix Systems, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\WINDOWS\system32\WLTRAY.exe [1347584 2005-12-19] (Dell Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-20] (AVAST Software)
HKLM\...\Run: [ATICCC] => C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [90112 2006-05-10] ()
HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [58656 2011-04-20] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-06] (Apple Inc.)
HKLM\...\Run: [ioloGovernor] => C:\Program Files\iolo\System Mechanic\ioloGovernor.exe [771344 2013-12-03] (iolo technologies, LLC)
HKLM\...\Run: [UserFaultCheck] => %systemroot%\system32\dumprep 0 -u
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [55264 2016-03-10] (Malwarebytes)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2006-09-22] (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe [746376 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-13] (Microsoft Corporation)
HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6775512 2016-06-10] (Piriform Ltd)
HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Run: [Wondershare Helper Compact.exe] => "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelperSetup.exe"
HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Run: [SynchronossPC] => C:\Program Files\Verizon\VerizonCloud\VerizonCloud.exe [2136728 2015-12-03] ()
HKU\S-1-5-18\...\Run: [MotoCast] => C:\Program Files\Motorola Mobility\MotoCast\MotoLauncher.lnk [1704 2014-03-16] ()
HKU\S-1-5-18\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [434080 2011-07-27] (Microsoft Corporation)
AppInit_DLLs: C:\WINDOWS\Jaksta\AC\x86\jaudcap.dll => C:\WINDOWS\Jaksta\AC\x86\jaudcap.dll [261552 2016-02-19] (Jaksta Technologies Pty Ltd)
SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} -  No File
ShellIconOverlayIdentifiers: [ SncrOverlays (Blocked)] -> {C418E880-6280-4010-A888-FD76028E5511} => C:\Program Files\Verizon\Verizon Cloud\x86\Sncr.Overlays.dll [2016-10-10] (Synchronoss Technologies Inc.)
ShellIconOverlayIdentifiers: [ SncrOverlays (InSync)] -> {5F4A6070-DB92-4C56-A487-F3850430608F} => C:\Program Files\Verizon\Verizon Cloud\x86\Sncr.Overlays.dll [2016-10-10] (Synchronoss Technologies Inc.)
ShellIconOverlayIdentifiers: [ SncrOverlays (Pending)] -> {EE73A341-C788-4A6B-B1EF-DDBFC0F190B6} => C:\Program Files\Verizon\Verizon Cloud\x86\Sncr.Overlays.dll [2016-10-10] (Synchronoss Technologies Inc.)
ShellIconOverlayIdentifiers: [ SncrOverlays (Syncing)] -> {28CDCD88-B179-49D6-8B21-1A9AF9C0AE13} => C:\Program Files\Verizon\Verizon Cloud\x86\Sncr.Overlays.dll [2016-10-10] (Synchronoss Technologies Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-10-23] (AVAST Software)
ShellIconOverlayIdentifiers: [0MediaIconsOerlay] -> {1EC23CFF-4C58-458f-924C-8519AEF61B32} =>  No File
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FAH.lnk [2016-07-13]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Hawking Wireless Utility.lnk [2009-10-30]
ShortcutTarget: Hawking Wireless Utility.lnk -> C:\Program Files\Hawking\HWU8DD\HWU8DD.exe ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Update Notifier.lnk [2016-07-13]
ShortcutTarget: Update Notifier.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Preloader.lnk [2016-07-13]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart.꿱ԷҰCRepairing C:\  - Drive Medic is verifying indexes (stage 2 of 3)...
ҰCRepairing C:\  - Drive Medic is verifying indexes (stage 2 of 3)...Ē
GroupPolicy\User: Restriction ? <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 192.168.0.1
Tcpip\..\Interfaces\{DBB19797-4C94-401C-9368-9219D9B431B7}: [DhcpNameServer] 192.168.1.254 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-854245398-1844823847-682003330-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-854245398-1844823847-682003330-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-854245398-1844823847-682003330-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKU\S-1-5-21-854245398-1844823847-682003330-1003 -> DefaultScope {134A9215-570B-43DA-AAC1-8D955A7B2343} URL = 
SearchScopes: HKU\S-1-5-21-854245398-1844823847-682003330-1003 -> {759BB39F-A003-44DD-8EA1-CBB5CB06786E} URL = 
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll => No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-27] (AVAST Software)
BHO: No Name -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> No File
Toolbar: HKU\.DEFAULT -> No Name - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -  No File
DPF: {49232000-16E4-426C-A231-62846947304B} hxxps://wimpro.cce.hp.com/ChatEntry/downloads/sysinfo.cab
DPF: {FC6703A7-5B7E-4f58-BE6D-2693AA3906AE} hxxp://h30299.www3.hp.com/ediags/hpnar/en/app/17/install/gtdownhp.cab?1,0,0,94
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.)

