This topic is locked
Help. My daughter asked me to clean her system of a number of unwanted add-ins. I cannot find all of the necessary files to clean her computer.
Here is the OTL scan report:
OTL logfile created on: 12/10/2014 10:04:22 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Allyson\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.89 Gb Total Physical Memory | 1.52 Gb Available Physical Memory | 39.11% Memory free
5.26 Gb Paging File | 2.50 Gb Available in Paging File | 47.43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 456.98 Gb Total Space | 424.32 Gb Free Space | 92.85% Space Free | Partition Type: NTFS
Drive D: | 496.00 Mb Total Space | 444.92 Mb Free Space | 89.70% Space Free | Partition Type: FAT32
Drive X: | 750.00 Mb Total Space | 467.38 Mb Free Space | 62.32% Space Free | Partition Type: NTFS
Drive Y: | 7.39 Gb Total Space | 0.74 Gb Free Space | 9.95% Space Free | Partition Type: NTFS
Computer Name: AllysPC | User Name: Allyson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014/12/10 22:04:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Allyson\Downloads\OTL.exe
PRC - [2014/12/09 19:49:12 | 000,528,384 | ---- | M] () -- C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe
PRC - [2014/12/09 14:22:30 | 003,308,712 | ---- | M] () -- C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe
PRC - [2014/12/09 14:22:26 | 003,979,944 | ---- | M] () -- C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe
PRC - [2014/11/24 22:39:27 | 000,856,904 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014/09/02 11:40:14 | 000,462,160 | ---- | M] () -- C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe
PRC - [2014/07/02 21:56:10 | 000,493,288 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
PRC - [2014/07/02 21:54:34 | 004,167,912 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
PRC - [2014/07/02 21:54:14 | 001,921,768 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
PRC - [2013/08/21 20:17:05 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2013/08/19 04:29:48 | 001,785,344 | ---- | M] (DELL Inc.) -- C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe
========== Modules (No Company Name) ==========
MOD - [2014/12/09 19:49:12 | 000,528,384 | ---- | M] () -- C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe
MOD - [2014/12/09 14:22:30 | 003,308,712 | ---- | M] () -- C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe
MOD - [2014/12/09 14:22:26 | 003,979,944 | ---- | M] () -- C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe
MOD - [2014/11/24 22:39:25 | 014,910,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\PepperFlash\pepflashplayer.dll
MOD - [2014/11/24 22:39:24 | 009,009,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll
MOD - [2014/11/24 22:39:20 | 001,077,064 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
MOD - [2014/11/24 22:39:18 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libegl.dll
MOD - [2014/11/24 22:39:17 | 001,677,128 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll
MOD - [2014/09/02 11:40:28 | 000,114,000 | ---- | M] () -- C:\Program Files (x86)\Dropbox\DropboxOEM\zlib1.dll
MOD - [2014/09/02 11:40:18 | 000,214,352 | ---- | M] () -- C:\Program Files (x86)\Dropbox\DropboxOEM\Ledger.dll
MOD - [2014/09/02 11:40:14 | 000,462,160 | ---- | M] () -- C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe
MOD - [2014/07/30 17:37:26 | 001,906,464 | ---- | M] () -- C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll
MOD - [2014/03/18 01:55:15 | 017,395,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c90ef9a73ea0044641d31b19023aad61\mscorlib.ni.dll
MOD - [2012/11/25 23:19:28 | 000,117,608 | ---- | M] () -- C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll
MOD - [2012/11/25 23:19:20 | 001,153,384 | ---- | M] () -- C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll
========== Services (SafeList) ==========
SRV:64bit: - [2014/11/08 23:57:23 | 001,306,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:64bit: - [2014/11/08 23:57:23 | 000,834,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2014/11/08 23:21:36 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/11/08 23:21:19 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:64bit: - [2014/11/08 23:21:19 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:64bit: - [2014/11/08 23:21:19 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2014/11/08 23:21:17 | 000,347,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:64bit: - [2014/11/08 23:21:17 | 000,023,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2014/08/11 17:30:34 | 000,033,480 | ---- | M] (Dell) [Auto | Stopped] -- C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe -- (Dell Foundation Services)
SRV:64bit: - [2014/08/11 14:16:28 | 000,023,240 | ---- | M] (Dell) [Auto | Stopped] -- C:\Program Files\Dell\Dell Data Services\DDSSvc.exe -- (Dell Data Services)
SRV:64bit: - [2014/04/06 20:53:22 | 000,497,664 | ---- | M] (Waves Audio Ltd.) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\WavesSysSvc64.exe -- (WavesSysSvc)
SRV:64bit: - [2014/03/18 01:54:59 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2014/03/18 01:54:59 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:64bit: - [2014/03/18 01:54:55 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2014/03/18 01:54:53 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2014/03/18 01:54:53 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2014/03/18 01:54:50 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2014/03/18 01:54:50 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2014/03/18 01:54:48 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2014/03/17 18:54:26 | 000,185,792 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2014/03/17 18:47:02 | 000,219,752 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV:64bit: - [2014/01/08 13:12:46 | 000,290,520 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService)
SRV:64bit: - [2013/12/11 07:21:26 | 001,025,232 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe -- (mfecore)
SRV:64bit: - [2013/12/04 12:38:58 | 000,601,920 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\virusscan\mcods.exe -- (McODS)
SRV:64bit: - [2013/11/11 04:40:06 | 000,178,048 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\mcafee\msc\McAPExe.exe -- (McAPExe)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe -- (McProxy)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe -- (mcpltsvc)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe -- (McOobeSv2)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV:64bit: - [2013/11/06 03:30:12 | 000,341,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc)
SRV:64bit: - [2013/09/26 16:03:22 | 000,333,584 | ---- | M] (McAfee, Inc.) [On_Demand | Running] -- c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe -- (McAWFwk)
SRV:64bit: - [2013/08/22 04:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2013/08/22 03:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:64bit: - [2013/08/22 03:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2013/08/22 03:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2013/08/22 03:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2013/08/22 03:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2013/08/22 02:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2013/08/22 02:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:64bit: - [2013/08/22 02:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:64bit: - [2013/08/22 01:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:64bit: - [2013/08/22 01:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2013/08/22 01:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2013/08/22 01:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013/08/22 01:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:64bit: - [2013/08/22 01:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2013/08/22 01:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2013/08/22 01:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2009/11/17 17:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV - [2014/11/08 23:21:19 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014/07/22 17:09:18 | 000,148,688 | ---- | M] (Dell Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dell Update\DellUpService.exe -- (DellUpdate)
SRV - [2014/07/02 21:54:14 | 001,921,768 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe -- (SftService)
SRV - [2014/04/10 14:30:14 | 000,202,248 | ---- | M] (Dell Products, LP.) [Auto | Stopped] -- c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe -- (DellDigitalDelivery)
SRV - [2014/04/01 12:20:36 | 000,293,440 | ---- | M] (Aviata, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe -- (DellProdRegManager)
SRV - [2014/03/06 19:22:42 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2014/02/26 00:50:26 | 000,319,104 | ---- | M] (Windows ® Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2014/01/10 14:53:48 | 000,168,960 | ---- | M] (Dell Inc.) [Auto | Running] -- C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe -- (My Dell Client Framework)
SRV - [2013/12/13 10:32:58 | 000,850,120 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Windows\Temp\0309161417894733mcinst.exe -- (0309161417894733mcinstcleanup)
SRV - [2013/08/22 11:40:38 | 000,016,176 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe -- (WysePocketCloud)
