Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.07.2018
Ran by Drew Owens (administrator) on DREW (17-07-2018 17:54:13)
Running from C:\Users\Drew Owens\Downloads
Loaded Profiles: Drew Owens & MSSQL$XACTWARE & MSSQL$SQLEXPRESS (Available Profiles: Drew Owens & MSSQL$XACTWARE & MSSQL$SQLEXPRESS)
Platform: Windows 8.1 (Update) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\System32\nvwmi64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Windows\SysWOW64\ASGT.exe
(Cisco WebEx LLC) C:\Windows\SysWOW64\atashost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Marvell) C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.XACTWARE\MSSQL\Binn\sqlservr.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Nico Mak Computing) C:\Program Files\WinZip\FAH\FAHWindow64.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe
() C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\FileManager\PhotosApp.exe
(Xactware) C:\Program Files (x86)\Xactware\XactRemodel27\CORE\x.exe
(Xactware.) C:\Program Files (x86)\Xactware\Common\QA.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2727568 2014-11-25] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7200984 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353432 2013-09-26] (Realtek Semiconductor)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2409936 2018-02-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2018-06-29] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [280064 2013-09-25] (Intel Corporation)
HKLM-x32\...\Run: [MSUTray] => C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe [1202216 2011-11-24] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-07-27] (AMD)
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [886768 2018-06-29] (Adobe Systems Incorporated)
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\MountPoints2: {1752acfd-2783-11e6-8284-54a05084f227} - "F:\VZW_Software_upgrade_assistant.exe" 
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\MountPoints2: {2afa427b-1241-11e5-824f-806e6f6e6963} - "F:\CheckID.exe" 
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\MountPoints2: {a2bb3a73-c92b-11e5-827e-54a05084f227} - "F:\VZW_Software_upgrade_assistant.exe" 
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\...\MountPoints2: {a2bb3a81-c92b-11e5-827e-54a05084f227} - "F:\VZW_Software_upgrade_assistant.exe" 
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11776 2014-11-21] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #3] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2594304 2012-09-27] (ASUS)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2594304 2012-09-27] (ASUS)
HKU\S-1-5-18\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2594304 2012-09-27] (ASUS)
HKU\S-1-5-18\...\RunOnce: [Application Restart #5] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2594304 2012-09-27] (ASUS)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2594304 2012-09-27] (ASUS)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-06-22]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAH\FAHConsole.exe (Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-06-22]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A044155E-1DC6-435C-A713-5346B470DAE4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{CFC164C6-A88A-460C-9D43-467FD275B8ED}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2116419765-1218913875-2256313103-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
URLSearchHook: [S-1-5-80-198911736-59120847-1523967167-1988805892-391028842] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-07-14] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2018-05-17] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2116419765-1218913875-2256313103-1001 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-09-30] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-02] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-02] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-02] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-07-02] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-02-02]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-02-14] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-06] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-11-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-11-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-02-14] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2116419765-1218913875-2256313103-1001: @ringcentral.com/RingCentralMeetingsPlugin -> C:\Users\Drew Owens\AppData\Roaming\RingCentralMeetings\bin\nprcmsplugin.dll [2016-06-23] (Zoom Video Communications, Inc. and RingCentral Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://homepage-web.com/?s=hp&m=home
