[scgal]

I'm really concerned my router may have been hacked. I bought a new one but have not set it up yet. I've exceeded my comcast data usage the last two months for the first time ever. Aug was 203 gb, Sept 339 gb, Oct 378 gb. I shut down my mom's laptop that was having lots of problems last week until I had time to ask for help. I had to disable the internet to run malwarebytes (didn't find anything) and open Norton to look at the security history. In Oct Norton had blocked 6 intrusion attempts with Angler Exploit Website, Powelik, & Adclicker. It also quarantined 2 cryptbased dll (dl_) trojans.

 

I've been having problems with my laptop for a couple of months. I had been using Firefox and it started freezing, showing messages about script running, it just seemed like something was going on. I was losing internet connection & having to restart. On Oct 25 Norton started blocking Exploit Toolkit, Angler Exploit, & Angler Exploit Kit Flash Download. I stopped logging into any important sites. Last Thursday I turned on my laptop & went to weather.com & a city 700 miles from me was on the homepage, like someone had been looking at the weather in that city. My location was not on the homepage. I was also signed out of my ancestry.com account which usually only happens if I delete history, cookies, & temp files.

 

I started using a desktop this weekend that is not used often and Norton had not blocked any high security threats. Later that day Norton blocked an Exploit Tookit Website. I have one other pc used a few minutes a day that Norton has blocked Malicious Exploit Kit Website in the last couple of weeks. I realize antivirus is supposed to block these things but it seems like I'm suddenly getting too many intrusion attempts. Should I change my router now or clean the computers first?

 

Here is the OTL.txt for my Win7 laptop described in paragraph 2. OTL also generated an Extras.txt. Thanks in advance for any help.

 

 

 

OTL logfile created on: 11/3/2014 2:51:49 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\xps laptop\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17358)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
5.90 Gb Total Physical Memory | 3.80 Gb Available Physical Memory | 64.38% Memory free
11.79 Gb Paging File | 9.70 Gb Available in Paging File | 82.28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 684.96 Gb Total Space | 523.84 Gb Free Space | 76.48% Space Free | Partition Type: NTFS
Drive D: | 13.67 Gb Total Space | 6.90 Gb Free Space | 50.48% Space Free | Partition Type: NTFS
 
Computer Name: MININT-DVOV405 | User Name: xps laptop | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/11/03 14:50:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xps laptop\Desktop\OTL.exe
PRC - [2014/10/31 15:43:07 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014/09/22 12:02:16 | 000,265,040 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
PRC - [2014/09/12 04:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/12/18 13:42:30 | 001,364,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013/10/23 02:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010/11/17 10:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010/10/26 19:27:00 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files (x86)\CyberLink\Shared files\brs.exe
PRC - [2010/10/01 16:55:28 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
PRC - [2009/12/17 18:50:18 | 000,976,832 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
PRC - [2009/06/24 16:21:38 | 000,409,744 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2006/12/19 17:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/10/31 15:43:07 | 003,649,648 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2013/12/18 13:42:50 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2010/11/24 22:44:02 | 000,375,280 | ---- | M] () -- c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\SQLite352.dll
MOD - [2010/11/17 10:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2014/09/18 20:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/11/17 18:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV - [2014/10/31 15:43:07 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/09/23 22:48:11 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/09/22 12:02:16 | 000,265,040 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\N360.exe -- (N360)
SRV - [2014/09/12 04:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/03/20 17:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013/12/18 13:42:30 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013/10/23 02:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/11/25 05:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010/11/25 05:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010/10/26 18:26:58 | 000,236,016 | ---- | M] (CyberLink) [Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2006/12/19 17:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2014/08/25 21:26:58 | 000,593,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symnets.sys -- (SymNetS)
DRV:64bit: - [2014/08/25 21:26:57 | 001,148,120 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symefa64.sys -- (SymEFA)
DRV:64bit: - [2014/08/25 21:20:22 | 000,876,248 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2014/08/25 21:20:22 | 000,037,592 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2014/08/06 14:48:16 | 000,266,968 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\ironx64.sys -- (SymIRON)
DRV:64bit: - [2013/12/18 13:42:58 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2013/12/18 13:42:54 | 000,300,320 | ---- | M] (NVIDIA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt)
DRV:64bit: - [2013/12/13 13:05:45 | 000,177,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2013/10/01 21:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/09/25 21:50:25 | 000,162,392 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\ccsetx64.sys -- (ccSet_N360)
DRV:64bit: - [2013/09/09 21:47:26 | 000,493,656 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1506000.020\symds64.sys -- (SymDS)
DRV:64bit: - [2012/08/23 09:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 09:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/06/10 05:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/02/10 14:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2011/02/10 14:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2011/02/03 08:40:30 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011/01/12 17:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/12/22 01:08:48 | 008,505,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2010/12/17 09:06:32 | 001,404,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010/12/15 09:02:04 | 000,174,168 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2010/12/13 09:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:64bit: - [2010/11/29 05:23:18 | 012,252,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/10/19 16:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010/10/15 17:28:18 | 000,317,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2010/08/20 13:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:64bit: - [2010/07/26 21:41:28 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010/07/12 19:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:64bit: - [2010/03/19 03:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/15 13:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2014/10/21 15:43:22 | 000,633,560 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20141101.001\IDSviA64.sys -- (IDSVia64)
DRV - [2014/10/21 08:12:50 | 002,137,304 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141102.024\ex64.sys -- (NAVEX15)
DRV - [2014/10/21 08:12:50 | 000,129,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141102.024\eng64.sys -- (NAVENG)
DRV - [2014/10/16 22:06:56 | 001,587,416 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20141030.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2014/09/09 11:18:42 | 000,487,216 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2014/09/09 11:18:42 | 000,142,640 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:33.0.2
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@cuminas.jp/DjVuPlugin: C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [2014/11/03 11:50:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013/12/31 00:36:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xps laptop\AppData\Roaming\Mozilla\Extensions
[2014/07/16 23:34:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xps laptop\AppData\Roaming\Mozilla\Firefox\Profiles\dpzqhsvx.default\extensions
[2014/10/31 15:43:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/10/31 15:43:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2011/12/22 15:11:00 | 000,000,833 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coieplg.dll (Symantec Corporation)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [PDVD9LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKCU..\Run: [DellSystemDetect] C:\Users\xps laptop\AppData\Local\Apps\2.0\X12MTTLR.76P\VV592QVL.QE8\dell..tion_0f612f649c4a10af_0005.000b_17ede8fa7a4e5cac\DellSystemDetect.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} https://fpdownload.m...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B712DE6-5165-4153-8937-E0FDE700ECB2}: DhcpNameServer = 75.75.75.75 75.75.76.76
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC65D573-F49B-49AA-9BE0-17D31159F28A}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\jpip - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\sidlet - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
O18 - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
O20:64bit: - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/11/03 14:50:43 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xps laptop\Desktop\OTL.exe
[2014/10/31 15:43:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014/10/24 23:01:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows Genuine Advantage
[2014/10/24 23:01:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
[2014/10/22 21:14:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014/10/22 21:14:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/10/22 21:14:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2014/10/22 20:49:16 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur
 