FireFox:
========
FF DefaultProfile: 3cw28vgy.default-1420139707078
FF ProfilePath: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 [2016-12-17]
FF DefaultSearchEngine: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> Yahoo!
FF DefaultSearchEngine.US: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> Yahoo!
FF DefaultSearchUrl: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> hxxps://search.yahoo.com/yhs/search
FF SearchEngineOrder.1: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> Yahoo! (Avast)
FF SelectedSearchEngine: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> Yahoo!
FF Homepage: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> hxxp://www.tigernet.com/view/tickets.do?category=Football+Parking&srt=d&subcategory=Season+Tickets
hxxps://www.google.com/?gws_rd=ssl
FF NetworkProxy: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078 -> type", 4
FF Extension: (Firefox Hotfix) - C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-06]
FF SearchPlugin: C:\Documents and Settings\Jerry\Application Data\Mozilla\Firefox\Profiles\3cw28vgy.default-1420139707078\searchplugins\yahoo-avast.xml [2015-01-10]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-02-05] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-23]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-23]
FF HKU\S-1-5-21-854245398-1844823847-682003330-1003\...\Firefox\Extensions: [moveplayer@movenetworks.com] - C:\Documents and Settings\Jerry\Application Data\Move Networks
FF Extension: (Move Media Player) - C:\Documents and Settings\Jerry\Application Data\Move Networks [2009-12-27] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-27] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll [2011-06-16] (Yahoo! Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @movenetworks.com/Quantum Media Player -> C:\Documents and Settings\Jerry\Application Data\Move Networks\plugins\npqmp071705000014.dll [2009-12-27] (Move Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-854245398-1844823847-682003330-1003: @movenetworks.com/Quantum Media Player -> C:\Documents and Settings\Jerry\Application Data\Move Networks\plugins\npqmp071705000014.dll [2009-12-27] (Move Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CCMSDK.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\cgpcfg.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CgpCore.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\confmgr.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxlogging.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxmui.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icafile.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icalogon.dll [2012-03-28] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npicaN.dll [2012-03-28] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2016-03-02] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll [2012-03-19] (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\TcpPServ.dll [2012-03-28] (Citrix Systems, Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-03]

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=683775&p={searchTerms}
CHR DefaultSearchKeyword: Default -> search.yahoo.com
CHR DefaultSuggestURL: Default -> hxxps://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
CHR Profile: C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default [2016-12-18]
CHR Extension: (Google Docs) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-22]
CHR Extension: (Google Drive) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-16]
CHR Extension: (YouTube) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-16]
CHR Extension: (Google Search) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-03-16]
CHR Extension: (Google Docs Offline) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-17]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-17]
CHR Extension: (Chrome Web Store Payments) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-17]
CHR Extension: (Gmail) - C:\Documents and Settings\Jerry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-16]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - <no Path/update_url>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-23] (AVAST Software)
R2 DeviceMonitorService; C:\Program Files\Motorola Media Link\Lite\NServiceEntry.exe [87992 2012-09-07] (Nero AG)
S4 ExpressAccountsService; C:\Program Files\NCH Software\ExpressAccounts\expressaccounts.exe [3641896 2013-11-01] (NCH Software)
S3 ExpressInvoiceService; C:\Program Files\NCH Software\ExpressInvoice\expressinvoice.exe [1987588 2013-11-10] (NCH Software) [File not signed]
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-10-16] (Hewlett-Packard Co.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 ioloSystemService; C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)
S3 MHN; C:\WINDOWS\System32\mhn.dll [85504 2004-08-10] (Microsoft Corporation) [File not signed]
R2 Motorola Device Manager; C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-07-31] (Motorola Mobility LLC)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
S3 PSEXESVC; C:\WINDOWS\PSEXESVC.EXE [181064 2013-11-19] (Sysinternals)
S4 Roxio UPnP Renderer 9; C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe [57344 2006-11-26] (Sonic Solutions) [File not signed]
S4 Roxio Upnp Server 9; C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe [294912 2006-11-26] (Sonic Solutions) [File not signed]
R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [1200128 2005-12-19] (Dell Inc.) [File not signed]
R2 WsAppService; C:\Program Files\Wondershare\WAF\2.2.0.5\WsAppService.exe [411648 2016-03-31] (Wondershare) [File not signed]
S3 WsDrvInst; C:\Program Files\Wondershare\Dr.Fone for Android\DriverInstall.exe [115856 2016-04-22] (Wondershare)
S4 WUSB54GPv4SVC; "C:\Program Files\Wireless-G Portable USB Adapter Wireless Network Monitor\WLService.exe" "WUSB54GPv4.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Apowersoft_AudioDevice; C:\WINDOWS\System32\drivers\Apowersoft_AudioDevice.sys [26032 2014-04-09] (Wondershare)
S3 appliand; C:\WINDOWS\System32\DRIVERS\appliand.sys [28256 2013-02-06] (Applian Technologies Inc.)