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Profile: C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default [2018-07-17]
CHR Extension: (Slides) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-25]
CHR Extension: (Docs) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-25]
CHR Extension: (Google Drive) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07]
CHR Extension: (YouTube) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-07]
CHR Extension: (Nimbus Screenshot & Screen Video Recorder) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2018-06-09]
CHR Extension: (Google Search) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-07]
CHR Extension: (Save Tabs) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjepfldodmdfmdidhhgamnklbdibndi [2018-03-06]
CHR Extension: (Adobe Acrobat) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-05]
CHR Extension: (Sheets) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-25]
CHR Extension: (Google Docs Offline) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (AdBlock) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-06-14]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2018-07-17]
CHR Extension: (Grammarly for Chrome) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2018-07-15]
CHR Extension: (Fair AdBlocker) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2018-03-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-06]
CHR Extension: (Gmail) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-14]
CHR Extension: (Chrome Media Router) - C:\Users\Drew Owens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-15]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-02-14] (Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8765104 2018-06-30] (Microsoft Corporation)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240584 2012-10-02] (DTS, Inc)
S2 hptsvr; C:\Program Files (x86)\HighPoint RAID Management\Service\hptsvr.exe [57344 2010-03-09] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe [7168 2013-09-25] (Intel Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [194240 2015-10-20] (Microsoft Corporation)
R2 MSSQL$XACTWARE; C:\Program Files\Microsoft SQL Server\MSSQL11.XACTWARE\MSSQL\Binn\sqlservr.exe [194240 2015-10-20] (Microsoft Corporation)
R2 MSUWebService; C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe [24645 2011-11-21] (Apache Software Foundation) [File not signed]
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2693448 2014-11-25] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-10-20] (Microsoft Corporation)
S4 SQLAgent$XACTWARE; C:\Program Files\Microsoft SQL Server\MSSQL11.XACTWARE\MSSQL\Binn\SQLAGENT.EXE [613056 2015-10-20] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c64x64.sys [469264 2013-06-20] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-23] (ASUSTeK Computer Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 Mv_Process; c:\windows\syswow64\mv_process.sys [14376 2011-11-21] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S4 RsFx0202; C:\Windows\System32\DRIVERS\RsFx0202.sys [339648 2015-10-20] (Microsoft Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-17 17:54 - 2018-07-17 17:54 - 000024527 _____ C:\Users\Drew Owens\Downloads\FRST.txt
2018-07-17 17:52 - 2018-07-17 17:54 - 000000000 ____D C:\FRST
2018-07-17 17:52 - 2018-07-17 17:52 - 002412544 _____ (Farbar) C:\Users\Drew Owens\Downloads\FRST64.exe
2018-07-17 17:52 - 2018-07-17 17:52 - 000000000 ____D C:\Users\Drew Owens\Downloads\FRST-OlderVersion
2018-07-15 08:31 - 2018-07-15 08:31 - 000233688 _____ C:\Users\Drew Owens\Documents\ERICMASHBURN_Final Draft.pdf
2018-07-15 08:31 - 2018-07-15 08:31 - 000233668 _____ C:\Users\Drew Owens\Documents\ERICMASHBURNCEDAR_Final Draft.pdf
2018-07-15 08:30 - 2018-07-15 08:30 - 000202172 _____ C:\Users\Drew Owens\Documents\MASHBURNKITCHEN_Final Draft.pdf
2018-07-15 07:11 - 2018-07-15 07:11 - 000159733 _____ C:\Users\Drew Owens\Downloads\RAFTING_TRIP_WAIVER.pdf
2018-07-14 09:30 - 2018-07-14 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2018-07-12 19:28 - 2018-07-12 19:28 - 000079133 _____ C:\Users\Drew Owens\Downloads\Sitar_Floor_Plan.pdf