========== Files - Modified Within 30 Days ==========
 
[2014/11/03 14:50:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xps laptop\Desktop\OTL.exe
[2014/11/03 14:48:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/11/03 13:45:00 | 000,782,510 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/11/03 13:45:00 | 000,662,650 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/11/03 13:45:00 | 000,122,486 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/11/03 13:41:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/11/03 11:56:30 | 000,028,528 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/11/03 11:56:30 | 000,028,528 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/11/03 11:49:00 | 453,640,191 | -HS- | M] () -- C:\hiberfil.sys
[2014/11/02 22:05:49 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/10/29 14:10:03 | 000,001,108 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/10/26 11:33:26 | 658,826,600 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2014/10/23 11:32:36 | 000,395,144 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
 
========== Files Created - No Company Name ==========
 
[2014/10/06 17:29:07 | 658,826,600 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2014/07/05 16:38:43 | 000,000,063 | ---- | C] () -- C:\Windows\EWF840.ini
[2013/09/22 02:53:46 | 000,007,618 | ---- | C] () -- C:\Users\xps laptop\AppData\Local\Resmon.ResmonCfg
 
========== ZeroAccess Check ==========
 
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"ThreadingModel" = Both
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 21:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 21:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 20:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2014/07/06 11:22:24 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\Epson
[2014/02/04 22:38:02 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\ID Vault
[2012/03/16 22:40:04 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\RootsMagic
[2012/03/06 23:35:43 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\SoftGrid Client
[2012/06/22 10:10:29 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\Tific
[2011/11/30 22:47:28 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\TP
[2012/09/01 12:25:18 | 000,000,000 | ---D | M] -- C:\Users\xps laptop\AppData\Roaming\Unity
 
========== Purity Check ==========
 
 

< End of report >
 

 

 

 

 

 

 

[Advertisements]

Hi there, sorry for the delay could I have a fresh look at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Essexboy]

Hi there, sorry for the delay could I have a fresh look at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[scgal]

Thank you for your help. Here are the logs.

