Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Greg (administrator) on ENVY (05-04-2017 22:26:40)
Running from C:\Users\Greg\Desktop
Loaded Profiles: Greg (Available Profiles: Greg)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10_64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AuthenTec, Inc.) C:\Program Files\Common Files\AuthenTec\TrueService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Spotify Ltd) C:\Users\Greg\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(WildTangent, Inc.) C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Program Files\WindowsApps\Microsoft.Getstarted_5.0.13.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [401896 2016-11-01] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-04-04] (AVAST Software)
HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-06] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\...\Run: [Spotify Web Helper] => C:\Users\Greg\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-22] (Spotify Ltd)
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110376 2017-02-25] (Siber Systems)
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\...\MountPoints2: {421448ae-d107-11e6-beb9-68172992e581} - "G:\AutoRun.exe" 
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64\FileSyncShell64.dll [2017-01-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64\FileSyncShell64.dll [2017-01-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64\FileSyncShell64.dll [2017-01-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-04-04] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-04-04] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll [2017-01-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll [2017-01-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Greg\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncShell.dll [2017-01-27] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{159e888b-78d5-4d59-ba58-9f5d470ac8c4}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4621e2bb-4d4f-4486-9b90-616769e0a260}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.jp.msn.com/HPALL13/14
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.jp.msn.com/HPALL13/14
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006
SearchScopes: HKLM -> DefaultScope {F154C596-75A9-4028-90E8-9752BD7CA05B} URL = 
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/705-29546-12064-14/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/705-29546-12064-14/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
SearchScopes: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> {F154C596-75A9-4028-90E8-9752BD7CA05B} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-02-25] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-23] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-23] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-08-23] (HP Inc.)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-02-25] (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-23] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-02-25] (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2017-02-25] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2701978342-3959735868-3175919056-1002 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2017-02-25] (Siber Systems Inc.)

FireFox:
========
FF DefaultProfile: yd760ifb.default
FF ProfilePath: C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\yd760ifb.default [2017-02-28]
FF NetworkProxy: Mozilla\Firefox\Profiles\yd760ifb.default -> type", 
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: (RoboForm Toolbar) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2017-02-25]
FF HKU\S-1-5-21-2701978342-3959735868-3175919056-1002\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-02] (VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-21] (Adobe Systems, Inc.)
FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll [2013-06-07] ( HP)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-13] ()

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://www.google.com.au/webhp?tab=iw&ei=zGHMV_aoBYHL0gTQyLWwDQ&ved=0EKkuCAQoAQ
CHR StartupUrls: Profile 1 -> "hxxps://www.facebook.com/","hxxps://outlook.live.com/owa/?id=64855&path=/mail/inbox/rp","hxxps://twitter.com/gregewan","hxxps://www.instagram.com/"
CHR DefaultSearchKeyword: Profile 1 -> bm
CHR Profile: C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-04-05]
CHR Extension: (Google Translate) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-01-11]
CHR Extension: (DocHub - Edit and Sign PDF Documents) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\adgncicbhbjfpijkdmbijninnhnmiblj [2017-01-11]
CHR Extension: (Torrent Search) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\afbpdhiclgghnffhkinjikglgmolhpee [2017-01-11]
CHR Extension: (Google Docs) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-11]
CHR Extension: (Google Drive) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-11]
CHR Extension: (UJAM - Make your music.) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdiogojbmdncjdpljocafnigiokgmci [2017-01-11]
CHR Extension: (YOUZEEK Free Music) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bjcgpdkighmjfjlplcighhgamlhkimce [2017-01-11]
CHR Extension: (iCloud) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bjhodfififgcgedifpkenofdhlaafokk [2017-01-11]
CHR Extension: (YouTube) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-11]