2018-07-11 14:38 - 2018-06-11 11:55 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-07-11 14:38 - 2018-06-09 11:40 - 020286976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-07-11 14:37 - 2018-06-20 15:01 - 007398232 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-07-11 14:37 - 2018-06-20 14:44 - 001676064 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-07-11 14:37 - 2018-06-20 14:44 - 001536120 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-07-11 14:37 - 2018-06-20 13:48 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-07-11 14:37 - 2018-06-20 13:48 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fxppm.sys
2018-07-11 14:37 - 2018-06-20 11:58 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-07-11 14:37 - 2018-06-20 11:58 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-07-11 14:37 - 2018-06-20 11:58 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-07-11 14:37 - 2018-06-14 22:01 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-07-11 14:37 - 2018-06-12 03:00 - 022374248 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-07-11 14:37 - 2018-06-12 02:57 - 019790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-07-11 14:37 - 2018-06-11 11:36 - 003119616 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-07-11 14:37 - 2018-06-11 11:14 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-07-11 14:37 - 2018-06-11 11:06 - 005779968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-07-11 14:37 - 2018-06-11 11:04 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-07-11 14:37 - 2018-06-11 10:39 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-07-11 14:37 - 2018-06-11 10:36 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-07-11 14:37 - 2018-06-11 10:31 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-07-11 14:37 - 2018-06-11 10:22 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-07-11 14:37 - 2018-06-11 10:11 - 001545216 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-07-11 14:37 - 2018-06-11 09:59 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-07-11 14:37 - 2018-06-09 11:26 - 002712064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-07-11 14:37 - 2018-06-09 11:09 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-07-11 14:37 - 2018-06-09 10:59 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-07-11 14:37 - 2018-06-09 10:37 - 004496384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-07-11 14:37 - 2018-06-09 10:37 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-07-11 14:37 - 2018-06-09 10:36 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-07-11 14:37 - 2018-06-09 10:32 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-07-11 14:37 - 2018-06-09 10:11 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-07-11 14:37 - 2018-06-09 10:08 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-07-11 14:37 - 2018-06-09 10:06 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-07-11 14:37 - 2018-06-08 21:47 - 002176072 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2018-07-11 14:37 - 2018-06-08 20:44 - 001565528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2018-07-11 14:37 - 2018-06-08 13:26 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2018-07-11 14:37 - 2018-06-08 12:54 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2018-07-11 14:37 - 2018-06-08 12:53 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2018-07-11 14:37 - 2018-06-08 12:07 - 000404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2018-07-11 14:37 - 2018-06-08 11:44 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2018-07-11 14:37 - 2018-06-07 13:51 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-07-11 14:37 - 2018-05-24 16:29 - 002449752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-07-11 14:37 - 2018-05-24 16:29 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-07-11 14:37 - 2018-05-15 03:42 - 000590680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2018-07-11 14:37 - 2018-05-03 18:02 - 000439640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2018-07-11 14:37 - 2018-05-03 18:02 - 000325456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2018-07-11 14:37 - 2018-05-03 18:02 - 000187728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2018-07-11 14:37 - 2018-04-26 08:43 - 000918296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000065880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000021848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000018776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000017240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000017240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000015704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000015192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000013656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000013152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000998912 