R3 appliandMP; C:\WINDOWS\System32\DRIVERS\appliand.sys [28256 2013-02-06] (Applian Technologies Inc.)
R1 ASPI32; C:\WINDOWS\system32\Drivers\ASPI32.sys [16877 2002-07-17] (Adaptec)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34008 2016-10-23] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [35096 2016-10-23] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [92256 2016-10-23] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-10-23] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [60424 2016-10-23] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [735488 2016-10-23] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [433768 2016-10-23] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [184592 2016-10-23] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [66688 2016-10-23] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [224752 2016-10-23] (AVAST Software)
R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [424320 2005-11-02] (Broadcom Corporation)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S0 cercsr6; C:\WINDOWS\system32\Drivers\cercsr6.sys [39904 2004-12-13] (Adaptec, Inc.) [File not signed]
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrv.sys [22312 2009-02-12] (EldoS Corporation)
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36640 2010-09-15] () [File not signed]
R3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [53184 2007-06-27] (FTDI Ltd.)
S3 GTNDIS5; C:\WINDOWS\system32\GTNDIS5.SYS [15872 2003-09-25] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2008-10-13] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2008-10-13] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2008-10-13] (HP)
S3 IrBus; C:\WINDOWS\System32\DRIVERS\IrBus.sys [46848 2013-07-16] (Microsoft Corporation)
S3 jakstaVA; C:\WINDOWS\System32\DRIVERS\jaksta_va.sys [91784 2014-12-08] (e2eSoft)
R2 MDC8021X; C:\WINDOWS\System32\DRIVERS\mdc8021x.sys [15781 2004-05-26] (Meetinghouse Data Communications) [File not signed]
S3 MHNDRV; C:\WINDOWS\System32\DRIVERS\mhndrv.sys [11008 2004-08-10] (Microsoft Corporation) [File not signed]
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R2 PDFsFilter; C:\WINDOWS\System32\DRIVERS\PDFsFilter.sys [68464 2013-12-03] (Raxco Software, Inc.)
S3 PRISM_A02; C:\WINDOWS\System32\DRIVERS\WUSB20XP.sys [339488 2004-01-07] (Cisco-Linksys, LLC.)
R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [36528 2006-07-24] (Sonic Solutions) [File not signed]
S3 sonypvs1; C:\WINDOWS\System32\DRIVERS\sonypvs1.sys [102220 2002-10-15] (Sony Corporation) [File not signed]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [717296 2009-11-11] () [File not signed]
R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1171464 2006-07-27] (SigmaTel, Inc.)