SRV - [2013/08/22 04:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2013/08/21 19:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2013/08/21 18:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2013/08/19 04:29:48 | 001,785,344 | ---- | M] (DELL Inc.) [Auto | Running] -- C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe -- (WyseRemoteAccess)
SRV - [2012/04/24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2014/12/09 12:29:04 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}w64.sys -- ({1993b064-46e3-4c7d-8b20-2161564a7685}w64)
DRV:64bit: - [2014/12/09 11:54:20 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}Gw64.sys -- ({1993b064-46e3-4c7d-8b20-2161564a7685}Gw64)
DRV:64bit: - [2014/12/07 07:51:38 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{809da842-a636-4d48-aeda-93730ef23d66}Gw64.sys -- ({809da842-a636-4d48-aeda-93730ef23d66}Gw64)
DRV:64bit: - [2014/11/08 23:57:23 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2014/11/08 23:57:23 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:64bit: - [2014/11/08 23:21:41 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2014/11/08 23:21:33 | 000,055,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2014/11/08 23:21:30 | 000,136,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2014/11/08 23:21:19 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2014/11/08 23:21:18 | 000,257,880 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2014/11/08 23:21:18 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2014/11/08 23:21:17 | 000,123,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:64bit: - [2014/03/18 01:54:54 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:64bit: - [2014/03/18 01:54:51 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:64bit: - [2014/03/18 01:54:51 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2014/03/18 01:54:39 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:64bit: - [2014/03/18 01:54:39 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2014/03/18 01:54:39 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:64bit: - [2014/03/18 01:54:39 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2014/03/18 01:54:38 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2014/03/18 01:54:38 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2014/03/18 01:54:38 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2014/03/18 01:54:38 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:64bit: - [2014/03/18 01:54:38 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:64bit: - [2014/03/18 01:54:38 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2014/03/18 01:37:57 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2014/03/18 01:37:54 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2014/03/17 19:02:08 | 000,070,592 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2014/03/17 18:54:54 | 000,345,456 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2014/03/17 18:49:44 | 000,783,864 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2014/03/17 18:47:30 | 000,522,360 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2014/03/17 18:45:38 | 000,311,600 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2014/03/17 18:44:40 | 000,180,272 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2014/03/17 18:25:42 | 000,069,344 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mfeelamk.sys -- (mfeelamk)
DRV:64bit: - [2014/03/10 16:03:52 | 000,537,328 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2014/03/10 16:03:50 | 000,042,224 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynRMIHID.sys -- (SynRMIHID)
DRV:64bit: - [2014/03/07 12:53:16 | 003,892,224 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwbx.sys -- (athr)
DRV:64bit: - [2014/02/27 08:32:26 | 000,272,088 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2014/02/26 00:26:48 | 000,598,216 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2014/02/26 00:26:48 | 000,355,528 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:64bit: - [2014/02/26 00:26:48 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:64bit: - [2014/02/26 00:26:48 | 000,137,928 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:64bit: - [2014/02/26 00:26:48 | 000,118,984 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
DRV:64bit: - [2014/02/26 00:26:48 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:64bit: - [2014/02/26 00:26:48 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:64bit: - [2014/02/26 00:26:48 | 000,035,016 | ---- | M] (Qualcomm Atheros) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:64bit: - [2014/01/16 10:16:06 | 000,450,520 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2014/01/16 10:08:36 | 004,222,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2014/01/15 23:21:46 | 000,088,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TXEIx64.sys -- (TXEIx64)
DRV:64bit: - [2014/01/10 00:32:50 | 000,025,584 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Running] -- c:\Program Files\My Dell\pcdsrvc_x64.pkms -- (PCDSRVC{D3412D80-CF3B4A27-06020200}_0)
DRV:64bit: - [2013/12/26 15:30:20 | 000,038,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2013/12/26 15:30:20 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2013/11/26 22:07:22 | 000,096,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfencrk.sys -- (mfencrk)
DRV:64bit: - [2013/11/26 22:07:02 | 000,411,944 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfencbdc.sys -- (mfencbdc)
DRV:64bit: - [2013/11/21 09:32:04 | 000,083,968 | ---- | M] (STMicroelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ST_Accel.sys -- (ST_ACCEL)
DRV:64bit: - [2013/11/11 08:54:30 | 000,067,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaioi2ce.sys -- (iaioi2c)
DRV:64bit: - [2013/10/09 17:20:30 | 000,092,376 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtu30x64w8.sys -- (RTLU3E8023-W8-64)
DRV:64bit: - [2013/09/23 13:49:22 | 000,197,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HipShieldK.sys -- (HipShieldK)
DRV:64bit: - [2013/08/22 05:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:64bit: - [2013/08/22 05:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2013/08/22 04:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:64bit: - [2013/08/22 04:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2013/08/22 04:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2013/08/22 04:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2013/08/22 04:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013/08/22 04:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2013/08/22 04:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2013/08/22 04:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2013/08/22 04:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2013/08/22 04:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:64bit: - [2013/08/22 04:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:64bit: - [2013/08/22 04:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2013/08/22 04:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2013/08/22 04:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:64bit: - [2013/08/22 04:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2013/08/22 04:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2013/08/22 04:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2013/08/22 04:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2013/08/22 04:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2013/08/22 04:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2013/08/22 04:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2013/08/22 04:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:64bit: - [2013/08/22 04:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2013/08/22 04:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2013/08/22 04:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:64bit: - [2013/08/22 04:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:64bit: - [2013/08/22 04:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2013/08/22 03:39:58 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2013/08/22 03:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:64bit: - [2013/08/22 03:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2013/08/22 03:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2013/08/22 03:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2013/08/22 03:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2013/08/22 03:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2013/08/22 03:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2013/08/22 03:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2013/08/22 03:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2013/08/22 03:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2013/08/22 03:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2013/08/22 03:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2013/08/22 03:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2013/08/22 03:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2013/08/22 03:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/08/22 03:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2013/08/22 03:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2013/08/22 03:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:64bit: - [2013/08/22 03:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:64bit: - [2013/08/22 03:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2013/08/22 03:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2013/08/22 03:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2013/08/22 00:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2013/08/12 15:25:46 | 000,017,624 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:64bit: - [2013/08/09 16:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:64bit: - [2013/07/30 10:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:64bit: - [2013/07/25 11:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:64bit: - [2013/01/24 18:12:08 | 000,010,752 | ---- | M] (OSR Open Systems Resources, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\DellRbtn.sys -- (DellRbtn)