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000063832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000020824 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000019288 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000016216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000015704 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000013656 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-07-11 14:37 - 2018-04-26 08:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-07-11 14:37 - 2018-04-25 12:38 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-07-11 14:33 - 2018-06-12 14:01 - 000149632 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-07-11 14:33 - 2018-06-08 08:15 - 002860032 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-07-11 14:33 - 2018-06-08 08:15 - 001602048 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000783872 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000612352 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000470016 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000443392 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-07-11 14:33 - 2018-06-08 08:15 - 000246272 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-07-07 15:19 - 2018-07-07 15:19 - 000212853 _____ C:\Users\Drew Owens\Documents\2018-07-05-0637_Scope.pdf
2018-07-07 15:16 - 2018-07-07 15:16 - 000192095 _____ C:\Users\Drew Owens\Documents\2018-07-05-0637_Customer Total Amount.pdf
2018-07-02 12:24 - 2018-07-02 12:24 - 000635070 _____ C:\Users\Drew Owens\Downloads\HGUSA_CLIMBING_WAIVER_000006.pdf
2018-07-02 12:20 - 2018-07-02 12:20 - 000089262 _____ C:\Users\Drew Owens\Downloads\parentAuthorizationFormOnePage.pdf
2018-07-02 12:20 - 2018-07-02 12:20 - 000087629 _____ C:\Users\Drew Owens\Downloads\immunizationForm.pdf
2018-06-28 07:30 - 2018-06-28 07:30 - 000311421 _____ C:\Users\Drew Owens\Documents\VA-CLINIC_Scope.pdf
2018-06-28 07:29 - 2018-06-28 07:29 - 000002128 _____ C:\Users\Drew Owens\Documents\VA-CLINIC_Allowance Sheet.pdf
2018-06-27 14:37 - 2018-06-27 14:37 - 000000000 ____D C:\Users\Drew Owens\Documents\Remodeler27 Office Templates
2018-06-27 14:22 - 2018-06-27 14:22 - 000001179 _____ C:\Users\Public\Desktop\XactRemodel 3.lnk
2018-06-27 14:22 - 2018-06-27 14:22 - 000000000 ____D C:\ProgramData\Xactware.100
2018-06-27 14:22 - 2018-06-27 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xactware
2018-06-27 14:21 - 2018-06-27 14:33 - 000000000 ____D C:\Program Files (x86)\Xactware
2018-06-27 14:15 - 2018-06-27 14:20 - 851374496 _____ C:\Users\Drew Owens\Downloads\27.103 (13.100417)_Setup.exe
2018-06-27 14:05 - 2018-06-27 14:10 - 1194928600 _____ C:\Users\Drew Owens\Downloads\28.0_Latest_Setup (1).exe
2018-06-27 14:01 - 2018-07-06 06:48 - 000000000 ____D C:\Users\MSSQL$XACTWARE
2018-06-27 14:01 - 2018-06-27 14:01 - 000000020 ___SH C:\Users\MSSQL$XACTWARE\ntuser.ini
2018-06-27 14:01 - 2015-10-20 22:31 - 000097984 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$XACTWARE-sqlctr11.3.6020.0.dll
2018-06-27 14:01 - 2015-10-20 22:31 - 000054976 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL11.XACTWARE-sqlagtctr.dll
2018-06-27 14:01 - 2015-10-20 22:30 - 000084672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$XACTWARE-sqlctr11.3.6020.0.dll
2018-06-27 14:01 - 2015-10-20 22:30 - 000046272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL11.XACTWARE-sqlagtctr.dll
2018-06-27 14:01 - 2015-06-14 09:59 - 000000000 ____D C:\Users\MSSQL$XACTWARE\AppData\Roaming\Macromedia
2018-06-27 14:01 - 2015-06-14 00:23 - 000000000 ____D C:\Users\MSSQL$XACTWARE\AppData\Roaming\ATI
2018-06-27 14:01 - 2015-06-14 00:23 - 000000000 ____D C:\Users\MSSQL$XACTWARE\AppData\Local\ATI
2018-06-27 14:01 - 2014-11-21 03:52 - 000000369 _____ C:\Users\MSSQL$XACTWARE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2018-06-27 14:01 - 2014-11-21 03:52 - 000000369 _____ C:\Users\MSSQL$XACTWARE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2018-06-27 13:53 - 2018-06-27 13:53 - 000266296 _____ (Cisco WebEx LLC) C:\Windows\SysWOW64\atsckernel.exe
2018-06-27 13:53 - 2018-06-27 13:53 - 000159288 _____ (Cisco WebEx LLC) C:\Windows\SysWOW64\atashost.exe
2018-06-27 13:53 - 2018-06-27 13:53 - 000000000 ____D C:\Users\Drew Owens\AppData\LocalLow\WebEx