U3 TrueSight; C:\WINDOWS\system32\drivers\TrueSight.sys [15616 2013-01-05] () [File not signed]
R3 wanatw; C:\WINDOWS\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)
U0 yaaotpob; C:\WINDOWS\System32\drivers\gsqf.sys [52440 2016-12-18] (Malwarebytes)
S3 ZD1211BU(Hawking); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [402432 2005-10-28] (ZyDAS Technology Corporation) [File not signed]
R3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2004-10-25] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 CamDrL; system32\DRIVERS\Camdrl.sys [X]
S3 LVUSBSta; system32\drivers\lvusbsta.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-18 14:29 - 2016-12-18 14:29 - 00000000 ____D C:\FRST
2016-12-18 14:03 - 2016-12-18 14:03 - 00052440 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\gsqf.sys
2016-12-18 08:51 - 2016-12-18 14:03 - 00001058 _____ C:\Documents and Settings\Jerry\Desktop\Malware.txt
2016-12-16 09:00 - 2016-12-16 16:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-06 15:01 - 2016-12-06 15:01 - 00000000 _____ C:\Documents and Settings\Jerry\last.dump
2016-12-05 21:09 - 2016-12-05 21:09 - 00018944 _____ C:\Documents and Settings\Jerry\My Documents\Book1.xls
2016-12-05 19:14 - 2016-12-05 19:14 - 00000000 ____D C:\Documents and Settings\Jerry\Desktop\HISTORY OF ANC’S ERT's
2016-11-22 22:05 - 2016-11-22 22:06 - 00000000 ____D C:\Documents and Settings\Jerry\Application Data\Replay Converter 5
2016-11-22 22:02 - 2016-11-22 22:02 - 00000926 _____ C:\Documents and Settings\All Users\Desktop\Replay Converter 5.lnk
2016-11-20 22:00 - 2016-12-05 19:11 - 09674102 _____ C:\Documents and Settings\Jerry\My Documents\HISTORY OF ANC’S ERT's.pptx
2016-11-20 19:17 - 2016-11-20 19:17 - 00001847 _____ C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
2016-11-20 19:17 - 2016-11-20 19:17 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Google Earth

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-18 14:30 - 2013-01-04 09:50 - 00000000 ____D C:\Documents and Settings\Jerry\Local Settings\temp
2016-12-18 14:14 - 2013-05-23 13:24 - 00000886 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-18 14:03 - 2015-12-19 19:18 - 00000000 ____D C:\Documents and Settings\Jerry\Local Settings\Application Data\MalwareProtectionLive
2016-12-18 14:03 - 2015-02-25 18:04 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\YTD Video Downloader
2016-12-18 14:03 - 2013-03-03 14:11 - 00000000 ____D C:\Documents and Settings\Jerry\Application Data\Auslogics
2016-12-18 14:03 - 2013-03-03 14:11 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Auslogics
2016-12-18 14:03 - 2010-01-18 19:48 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Application Data\TorrentMan
2016-12-18 14:03 - 2009-07-05 18:06 - 00000000 ___DC C:\WINDOWS\$NtUninstallWudf01000$
2016-12-18 13:57 - 2013-01-15 21:41 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-18 13:45 - 2015-06-02 22:57 - 00000306 _____ C:\WINDOWS\Tasks\iToolsDaemon.job
2016-12-18 13:36 - 2014-06-29 21:16 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-18 12:34 - 2014-03-16 11:34 - 00000436 _____ C:\WINDOWS\Tasks\MotoCast Update.job
2016-12-18 06:44 - 2013-11-04 11:09 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-12-17 23:26 - 2015-03-24 14:32 - 00000777 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2016-12-17 23:26 - 2014-06-29 20:50 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes Anti-Malware
2016-12-17 23:26 - 2014-06-29 20:49 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-12-17 21:48 - 2016-02-02 14:38 - 00000474 _____ C:\WINDOWS\Tasks\SafeZone scheduled Autoupdate 1454441792.job
2016-12-17 21:48 - 2014-03-22 10:52 - 00000222 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
2016-12-17 21:48 - 2013-05-23 13:24 - 00000882 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-17 21:48 - 2012-05-13 14:54 - 00000000 ____D C:\Temp
2016-12-17 21:47 - 2013-02-19 12:44 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-17 21:47 - 2009-05-19 21:12 - 00000000 ____D C:\Documents and Settings\Jerry
2016-12-17 21:47 - 2009-05-19 21:10 - 00032534 _____ C:\WINDOWS\SchedLgU.Txt
2016-12-17 21:47 - 2009-05-19 21:10 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-17 21:46 - 2012-02-06 22:01 - 00333450 ____C C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
2016-12-17 21:46 - 2009-05-19 22:43 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2016-12-17 21:46 - 2009-05-19 21:12 - 00000278 __SHC C:\Documents and Settings\Jerry\ntuser.ini