DRV:64bit: - [2012/07/13 16:31:18 | 000,022,168 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2}
IE:64bit: - HKLM\..\SearchScopes\{1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2}: "URL" = http://groovorio.com...r=618437764&ir=
IE:64bit: - HKLM\..\SearchScopes\{CC865B26-C31D-4D23-B17B-96548EEF03F6}: "URL" = http://www.bing.com/...=IE11TR&pc=DCJB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2}
IE - HKLM\..\SearchScopes\{1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2}: "URL" = http://www.bing.com/...=IE11TR&pc=DCJB
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKCU\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://www.trovi.com...rchTerms}&SSPV=
IE - HKCU\..\SearchScopes\{1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2}: "URL" = http://groovorio.com...r=618437764&ir=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:53603;https=127.0.0.1:53603
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2014/12/07 11:00:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK [2014/12/07 11:00:35 | 000,000,000 | ---D | M]
========== Chrome ==========
CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.65.135.1_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nldinbnjamakbcpgbngilmeafgaijenh\1.0.1_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013/08/22 05:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [DropboxOEM] C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe ()
O4 - HKLM..\Run: [gmsd_us_11] C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe ()
O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [WinCheck] C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe ()
O4 - HKLM..\RunOnce: [upgmsd_us_11.exe] C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" (Qualcomm®Atheros®)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BB980E66-82D1-420C-9309-1CCFB0150C1F}: DhcpNameServer = 172.161.1.171
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF596F19-B567-4F56-BC55-04A54263EDAD}: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2014/12/10 21:30:17 | 000,000,000 | ---D | C] -- C:\FRST
[2014/12/10 21:13:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2014/12/10 00:19:52 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2014/12/09 23:26:16 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\PCDr
[2014/12/09 21:36:56 | 000,048,784 | ---- | C] (StdLib) -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}w64.sys
[2014/12/09 20:37:52 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
[2014/12/09 20:35:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AnyProtectEx
[2014/12/09 20:35:41 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Roaming\AnyProtectEx
[2014/12/09 20:35:20 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Pro_PC_Cleaner
[2014/12/09 20:34:59 | 000,000,000 | ---D | C] -- C:\Users\Allyson\Documents\ProPCCleaner
[2014/12/09 20:26:16 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\wincheck
[2014/12/09 20:24:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
[2014/12/09 20:24:41 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\gmsd_us_11
[2014/12/09 20:24:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\gmsd_us_11
[2014/12/09 20:24:19 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Programs
[2014/12/09 20:23:27 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\CrashDumps
[2014/12/09 20:21:37 | 000,048,784 | ---- | C] (StdLib) -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}Gw64.sys
[2014/12/07 11:05:48 | 000,048,784 | ---- | C] (StdLib) -- C:\Windows\SysNative\drivers\{809da842-a636-4d48-aeda-93730ef23d66}Gw64.sys
[2014/12/07 11:02:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/12/07 11:01:57 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Google
[2014/12/07 11:01:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2014/12/07 10:59:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Search Extensions
[2014/12/07 10:59:14 | 000,197,704 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\drivers\HipShieldK.sys
[2014/12/07 10:57:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\snipsmart
[2014/12/07 10:51:22 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Local\EmieUserList
[2014/12/07 10:51:22 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Local\EmieSiteList
[2014/12/07 10:51:17 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\DropboxOEM
[2014/12/06 11:39:42 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\softthinks
[2014/12/06 11:39:42 | 000,000,000 | ---D | C] -- C:\ProgramData\softthinks
[2014/12/06 11:39:24 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\Macromedia
[2014/12/06 11:38:42 | 000,000,000 | R--D | C] -- C:\Users\Allyson\OneDrive
[2014/12/06 11:35:36 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Aviata
[2014/12/06 11:35:31 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\BMExplorer
[2014/12/06 11:35:30 | 000,000,000 | ---D | C] -- C:\Users\Allyson\Documents\Bluetooth Folder
[2014/12/06 11:35:09 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\DropboxOEM
[2014/12/06 11:35:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2014/12/06 11:34:55 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\Atheros
[2014/12/06 11:34:14 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014/12/06 11:34:14 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Searches
[2014/12/06 11:34:14 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014/12/06 11:34:13 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Contacts
[2014/12/06 11:34:13 | 000,000,000 | -H-D | C] -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/12/06 11:34:09 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\VirtualStore
[2014/12/06 11:34:09 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\Adobe
[2014/12/06 11:34:01 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Packages
[2014/12/06 11:32:28 | 000,000,000 | --SD | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Saved Games
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Pictures
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Music
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Links
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Favorites
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Downloads
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Documents
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Desktop
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014/12/06 11:32:28 | 000,000,000 | R--D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Local\Temporary Internet Files
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Templates
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Start Menu
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\SendTo
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Recent
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\PrintHood
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\NetHood
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Documents\My Videos
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Documents\My Pictures
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Documents\My Music
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\My Documents
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Local Settings
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Local\History
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Cookies
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\Application Data
[2014/12/06 11:32:28 | 000,000,000 | -HSD | C] -- C:\Users\Allyson\AppData\Local\Application Data
[2014/12/06 11:32:28 | 000,000,000 | -H-D | C] -- C:\Users\Allyson\AppData
[2014/12/06 11:32:28 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Temp
[2014/12/06 11:32:28 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Local\Microsoft
[2014/12/06 11:32:28 | 000,000,000 | ---D | C] -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014/12/06 11:32:27 | 000,000,000 | R--D | C] -- C:\Users\Allyson\Videos
========== Files - Modified Within 30 Days ==========
[2014/12/10 22:11:47 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/10 21:05:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/12/10 00:19:15 | 000,000,920 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/09 23:52:45 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP1.job
[2014/12/09 20:38:01 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP3.job
[2014/12/09 20:37:56 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP2.job
[2014/12/09 20:37:52 | 000,001,063 | ---- | M] () -- C:\Users\Allyson\Desktop\AnyProtect.lnk
[2014/12/09 20:25:47 | 000,002,220 | ---- | M] () -- C:\Windows\patsearch.bin
[2014/12/09 20:25:46 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_webinstrNewH_01009.Wdf
[2014/12/09 20:22:24 | 000,001,146 | ---- | M] () -- C:\Users\Allyson\Desktop\Continue Live Installation.lnk