2018-06-27 13:53 - 2018-06-27 13:53 - 000000000 ____D C:\Users\Drew Owens\AppData\Local\WebEx
2018-06-27 13:53 - 2018-06-27 13:53 - 000000000 ____D C:\ProgramData\WebEx
2018-06-27 13:47 - 2018-06-27 13:47 - 310972408 _____ (Microsoft Corporation) C:\Users\Drew Owens\Downloads\SQLEXPR_x64_ENU (2).exe
2018-06-27 13:29 - 2018-06-27 13:36 - 000000000 ____D C:\Users\Drew Owens\Documents\27.103 (13.100417)_Setup
2018-06-27 11:15 - 2015-07-30 09:04 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-27 11:15 - 2015-07-30 08:48 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-27 11:04 - 2018-07-06 06:48 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS
2018-06-27 11:04 - 2018-06-27 11:04 - 000000020 ___SH C:\Users\MSSQL$SQLEXPRESS\ntuser.ini
2018-06-27 11:04 - 2018-06-27 11:04 - 000000000 ____D C:\Windows\system32\RsFx
2018-06-27 11:04 - 2018-06-27 11:04 - 000000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2018-06-27 11:04 - 2015-10-20 22:33 - 000186048 _____ (Microsoft Corporation) C:\Windows\system32\hadrres.dll
2018-06-27 11:04 - 2015-10-20 22:31 - 000097984 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr11.3.6020.0.dll
2018-06-27 11:04 - 2015-10-20 22:31 - 000054976 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL11.SQLEXPRESS-sqlagtctr.dll
2018-06-27 11:04 - 2015-10-20 22:30 - 000084672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr11.3.6020.0.dll
2018-06-27 11:04 - 2015-10-20 22:30 - 000046272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL11.SQLEXPRESS-sqlagtctr.dll
2018-06-27 11:04 - 2015-06-14 09:59 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Macromedia
2018-06-27 11:04 - 2015-06-14 00:23 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\ATI
2018-06-27 11:04 - 2015-06-14 00:23 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS\AppData\Local\ATI
2018-06-27 11:04 - 2014-11-21 03:52 - 000000369 _____ C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2018-06-27 11:04 - 2014-11-21 03:52 - 000000369 _____ C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2018-06-27 11:04 - 2012-02-11 09:46 - 000082520 _____ (Microsoft Corporation) C:\Windows\system32\fssres.dll
2018-06-27 11:03 - 2018-06-27 11:03 - 000000000 ____D C:\Windows\SysWOW64\1033
2018-06-27 11:03 - 2018-06-27 11:03 - 000000000 ____D C:\Windows\system32\1033
2018-06-27 10:53 - 2018-06-27 10:53 - 000000000 ____D C:\Users\Drew Owens\AppData\Local\Microsoft_Corporation
2018-06-27 10:48 - 2014-06-09 17:13 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2018-06-27 10:48 - 2014-06-09 17:13 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2018-06-27 10:45 - 2018-06-27 11:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2012
2018-06-27 10:44 - 2018-06-27 14:00 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2018-06-27 10:34 - 2018-06-27 10:34 - 000000000 ____D C:\Users\Drew Owens\Documents\New folder
2018-06-27 06:50 - 2018-06-27 14:00 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2018-06-27 06:50 - 2018-06-27 06:50 - 000000000 ____D C:\Windows\PCHEALTH
2018-06-27 06:50 - 2018-06-27 06:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
2018-06-27 06:49 - 2018-06-27 06:49 - 319471456 _____ (Microsoft Corporation) C:\Users\Drew Owens\Downloads\SQLServer2008SP3-KB2546951-x86-ENU.exe
2018-06-27 06:45 - 2018-06-27 06:46 - 382312800 _____ (Microsoft Corporation) C:\Users\Drew Owens\Downloads\SQLServer2008SP3-KB2546951-IA64-ENU.exe
2018-06-27 06:29 - 2018-06-27 06:29 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-06-27 06:29 - 2018-06-27 06:29 - 000000000 ____D C:\Program Files\MSBuild
2018-06-27 06:29 - 2018-06-27 06:29 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-06-27 06:29 - 2018-06-27 06:29 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-06-27 06:29 - 2013-08-02 23:48 - 001166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2018-06-27 06:29 - 2013-08-02 23:41 - 000778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2018-06-27 06:26 - 2018-06-26 18:58 - 851374496 _____ C:\Users\Drew Owens\Documents\27.103 (13.100417)_Setup.zip
2018-06-25 12:08 - 2018-06-25 12:08 - 000018564 _____ C:\Users\Drew Owens\Downloads\ba resume.odt
2018-06-25 12:08 - 2018-06-25 12:08 - 000018564 _____ C:\Users\Drew Owens\Downloads\ba resume (1).odt
2018-06-24 18:45 - 2018-06-24 18:45 - 001680627 _____ C:\Users\Drew Owens\Downloads\Homewood High School 2018.pdf
2018-06-19 20:28 - 2018-06-19 20:28 - 001983329 _____ C:\Users\Drew Owens\Downloads\Immunization-Certificate-Cux+xMXe.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-17 17:54 - 2015-06-22 12:37 - 000000976 _____ C:\Windows\SysWOW64\za_mv_raid.ev