CHR Extension: (Nimbus Screenshot & Screen Video Recorder) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2017-03-10]
CHR Extension: (Weebly - Website Builder) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnocophcbjfiimmnhlhleaooedeheifb [2017-01-11]
CHR Extension: (Learn Italian - Molto Bene) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dadgddaepklpemjojmnhgdjmmkmefihe [2017-01-11]
CHR Extension: (Fair AdBlocker App (by STANDS)) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dcnofaichneijfbkdkghmhjjbepjmble [2017-01-11]
CHR Extension: (YOU.DJ app) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\defekohaofmambflfpfoojkmfdpcbgko [2017-01-11]
CHR Extension: (Webcam) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dfpjcegkjhdnnempidlgmeoaiilpidep [2017-01-11]
CHR Extension: (Word Search) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dnjkggjhcbohgnikmegjkodmakmimlkj [2017-01-11]
CHR Extension: (Torrent Turbo Search App) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eegbffmjdkflkcfncpfjjbggbdlnbdif [2017-01-11]
CHR Extension: (PicMonkey) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fgdgokchhicmaiacmgegjnppjkgogdhm [2017-01-11]
CHR Extension: (Fair Ads (by STANDS)) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gagfkmknmijppikpcikmbbkdkhggcmge [2017-01-11]
CHR Extension: (Google Docs Offline) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-11]
CHR Extension: (Google Photos) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hcglmfcclpfgljeaiahehebeoaiicbko [2017-01-11]
CHR Extension: (VoiceNote II - Speech to text) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hfknjgplnkgjihghcidajejfmldhibfm [2017-01-11]
CHR Extension: (Flixster) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgbpjlnkjhllfgfdmieompodgaefjcfh [2017-01-11]
CHR Extension: (Fashion Arena) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hjeihoebllhjahohmmbledgkgapldmlf [2017-01-11]
CHR Extension: (TiltShiftMaker) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hjjofhgnhekhkccpcnnloagmdpafifeo [2017-01-11]
CHR Extension: (What do your dreams mean) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hpmambngimkfaddbeebieghlkbdifaje [2017-01-11]
CHR Extension: (Voice Recognition) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2017-01-11]
CHR Extension: (iPiccy Photo Editor) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\imokeandodnlammaoenbgcnbhigjbpjh [2017-01-11]
CHR Extension: (Dropbox) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2017-01-11]
CHR Extension: (SoundCloud) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ipebkipbeggmmkjjljenoblnfaenambp [2017-01-11]
CHR Extension: (My Browser Page) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jghfknlgajlcihkhkhnlcoffhbohnlbg [2017-01-11]
CHR Extension: (Autodesk Homestyler) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2017-01-11]
CHR Extension: (Coupons at Checkout) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kegphgaihkjoophpabchkmpaknehfamb [2017-02-06]
CHR Extension: (Webcam Toy) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lfbgimoladefibpklnfmkpknadbklade [2017-01-11]
CHR Extension: (Fair AdBlocker (by STANDS)) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2017-04-05]
CHR Extension: (Album & Photo Manager For Facebook) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lgiedegfmekolcplboelnmfoiefpcpfg [2017-03-18]
CHR Extension: (Peanut Gallery) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lhbgfmofpkinopfbafkklckgbkojgknp [2017-01-11]
CHR Extension: (Video Converter) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2017-01-11]
CHR Extension: (Minimal Bookmarks Tree) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mohenkbngkbmdlkiemonbgdfgdjacaeb [2017-03-20]
CHR Extension: (My Cloud Player) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nbfjhlpinelhnncgfpgfekddidnbnaab [2017-01-11]
CHR Extension: (OneDrive) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2017-01-11]
CHR Extension: (Downloads) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ngbcgifdaopbfflfhbcfeomijfbbcadi [2017-03-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-11]
CHR Extension: (Meaning of Names) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nninaahoaamcnfhioafhfnaaegmkfmed [2017-01-11]
CHR Extension: (piZap Photo Editor) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\occpjibghkbopohbefbejkklnfdkdmok [2017-01-11]
CHR Extension: (Audio Converter) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ojfphighcpfimfhblaigjckljcoeipga [2017-01-11]
CHR Extension: (Picasa) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb [2017-01-11]
CHR Extension: (Click&Clean App) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-04-04]
CHR Extension: (Outlook.com) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2017-01-11]
CHR Extension: (Gmail) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-11]
CHR Extension: (Chrome Media Router) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-09]
CHR Extension: (RoboForm Password Manager) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2017-03-25]
CHR Profile: C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-02-11]
CHR Extension: (Google Slides) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-16]
CHR Extension: (Google Docs) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-16]
CHR Extension: (Google Drive) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-16]
