Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

system often freezes, loses signal [Solved]

Started by Ricky_22 , Jun 26 2015 06:23 AM

very confused

This topic is locked

#1
Ricky_22

Posted 26 June 2015 - 06:23 AM

Member

Member
349 posts

My system sometimes just freezes - or maybe blue screen crash- or black screen crash ... we've tried several different things with assistance from phillpower2 in the 'windows 7' forum have been advised to post here and so hope you can help sort this problem once and for all it is really so inconvenient, annoying and frustrating (poor me)

Could it be a deep rooted virus/Trojan? - though I've scanned with different virus and malware programs it hasn't revealed anything - I'm completely flummoxed and would appreciate any help that you can give

Ricky

Here are the Farbar scans as I believe are needed:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-06-2015
Ran by Owner (administrator) on OWNER-PC on 26-06-2015 20:04:42
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4915200 2008-02-13] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
Winlogon\Notify\!SASWinLogon: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [X]
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-754179056-1382982999-2036298953-1000\...\Run: [RoboForm] => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-06-26] (Siber Systems)
BootExecute: dfboottime \??\C:\Windows\System32\dfboottime.cfgautocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-754179056-1382982999-2036298953-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.co...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {203A9549-7B06-4E7C-AE56-E4CA0D24AD4C} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {A10DB92A-868F-465D-A02D-318698A6C189} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {B157E6A5-6063-4608-85AB-AA683985F058} URL = https://www.google.c...?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28] (CANON INC.)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2571 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.1739 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-02-01]