[2014/12/09 20:21:47 | 000,002,305 | ---- | M] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/09 12:29:04 | 000,048,784 | ---- | M] (StdLib) -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}w64.sys
[2014/12/09 11:54:20 | 000,048,784 | ---- | M] (StdLib) -- C:\Windows\SysNative\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}Gw64.sys
[2014/12/07 11:06:01 | 000,002,205 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/07 10:56:16 | 000,001,442 | ---- | M] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/12/07 07:51:38 | 000,048,784 | ---- | M] (StdLib) -- C:\Windows\SysNative\drivers\{809da842-a636-4d48-aeda-93730ef23d66}Gw64.sys
[2014/12/06 13:21:35 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2014/12/06 13:21:28 | 3337,994,240 | -HS- | M] () -- C:\hiberfil.sys
[2014/12/06 11:36:25 | 000,863,592 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/12/06 11:36:25 | 000,731,650 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/12/06 11:36:25 | 000,135,726 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
========== Files Created - No Company Name ==========
[2014/12/09 20:37:59 | 000,000,376 | ---- | C] () -- C:\Windows\tasks\APSnotifierPP3.job
[2014/12/09 20:37:56 | 000,000,376 | ---- | C] () -- C:\Windows\tasks\APSnotifierPP2.job
[2014/12/09 20:37:52 | 000,001,063 | ---- | C] () -- C:\Users\Allyson\Desktop\AnyProtect.lnk
[2014/12/09 20:37:52 | 000,000,378 | ---- | C] () -- C:\Windows\tasks\APSnotifierPP1.job
[2014/12/09 20:25:47 | 000,002,220 | ---- | C] () -- C:\Windows\patsearch.bin
[2014/12/09 20:25:46 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_webinstrNewH_01009.Wdf
[2014/12/09 20:22:24 | 000,001,146 | ---- | C] () -- C:\Users\Allyson\Desktop\Continue Live Installation.lnk
[2014/12/07 11:02:57 | 000,002,305 | ---- | C] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/07 11:02:56 | 000,002,205 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/07 11:01:59 | 000,000,924 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/07 11:01:58 | 000,000,920 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/07 10:51:10 | 000,001,442 | ---- | C] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/12/06 11:34:09 | 000,001,448 | ---- | C] () -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014/12/06 11:32:28 | 000,000,369 | ---- | C] () -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
[2014/12/06 11:32:28 | 000,000,369 | ---- | C] () -- C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
[2014/12/06 11:32:28 | 000,000,352 | ---- | C] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2014/12/06 11:32:28 | 000,000,334 | ---- | C] () -- C:\Users\Allyson\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2014/12/06 11:32:28 | 000,000,141 | ---- | C] () -- C:\Users\Allyson\Desktop\eBay.url
[2014/11/08 23:42:10 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2014/11/08 22:47:53 | 000,299,520 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll
[2014/11/08 22:47:49 | 000,182,272 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2014/11/08 22:47:49 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
[2014/03/18 01:55:05 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini
[2014/03/18 01:54:40 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2013/08/22 07:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2013/08/22 07:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2013/08/22 06:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2013/08/21 23:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2013/08/21 19:32:36 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2013/08/21 15:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2013/08/21 15:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
========== ZeroAccess Check ==========
[2014/12/07 10:59:25 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/11/08 23:21:19 | 021,268,952 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/11/08 23:21:19 | 018,755,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013/08/22 01:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2013/08/21 18:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013/08/22 01:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2014/12/09 20:35:41 | 000,000,000 | -HSD | M] -- C:\Users\Allyson\AppData\Roaming\AnyProtectEx
[2014/12/07 10:51:38 | 000,000,000 | ---D | M] -- C:\Users\Allyson\AppData\Roaming\DropboxOEM
[2014/12/10 23:02:33 | 000,000,000 | ---D | M] -- C:\Users\Allyson\AppData\Roaming\PCDr
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 220 bytes -> C:\Users\Allyson\OneDrive:ms-properties
< End of report >
I also ran a Farbar scan. Here is the FRST file:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2014 01
Ran by Allyson (administrator) on AllysPC on 10-12-2014 21:30:30
Running from C:\Users\Allyson\Downloads
Loaded Profile: Allyson (Available profiles: Allyson)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Waves Audio Ltd.) C:\Program Files\Realtek\Audio\HDA\WavesSysSvc64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
() C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe
(DELL Inc.) C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(Dell Inc.) C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe
() C:\Program Files (x86)\snipsmart\bin\snipsmart.PurBrowse64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
() C:\Program Files (x86)\Search Extensions\Client.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe
() C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe
() C:\Program Files\WindowsApps\Microsoft.HelpAndTips_6.3.9654.20428_x64__8wekyb3d8bbwe\helpandtips.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e\TiWorker.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634648 2014-07-02] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387224 2014-06-30] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3775816 2014-02-27] (Dell Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-11-11] (McAfee, Inc.)
HKLM-x32\...\Run: [DropboxOEM] => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [462160 2014-09-02] ()
HKLM-x32\...\Run: [gmsd_us_11] => C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe [3979944 2014-12-09] ()
HKLM-x32\...\Run: [WinCheck] => C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe [528384 2014-12-09] ()
HKLM-x32\...\RunOnce: [upgmsd_us_11.exe] => C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe [3308712 2014-12-09] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] ( (Qualcomm®Atheros®))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [S-1-5-21-4117855597-3340283673-3293475651-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-4117855597-3340283673-3293475651-1001] => http=127.0.0.1:53603;https=127.0.0.1:53603
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4117855597-3340283673-3293475651-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4117855597-3340283673-3293475651-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2} URL = http://groovorio.com...r=618437764&ir=
SearchScopes: HKLM -> {1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2} URL = http://groovorio.com...r=618437764&ir=
SearchScopes: HKU\S-1-5-21-4117855597-3340283673-3293475651-1001 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com...rchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-4117855597-3340283673-3293475651-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com...rchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-4117855597-3340283673-3293475651-1001 -> {1C97CC9E-CFAD-46EC-A8DB-9D9CB68A89D2} URL = http://groovorio.com...r=618437764&ir=
SearchScopes: HKU\S-1-5-21-4117855597-3340283673-3293475651-1001 -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL =
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62 192.168.1.1
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-12-07]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-12-07]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3333568&octid=EB_ORIGINAL_CTID&ISID=MEB995B6E-FFAC-458E-B548-144BAA833EBD&SearchSource=55&CUI=&UM=6&UP=SP617336AC-14FB-41BF-81B6-E85D1F56C5D6&SSPV="
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-07]
CHR Extension: (Google Docs) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-07]
CHR Extension: (Google Drive) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-07]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-07]
CHR Extension: (YouTube) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-07]
CHR Extension: (Google Search) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-07]
CHR Extension: (Google Sheets) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-07]
CHR Extension: (SiteAdvisor) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-12-07]
CHR Extension: (snipsmart) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nldinbnjamakbcpgbngilmeafgaijenh [2014-12-09]
CHR Extension: (Google Wallet) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-07]
CHR Extension: (Gmail) - C:\Users\Allyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-07]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-12-07]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 0309161417894733mcinstcleanup; C:\Windows\TEMP\030916~1.EXE [850120 2013-12-13] (McAfee, Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows ® Win 7 DDK provider)
S2 Dell Data Services; C:\Program Files\Dell\Dell Data Services\DDSSvc.exe [23240 2014-08-11] (Dell)
S2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [33480 2014-08-11] (Dell)
S3 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [293440 2014-04-01] (Aviata, Inc.)