 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by xps laptop (administrator) on MININT-DVOV405 on 07-11-2014 12:40:36
Running from C:\Users\xps laptop\Desktop
Loaded Profiles: xps laptop & UpdatusUser (Available profiles: xps laptop & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6561384 2010-12-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-12-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [409744 2009-06-24] (Creative Technology Ltd)
HKLM-x32\...\Run: [RemoteControl9] => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2010-10-26] (cyberlink)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-530199513-1920594383-4005422882-1002\...\Run: [DellSystemDetect] => C:\Users\xps laptop\AppData\Local\Apps\2.0\X12MTTLR.76P\VV592QVL.QE8\dell..tion_0f612f649c4a10af_0005.000b_17ede8fa7a4e5cac\DellSystemDetect.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-18] (NVIDIA Corporation)
Startup: C:\Users\xps laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ComcastUsageMeter.lnk
ShortcutTarget: ComcastUsageMeter.lnk -> C:\Program Files (x86)\ComcastUsageMeter\ComcastUsageMeter.exe (No File)
Startup: C:\Users\xps laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-530199513-1920594383-4005422882-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} https://fpdownload.m...director/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
Handler: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} -  No File
Handler: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} -  No File
Handler-x32: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\xps laptop\AppData\Roaming\Mozilla\Firefox\Profiles\dpzqhsvx.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-11-07]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-12-13]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [236016 2010-10-26] (CyberLink)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\N360.exe [265040 2014-09-22] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20141030.001\BHDrvx64.sys [1587416 2014-10-16] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-09] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-09] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20141106.001\IDSvia64.sys [633560 2014-10-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141106.020\ENG64.SYS [129752 2014-10-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141106.020\EX64.SYS [2137304 2014-10-21] (Symantec Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-18] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-08-25] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-08-25] (Symantec Corporation)
S1 AntiLog32; \??\C:\Windows\system32\drivers\AntiLog64.sys [X]
S3 keycrypt; system32\DRIVERS\KeyCrypt64.sys [X]
S3 PCDSRVC{67F2314B-25F2B3C0-06020101}_0; \??\c:\gencotst\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 12:40 - 2014-11-07 12:41 - 00016863 _____ () C:\Users\xps laptop\Desktop\FRST.txt
2014-11-07 12:39 - 2014-11-07 12:40 - 00000000 ____D () C:\FRST
2014-11-07 12:38 - 2014-11-07 12:38 - 02114560 _____ (Farbar) C:\Users\xps laptop\Desktop\FRST64.exe
2014-11-06 23:42 - 2014-11-06 23:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-04 16:49 - 2014-11-04 16:49 - 00000000 ____D () C:\Users\xps laptop\AppData\Roaming\ComcastUsageMeter
2014-11-03 23:08 - 2014-11-03 23:08 - 00051738 _____ () C:\Users\xps laptop\Documents\Extras.Txt
2014-11-03 14:59 - 2014-11-03 14:59 - 00051738 _____ () C:\Users\xps laptop\Desktop\Extras.Txt
2014-11-03 14:58 - 2014-11-03 14:58 - 00066676 _____ () C:\Users\xps laptop\Desktop\OTL.Txt
2014-11-03 14:50 - 2014-11-03 14:50 - 00602112 _____ (OldTimer Tools) C:\Users\xps laptop\Desktop\OTL.exe
2014-10-27 20:48 - 2014-10-28 15:47 - 00000000 ____D () C:\Users\xps laptop\Downloads\Elliott Rodgers Caughman Belvin
2014-10-26 11:33 - 2014-10-26 11:33 - 00736800 _____ () C:\Windows\Minidump\102614-22027-01.dmp
2014-10-24 23:01 - 2014-11-07 11:20 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
2014-10-24 23:01 - 2014-10-24 23:02 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-10-23 03:47 - 2014-10-23 03:47 - 00017757 _____ () C:\Users\xps laptop\Documents\Chromo 15 oct 23 2014 gedmatch triangulation.xlsx
2014-10-22 21:14 - 2014-10-22 21:14 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-22 21:14 - 2014-10-22 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-22 21:14 - 2014-10-22 21:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-22 21:09 - 2014-07-08 17:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-22 21:09 - 2014-07-08 17:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-22 21:07 - 2014-09-17 21:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-22 21:07 - 2014-09-17 20:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-22 20:49 - 2014-10-22 20:49 - 00000000 ____D () C:\Windows\CheckSur
2014-10-22 19:50 - 2014-09-28 19:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-22 19:50 - 2014-06-18 17:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-22 15:41 - 2014-10-22 15:42 - 00865192 _____ () C:\Windows\Minidump\102214-33087-01.dmp
2014-10-21 23:17 - 2014-10-21 23:17 - 00009334 _____ () C:\Users\xps laptop\Documents\Mabels dna.xlsx
2014-10-20 01:22 - 2014-10-20 01:22 - 00344647 _____ () C:\Users\xps laptop\Documents\289143 oct 20 2014 gedmatch segment triangulation.xlsx
2014-10-17 20:00 - 2014-10-17 20:00 - 00225426 _____ () C:\Users\xps laptop\Documents\Minnie gedmatch ancestry and ftdna matches 17 oct 2014.xlsx
2014-10-17 17:35 - 2014-10-17 17:35 - 00000000 ____D () C:\Users\xps laptop\Downloads\DNA Oct 2014
2014-10-15 21:52 - 2014-10-06 21:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 21:52 - 2014-10-06 21:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-15 21:52 - 2014-09-25 17:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-15 21:52 - 2014-09-25 17:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-15 21:52 - 2014-09-25 17:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-15 21:52 - 2014-09-25 17:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 21:52 - 2014-09-18 21:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 21:52 - 2014-09-18 20:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 21:52 - 2014-09-18 20:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 21:52 - 2014-09-18 20:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-15 21:52 - 2014-09-18 20:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 21:52 - 2014-09-18 20:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 21:52 - 2014-09-18 20:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 21:52 - 2014-09-18 20:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 21:52 - 2014-09-18 20:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 21:52 - 2014-09-18 20:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 21:52 - 2014-09-18 20:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 21:52 - 2014-09-18 20:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 21:52 - 2014-09-18 20:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 21:52 - 2014-09-18 20:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 21:52 - 2014-09-18 20:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-15 21:52 - 2014-09-18 20:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 21:52 - 2014-09-18 20:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 21:52 - 2014-09-18 20:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 21:52 - 2014-09-18 20:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-15 21:52 - 2014-09-18 20:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 21:52 - 2014-09-18 20:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 21:52 - 2014-09-18 20:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-15 21:52 - 2014-09-18 20:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 21:52 - 2014-09-18 19:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-15 21:52 - 2014-09-18 19:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 21:52 - 2014-09-18 19:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-15 21:52 - 2014-09-18 19:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-15 21:52 - 2014-09-18 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-15 21:52 - 2014-09-18 19:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-15 21:52 - 2014-09-18 19:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-15 21:52 - 2014-09-18 19:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-15 21:52 - 2014-09-18 19:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 21:52 - 2014-09-18 19:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 21:52 - 2014-09-18 19:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 21:52 - 2014-09-18 19:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-15 21:52 - 2014-09-18 19:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 21:52 - 2014-09-18 19:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-15 21:52 - 2014-09-18 19:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-15 21:52 - 2014-09-18 19:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-15 21:52 - 2014-09-18 19:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 21:52 - 2014-09-18 18:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-15 21:52 - 2014-09-18 18:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 21:52 - 2014-09-18 18:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-15 21:52 - 2014-09-18 18:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-15 21:52 - 2014-09-04 21:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 21:52 - 2014-09-04 20:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 21:52 - 2014-08-28 21:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 21:52 - 2014-07-16 21:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 21:52 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-15 21:52 - 2014-07-16 20:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-15 21:52 - 2014-07-16 20:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-15 21:52 - 2014-07-16 20:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 21:52 - 2014-07-16 20:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 21:51 - 2014-10-09 21:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 21:51 - 2014-10-09 21:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 21:51 - 2014-10-09 21:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 21:51 - 2014-09-12 20:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 21:51 - 2014-09-12 20:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 21:51 - 2014-09-04 00:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 21:51 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-11 17:54 - 2014-10-11 17:54 - 00730328 _____ () C:\Windows\Minidump\101114-25724-01.dmp
2014-10-11 15:20 - 2014-10-11 15:21 - 00113152 _____ () C:\Users\xps laptop\Downloads\Jworks_v0510.xls
2014-10-10 00:52 - 2014-10-10 00:52 - 00015085 _____ () C:\Users\xps laptop\Documents\Hl Dixon Chesterfield and Dixon working 10 10 2014.xlsx
2014-10-10 00:50 - 2014-10-10 00:50 - 00610910 _____ () C:\Users\xps laptop\Documents\HL Dixon all chromos 10 10 2014.xlsx
2014-10-08 02:27 - 2014-10-08 02:27 - 00021707 _____ () C:\Users\xps laptop\Documents\quick.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 12:40 - 2009-07-13 23:45 - 00028528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-07 12:40 - 2009-07-13 23:45 - 00028528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-07 12:36 - 2011-08-09 08:10 - 01262217 _____ () C:\Windows\WindowsUpdate.log
2014-11-07 12:36 - 2009-07-14 00:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 12:34 - 2012-04-01 09:34 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-07 11:20 - 2014-10-04 21:14 - 00002688 _____ () C:\Windows\setupact.log
2014-11-07 11:20 - 2013-12-31 00:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-07 11:20 - 2011-08-09 08:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-07 11:20 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-06 17:14 - 2014-07-18 15:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-05 02:58 - 2013-09-22 02:53 - 00007618 _____ () C:\Users\xps laptop\AppData\Local\Resmon.ResmonCfg
2014-11-05 01:50 - 2014-05-03 11:17 - 00000000 ____D () C:\Users\UpdatusUser.MININT-DVOV405
2014-11-04 16:49 - 2014-08-20 14:09 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\Adobe
2014-11-04 11:51 - 2011-08-09 08:33 - 00000000 ____D () C:\ProgramData\Sonic
2014-11-04 11:50 - 2010-11-20 22:47 - 00799644 _____ () C:\Windows\PFRO.log
2014-10-30 20:46 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-30 20:34 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-30 00:46 - 2014-06-11 00:14 - 00000000 ____D () C:\Users\xps laptop\Documents\EXCEL
2014-10-29 14:10 - 2014-07-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-29 14:10 - 2014-07-18 15:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-29 14:10 - 2013-05-10 15:48 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-29 01:14 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-10-27 21:09 - 2014-09-04 21:01 - 00000000 ____D () C:\Users\xps laptop\Downloads\McConnell Scott Corbin
2014-10-26 11:33 - 2014-10-06 17:29 - 658826600 _____ () C:\Windows\MEMORY.DMP
2014-10-26 11:33 - 2011-11-26 02:21 - 00000000 ____D () C:\Windows\Minidump
2014-10-25 11:25 - 2011-11-15 00:29 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\Deployment
2014-10-23 11:32 - 2009-07-13 23:45 - 00395144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-22 21:14 - 2013-11-17 18:37 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-22 20:59 - 2014-05-03 11:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-22 20:13 - 2012-03-04 02:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-22 20:07 - 2013-08-26 21:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-22 19:51 - 2011-11-07 11:19 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-21 23:43 - 2011-08-27 13:38 - 00000000 ____D () C:\Users\xps laptop
2014-10-21 23:42 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-21 23:41 - 2011-09-27 22:22 - 00000000 ____D () C:\ProgramData\Norton
2014-10-21 23:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
2014-10-16 21:38 - 2014-08-23 03:30 - 00000000 ____D () C:\Users\xps laptop\Downloads\289143
2014-10-13 20:33 - 2012-01-03 23:48 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\CrashDumps
2014-10-09 22:07 - 2014-08-17 23:36 - 00000000 ____D () C:\Users\xps laptop\Downloads\DNA

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-05 00:11

==================== End Of Log ============================

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2014
Ran by xps laptop at 2014-11-07 12:41:24
Running from C:\Users\xps laptop\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security Suite (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Security Suite (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Security Suite (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.600 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
CyberLink PowerDVD 9.5 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.5.1.3426 - CyberLink Corp.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Document Express DjVu Plug-in (HKLM-x32\...\{6917F75F-9CB8-4FC5-AA62-480B0C104619}) (Version: 6.1.33592 - Cuminas Corporation)
Epson Event Manager (HKLM-x32\...\{089EC7B5-6480-4478-ACF0-DEFD4047343C}) (Version: 2.40.0004 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WorkForce 840 Series Printer Uninstall (HKLM\...\EPSON WorkForce 840 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (HKLM-x32\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3b - SEIKO EPSON CORPORATION)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2253 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)
LizardTech ExpressView Browser Plug-in (HKLM-x32\...\{67CEE8A8-9E1A-440A-9D99-F997EB4FB7AE}) (Version: 6.5 - LizardTech)
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Mozilla Firefox 33.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 en-US)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Security Suite (HKLM-x32\...\N360) (Version: 21.6.0.32 - Symantec Corporation)
NVIDIA 3D Vision Driver 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Graphics Driver 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)
Octoshape add-in for Adobe Flash Player (HKCU\...\Octoshape add-in for Adobe Flash Player) (Version:  - )
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6267 - Realtek Semiconductor Corp.)
RootsMagic 5.0.2.1 (HKLM-x32\...\{C1689DDD-6378-4966-8865-6292D7141A6A}_is1) (Version:  - RootsMagic, Inc.)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\xps laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll (Microsoft Corporation)