Chrome:
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-11]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-11]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-11]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-11]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-11]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-12]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-11]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-11]
CHR Extension: (No Name) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2015-05-11]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-03-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-05-14] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 2WIREPCP; C:\Windows\System32\DRIVERS\2WirePCP.sys [60768 2007-03-23] (2Wire, Inc.) [File not signed]
R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [32896 2011-11-28] (AnvSoft Inc.) [File not signed]
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-11-05] (AVG Technologies)
S3 gdrv; C:\Windows\gdrv.sys [16608 2010-02-01] (Windows ® 2000 DDK provider)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKsl1e6d1dc8; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FFC256BC-229D-4618-AC1E-1B795CBA1420}\MpKsl1e6d1dc8.sys [39168 2015-06-26] (Microsoft Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2010-02-03] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2015-06-25] ()
S3 U2800Vid; C:\Windows\System32\DRIVERS\U2800Vid.sys [347904 2009-08-19] (Compro Technology, Inc.)
S3 cpuz134; \??\C:\Users\Owner\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S3 MREMP50; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [X]
S3 MRESP50; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-26 20:04 - 2015-06-26 20:05 - 00012140 _____ C:\Users\Owner\Desktop\FRST.txt
2015-06-26 20:04 - 2015-06-26 20:04 - 00000000 ____D C:\FRST
2015-06-26 20:02 - 2015-06-26 20:03 - 01636352 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2015-06-26 19:54 - 2015-06-26 19:57 - 00063808 _____ C:\Windows\setupact.log
2015-06-26 19:54 - 2015-06-26 19:54 - 00000000 _____ C:\Windows\setuperr.log
2015-06-26 13:09 - 2015-06-26 13:09 - 00000286 _____ C:\Users\Owner\Documents\cc_20150626_130859.reg
2015-06-26 09:24 - 2015-06-26 09:24 - 00011782 _____ C:\Users\Owner\Documents\cc_z20150626_092343.reg
2015-06-25 18:20 - 2015-06-03 03:35 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-25 18:20 - 2015-05-26 01:00 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-25 18:20 - 2015-05-23 11:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-25 18:20 - 2015-05-23 11:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-25 18:20 - 2015-05-23 11:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-25 18:20 - 2015-05-23 11:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-25 18:20 - 2015-05-23 11:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-25 18:20 - 2015-05-23 11:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-25 18:20 - 2015-05-23 11:05 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-25 18:20 - 2015-05-23 11:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-25 18:20 - 2015-05-23 11:00 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-25 18:20 - 2015-05-23 10:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-25 18:20 - 2015-05-23 10:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-25 18:20 - 2015-05-23 10:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-25 18:20 - 2015-05-23 10:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-25 18:20 - 2015-05-23 02:03 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 18:20 - 2015-05-23 01:58 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 18:20 - 2015-05-21 21:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 18:19 - 2015-05-27 22:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-25 18:19 - 2015-05-23 11:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-25 18:19 - 2015-05-23 11:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-25 18:19 - 2015-05-23 11:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-25 18:19 - 2015-05-23 11:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-25 18:19 - 2015-05-23 11:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-25 18:19 - 2015-05-23 11:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-25 18:19 - 2015-05-23 11:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-25 18:19 - 2015-05-23 10:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-25 18:19 - 2015-05-23 10:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-25 18:19 - 2015-05-23 10:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-25 18:19 - 2015-05-23 10:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-25 18:19 - 2015-05-23 10:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-25 18:19 - 2015-05-23 10:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-25 18:17 - 2015-05-26 02:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-25 18:17 - 2015-05-26 02:07 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-25 18:17 - 2015-05-26 02:04 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-25 18:17 - 2015-05-26 02:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-25 18:17 - 2015-05-26 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-25 18:17 - 2015-05-26 01:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-25 18:17 - 2015-05-26 00:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-25 18:12 - 2015-05-09 11:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-25 18:12 - 2015-05-09 11:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-25 18:12 - 2015-05-09 11:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-25 18:12 - 2015-04-30 02:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-25 18:11 - 2015-05-09 11:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-25 18:11 - 2015-04-25 01:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-20 05:53 - 2015-06-20 05:53 - 00002732 _____ C:\Users\Owner\Documents\collabro.txt
2015-06-19 17:33 - 2015-06-19 17:34 - 168848003 _____ C:\Users\Owner\Documents\~yt2.tmp
2015-06-19 16:57 - 2015-06-19 16:57 - 00002878 _____ C:\Users\Owner\Documents\lite & easy order.txt
2015-06-19 14:39 - 2015-06-19 14:39 - 00000000 ____D C:\eb3fe3f8d4cd1ec3b5e698b3
2015-06-17 07:02 - 2015-06-17 07:02 - 00000468 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2015-06-15 22:48 - 2015-06-15 22:48 - 00000029 _____ C:\Users\Owner\Documents\Incredimail licence.txt
2015-06-14 06:45 - 2015-06-14 06:45 - 36382247 _____ C:\Users\Owner\Documents\One direction - No control (Music video).mp4
2015-06-13 20:51 - 2015-06-13 20:51 - 00004032 _____ C:\Users\Owner\Documents\stere kicks.txt
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Windows\MATS
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Program Files\Microsoft Fix it Center
2015-06-12 13:23 - 2015-06-12 13:23 - 00000017 _____ C:\Users\Owner\AppData\Local\resmon.resmoncfg
2015-06-07 17:26 - 2015-06-07 17:26 - 00000145 _____ C:\Users\Owner\Documents\Isaac.txt
2015-06-06 08:52 - 2015-06-06 08:52 - 00000300 _____ C:\Users\Owner\Documents\cc_20150606_085234.reg
2015-06-05 15:50 - 2015-06-05 15:50 - 00001957 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail.lnk
2015-06-05 15:50 - 2015-06-05 15:50 - 00001945 _____ C:\Users\Public\Desktop\IncrediMail.lnk
2015-06-04 04:04 - 2015-06-04 04:04 - 00006628 _____ C:\Users\Owner\Documents\cc_20150604_040408.reg
2015-06-01 20:29 - 2015-06-01 20:29 - 00000000 ____D C:\Users\Owner\AppData\Local\GWX
2015-06-01 20:16 - 2015-06-01 20:16 - 79717126 _____ C:\Users\Owner\Documents\Britain's Got Talent 2015 S09E18 Finals Isaac Waddington Performs A Billy Joel Favorite.mp4
2015-05-31 13:38 - 2015-05-31 14:04 - 00000348 _____ C:\Users\Owner\Documents\Geeks.txt
2015-05-31 13:19 - 2015-05-31 13:20 - 00005876 _____ C:\Users\Owner\Documents\cc_20150531_131943.reg
2015-05-31 05:51 - 2015-06-26 09:21 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-05-31 05:51 - 2015-06-26 09:21 - 00000000 ____D C:\Program Files\CCleaner
2015-05-31 05:51 - 2015-05-31 05:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-31 04:25 - 2015-05-31 04:25 - 00000000 ____D C:\Program Files\GUM18CD.tmp
2015-05-31 04:19 - 2015-06-25 23:37 - 00002091 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-31 04:19 - 2015-06-25 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-31 04:18 - 2015-05-31 21:42 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-31 04:18 - 2015-05-31 21:42 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-31 04:18 - 2015-05-31 05:08 - 00000000 ____D C:\ProgramData\Google
2015-05-31 04:17 - 2015-05-31 21:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-31 04:17 - 2015-05-31 04:17 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-31 04:17 - 2015-05-31 04:17 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-30 19:24 - 2015-05-30 19:25 - 00347816 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\MicrosoftFixit.Performance.Run.exe
2015-05-30 18:29 - 2015-04-11 11:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-05-30 16:28 - 2015-05-31 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-30 16:27 - 2015-05-30 16:29 - 06962912 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\Silverlight.exe
2015-05-30 12:53 - 2015-05-01 21:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-30 11:59 - 2015-04-20 10:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-30 11:59 - 2015-04-20 10:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-30 11:58 - 2015-04-18 10:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-30 11:58 - 2015-04-13 11:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-30 11:55 - 2015-04-08 11:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-30 11:55 - 2015-04-08 11:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-30 03:17 - 2015-05-30 03:17 - 50198842 _____ C:\Users\Owner\Documents\Isaac Waddington _ Britain's Got Talent 2015.mp4
2015-05-29 05:31 - 2015-05-30 11:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Driver Updater
2015-05-29 05:31 - 2015-05-30 10:44 - 00000000 ____D C:\Users\Owner\AppData\Local\AVG Netherlands BV