CHR Extension: (YouTube) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-16]
CHR Extension: (Google Sheets) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-16]
CHR Extension: (Google Docs Offline) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-16]
CHR Extension: (Avast Online Security) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-01-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-16]
CHR Extension: (Gmail) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-16]
CHR Extension: (Chrome Media Router) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-16]
CHR Extension: (RoboForm Password Manager) - C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2017-01-16]
CHR Profile: C:\Users\Greg\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-20]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2016-08-20]
CHR HKLM-x32\...\Chrome\Extension: [bejnhdlplbjhffionohbdnpcbobfejcc] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2016-08-20]

Opera: 
=======
OPR Extension: (RoboForm Password Manager) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome [2017-01-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7398336 2017-04-04] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [261712 2017-04-04] (AVAST Software)
S3 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-04-17] (Intel)
S3 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241264 2013-01-29] (CyberLink)
S3 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [392168 2016-08-31] (Digital Wave Ltd.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [39616 2016-06-03] (CHENGDU YIWO Tech Development Co., Ltd)
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [569608 2014-10-09] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19424 2015-11-17] (Intel Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [135408 2015-06-18] (Intel Corporation)
R3 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
S3 Intel(R) Bluetooth Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [160712 2013-03-11] (Intel Corporation)
R2 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [976848 2016-01-14] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-02-11] (Intel Corporation)
S3 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-29] (IObit)
S2 MyWiFiDHCPDNS; c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-12-02] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-09-30] (NVIDIA Corporation)
S3 Optus 4G Modem HL; C:\ProgramData\MobileBrServ\mbbservice.exe [242264 2014-11-20] ()
R2 Start10; C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe [219664 2015-02-03] (Stardock Software, Inc)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2016-10-04] (Synaptics Incorporated)
R2 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-08] (AuthenTec, Inc.)
S3 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [100384 2016-03-09] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [1343736 2016-07-26] (WiseCleaner.com)
R2 ZeroConfigService; c:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3832224 2015-12-02] (Intel® Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; C:\WINDOWS\system32\ampa.sys [19568 2015-11-10] () [File not signed]
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [19568 2015-11-10] () [File not signed]
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [307736 2017-04-04] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-04-04] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334088 2017-04-04] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-04-04] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-04-04] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-04-04] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [127112 2017-04-04] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-04-04] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-04-04] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1005048 2017-04-04] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [556784 2017-04-04] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [164064 2017-04-04] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-04-04] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [100624 2015-06-08] (CyberLink)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [24056 2016-01-14] ()
S3 epmntdrv; C:\WINDOWS\SysWOW64\epmntdrv.sys [21496 2016-01-14] ()
R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [48168 2015-12-10] ()
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [10848 2016-07-11] ()
S3 EuGdiDrv; C:\WINDOWS\SysWOW64\EuGdiDrv.sys [10208 2016-07-11] ()
R1 HWiNFO32; C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS [27552 2016-09-06] (REALiX(tm))
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3354384 2015-05-04] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhmi.inf_amd64_cf6d426fe4c0cd3a\nvlddmkm.sys [14216760 2016-08-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-09-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47672 2016-09-17] (NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-04-29] (Realtek                                            )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [758488 2016-09-06] (Realsil Semiconductor Corporation)
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [79960 2016-10-04] (Synaptics Incorporated)
S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-08-23] (Anchorfree Inc.)