==================== Restore Points  =========================

23-10-2014 02:09:27 Windows Update
23-10-2014 02:13:19 Installed Java 7 Update 71
30-10-2014 07:00:33 Scheduled Checkpoint
04-11-2014 21:51:28 Removed ComcastUsageMeter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2011-12-22 15:11 - 00000833 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1615D3BC-06D7-4BDB-9552-50CCBC1C6DA5} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {67DF7CAE-B2A6-4C3E-B510-8CBA406FBB0E} - System32\Tasks\Norton Security Suite\Norton Error Analyzer => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {8A30B29C-752B-4173-8C39-64C9D1E6478A} - System32\Tasks\Norton Security Suite\Norton Error Processor => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {B56D8BFF-ADCF-4B6B-A7EF-A69A1E275822} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-23] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-05-03 11:16 - 2013-10-23 03:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-08-09 10:30 - 2010-11-29 04:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-11-17 10:35 - 2010-11-17 10:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
2010-11-24 22:44 - 2010-11-24 22:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrator (S-1-5-21-530199513-1920594383-4005422882-500 - Administrator - Disabled)
Guest (S-1-5-21-530199513-1920594383-4005422882-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-530199513-1920594383-4005422882-1005 - Limited - Enabled)
UpdatusUser (S-1-5-21-530199513-1920594383-4005422882-1003 - Limited - Enabled) => C:\Users\UpdatusUser.MININT-DVOV405
xps laptop (S-1-5-21-530199513-1920594383-4005422882-1002 - Administrator - Enabled) => C:\Users\xps laptop

==================== Faulty Device Manager Devices =============

Name: AntiLog32
Description: AntiLog32
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AntiLog32
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (11/07/2014 11:22:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/07/2014 01:21:04 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Please use sxstrace.exe for detailed diagnosis.

Error: (11/07/2014 01:21:04 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1".Error in manifest or policy file "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" on line WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Please use sxstrace.exe for detailed diagnosis.

Error: (11/06/2014 08:06:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/06/2014 00:21:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17344 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1e24

Start Time: 01cff9e4fa5b99e1

Termination Time: 234

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (11/06/2014 11:14:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/06/2014 00:19:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 00:34:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 01:49:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (11/06/2014 08:05:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IDSVia64

Error: (11/06/2014 08:05:21 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:52:39 PM on ‎11/‎6/‎2014 was unexpected.

Error: (11/06/2014 03:28:22 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 03:05:17 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:58:03 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:58:03 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:09:02 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 11:48:10 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 06:16:04 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 03:53:02 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Microsoft Office Sessions:
=========================
Error: (11/07/2014 11:22:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/07/2014 01:21:04 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (11/07/2014 01:21:04 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (11/06/2014 08:06:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/06/2014 00:21:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE11.0.9600.173441e2401cff9e4fa5b99e1234C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (11/06/2014 11:14:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/06/2014 00:19:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 09:15:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 00:34:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/05/2014 01:49:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

CodeIntegrity Errors:
===================================
  Date: 2012-06-23 20:49:20.318
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Gotcha\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-06-23 20:49:20.302
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Gotcha\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel® Core™ i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 27%
Total physical RAM: 6038.17 MB
Available physical RAM: 4365.66 MB
Total Pagefile: 12074.52 MB
Available Pagefile: 10361.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OSDisk) (Fixed) (Total:684.96 GB) (Free:520.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Recovery) (Fixed) (Total:13.67 GB) (Free:6.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 62576F28)
Partition 1: (Active) - (Size=685 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=13.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[Essexboy]

Hmm Firefox appears OK but if after this run you are still having problems with it let me know and I will try another tack

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-530199513-1920594383-4005422882-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
2014-10-24 23:01 - 2014-11-07 11:20 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
2014-11-05 01:50 - 2014-05-03 11:17 - 00000000 ____D () C:\Users\UpdatusUser.MININT-DVOV405
2014-10-16 21:38 - 2014-08-23 03:30 - 00000000 ____D () C:\Users\xps laptop\Downloads\289143
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[scgal]

Thank you so much! My laptop is much better. I wanted to use it for a while to see if I was still having problems. I can now open multiple tabs in IE & Firefox without them becoming unresponsive. It had gotten so bad that after I finally got them closed I had to restart my pc to open a browser again. My fan has also stopped running so loud. It's been doing that for at least 2-3 months or longer. It would come on often and sound like it was going to blow up! It is very quiet now.

 

Here are the logs.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-11-2014
Ran by xps laptop at 2014-11-07 15:09:03 Run:1
Running from C:\Users\xps laptop\Desktop
Loaded Profiles: xps laptop & UpdatusUser (Available profiles: xps laptop & UpdatusUser)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-530199513-1920594383-4005422882-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
2014-10-24 23:01 - 2014-11-07 11:20 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
2014-11-05 01:50 - 2014-05-03 11:17 - 00000000 ____D () C:\Users\UpdatusUser.MININT-DVOV405
2014-10-16 21:38 - 2014-08-23 03:30 - 00000000 ____D () C:\Users\xps laptop\Downloads\289143
EmptyTemp:
CMD: bitsadmin /reset /allusers

*****************

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-530199513-1920594383-4005422882-1002\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key not found.

"C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}" directory move:

Could not move "C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\8afc49b02429a" => Scheduled to move on reboot.
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mi.tmp => Moved successfully.
Could not move "C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\uua.tmp" => Scheduled to move on reboot.
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\yyiwkga.tmp => Moved successfully.
Could not move "C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}" directory. => Scheduled to move on reboot.


"C:\Users\UpdatusUser.MININT-DVOV405" directory move:

Could not move "C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\ntuser.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\ntuser.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{5db7d14f-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{5db7d14f-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{5db7d14f-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{db80e423-59a3-11e4-b34f-14feb5bdb875}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{db80e423-59a3-11e4-b34f-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{db80e423-59a3-11e4-b34f-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\ntuser.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Maintenance\Desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Maintenance\Help.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Command Prompt.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Notepad.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Run.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Windows Explorer.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\System Tools\computer.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\System Tools\Desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Accessibility\Desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\SendTo\Compressed (zipped) Folder.ZFSendToTarget => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\SendTo\Desktop (create shortcut).DeskLink => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\SendTo\Desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\SendTo\Fax Recipient.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\SendTo\Mail Recipient.MAPIMail => Moved successfully.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Moved successfully.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\SendTo\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\SendTo\Fax Recipient.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail not found.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Protect\CREDHIST => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Protect\S-1-5-21-530199513-1920594383-4005422882-1003\754ca71b-7092-4318-8371-6d9d2f78ab73 => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Protect\S-1-5-21-530199513-1920594383-4005422882-1003\Preferred => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\digest.s => Moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Protect\CREDHIST not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Protect\S-1-5-21-530199513-1920594383-4005422882-1003\754ca71b-7092-4318-8371-6d9d2f78ab73 not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Protect\S-1-5-21-530199513-1920594383-4005422882-1003\Preferred not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\digest.s not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1" => Scheduled to move on reboot.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2" => Scheduled to move on reboot.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{5db7d153-0f8b-11e4-b1e2-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{9a552498-d2dc-11e3-ad5a-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TM.blf not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms not found.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{e2105ad6-59a5-11e4-ab81-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms not found.
Could not move "C:\Users\UpdatusUser.MININT-DVOV405" directory. => Scheduled to move on reboot.