S2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [148688 2014-07-22] (Dell Inc.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
S2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-11] (McAfee, Inc.)
R3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [333584 2013-09-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601920 2013-12-04] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-12-11] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-03-17] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [185792 2014-03-17] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [341288 2013-11-06] (McAfee, Inc.)
R2 My Dell Client Framework; C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe [168960 2014-01-10] (Dell Inc.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1921768 2014-07-02] (SoftThinks SAS)
R2 WavesSysSvc; C:\Program Files\Realtek\Audio\HDA\WavesSysSvc64.exe [497664 2014-04-06] (Waves Audio Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-11-08] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-11-08] (Microsoft Corporation)
R2 WysePocketCloud; C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe [16176 2013-08-22] ()
R2 WyseRemoteAccess; C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe [1785344 2013-08-19] (DELL Inc.) [File not signed]
S2 Update snipsmart; "C:\Program Files (x86)\snipsmart\updatesnipsmart.exe" [X]
S2 Util snipsmart; "C:\Program Files (x86)\snipsmart\bin\utilsnipsmart.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-07] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-26] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-03-17] (McAfee, Inc.)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [67584 2013-11-11] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-03-17] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-03-17] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2014-03-17] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-03-17] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-03-17] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [345456 2014-03-17] (McAfee, Inc.)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [92376 2013-10-09] (Realtek )
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-11-08] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-11-08] (Microsoft Corporation)
R3 ST_ACCEL; C:\Windows\system32\DRIVERS\ST_Accel.sys [83968 2013-11-21] (STMicroelectronics)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-03-10] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-11-08] (Microsoft Corporation)
R1 {1993b064-46e3-4c7d-8b20-2161564a7685}Gw64; C:\Windows\System32\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}Gw64.sys [48784 2014-12-09] (StdLib)
R1 {1993b064-46e3-4c7d-8b20-2161564a7685}w64; C:\Windows\System32\drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}w64.sys [48784 2014-12-09] (StdLib)
R1 {809da842-a636-4d48-aeda-93730ef23d66}Gw64; C:\Windows\System32\drivers\{809da842-a636-4d48-aeda-93730ef23d66}Gw64.sys [48784 2014-12-07] (StdLib)
R3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-10 21:30 - 2014-12-10 21:32 - 00020730 _____ () C:\Users\Allyson\Downloads\FRST.txt
2014-12-10 21:30 - 2014-12-10 21:30 - 00000000 ____D () C:\FRST
2014-12-10 21:29 - 2014-12-10 21:29 - 02119680 _____ (Farbar) C:\Users\Allyson\Downloads\FRST64.exe
2014-12-10 21:13 - 2014-12-10 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-12-10 00:19 - 2014-12-10 00:19 - 00000000 ___RD () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-12-09 23:26 - 2014-12-09 23:26 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\PCDr
2014-12-09 21:36 - 2014-12-09 12:29 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}w64.sys
2014-12-09 20:38 - 2014-12-09 20:38 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2014-12-09 20:37 - 2014-12-09 23:52 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-12-09 20:37 - 2014-12-09 20:38 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-12-09 20:37 - 2014-12-09 20:37 - 00002812 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2014-12-09 20:37 - 2014-12-09 20:37 - 00002810 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2014-12-09 20:37 - 2014-12-09 20:37 - 00001063 _____ () C:\Users\Allyson\Desktop\AnyProtect.lnk
2014-12-09 20:37 - 2014-12-09 20:37 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-12-09 20:37 - 2014-12-09 20:37 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2014-12-09 20:35 - 2014-12-09 20:38 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2014-12-09 20:35 - 2014-12-09 20:35 - 00003462 _____ () C:\Windows\System32\Tasks\ProPCCleaner_Popup
2014-12-09 20:35 - 2014-12-09 20:35 - 00003198 _____ () C:\Windows\System32\Tasks\ProPCCleaner_Start
2014-12-09 20:35 - 2014-12-09 20:35 - 00000000 __SHD () C:\Users\Allyson\AppData\Roaming\AnyProtectEx
2014-12-09 20:35 - 2014-12-09 20:35 - 00000000 ____D () C:\Users\Allyson\AppData\Local\Pro_PC_Cleaner
2014-12-09 20:34 - 2014-12-09 20:37 - 00000000 ____D () C:\Users\Allyson\Documents\ProPCCleaner
2014-12-09 20:26 - 2014-12-09 20:26 - 00000000 ____D () C:\Users\Allyson\AppData\Local\wincheck
2014-12-09 20:25 - 2014-12-09 20:25 - 00002220 _____ () C:\Windows\patsearch.bin
2014-12-09 20:25 - 2014-12-09 20:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNewH_01009.Wdf
2014-12-09 20:24 - 2014-12-10 00:22 - 00000000 ____D () C:\Users\Allyson\AppData\Local\gmsd_us_11
2014-12-09 20:24 - 2014-12-09 20:24 - 00000000 ____D () C:\Program Files (x86)\gmsd_us_11
2014-12-09 20:23 - 2014-12-09 20:23 - 00000000 ____D () C:\Users\Allyson\AppData\Local\CrashDumps
2014-12-09 20:22 - 2014-12-09 20:22 - 00001146 _____ () C:\Users\Allyson\Desktop\Continue Live Installation.lnk
2014-12-09 20:21 - 2014-12-09 11:54 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{1993b064-46e3-4c7d-8b20-2161564a7685}Gw64.sys
2014-12-07 11:05 - 2014-12-07 11:05 - 00000000 ____D () C:\Windows\System32\Tasks\Aviata
2014-12-07 11:05 - 2014-12-07 07:51 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{809da842-a636-4d48-aeda-93730ef23d66}Gw64.sys
2014-12-07 11:02 - 2014-12-07 11:06 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-07 11:02 - 2014-12-07 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-07 11:01 - 2014-12-10 21:11 - 00000924 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-07 11:01 - 2014-12-10 00:19 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-07 11:01 - 2014-12-07 11:06 - 00003896 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-07 11:01 - 2014-12-07 11:06 - 00003660 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-07 11:01 - 2014-12-07 11:03 - 00000000 ____D () C:\Users\Allyson\AppData\Local\Google
2014-12-07 11:01 - 2014-12-07 11:02 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-07 11:01 - 2014-12-07 11:01 - 00819176 _____ (Google Inc.) C:\Users\Allyson\Desktop\Setup_product_2937.exe