R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [207768 2013-04-17] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30544 2015-08-13] (HP)
S3 WiseHDInfo; C:\WINDOWS\WiseHDInfo64.dll [14800 2016-09-03] (wisecleaner.com)
S3 WiseRegNotify; C:\WINDOWS\WiseRegNotify.sys [29616 2016-09-03] (WiseCleaner.com)
S3 SmbDrv; \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-05 22:26 - 2017-04-05 22:27 - 00038692 _____ C:\Users\Greg\Desktop\FRST.txt
2017-04-05 22:22 - 2017-04-05 22:26 - 00000000 ____D C:\FRST
2017-04-05 22:22 - 2017-04-05 22:22 - 02424832 _____ (Farbar) C:\Users\Greg\Desktop\FRST64.exe
2017-04-05 15:40 - 2017-04-05 15:40 - 00000000 ____D C:\Users\Greg\Downloads\Blue.Bloods.S07E04.HDTV.x264-LOL[ettv]
2017-04-05 15:30 - 2017-04-05 15:30 - 00000000 ____D C:\Users\Greg\Downloads\Blue.Bloods.S07E03.HDTV.x264-LOL[ettv]
2017-04-05 15:30 - 2017-04-05 15:30 - 00000000 ____D C:\Users\Greg\Downloads\Blue.Bloods.S07E02.REAL.HDTV.x264-LOL[ettv]
2017-04-05 15:29 - 2017-04-05 15:29 - 00000000 ____D C:\Users\Greg\Downloads\Blue.Bloods.S07E01.HDTV.x264-LOL[ettv]
2017-04-05 15:27 - 2017-04-05 15:28 - 00000000 ____D C:\Users\Greg\Downloads\13.Reasons.Why.S01E01.WEB.X264-DEFLATE[ettv]
2017-04-05 09:59 - 2017-04-05 10:21 - 00000000 ____D C:\Users\Greg\Downloads\Diamond Cartel 2017 720p WEBRip 700 MB - iExTV
2017-04-05 09:55 - 2017-04-05 09:56 - 00000000 ____D C:\Users\Greg\Downloads\Sleepless.2017.480p.HDRip.XViD.AC3-ETRG
2017-04-04 15:05 - 2017-04-04 15:05 - 00000661 _____ C:\Users\Greg\Desktop\audio10.diagcab
2017-04-04 11:27 - 2017-04-04 11:27 - 00004000 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1474121400
2017-04-04 11:20 - 2017-04-04 11:20 - 00000000 ____D C:\Users\TEMP.ENVY\AppData\Roaming\AVAST Software
2017-04-04 11:19 - 2017-04-04 11:25 - 00000000 ____D C:\Users\TEMP.ENVY
2017-04-04 11:17 - 2017-04-04 11:17 - 00000000 ____D C:\Users\TEMP\AppData\Roaming\AVAST Software
2017-04-04 11:15 - 2017-04-04 11:25 - 00000000 ____D C:\Users\TEMP
2017-04-04 11:05 - 2017-04-04 11:05 - 00399944 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-03-25 22:14 - 2017-03-25 22:14 - 00653203 _____ C:\Users\Greg\Desktop\CRUISE SHIP screenshot-www.placesyoullsee.com-2017-03-25-23-14-06.jpeg
2017-03-25 00:04 - 2017-03-25 00:04 - 00152623 _____ C:\Users\Greg\Desktop\DOMINOS PIZZA.jpeg
2017-03-23 03:21 - 2017-03-23 03:21 - 00097449 _____ C:\Users\Greg\Desktop\IPHONE 7P CASE DRINK EFFECT CASE.jpeg
2017-03-23 03:20 - 2017-03-23 03:20 - 00112657 _____ C:\Users\Greg\Desktop\IPHONE 7P CASE STAND.jpeg
2017-03-20 00:58 - 2017-03-20 00:58 - 00030846 _____ C:\Users\Greg\Desktop\FREE OZSALE RETURN 19MAR parcelreturns_label_S2D4585561.pdf
2017-03-19 06:18 - 2017-03-19 06:18 - 00215664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-19 05:20 - 2017-03-19 05:20 - 00004926 _____ C:\Users\Greg\Desktop\C83AB3CE0C23F92BD3E8FE99149B869AECD9C141.torrent
2017-03-17 12:06 - 2017-03-17 12:06 - 00026003 _____ C:\Users\Greg\Desktop\REAL OR FAKE MARCH 19 TH 2017 twitter.com-2017-03-17-13-06-03.jpeg
2017-03-17 12:02 - 2017-03-17 12:02 - 00056336 _____ C:\Users\Greg\Desktop\REAL OR FAKE screenshot-twitter.com-2017-03-17-13-02-26.jpeg
2017-03-17 10:49 - 2017-03-17 10:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-17 10:49 - 2017-03-17 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-09 01:02 - 2017-04-05 09:46 - 00000000 ____D C:\Users\Greg\AppData\LocalLow\uTorrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-05 21:29 - 2016-08-24 03:01 - 00000000 ____D C:\Users\Greg\AppData\Roaming\uTorrent
2017-04-05 21:05 - 2016-08-22 10:06 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-04-05 14:49 - 2016-08-20 15:42 - 00002279 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-05 14:49 - 2016-08-20 15:42 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-04-05 13:35 - 2016-07-16 21:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-05 11:41 - 2013-08-04 05:08 - 00000000 ____D C:\ProgramData\Synaptics
2017-04-05 08:10 - 2016-07-16 21:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-04 16:01 - 2016-09-11 03:55 - 00003226 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForGreg
2017-04-04 16:01 - 2016-09-11 03:55 - 00000338 _____ C:\WINDOWS\Tasks\HPCeeScheduleForGreg.job