C:\Users\xps laptop\Downloads\289143 => Moved successfully.

=========  bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========

EmptyTemp: => Removed 739.3 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-11-07 15:11:19)<=

C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\8afc49b02429a => Is moved successfully.
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll => Is moved successfully.
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\uua.tmp => Is moved successfully.
C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8} => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\ntuser.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\ntuser.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\NTUSER.DAT{a1d9cde0-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000001.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TMContainer00000000000000000002.regtrans-ms => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat{a1d9cde4-64b7-11e4-ab4c-14feb5bdb875}.TM.blf => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG1 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\UsrClass.dat.LOG2 => Is moved successfully.
C:\Users\UpdatusUser.MININT-DVOV405 => Moved successfully.

==== End of Fixlog ====

 

 

 

aswMBR version 1.0.1.2201 Copyright© 2014 AVAST Software
Run date: 2014-11-07 15:19:40
-----------------------------
15:19:40.051    OS Version: Windows x64 6.1.7601 Service Pack 1
15:19:40.051    Number of processors: 8 586 0x2A07
15:19:40.051    ComputerName: MININT-DVOV405  UserName: xps laptop
15:19:43.047    Initialize success
15:19:43.234    VM: initialized successfully
15:19:43.234    VM: Intel CPU supported
15:19:51.324    VM: supported disk I/O iaStor.sys
15:21:53.570    AVAST engine defs: 14110600
15:22:08.748    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:22:08.764    Disk 0 Vendor: WDC_WD75 01.0 Size: 715404MB BusType: 3
15:22:08.904    VM: Disk 0 MBR read successfully
15:22:08.920    Disk 0 MBR scan
15:22:08.936    Disk 0 Windows 7 default MBR code
15:22:08.936    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS       701402 MB offset 2048
15:22:08.951    Disk 0 default boot code
15:22:08.998    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS        14000 MB offset 1436473344
15:22:09.076    Disk 0 scanning C:\Windows\system32\drivers
15:22:20.183    Service scanning
15:22:22.211    Service BHDrvx64 C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20141030.001\BHDrvx64.sys **LOCKED** 5
15:22:24.224    Service eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys **LOCKED** 5
15:22:24.645    Service EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys **LOCKED** 5
15:22:26.376    Service IDSVia64 C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20141104.001\IDSvia64.sys **LOCKED** 5
15:22:29.278    Service NAVENG C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141106.035\ENG64.SYS **LOCKED** 5
15:22:29.450    Service NAVEX15 C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141106.035\EX64.SYS **LOCKED** 5
15:22:39.855    Modules scanning
15:22:39.870    Disk 0 trace - called modules:
15:22:39.902    ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll
15:22:39.902    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006007060]
15:22:39.917    3 CLASSPNP.SYS[fffff8800107343f] -> nt!IofCallDriver -> [0xfffffa8006006660]
15:22:39.933    5 stdcfltn.sys[fffff880019d3c52] -> nt!IofCallDriver -> [0xfffffa8005f18e40]
15:22:39.933    7 ACPI.sys[fffff88000f617a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005f17050]
15:22:42.569    AVAST engine scan C:\Windows
15:22:46.750    AVAST engine scan C:\Windows\system32
15:25:49.130    AVAST engine scan C:\Windows\system32\drivers
15:26:06.274    AVAST engine scan C:\Users\xps laptop
15:28:25.661    AVAST engine scan C:\ProgramData
15:29:19.980    Disk 0 statistics 3864622/0/18 @ 7.21 MB/s
15:29:20.011    Scan finished successfully
15:29:57.124    Disk 0 MBR has been saved successfully to "C:\Users\xps laptop\Desktop\MBR.dat"
15:29:57.139    The log file has been saved successfully to "C:\Users\xps laptop\Desktop\aswMBR.txt"

 

[Essexboy]

Could you now run a fresh FRST scan for me please

Then :

Download and run farbar service scanner



Tick "All" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

[scgal]

Here are the logs. Thank you for helping me.