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-26 20:00 - 2014-07-16 07:39 - 01618219 _____ C:\Windows\WindowsUpdate.log
2015-06-26 19:57 - 2009-07-14 12:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-26 17:56 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-26 17:56 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-26 13:20 - 2015-01-22 19:36 - 00000000 ____D C:\Users\Owner\Desktop\Receipts
2015-06-26 12:54 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\NDF
2015-06-26 12:53 - 2012-11-29 03:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2015-06-26 09:34 - 2015-01-29 05:27 - 00000000 ____D C:\Users\Owner\Desktop\Autoruns
2015-06-26 09:23 - 2015-01-19 04:44 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps
2015-06-26 02:00 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\rescache
2015-06-26 00:22 - 2014-11-13 03:30 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieBrowserModeList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieUserList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieSiteList
2015-06-26 00:20 - 2011-07-16 01:37 - 00781346 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-26 00:14 - 2009-07-14 12:33 - 00269880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-26 00:11 - 2014-05-07 03:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 00:10 - 2014-12-11 03:18 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 23:56 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 23:50 - 2011-08-12 14:59 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\Realtek
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\InstallShield Installation Information
2015-06-25 17:46 - 2010-02-02 13:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-25 17:42 - 2011-11-11 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-06-25 17:38 - 2010-02-01 13:27 - 00000000 ____D C:\Program Files\DIFX
2015-06-25 17:34 - 2014-05-01 09:45 - 00013464 _____ C:\Windows\system32\Drivers\SWDUMon.sys
2015-06-25 17:24 - 2011-07-16 00:48 - 00000000 ____D C:\Users\Owner
2015-06-25 17:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\wfp
2015-06-25 17:11 - 2015-04-06 23:47 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-25 17:11 - 2010-11-29 10:45 - 00000000 ____D C:\Users\Owner\AppData\Roaming\vlc
2015-06-25 17:11 - 2010-02-01 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2015-06-25 17:11 - 2010-02-01 13:26 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-25 17:11 - 2009-07-14 12:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-25 17:10 - 2010-02-01 19:31 - 00000000 ____D C:\Users\Owner\AppData\Local\IM
2015-06-25 17:10 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\registration
2015-06-25 17:10 - 2009-07-14 10:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-25 10:52 - 2015-02-08 08:41 - 00013824 ___SH C:\Users\Owner\AppData\Thumbs.db
2015-06-24 07:19 - 2015-01-21 02:02 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-23 20:15 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-06-22 02:52 - 2011-07-30 19:29 - 00000000 ____D C:\Windows\Minidump
2015-06-19 17:33 - 2015-02-17 09:21 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2015-06-12 14:39 - 2015-04-15 13:28 - 00338620 _____ C:\Users\Owner\AppData\Local\census.cache
2015-06-12 14:39 - 2015-04-15 13:28 - 00146372 _____ C:\Users\Owner\AppData\Local\ars.cache
2015-06-07 20:02 - 2015-04-09 08:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-07 16:41 - 2015-01-16 16:04 - 00000281 _____ C:\DelFix.txt
2015-06-07 03:51 - 2009-07-14 12:53 - 00032626 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-31 19:14 - 2015-05-02 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
2015-05-31 19:14 - 2015-04-15 21:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2015-05-31 19:14 - 2014-10-26 10:49 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-05-31 19:14 - 2014-02-13 10:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-31 19:14 - 2013-10-09 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-05-31 19:14 - 2009-07-14 15:49 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-31 19:14 - 2009-07-14 15:48 - 00000000 ____D C:\Windows\ShellNew
2015-05-31 19:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-05-31 19:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-05-31 19:13 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\AppCompat
2015-05-31 18:58 - 2009-07-14 10:37 - 00000000 ___RD C:\Users\Public
2015-05-31 13:51 - 2015-01-17 04:19 - 00000897 _____ C:\Users\Public\Desktop\Speccy.lnk
2015-05-31 13:51 - 2015-01-17 04:19 - 00000000 ____D C:\Program Files\Speccy
2015-05-31 05:16 - 2011-11-17 02:19 - 00000000 ____D C:\Program Files\Google
2015-05-31 05:08 - 2010-02-03 01:04 - 00000000 ____D C:\Users\Owner\AppData\Local\Google
2015-05-31 04:16 - 2010-02-02 11:42 - 00000000 ____D C:\Users\Owner\AppData\Local\Adobe
2015-05-30 12:55 - 2014-10-26 10:49 - 00002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-30 12:55 - 2011-03-15 09:45 - 00001945 _____ C:\Windows\epplauncher.mif
2015-05-30 10:05 - 2011-07-16 16:39 - 00000000 ____D C:\Windows\Panther
2015-05-30 02:56 - 2012-04-25 06:08 - 00000000 ____D C:\Users\Owner\Downloads\You-Tube
2015-05-28 07:32 - 2011-06-10 06:54 - 00000180 _____ C:\Users\Owner\Documents\Important stuff!.txt