2018-07-17 17:53 - 2011-11-21 22:08 - 000123904 _____ C:\Windows\SysWOW64\freqdb.db
2018-07-17 17:04 - 2015-06-14 00:18 - 000003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{102659FB-EE4A-43EE-A5FD-D550B4718180}
2018-07-17 11:14 - 2014-11-21 03:44 - 001121712 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-17 11:14 - 2013-08-22 08:36 - 000000000 ____D C:\Windows\Inf
2018-07-17 11:10 - 2015-06-13 22:11 - 000000000 ____D C:\ProgramData\NVIDIA
2018-07-17 11:10 - 2013-08-22 09:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-07-17 11:08 - 2013-08-22 08:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2018-07-17 09:34 - 2015-06-14 00:40 - 000000000 ____D C:\Users\Drew Owens\AppData\Local\Adobe
2018-07-16 17:02 - 2015-06-14 20:16 - 000563832 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-07-16 13:17 - 2013-08-22 10:36 - 000000000 ____D C:\Windows\rescache
2018-07-15 09:35 - 2013-08-22 09:44 - 005136064 _____ C:\Windows\system32\FNTCACHE.DAT
2018-07-15 09:33 - 2015-06-14 11:49 - 000000000 ____D C:\Windows\system32\appraiser
2018-07-15 09:33 - 2013-08-22 10:36 - 000000000 ___RD C:\Windows\ToastData
2018-07-15 09:32 - 2015-06-13 22:00 - 000000000 ____D C:\Users\Drew Owens
2018-07-15 07:17 - 2015-06-13 22:06 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2116419765-1218913875-2256313103-1001
2018-07-14 10:19 - 2013-08-22 10:36 - 000000000 ____D C:\Windows\AppReadiness
2018-07-14 10:14 - 2013-08-22 10:36 - 000000000 ___HD C:\Program Files\WindowsApps
2018-07-14 09:31 - 2013-08-22 10:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-07-14 09:30 - 2016-12-30 10:29 - 000002399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002392 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2018-07-14 09:30 - 2016-08-01 08:20 - 000002378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2018-07-14 09:30 - 2016-08-01 08:17 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-07-12 05:47 - 2015-06-14 10:08 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-07-12 05:47 - 2015-06-14 10:08 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2018-07-12 05:47 - 2015-06-14 10:08 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2018-07-11 14:59 - 2013-08-22 10:20 - 000000000 ____D C:\Windows\CbsTemp
2018-07-11 14:58 - 2015-06-14 11:40 - 000000000 ____D C:\Windows\system32\MRT
2018-07-11 14:57 - 2015-06-14 11:40 - 134675576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-07-11 14:33 - 2018-05-12 12:01 - 000685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-06-28 17:07 - 2016-12-30 10:36 - 000835064 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-06-28 17:07 - 2016-12-30 10:36 - 000179704 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-28 08:32 - 2015-08-20 15:57 - 000001456 _____ C:\Users\Drew Owens\AppData\Local\Adobe Save for Web 13.0 Prefs
2018-06-27 11:04 - 2013-08-22 10:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-06-26 16:36 - 2015-06-14 00:20 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-26 16:36 - 2015-06-14 00:20 - 000002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-25 12:08 - 2015-06-13 22:00 - 000000000 ____D C:\Users\Drew Owens\AppData\Local\Packages
2018-06-24 03:06 - 2017-08-24 20:45 - 000003174 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2116419765-1218913875-2256313103-1001
2018-06-24 03:06 - 2016-08-02 16:23 - 000002317 _____ C:\Users\Drew Owens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2018-06-17 10:22 - 2015-09-04 06:28 - 000000000 ____D C:\Users\Drew Owens\AppData\Local\CrashDumps

==================== Files in the root of some directories =======

2015-06-25 18:07 - 2015-06-25 18:07 - 000000033 _____ () C:\Users\Drew Owens\AppData\Roaming\AdobeWLCMCache.dat
2015-08-20 15:57 - 2018-06-28 08:32 - 000001456 _____ () C:\Users\Drew Owens\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-06-14 20:16 - 2015-06-16 01:56 - 000007641 _____ () C:\Users\Drew Owens\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2015-01-13 09:05 - 2015-01-13 09:05 - 015517394 _____ (Intel Corporation) C:\Users\Drew Owens\AppData\Local\Temp\setup.exe
2015-01-13 09:05 - 2015-01-13 09:05 - 027293214 _____ (Intel Corporation) C:\Users\Drew Owens\AppData\Local\Temp\setup64.exe
2015-06-14 11:01 - 2006-05-23 23:10 - 000455600 ____R (Macrovision Corporation) C:\Users\Drew Owens\AppData\Local\Temp\_isB4AA.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-16 13:17

==================== End of FRST.txt ============================