 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-11-2014 01
Ran by xps laptop (administrator) on MININT-DVOV405 on 09-11-2014 02:39:38
Running from C:\Users\xps laptop\Desktop
Loaded Profiles: xps laptop & UpdatusUser (Available profiles: xps laptop & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\n360.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6561384 2010-12-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-12-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [409744 2009-06-24] (Creative Technology Ltd)
HKLM-x32\...\Run: [RemoteControl9] => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-17] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [75048 2010-10-26] (cyberlink)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-530199513-1920594383-4005422882-1002\...\Run: [DellSystemDetect] => C:\Users\xps laptop\AppData\Local\Apps\2.0\X12MTTLR.76P\VV592QVL.QE8\dell..tion_0f612f649c4a10af_0005.000b_17ede8fa7a4e5cac\DellSystemDetect.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-18] (NVIDIA Corporation)
Startup: C:\Users\xps laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ComcastUsageMeter.lnk
ShortcutTarget: ComcastUsageMeter.lnk -> C:\Program Files (x86)\ComcastUsageMeter\ComcastUsageMeter.exe (No File)
Startup: C:\Users\xps laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: [OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\buShell.dll (Symantec Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} https://fpdownload.m...director/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
Handler: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} -  No File
Handler: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} -  No File
Handler-x32: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\ExpressView\expressview.dll (LizardTech)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\xps laptop\AppData\Roaming\Mozilla\Firefox\Profiles\dpzqhsvx.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-11-08]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\Exts\Chrome.crx [2014-09-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [236016 2010-10-26] (CyberLink)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\N360.exe [265040 2014-09-22] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20141030.001\BHDrvx64.sys [1587416 2014-10-16] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1506000.020\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-09] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-09] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20141107.001\IDSvia64.sys [633560 2014-10-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141108.003\ENG64.SYS [129752 2014-10-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\VirusDefs\20141108.003\EX64.SYS [2137304 2014-10-21] (Symantec Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-12-18] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1506000.020\SYMDS64.SYS [493656 2013-09-09] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1506000.020\SYMEFA64.SYS [1148120 2014-08-25] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-13] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [593112 2014-08-25] (Symantec Corporation)
S1 AntiLog32; \??\C:\Windows\system32\drivers\AntiLog64.sys [X]
S3 keycrypt; system32\DRIVERS\KeyCrypt64.sys [X]
S3 PCDSRVC{67F2314B-25F2B3C0-06020101}_0; \??\c:\gencotst\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 02:39 - 2014-11-09 02:39 - 00000000 ____D () C:\Users\xps laptop\Desktop\FRST-OlderVersion
2014-11-08 14:30 - 2014-11-08 14:30 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-11-08 14:30 - 2014-11-08 14:30 - 00000000 ____D () C:\Users\TEMP
2014-11-08 14:30 - 2012-03-04 03:01 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2014-11-08 14:30 - 2011-08-27 21:02 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-11-08 14:30 - 2009-07-13 23:54 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-08 14:30 - 2009-07-13 23:49 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-07 15:29 - 2014-11-07 15:29 - 00003178 _____ () C:\Users\xps laptop\Desktop\aswMBR.txt
2014-11-07 15:29 - 2014-11-07 15:29 - 00000512 _____ () C:\Users\xps laptop\Desktop\MBR.dat
2014-11-07 15:19 - 2014-11-07 15:19 - 05194752 _____ (AVAST Software) C:\Users\xps laptop\Desktop\aswmbr.exe
2014-11-07 12:41 - 2014-11-07 12:41 - 00021689 _____ () C:\Users\xps laptop\Desktop\Addition.txt
2014-11-07 12:40 - 2014-11-09 02:40 - 00016335 _____ () C:\Users\xps laptop\Desktop\FRST.txt
2014-11-07 12:39 - 2014-11-09 02:39 - 00000000 ____D () C:\FRST
2014-11-07 12:38 - 2014-11-09 02:39 - 02115584 _____ (Farbar) C:\Users\xps laptop\Desktop\FRST64.exe
2014-11-06 23:42 - 2014-11-06 23:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-04 16:49 - 2014-11-04 16:49 - 00000000 ____D () C:\Users\xps laptop\AppData\Roaming\ComcastUsageMeter
2014-11-03 23:08 - 2014-11-03 23:08 - 00051738 _____ () C:\Users\xps laptop\Documents\Extras.Txt
2014-11-03 14:59 - 2014-11-03 14:59 - 00051738 _____ () C:\Users\xps laptop\Desktop\Extras.Txt
2014-11-03 14:58 - 2014-11-03 14:58 - 00066676 _____ () C:\Users\xps laptop\Desktop\OTL.Txt
2014-11-03 14:50 - 2014-11-03 14:50 - 00602112 _____ (OldTimer Tools) C:\Users\xps laptop\Desktop\OTL.exe
2014-10-27 20:48 - 2014-10-28 15:47 - 00000000 ____D () C:\Users\xps laptop\Downloads\Elliott Rodgers Caughman Belvin
2014-10-26 11:33 - 2014-10-26 11:33 - 00736800 _____ () C:\Windows\Minidump\102614-22027-01.dmp
2014-10-24 23:01 - 2014-10-24 23:02 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-10-23 03:47 - 2014-10-23 03:47 - 00017757 _____ () C:\Users\xps laptop\Documents\Chromo 15 oct 23 2014 gedmatch triangulation.xlsx
2014-10-22 21:14 - 2014-10-22 21:14 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-22 21:14 - 2014-10-22 21:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-22 21:14 - 2014-10-22 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-22 21:14 - 2014-10-22 21:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-22 21:09 - 2014-07-08 21:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-22 21:09 - 2014-07-08 20:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-22 21:09 - 2014-07-08 17:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-22 21:09 - 2014-07-08 17:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-22 21:07 - 2014-09-17 21:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-22 21:07 - 2014-09-17 20:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-22 20:49 - 2014-10-22 20:49 - 00000000 ____D () C:\Windows\CheckSur
2014-10-22 19:50 - 2014-09-28 19:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-22 19:50 - 2014-06-18 17:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-22 19:50 - 2014-06-18 17:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-22 15:41 - 2014-10-22 15:42 - 00865192 _____ () C:\Windows\Minidump\102214-33087-01.dmp
2014-10-21 23:17 - 2014-10-21 23:17 - 00009334 _____ () C:\Users\xps laptop\Documents\Mabels dna.xlsx
2014-10-20 01:22 - 2014-10-20 01:22 - 00344647 _____ () C:\Users\xps laptop\Documents\289143 oct 20 2014 gedmatch segment triangulation.xlsx
2014-10-17 20:00 - 2014-10-17 20:00 - 00225426 _____ () C:\Users\xps laptop\Documents\Minnie gedmatch ancestry and ftdna matches 17 oct 2014.xlsx
2014-10-17 17:35 - 2014-10-17 17:35 - 00000000 ____D () C:\Users\xps laptop\Downloads\DNA Oct 2014
2014-10-15 21:52 - 2014-10-06 21:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 21:52 - 2014-10-06 21:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-15 21:52 - 2014-09-25 17:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-15 21:52 - 2014-09-25 17:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-15 21:52 - 2014-09-25 17:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-15 21:52 - 2014-09-25 17:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-15 21:52 - 2014-09-25 17:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 21:52 - 2014-09-18 21:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 21:52 - 2014-09-18 20:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 21:52 - 2014-09-18 20:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 21:52 - 2014-09-18 20:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-15 21:52 - 2014-09-18 20:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 21:52 - 2014-09-18 20:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 21:52 - 2014-09-18 20:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 21:52 - 2014-09-18 20:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 21:52 - 2014-09-18 20:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 21:52 - 2014-09-18 20:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 21:52 - 2014-09-18 20:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 21:52 - 2014-09-18 20:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 21:52 - 2014-09-18 20:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 21:52 - 2014-09-18 20:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 21:52 - 2014-09-18 20:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-15 21:52 - 2014-09-18 20:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 21:52 - 2014-09-18 20:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 21:52 - 2014-09-18 20:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 21:52 - 2014-09-18 20:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-15 21:52 - 2014-09-18 20:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 21:52 - 2014-09-18 20:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 21:52 - 2014-09-18 20:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-15 21:52 - 2014-09-18 20:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-15 21:52 - 2014-09-18 20:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 21:52 - 2014-09-18 19:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-15 21:52 - 2014-09-18 19:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 21:52 - 2014-09-18 19:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-15 21:52 - 2014-09-18 19:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-15 21:52 - 2014-09-18 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-15 21:52 - 2014-09-18 19:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-15 21:52 - 2014-09-18 19:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-15 21:52 - 2014-09-18 19:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-15 21:52 - 2014-09-18 19:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 21:52 - 2014-09-18 19:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 21:52 - 2014-09-18 19:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 21:52 - 2014-09-18 19:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-15 21:52 - 2014-09-18 19:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 21:52 - 2014-09-18 19:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-15 21:52 - 2014-09-18 19:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-15 21:52 - 2014-09-18 19:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-15 21:52 - 2014-09-18 19:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 21:52 - 2014-09-18 18:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-15 21:52 - 2014-09-18 18:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 21:52 - 2014-09-18 18:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-15 21:52 - 2014-09-18 18:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-15 21:52 - 2014-09-04 21:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 21:52 - 2014-09-04 20:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 21:52 - 2014-08-28 21:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 21:52 - 2014-07-16 21:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 21:52 - 2014-07-16 21:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 21:52 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-15 21:52 - 2014-07-16 20:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-15 21:52 - 2014-07-16 20:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-15 21:52 - 2014-07-16 20:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 21:52 - 2014-07-16 20:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 21:51 - 2014-10-09 21:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 21:51 - 2014-10-09 21:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 21:51 - 2014-10-09 21:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 21:51 - 2014-09-12 20:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 21:51 - 2014-09-12 20:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 21:51 - 2014-09-04 00:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 21:51 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-11 17:54 - 2014-10-11 17:54 - 00730328 _____ () C:\Windows\Minidump\101114-25724-01.dmp
2014-10-11 15:20 - 2014-10-11 15:21 - 00113152 _____ () C:\Users\xps laptop\Downloads\Jworks_v0510.xls
2014-10-10 00:52 - 2014-10-10 00:52 - 00015085 _____ () C:\Users\xps laptop\Documents\Hl Dixon Chesterfield and Dixon working 10 10 2014.xlsx
2014-10-10 00:50 - 2014-10-10 00:50 - 00610910 _____ () C:\Users\xps laptop\Documents\HL Dixon all chromos 10 10 2014.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 02:35 - 2011-08-09 08:10 - 01452554 _____ () C:\Windows\WindowsUpdate.log
2014-11-09 01:48 - 2012-04-01 09:34 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-08 14:35 - 2009-07-13 23:45 - 00028528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-08 14:35 - 2009-07-13 23:45 - 00028528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-08 14:34 - 2009-07-14 00:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-08 14:28 - 2014-10-04 21:14 - 00002968 _____ () C:\Windows\setupact.log
2014-11-08 14:28 - 2011-08-09 08:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-08 14:28 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 15:10 - 2010-11-20 22:47 - 00805532 _____ () C:\Windows\PFRO.log
2014-11-07 11:20 - 2013-12-31 00:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 17:14 - 2014-07-18 15:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-05 02:58 - 2013-09-22 02:53 - 00007618 _____ () C:\Users\xps laptop\AppData\Local\Resmon.ResmonCfg
2014-11-04 16:49 - 2014-08-20 14:09 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\Adobe
2014-11-04 11:51 - 2011-08-09 08:33 - 00000000 ____D () C:\ProgramData\Sonic
2014-10-30 20:46 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-30 20:34 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-30 00:46 - 2014-06-11 00:14 - 00000000 ____D () C:\Users\xps laptop\Documents\EXCEL
2014-10-29 14:10 - 2014-07-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-29 14:10 - 2014-07-18 15:04 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-29 14:10 - 2013-05-10 15:48 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-29 01:14 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-10-27 21:09 - 2014-09-04 21:01 - 00000000 ____D () C:\Users\xps laptop\Downloads\McConnell Scott Corbin
2014-10-26 11:33 - 2014-10-06 17:29 - 658826600 _____ () C:\Windows\MEMORY.DMP
2014-10-26 11:33 - 2011-11-26 02:21 - 00000000 ____D () C:\Windows\Minidump
2014-10-25 11:25 - 2011-11-15 00:29 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\Deployment
2014-10-23 11:32 - 2009-07-13 23:45 - 00395144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-22 21:14 - 2013-11-17 18:37 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-22 20:59 - 2014-05-03 11:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-22 20:13 - 2012-03-04 02:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-22 20:07 - 2013-08-26 21:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-22 19:51 - 2011-11-07 11:19 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-21 23:43 - 2011-08-27 13:38 - 00000000 ____D () C:\Users\xps laptop
2014-10-21 23:42 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-21 23:41 - 2011-09-27 22:22 - 00000000 ____D () C:\ProgramData\Norton
2014-10-21 23:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
2014-10-13 20:33 - 2012-01-03 23:48 - 00000000 ____D () C:\Users\xps laptop\AppData\Local\CrashDumps