2014-12-07 10:59 - 2014-12-09 23:22 - 00000000 ____D () C:\Program Files (x86)\Search Extensions
2014-12-07 10:59 - 2014-12-07 10:59 - 00004326 _____ () C:\Windows\System32\Tasks\RocketTab Update Task
2014-12-07 10:59 - 2014-12-07 10:59 - 00003540 _____ () C:\Windows\System32\Tasks\RocketTab
2014-12-07 10:59 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2014-12-07 10:57 - 2014-12-10 00:13 - 00000000 ____D () C:\Program Files (x86)\snipsmart
2014-12-07 10:53 - 2014-12-07 10:53 - 00003988 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-12-07 10:53 - 2014-12-07 10:53 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-12-07 10:53 - 2014-12-07 10:53 - 00003198 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-12-07 10:51 - 2014-12-10 21:02 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{AEF6BFD7-412F-49AB-9828-00AD52EA5305}
2014-12-07 10:51 - 2014-12-07 10:51 - 00000000 __SHD () C:\Users\Allyson\AppData\Local\EmieUserList
2014-12-07 10:51 - 2014-12-07 10:51 - 00000000 __SHD () C:\Users\Allyson\AppData\Local\EmieSiteList
2014-12-07 10:51 - 2014-12-07 10:51 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\DropboxOEM
2014-12-06 11:40 - 2014-08-13 11:19 - 00000113 ____H () C:\DBAR_Ver.txt
2014-12-06 11:39 - 2014-12-10 21:18 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4117855597-3340283673-3293475651-1001
2014-12-06 11:39 - 2014-12-06 11:40 - 00000000 ____D () C:\ProgramData\softthinks
2014-12-06 11:39 - 2014-12-06 11:39 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\Macromedia
2014-12-06 11:39 - 2014-12-06 11:39 - 00000000 ____D () C:\Users\Allyson\AppData\Local\softthinks
2014-12-06 11:38 - 2014-12-10 21:06 - 00000000 ___RD () C:\Users\Allyson\OneDrive
2014-12-06 11:35 - 2014-12-06 11:35 - 00000000 ____D () C:\Users\Allyson\Documents\Bluetooth Folder
2014-12-06 11:35 - 2014-12-06 11:35 - 00000000 ____D () C:\Users\Allyson\AppData\Local\DropboxOEM
2014-12-06 11:35 - 2014-12-06 11:35 - 00000000 ____D () C:\Users\Allyson\AppData\Local\BMExplorer
2014-12-06 11:35 - 2014-12-06 11:35 - 00000000 ____D () C:\Users\Allyson\AppData\Local\Aviata
2014-12-06 11:35 - 2014-12-06 11:35 - 00000000 ____D () C:\ProgramData\Atheros
2014-12-06 11:34 - 2014-12-06 11:38 - 00000000 ____D () C:\Users\Allyson\AppData\Local\Packages
2014-12-06 11:34 - 2014-12-06 11:34 - 00001448 _____ () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-06 11:34 - 2014-12-06 11:34 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-06 11:34 - 2014-12-06 11:34 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\Atheros
2014-12-06 11:34 - 2014-12-06 11:34 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\Adobe
2014-12-06 11:34 - 2014-12-06 11:34 - 00000000 ____D () C:\Users\Allyson\AppData\Local\VirtualStore
2014-12-06 11:32 - 2014-12-06 11:38 - 00000000 ____D () C:\Users\Allyson
2014-12-06 11:32 - 2014-12-06 11:32 - 00000020 ___SH () C:\Users\Allyson\ntuser.ini
2014-12-06 11:32 - 2014-11-09 00:16 - 00000141 _____ () C:\Users\Allyson\Desktop\eBay.url
2014-12-06 11:32 - 2014-11-08 23:23 - 00000000 ___RD () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-06 11:32 - 2014-11-08 23:23 - 00000000 ___RD () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-06 11:32 - 2014-03-18 01:54 - 00000369 _____ () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-06 11:32 - 2014-03-18 01:54 - 00000369 _____ () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-06 11:32 - 2013-08-22 07:36 - 00000000 ___RD () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-06 11:32 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\Allyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-10 21:31 - 2013-08-22 07:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-10 21:00 - 2014-11-09 00:17 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-12-10 21:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\sru
2014-12-10 00:10 - 2013-08-22 05:25 - 00000194 _____ () C:\Windows\win.ini
2014-12-09 23:38 - 2014-11-09 00:02 - 01729349 _____ () C:\Windows\WindowsUpdate.log
2014-12-09 20:25 - 2013-08-22 06:46 - 00014849 _____ () C:\Windows\setupact.log
2014-12-09 20:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-12-07 11:01 - 2014-11-09 00:20 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-07 11:01 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-12-07 11:00 - 2014-11-09 00:20 - 00000000 ____D () C:\Program Files\mcafee
2014-12-07 10:59 - 2014-11-09 00:20 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-12-07 10:53 - 2014-11-09 00:16 - 00000000 ____D () C:\ProgramData\PCDr
2014-12-06 13:23 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2014-12-06 13:22 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-06 11:39 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-12-06 11:36 - 2014-03-18 01:53 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-06 11:34 - 2014-11-08 22:32 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Allyson\AppData\Local\Temp\10A4013D-DF02-1A79-5042-0CF342075BA5.dll
C:\Users\Allyson\AppData\Local\Temp\10A4013D-DF02-1A79-5042-0CF342075BA5.exe
C:\Users\Allyson\AppData\Local\Temp\1CD0C56E-7CFB-BE67-A7C6-5CAAE2CBBDC3.exe
C:\Users\Allyson\AppData\Local\Temp\nsa3BEC.exe
C:\Users\Allyson\AppData\Local\Temp\nsc1D90.exe
C:\Users\Allyson\AppData\Local\Temp\nsk87FA.exe
C:\Users\Allyson\AppData\Local\Temp\nsv96C0.exe
C:\Users\Allyson\AppData\Local\Temp\nsy4EE9.exe
C:\Users\Allyson\AppData\Local\Temp\System.Data.SQLite.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-08 23:37
==================== End Of Log ============================
And here is the Addition report:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-12-2014 01
Ran by Allyson at 2014-12-10 21:33:06
Running from C:\Users\Allyson\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Amazon 1Button App (HKLM-x32\...\{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}) (Version: 1.0.0.4 - Amazon)
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.60 - Dell Inc.)
Dell Data Services (HKLM\...\{15870B77-388E-4ADE-8414-F7229E54676F}) (Version: 1.0.7.0 - Dell Inc.)
Dell Digital Delivery (HKLM-x32\...\{D850CB7E-72BC-4510-BA4F-48932BFAB295}) (Version: 2.9.901.0 - Dell Products, LP)
Dell Foundation Services (HKLM\...\{D7AD55FA-39CB-4EEA-BCF6-00449B0F68B7}) (Version: 1.0.262.0 - Dell Inc.)
Dell Product Registration (HKLM-x32\...\{17FFE63C-6734-4950-B488-134B5A2505F7}) (Version: 2.04.0280 - Aviata Inc.)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 18.1.2.3 - Synaptics Incorporated)
Dell Update (HKLM-x32\...\{D9D0E75C-F791-402A-98E2-A2F43E7B0CE3}) (Version: 1.1.1054.0 - Dell Inc.)
Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Dell Inc.)
Dropbox 20 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 0.9.0 - Dropbox, Inc.)