==================== Files in the root of some directories =======

2015-04-07 22:44 - 2015-04-07 23:06 - 0000115 _____ () C:\Users\Owner\AppData\Roaming\LogFile.txt
2013-04-01 19:07 - 2013-04-01 19:07 - 0026108 _____ () C:\Users\Owner\AppData\Roaming\UserTile.png
2015-04-07 21:45 - 2015-05-07 03:27 - 0000436 _____ () C:\Users\Owner\AppData\Roaming\Weather Meter_Settings.ini
2015-04-15 13:28 - 2015-06-12 14:39 - 0146372 _____ () C:\Users\Owner\AppData\Local\ars.cache
2015-04-15 13:28 - 2015-06-12 14:39 - 0338620 _____ () C:\Users\Owner\AppData\Local\census.cache
2014-09-11 19:44 - 2014-09-11 19:44 - 0003584 _____ () C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-15 08:28 - 2015-04-15 08:28 - 0000036 _____ () C:\Users\Owner\AppData\Local\housecall.guid.cache
2015-06-12 13:23 - 2015-06-12 13:23 - 0000017 _____ () C:\Users\Owner\AppData\Local\resmon.resmoncfg
2014-02-11 09:56 - 2015-01-22 05:42 - 0010278 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\RoboForm-Setup.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-06-23 11:39

==================== End of log ============================

****

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-06-2015
Ran by Owner at 2015-06-26 20:05:24
Running from C:\Users\Owner\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-754179056-1382982999-2036298953-500 - Administrator - Disabled)
Guest (S-1-5-21-754179056-1382982999-2036298953-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-754179056-1382982999-2036298953-1002 - Limited - Enabled)
Owner (S-1-5-21-754179056-1382982999-2036298953-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
Adobe Acrobat 4.0 (HKLM\...\Adobe Acrobat 4.0) (Version: 4.0 - Adobe Systems, Inc.)
Any Video Converter 5.7.3 (HKLM\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Any Video Converter Ultimate 4.6.0 (HKLM\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
Ashampoo Burning Studio 14 (HKLM\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 8.09 (HKLM\...\Ashampoo Burning Studio 8_is1) (Version: 8.0.9 - ashampoo GmbH & Co. KG)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
Canon Easy-WebPrint EX (HKLM\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.00 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM\...\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows (HKLM\...\{75B61CF0-B8A8-46E2-8709-C4A79898AC1D}) (Version: 1.17 - Western Digital Corporation)
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
Easy Thumbnails (Remove only) (HKLM\...\Easy Thumbnails_is1) (Version: 3.0 - Fookes Software)
Go PDF Reader (HKLM\...\GoPDFReader) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
IncrediMail (Version: 6.6.0.5288 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5288 - IncrediMail Ltd.)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Calculator Plus (HKLM\...\{83073C45-3003-4671-9A86-243AAADD915A}) (Version: 1.0.0 - Microsoft)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PhotoMail Maker (Version: 6.0.0.1007 - IncrediMail) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - )
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
RoboForm 7-9-14-4 (All Users) (HKLM\...\AI RoboForm) (Version: 7-9-14-4 - Siber Systems)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.4 - Krzysztof Kowalczyk)
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 Upgrade Advisor (HKLM\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
YTD Video Downloader 4.9 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)