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 00:11

==================== End Of Log ============================

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-11-2014 01
Ran by xps laptop at 2014-11-09 02:40:54
Running from C:\Users\xps laptop\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security Suite (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Security Suite (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Security Suite (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.600 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
CyberLink PowerDVD 9.5 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.5.1.3426 - CyberLink Corp.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Document Express DjVu Plug-in (HKLM-x32\...\{6917F75F-9CB8-4FC5-AA62-480B0C104619}) (Version: 6.1.33592 - Cuminas Corporation)
Epson Event Manager (HKLM-x32\...\{089EC7B5-6480-4478-ACF0-DEFD4047343C}) (Version: 2.40.0004 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WorkForce 840 Series Printer Uninstall (HKLM\...\EPSON WorkForce 840 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (HKLM-x32\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3b - SEIKO EPSON CORPORATION)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2253 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)
LizardTech ExpressView Browser Plug-in (HKLM-x32\...\{67CEE8A8-9E1A-440A-9D99-F997EB4FB7AE}) (Version: 6.5 - LizardTech)
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Mozilla Firefox 33.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 en-US)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Security Suite (HKLM-x32\...\N360) (Version: 21.6.0.32 - Symantec Corporation)
NVIDIA 3D Vision Driver 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Graphics Driver 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)
Octoshape add-in for Adobe Flash Player (HKCU\...\Octoshape add-in for Adobe Flash Player) (Version:  - )
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6267 - Realtek Semiconductor Corp.)
RootsMagic 5.0.2.1 (HKLM-x32\...\{C1689DDD-6378-4966-8865-6292D7141A6A}_is1) (Version:  - RootsMagic, Inc.)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\xps laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll No File

==================== Restore Points  =========================

23-10-2014 02:09:27 Windows Update
23-10-2014 02:13:19 Installed Java 7 Update 71
30-10-2014 07:00:33 Scheduled Checkpoint
04-11-2014 21:51:28 Removed ComcastUsageMeter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2011-12-22 15:11 - 00000833 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1615D3BC-06D7-4BDB-9552-50CCBC1C6DA5} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {67DF7CAE-B2A6-4C3E-B510-8CBA406FBB0E} - System32\Tasks\Norton Security Suite\Norton Error Analyzer => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {8A30B29C-752B-4173-8C39-64C9D1E6478A} - System32\Tasks\Norton Security Suite\Norton Error Processor => C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {B56D8BFF-ADCF-4B6B-A7EF-A69A1E275822} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-23] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-05-03 11:16 - 2013-10-23 03:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-08-09 10:30 - 2010-11-29 04:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-11-17 10:35 - 2010-11-17 10:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
2010-11-24 22:44 - 2010-11-24 22:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2014-11-06 23:42 - 2014-11-06 23:43 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-530199513-1920594383-4005422882-500 - Administrator - Disabled)
Guest (S-1-5-21-530199513-1920594383-4005422882-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-530199513-1920594383-4005422882-1005 - Limited - Enabled)
UpdatusUser (S-1-5-21-530199513-1920594383-4005422882-1003 - Limited - Enabled) => C:\Users\TEMP
xps laptop (S-1-5-21-530199513-1920594383-4005422882-1002 - Administrator - Enabled) => C:\Users\xps laptop

==================== Faulty Device Manager Devices =============

Name: AntiLog32
Description: AntiLog32
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AntiLog32
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/08/2014 02:30:20 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Error: (11/08/2014 02:30:20 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description: Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.

Error: (11/08/2014 02:29:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/08/2014 10:44:15 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Error: (11/08/2014 10:44:15 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description: Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.

Error: (11/08/2014 10:43:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/07/2014 07:42:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17344 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1d74

Start Time: 01cffaea45f37b39

Termination Time: 156

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (11/07/2014 03:12:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Error: (11/07/2014 03:12:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description: Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.

Error: (11/07/2014 03:12:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/06/2014 08:05:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IDSVia64

Error: (11/06/2014 08:05:21 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:52:39 PM on ‎11/‎6/‎2014 was unexpected.

Error: (11/06/2014 03:28:22 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 03:05:17 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:58:03 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:58:03 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/06/2014 00:09:02 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 11:48:10 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 06:16:04 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (11/05/2014 03:53:02 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.