2017-04-04 15:08 - 2017-01-23 05:05 - 00000000 ____D C:\Users\Greg\AppData\Local\ElevatedDiagnostics
2017-04-04 11:54 - 2016-09-10 23:54 - 00003266 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForENVY$
2017-04-04 11:54 - 2016-09-10 23:54 - 00000352 _____ C:\WINDOWS\Tasks\HPCeeScheduleForENVY$.job
2017-04-04 11:34 - 2016-08-20 15:10 - 00000000 ____D C:\Users\Greg\AppData\Local\Packages
2017-04-04 11:30 - 2016-08-22 10:12 - 00941754 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-04 11:26 - 2016-09-18 00:10 - 00001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-04-04 11:26 - 2016-09-03 10:05 - 00000000 ____D C:\Users\Greg\AppData\Roaming\Wise Care 365
2017-04-04 11:26 - 2016-08-28 08:48 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-04-04 11:26 - 2016-08-22 11:46 - 00000000 __SHD C:\Users\Greg\IntelGraphicsProfiles
2017-04-04 11:25 - 2016-09-23 02:11 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-04 11:25 - 2016-08-22 10:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-04 11:25 - 2016-08-20 15:10 - 00000000 ____D C:\Users\Greg\AppData\LocalLow\AuthenTec
2017-04-04 11:25 - 2016-07-16 21:47 - 00000000 ____D C:\WINDOWS\Registration
2017-04-04 11:24 - 2016-07-16 16:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-04-04 11:22 - 2016-12-17 16:31 - 00003266 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-04 11:19 - 2016-08-21 07:54 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-04 11:05 - 2017-02-22 16:26 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-04-04 11:05 - 2016-08-22 16:15 - 00556784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00164064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00127112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-04-04 11:05 - 2016-08-22 16:15 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-04-04 11:04 - 2017-02-22 16:26 - 00334088 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-04-04 11:04 - 2017-02-22 16:26 - 00307736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-04-04 11:04 - 2017-02-22 16:26 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-04-04 11:04 - 2017-02-22 16:26 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-04-04 11:04 - 2016-09-18 00:09 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-04-04 11:04 - 2016-08-22 16:15 - 01005048 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-04-01 17:44 - 2016-08-25 08:29 - 00000000 ____D C:\Users\Greg\AppData\Roaming\vlc
2017-03-31 20:31 - 2016-08-30 20:42 - 00000000 ____D C:\Users\Greg\AppData\Local\CrashDumps
2017-03-29 02:34 - 2016-08-22 06:42 - 00018662 _____ C:\Users\Greg\Desktop\G-G-GREGS PROFILE STUFF.txt
2017-03-19 06:20 - 2016-07-16 16:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-03-18 22:37 - 2016-08-22 16:15 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.148984068542104
2017-03-18 22:37 - 2016-08-22 16:15 - 00337592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148984068635906
2017-03-18 10:02 - 2016-10-15 06:19 - 00004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-03-18 10:02 - 2016-09-25 01:35 - 00004528 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-03-18 10:02 - 2016-07-16 21:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-03-18 10:02 - 2016-07-16 21:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-03-17 10:49 - 2017-01-16 20:35 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-17 10:49 - 2016-08-21 18:43 - 00000000 ____D C:\ProgramData\Skype
2017-03-17 10:48 - 2013-08-04 04:58 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-13 03:46 - 2016-11-05 00:01 - 00000000 ____D C:\Program Files (x86)\Club Player Casino
2017-03-09 00:30 - 2016-09-14 12:17 - 00000000 ____D C:\Users\Greg\Documents\Youcam

==================== Files in the root of some directories =======

2016-08-21 23:53 - 2016-09-09 03:28 - 0007605 _____ () C:\Users\Greg\AppData\Local\resmon.resmoncfg
2016-08-22 16:35 - 2016-08-22 16:35 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
2017-03-17 10:47 - 2017-03-17 10:47 - 14456872 _____ (Microsoft Corporation) C:\Users\Greg\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-04-04 11:13

==================== End of FRST.txt ============================