2016-12-17 21:25 - 2011-02-22 18:23 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Microsoft Help
2016-12-16 22:18 - 2012-12-31 19:03 - 00802904 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-12-16 22:18 - 2011-07-03 16:12 - 00144472 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-12-16 22:18 - 2009-05-19 21:01 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-16 22:03 - 2012-04-16 18:56 - 00000000 ____D C:\Documents and Settings\Jerry\Application Data\uTorrent
2016-12-16 21:58 - 2009-07-12 11:23 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-16 08:30 - 2004-08-10 06:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2016-12-09 20:47 - 2009-05-19 21:12 - 00000000 ___RD C:\Documents and Settings\Jerry\My Documents
2016-12-05 18:42 - 2016-07-13 17:27 - 00000000 ____D C:\Documents and Settings\Jerry\Local Settings\Application Data\WinZip
2016-11-30 21:18 - 2012-02-06 21:45 - 03262538 ____C C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-854245398-1844823847-682003330-1003-0.dat
2016-11-30 18:53 - 2014-11-15 20:59 - 00000837 _____ C:\Documents and Settings\Jerry\Desktop\Verizon Cloud.lnk
2016-11-30 18:51 - 2009-05-19 16:49 - 00586582 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-30 18:34 - 2016-02-18 20:56 - 00000000 ____D C:\Program Files\Verizon
2016-11-23 21:18 - 2013-08-05 19:50 - 00316416 _____ C:\Documents and Settings\Jerry\My Documents\Yard Business 2013.xls
2016-11-23 19:56 - 2014-01-25 16:30 - 00033792 _____ C:\Documents and Settings\Jerry\My Documents\401K.xls
2016-11-22 22:06 - 2013-01-04 08:19 - 00000000 ____D C:\Documents and Settings\Jerry\Local Settings\Application Data\Applian
2016-11-22 22:05 - 2015-01-01 22:00 - 00000000 ____D C:\Documents and Settings\Jerry\My Documents\Applian
2016-11-22 22:02 - 2013-01-03 22:06 - 00000000 ____D C:\Program Files\Applian Technologies
2016-11-22 20:23 - 2010-10-13 11:44 - 00211968 _____ C:\Documents and Settings\Jerry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-22 18:56 - 2009-05-19 16:39 - 00000000 ____D C:\WINDOWS\inf
2016-11-20 20:41 - 2013-10-07 19:41 - 00000478 _____ C:\WINDOWS\Tasks\Motorola Device Manager Update.job
2016-11-20 20:01 - 2009-05-31 20:19 - 00000000 ___RD C:\Documents and Settings\Jerry\My Documents\My Videos
2016-11-20 19:50 - 2009-07-05 20:29 - 00000000 ____D C:\Documents and Settings\Jerry\Local Settings\Application Data\WMTools Downloaded Files
2016-11-20 19:34 - 2013-01-03 22:16 - 00000000 ____D C:\Documents and Settings\Jerry\My Documents\My Streaming Media

==================== Files in the root of some directories =======

2013-05-29 23:21 - 2013-10-02 08:11 - 0003734 ____C () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2011-12-27 20:25 - 2011-12-27 20:25 - 0002528 ____C () C:\Documents and Settings\Jerry\Application Data\$_hpcst$.hpc
2015-03-10 20:13 - 2015-03-10 20:13 - 0024198 _____ () C:\Documents and Settings\Jerry\Application Data\art.png
2009-08-18 19:10 - 2013-09-15 23:44 - 0009222 ____C () C:\Documents and Settings\Jerry\Application Data\BurnLog.log
2013-01-13 19:08 - 2016-11-22 20:32 - 0076316 ____C () C:\Documents and Settings\Jerry\Application Data\RegistrationLog.log
2013-01-13 19:08 - 2016-11-22 20:32 - 0056754 ____C () C:\Documents and Settings\Jerry\Application Data\ReplayConverterLog.log
2011-08-21 20:57 - 2015-06-02 15:09 - 0003359 ____C () C:\Documents and Settings\Jerry\Application Data\ReplayMusicLog.log
2010-10-13 11:44 - 2016-11-22 20:23 - 0211968 _____ () C:\Documents and Settings\Jerry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-10-04 18:22 - 2010-10-04 18:22 - 0000128 _____ () C:\Documents and Settings\Jerry\Local Settings\Application Data\fusioncache.dat
2014-01-30 18:20 - 2014-01-30 18:25 - 43677261 ____C () C:\Documents and Settings\Jerry\Local Settings\Application Data\setup.exe
2014-01-30 18:20 - 2014-01-30 18:20 - 0000033 ____C () C:\Documents and Settings\Jerry\Local Settings\Application Data\upload.txt
2009-09-16 18:28 - 2014-03-24 18:53 - 0002937 ____C () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
2012-02-06 19:38 - 2014-01-23 17:52 - 0001177 _____ () C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.400.32.bc
2009-11-18 20:23 - 2009-11-18 20:23 - 0005110 ____C () C:\Documents and Settings\All Users\Application Data\xqkcebzs.dik

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================