Microsoft Office Sessions:
=========================
Error: (11/08/2014 02:30:20 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description:

Error: (11/08/2014 02:30:20 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description:

Error: (11/08/2014 02:29:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/08/2014 10:44:15 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description:

Error: (11/08/2014 10:44:15 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description:

Error: (11/08/2014 10:43:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/07/2014 07:42:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE11.0.9600.173441d7401cffaea45f37b39156C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (11/07/2014 03:12:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: MININT-DVOV405)
Description:

Error: (11/07/2014 03:12:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: MININT-DVOV405)
Description:

Error: (11/07/2014 03:12:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2012-06-23 20:49:20.318
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Gotcha\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-06-23 20:49:20.302
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Gotcha\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel® Core™ i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 34%
Total physical RAM: 6038.17 MB
Available physical RAM: 3951.74 MB
Total Pagefile: 12074.52 MB
Available Pagefile: 9987.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OSDisk) (Fixed) (Total:684.96 GB) (Free:519.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Recovery) (Fixed) (Total:13.67 GB) (Free:6.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 62576F28)
Partition 1: (Active) - (Size=685 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=13.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

 

 

 

Farbar Service Scanner Version: 21-07-2014
Ran by xps laptop (administrator) on 09-11-2014 at 02:43:20
Running from "C:\Users\xps laptop\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

[Essexboy]

What problems are you experiencing now ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\xps laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll No File
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

[scgal]

Sorry for the late reply. My laptop seems to be running good. I'm still dropping my wireless signal sometimes, or according to Norton my ip address has disappeared. It doesn't last but a few seconds where recently it had become quite aggravating having to disable the laptop wireless for a second or restart the pc to connect again. It could be my router but I've been running a scan on ancestry.com tonight for a few hours on a new desktop and if the signal was interrupted, it wasn't enough to stop the scan. I also watched a movie on Netflix today and didn't have any problems.

 

Well, I decided to check it before I finished this post and this last fix seems to have stopped the dropped signal. Norton is not showing the disappearing ip address and all of the constant Rule Rejected things have stopped. However, now Norton is showing constant instances of things preparing to access the internet, mostly Norton......exe, or \Windows\system32\....., \Windows\sysWow64\.....

 

Anyway, it seems to be ok. I really appreciate your help.

 

Here is the log:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2014
Ran by xps laptop at 2014-11-11 00:17:39 Run:2
Running from C:\Users\xps laptop\Desktop
Loaded Profiles: xps laptop & UpdatusUser (Available profiles: xps laptop & UpdatusUser)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\xps laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\mydocs.dll No File
EmptyTemp:
CMD: bitsadmin /reset /allusers

*****************

"HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}" => Key deleted successfully.
"HKU\S-1-5-21-530199513-1920594383-4005422882-1002_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}" => Key deleted successfully.

=========  bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========

EmptyTemp: => Removed 412.4 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

[Essexboy]

Do you have some file names for the programmes trying to access the net, as they may well be legitimate windows files

[scgal]

Hi, yes, they probably are legit files and I'm just paranoid! Norton may have done an update which causes so many of these files to be listed in such a short amount of time. Here are some of them.

 

C:\Windows\System32\SearchFilterHost.exe\
C:\Windows\System32\SearchProtocolHost.exe\
C:\Windows\System32\taskhost.exe\
C:\Windows\System32\rundll32.exe\
C:\Windows\System32\LogonUI.exe\
C:\Windows\System32\audiodg.exe\
C:\Windows\System32\svchost.exe\
C:\Windows\System32\lsm.exe\
C:\Windows\System32\lsass.exe\
C:\Windows\System32\Services.exe\
C:\Windows\System32\csrss.exe\
C:\Windows\System32\smss.exe\
C:\Windows\System32\wininit.exe\
C:\Windows\System32\autochk.exe\
C:\Windows\servicing\TrustedInstaller.exe\
C:\Windows\System32\wbem\WmiPrvSE.exe\
C:\Windows\System32\sppsvc.exe\
 

Norton blocked another attack last night. It was the first one since Nov. 5, about 2 days before we started working on my computer. I guess as long as they're being blocked I'm safe? My computer is still ok, maybe a little sluggish, but again that could be comcast or my router. These are the attacks Norton has blocked since they started Oct. 25.

 

10/25/2014 1:42:50 AM,High,An intrusion attempt by 192.168.0.196 was blocked,Web Attack: Exploit Toolkit Website 33
10/26/2014 1:16:33 PM,High,An intrusion attempt by 192.168.0.196 was blocked.Web Attack: Exploit Toolkit Website 33
10/28/2014 8:43:33 AM,High,An intrusion attempt by 192.168.0.196 was blocked.Web Attack: Exploit Toolkit Website 33
10/28/2014 10:05:10 PM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit Kit Website 6
10/30/2014 4:04:01 AM,High,An intrusion attempt by 217.23.12.174 was blocked.Web Attack: Exploit Toolkit Website 32
10/30/2014 4:28:56 AM,High,An intrusion attempt by 192.227.181.212 was blocked.Web Attack: Angler Exploit Kit Website 12
10/30/2014 6:35:02 PM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
10/30/2014 6:35:04 PM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
11/1/2014 12:19:03 AM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
11/1/2014 12:19:04 AM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
11/3/2014 4:22:33 PM,High,An intrusion attempt by 107.150.14.213 was blocked.Web Attack: Angler Exploit Kit Website 12
11/3/2014 4:48:24 PM,High,An intrusion attempt by 217.23.12.174 was blocked.Web Attack: Exploit Toolkit Website 32
11/5/2014 4:03:58 AM,High,An intrusion attempt by 107.150.4.80 was blocked.Web Attack: Angler Exploit Kit Website 12
11/5/2014 6:22:51 PM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
11/5/2014 6:22:52 PM,High,An intrusion attempt by 88.150.172.163 was blocked.Web Attack: Angler Exploit kit Flash Download 3
11/5/2014 10:46:37 PM,High,An intrusion attempt by 217.23.12.174 was blocked.Web Attack: Exploit Toolkit Website 32
11/5/2014 11:33:46 PM,High,An intrusion attempt by 217.23.12.174 was blocked.Web Attack: Exploit Toolkit Website 32
11/12/2014 2:59:15 AM,High,An intrusion attempt by 217.23.12.174 was blocked.Web Attack: Exploit Toolkit Website 32

[Essexboy]

When you installed the new router did you change the password ?

If not then reset the router and change the password from default

[scgal]

I haven't installed the new router yet, I will do it today. The one I'm using is a good router and is password protected but is a few years old and I wanted to upgrade. I'm a caregiver and home most of the time, in the man cave, so we stream a lot of sports and movies. Other family members visit and use pc's or tablets, including a couple of gamers. My 13 yr old nephew brings his own laptop and logs onto my router. I'm concerned about what he does and if it could compromise my router/wireless network.

[Essexboy]

This address is your router 192.168.0.196 so I am not sure whether or not Norton is being over zealous, are you networking and have shares from your other computers ?

[scgal]

The only thing shared is a wireless printer on my laptop, my mother's laptop, and a desktop. My mother hasn't been able to use her laptop in about 3 wks because it was so bad. She does visit some of the gossip sites including TMZ.

 

I have another desktop that has only been used for uploading pics and videos from my cameras and streaming subscription sports. It is not set up with the wireless printer, is not used often, and I am the only user. I started using it some after the attacks on my laptop. The Norton security history goes back to Mar 2012 and only has one high severity listed on Nov 1, 2014.

 

11/1/2014 7:53:49 PM,High,An intrusion attempt by 205.234.186.109 was blocked.,Blocked,No Action Required,Web Attack: Exploit Toolkit Website 67,No Action Required,No Action Required,"205.234.186.109, 80",afrikaansamericangentian.us/6fd_n24/CEbyA0cDHAyrV4PUF5EG,"192.168.0.198, 57154",205.234.186.109,"TCP, www-http",