DSC/AA Factory Installer (Version: 3.5.6426.22 - PC-Doctor, Inc.) Hidden
GamesDesktop 025.11 (HKLM-x32\...\gmsd_us_11_is1) (Version: - GAMESDESKTOP)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3408 - Intel Corporation)
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.0.244 - McAfee, Inc.)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.6.160 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
My Dell Client Framework (HKLM-x32\...\InstallShield_{05F1B866-2372-4E82-9AA8-C64FB11CEF8B}) (Version: 1.0.0.3 - Dell)
My Dell Client Framework (x32 Version: 1.0.0.3 - Dell) Hidden
PocketCloud (HKLM-x32\...\{D9752C7D-A595-4687-A0D5-362E9C311C55}) (Version: 2.7.14 - Wyse Technology)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.1.21 - Dell Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7283 - Realtek Semiconductor Corp.)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.11.0052 - ST Microelectronics)
WinCheck (HKLM-x32\...\wincheck) (Version: 1.0.0.0 - WinCheck)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 05:25 - 2013-08-22 05:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {136073BB-3EB7-438F-A77E-EEF3993B40C6} - System32\Tasks\RocketTab => cmd.exe /C start "" "C:\Program Files (x86)\Search Extensions\Client.exe" /Preferred=true <==== ATTENTION
Task: {14F1847F-B03E-417E-AA31-01677A2A961C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-07] (Google Inc.)
Task: {4548EA78-4A0C-4C9C-9970-199C8D95478C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-07] (Google Inc.)
Task: {47459B24-1873-45BB-B4FA-A16F729860D9} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-10] (PC-Doctor, Inc.)
Task: {5282C7D9-2C43-4F36-BEAB-A09F8E6841A1} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exe
Task: {5523321B-BB31-4C22-9F12-E6C554D2378D} - System32\Tasks\Dell\Dell Product Registration => C:\Program Files (x86)\Dell Product Registration\prodreg.exe [2014-04-01] (Aviata Inc)
Task: {5BCF0D7A-CBD8-4558-B1CC-662A2A83CEA0} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-06-30] (Realtek Semiconductor)
Task: {68D97962-2EED-4BC3-BE59-B207D6803CCC} - System32\Tasks\PocketCloudVirtualChannel => C:\Program Files (x86)\Wyse\PocketCloud\WPCRDPVirtualChannelServer.exe [2013-08-22] ()
Task: {7D934710-A1DC-4186-BE5F-178F4074E4B4} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-10] (PC-Doctor, Inc.)
Task: {8C38FB5C-2F96-4923-91C9-C81E126D284A} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-12-09] (AnyProtect.com) <==== ATTENTION
Task: {913F5FF9-2166-42EA-A001-F1060858965A} - System32\Tasks\Dell\Dell Product Registration Update => C:\Program Files (x86)\Dell Product Registration\prodreg.exe [2014-04-01] (Aviata Inc)
Task: {94490385-679F-43D9-9AE7-AE8D0FCE9CDA} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {A64A730E-28EE-4DF0-95B2-8740B27CF141} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-12-09] (AnyProtect.com) <==== ATTENTION
Task: {C457524F-6B7F-4CC8-9894-0C76260C6238} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exe
Task: {D0F0557A-040E-4331-B466-1B9076A804B7} - System32\Tasks\PocketCloudUpdater => C:\Program
Task: {D42B7F01-DA4F-4E3C-AE3F-563A37E82355} - System32\Tasks\Aviata\PowerRegister\Dell Reminder (Allyson) => C:\Program Files (x86)\Dell Product Registration\prodreg.exe [2014-04-01] (Aviata Inc)
Task: {DBDCD155-3C0D-4735-914E-F88058439C0E} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2014-12-09] (AnyProtect.com) <==== ATTENTION
Task: {DC9E9420-B4C4-4537-8418-8AB1A05C504C} - System32\Tasks\PocketCloud => C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudDesktopApp.exe [2013-08-22] ()
Task: {E00A394B-2519-4A0F-8B8A-9A4AE2F41848} - System32\Tasks\RocketTab Update Task => C:\Program Files (x86)\Search Extensions\uninstall.exe <==== ATTENTION
Task: {EDD7C042-48CA-42FD-A3EE-A5E5EFC0E3B1} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-03-10] (Synaptics Incorporated)
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-08-22 11:40 - 2013-08-22 11:40 - 00016176 _____ () C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe
2013-08-22 11:40 - 2013-08-22 11:40 - 00040240 _____ () C:\Program Files (x86)\Wyse\PocketCloud\AetherServiceLib.dll
2013-08-22 11:40 - 2013-08-22 11:40 - 00046384 _____ () C:\Program Files (x86)\Wyse\PocketCloud\AetherHelperLib.dll
2014-01-10 14:53 - 2014-01-10 14:53 - 00016384 _____ () C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.Interfaces.dll
2014-01-10 14:53 - 2014-01-10 14:53 - 00081408 _____ () C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.Objects.dll
2014-01-10 14:53 - 2014-01-10 14:53 - 00815616 _____ () C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.Resources.dll
2014-01-10 15:24 - 2014-01-10 15:24 - 00052736 _____ () C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.Client.Pulse.Agent.Plugins.SelfUpdate.dll
2014-01-10 15:24 - 2014-01-10 15:24 - 00019968 _____ () C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.Client.Pulse.Agent.Common.dll
2014-12-07 11:05 - 2014-12-09 12:29 - 00353008 _____ () C:\Program Files (x86)\snipsmart\bin\snipsmart.PurBrowse64.exe
2014-11-09 00:18 - 2014-06-04 15:02 - 00020256 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIcon.dll
2014-11-09 00:18 - 2014-06-04 15:02 - 00019744 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayNotBackuped.dll
2014-11-09 00:18 - 2014-06-04 15:03 - 00035104 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRShellExtension.dll
2014-12-09 20:24 - 2014-12-09 14:22 - 03308712 _____ () C:\Users\Allyson\AppData\Local\gmsd_us_11\upgmsd_us_11.exe
2014-12-07 10:59 - 2014-12-07 10:59 - 05812224 _____ () C:\Program Files (x86)\Search Extensions\Client.exe
2014-02-26 00:46 - 2014-02-26 00:46 - 00011264 _____ () C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-26 00:43 - 2014-02-26 00:43 - 00086016 _____ () C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-26 00:50 - 2014-02-26 00:50 - 00012928 _____ () C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
2014-09-02 11:40 - 2014-09-02 11:40 - 00462160 _____ () C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe
2014-12-09 20:24 - 2014-12-09 14:22 - 03979944 _____ () C:\Program Files (x86)\gmsd_us_11\gmsd_us_11.exe
2014-12-09 19:49 - 2014-12-09 19:49 - 00528384 _____ () C:\Users\Allyson\AppData\Local\wincheck\wincheck.exe
2014-03-18 01:40 - 2014-03-18 01:40 - 01895424 _____ () C:\Program Files\WindowsApps\Microsoft.HelpAndTips_6.3.9654.20428_x64__8wekyb3d8bbwe\HelpAndTips.exe
2014-11-09 00:18 - 2014-07-02 21:55 - 00487144 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
2014-09-02 11:40 - 2014-09-02 11:40 - 00214352 _____ () C:\Program Files (x86)\Dropbox\DropboxOEM\Ledger.dll
2014-09-02 11:40 - 2014-09-02 11:40 - 00114000 _____ () C:\Program Files (x86)\Dropbox\DropboxOEM\zlib1.dll
2014-11-09 00:18 - 2014-07-30 17:37 - 01906464 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll
2014-11-09 00:18 - 2012-11-25 23:19 - 01153384 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll
2014-11-09 00:17 - 2012-11-25 23:19 - 00117608 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll
2014-12-07 11:02 - 2014-11-24 22:39 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
2014-12-07 11:02 - 2014-11-24 22:39 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libegl.dll
2014-12-07 11:02 - 2014-11-24 22:39 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll
2014-12-07 11:02 - 2014-11-24 22:39 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll
2014-12-07 11:02 - 2014-11-24 22:39 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Allyson\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-4117855597-3340283673-3293475651-500 - Administrator - Disabled)
Allyson (S-1-5-21-4117855597-3340283673-3293475651-1001 - Administrator - Enabled) => C:\Users\Allyson
Guest (S-1-5-21-4117855597-3340283673-3293475651-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4117855597-3340283673-3293475651-1003 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/10/2014 09:19:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program chrome.exe version 39.0.2171.71 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 41c
Start Time: 01d0150195f78a17
Termination Time: 4294967295
Application Path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Report Id: 4866eca8-80f5-11e4-8258-c03896277c18
Faulting package full name:
Faulting package-relative application ID:
Error: (12/10/2014 00:12:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mfevtps.exe, version: 15.1.0.666, time stamp: 0x531e5404
Faulting module name: ntdll.dll, version: 6.3.9600.17114, time stamp: 0x53649e73
Exception code: 0xc0000374
Fault offset: 0x00000000000f87a8
Faulting process id: 0x1c0
Faulting application start time: 0xmfevtps.exe0
Faulting application path: mfevtps.exe1
Faulting module path: mfevtps.exe2
Report Id: mfevtps.exe3
Faulting package full name: mfevtps.exe4
Faulting package-relative application ID: mfevtps.exe5
Error: (12/09/2014 11:38:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20413 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ebc
Start Time: 01d0144b69e241e3
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: 70032583-803f-11e4-8258-c03896277c18
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 10:39:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20413 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: e84
Start Time: 01d01442a66f7a4e
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: 0bf90d20-8037-11e4-8258-c03896277c18
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 10:16:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20413 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1c64
Start Time: 01d0143ee72f8092
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: db8507d2-8032-11e4-8258-c03896277c18
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 09:04:00 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (12/09/2014 08:23:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ALERTH~1.EXE, version: 7.0.154.0, time stamp: 0x529cd577
Faulting module name: ntdll.dll, version: 6.3.9600.17114, time stamp: 0x53649e73
Exception code: 0xc0000005
Fault offset: 0x0000000000037d1a
Faulting process id: 0x844
Faulting application start time: 0xALERTH~1.EXE0
Faulting application path: ALERTH~1.EXE1
Faulting module path: ALERTH~1.EXE2
Report Id: ALERTH~1.EXE3
Faulting package full name: ALERTH~1.EXE4
Faulting package-relative application ID: ALERTH~1.EXE5
Error: (12/07/2014 11:00:01 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (12/07/2014 10:51:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AllysPC)
Description: Activation of app Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (12/07/2014 10:50:56 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AllysPC)
Description: Activation of app Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
System errors:
=============
Error: (12/10/2014 00:20:54 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (12/10/2014 00:13:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Update snipsmart service failed to start due to the following error:
%%2
Error: (12/10/2014 00:13:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Util snipsmart service failed to start due to the following error:
%%2
Error: (12/10/2014 00:13:31 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Update snipsmart service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
Error: (12/10/2014 00:13:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Util snipsmart service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
Error: (12/10/2014 00:12:35 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The McAfee Validation Trust Protection Service service terminated unexpectedly. It has done this 1 time(s).
Error: (12/09/2014 08:22:02 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (12/07/2014 11:06:31 AM) (Source: DCOM) (EventID: 10010) (User: AllysPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (12/07/2014 11:06:31 AM) (Source: DCOM) (EventID: 10010) (User: AllysPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (12/07/2014 11:06:30 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {C13F71BC-CC67-40A4-BEF2-1CBF44BD2A6D}
Microsoft Office Sessions:
=========================
Error: (12/10/2014 09:19:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe39.0.2171.7141c01d0150195f78a174294967295C:\Program Files (x86)\Google\Chrome\Application\chrome.exe4866eca8-80f5-11e4-8258-c03896277c18
Error: (12/10/2014 00:12:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mfevtps.exe15.1.0.666531e5404ntdll.dll6.3.9600.1711453649e73c000037400000000000f87a81c001d0119af037fcabC:\Windows\system32\mfevtps.exeC:\Windows\SYSTEM32\ntdll.dll4a9531af-8044-11e4-8258-c03896277c18
Error: (12/09/2014 11:38:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20413ebc01d0144b69e241e34294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe70032583-803f-11e4-8258-c03896277c18microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 10:39:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20413e8401d01442a66f7a4e4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe0bf90d20-8037-11e4-8258-c03896277c18microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 10:16:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.204131c6401d0143ee72f80924294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exedb8507d2-8032-11e4-8258-c03896277c18microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (12/09/2014 09:04:00 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (12/09/2014 08:23:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ALERTH~1.EXE7.0.154.0529cd577ntdll.dll6.3.9600.1711453649e73c00000050000000000037d1a84401d01430ea8c2b76c:\PROGRA~1\COMMON~1\mcafee\mhn\ALERTH~1.EXEC:\Windows\SYSTEM32\ntdll.dll3ddcd3dc-8024-11e4-8258-c03896277c18
Error: (12/07/2014 11:00:01 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (12/07/2014 10:51:28 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AllysPC)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927142
Error: (12/07/2014 10:50:56 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: AllysPC)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927142
CodeIntegrity Errors:
===================================
Date: 2014-12-06 11:38:53.270
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel® Celeron® CPU N2830 @ 2.16GHz
Percentage of memory in use: 57%
Total physical RAM: 3979.2 MB
Available physical RAM: 1709.81 MB
Total Pagefile: 5387.2 MB
Available Pagefile: 2736.43 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:456.98 GB) (Free:425.89 GB) NTFS
Drive d: (ESP) (Fixed) (Total:0.48 GB) (Free:0.43 GB) FAT32
Drive x: (WINRETOOLS) (Fixed) (Total:0.73 GB) (Free:0.46 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:7.39 GB) (Free:0.74 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 95BAA5FB)
Partition: GPT Partition Type.
==================== End Of Log ============================
Thank you n advanced. I realize this is a lot of information that I threw at you.
Dave
Sign In
Create Account