==================== Restore Points =========================

10-06-2015 10:48:28 Windows Update
10-06-2015 23:42:30 Windows Update
14-06-2015 06:50:48 Windows Update
17-06-2015 12:35:14 Windows Update
19-06-2015 03:20:39 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 8
19-06-2015 03:25:38 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
19-06-2015 13:49:04 Restore Operation
19-06-2015 14:28:39 Windows Update
19-06-2015 15:19:02 Windows Update
21-06-2015 14:31:04 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
21-06-2015 14:37:29 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
23-06-2015 09:51:10 Windows Update
25-06-2015 07:00:20 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
25-06-2015 07:04:38 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 07:08:54 Revo Uninstaller Pro's restore point - BitComet 1.38
25-06-2015 07:11:05 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 10:47:14 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 10:49:51 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 15:12:51 Restore Operation
25-06-2015 17:27:17 Revo Uninstaller Pro's restore point - My Online Toolkit
25-06-2015 17:30:08 Revo Uninstaller Pro's restore point - MpcStar 5.3
25-06-2015 17:34:03 Installed DriverUpdate
25-06-2015 17:36:44 Revo Uninstaller Pro's restore point - Windows Driver Package - 2Wire (2WIREPCP) Net (03/22/2007 2.0)
25-06-2015 17:38:48 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 17:41:09 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 17:42:37 Revo Uninstaller Pro's restore point - DriverUpdate
25-06-2015 17:42:59 Removed DriverUpdate
25-06-2015 17:44:59 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 17:46:26 Revo Uninstaller Pro's restore point - Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
25-06-2015 17:57:25 Windows Update
25-06-2015 23:49:08 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 18:23 - 2006-09-19 05:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DC0B543-5117-4B29-8FDD-6B8D699FB33B} - System32\Tasks\{FB687851-6320-4D70-A607-9ED3EA25F95F} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {1260FC21-28CB-409A-AFE8-4A8B73884E21} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....IGJKJMIBNKJHIKJ"
Task: {14FF1700-BA4C-4FC0-A89D-96D97D103D00} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....NNICMJNDJCMKJBJ"
Task: {1946ADEB-A7AD-4E17-9A7F-E9280DA1CC6A} - System32\Tasks\{54FFE30A-7439-482D-8E6F-497ABD851E8D} => C:\Program Files\Microsoft Silverlight\5.1.40416.0\Silverlight.Configuration.exe [2015-04-15] (Microsoft Corporation)
Task: {19C01C1D-48C6-46DB-9111-9A2A9D2ACBED} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Owner logon => C:\Program Files\Auslogics\BoostSpeed\BoostSpeed.exe
Task: {1C4A8493-30A2-47E5-9BE8-C1D793217A0D} - System32\Tasks\{C7C592A1-4609-49D9-8CAB-B26A0395DBCE} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {21E9703A-B00E-4010-811A-36A6A6E08D9B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {27039341-AF5E-4AA3-8019-9D360F4811AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-02] (Piriform Ltd)
Task: {3043F7F1-BD5D-4537-9DAD-CDDE8B72A895} - System32\Tasks\{DED62F59-5C9E-4A85-8440-E42E28096822} => C:\Users\Owner\Downloads\OneDriveSetup.exe
Task: {39073115-B88D-4DDC-A55B-B46BA9A50B7A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {45B44DE6-0F07-4F6E-9B58-1770136EC6A9} - System32\Tasks\IHUninstallTrackingTASK => CMD
Task: {4B39CC67-88E0-42F3-9EEB-BE01803A9BA9} - System32\Tasks\{F4C92BD5-C5A1-4437-AAC2-A55EBA33700D} => C:\Program Files\BitComet\BitComet.exe
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {56D3ABCE-0501-46AD-8FFF-C6F0785C6142} - System32\Tasks\{04EB4926-E829-487F-A4A3-F39F51CB7E1E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {662D36BA-5126-470B-93F1-C778D97D1541} - System32\Tasks\{5D97E633-0979-482E-A862-CD2D354C08F3} => C:\Program Files\PeerBlock\peerblock.exe
Task: {6F10174E-7813-4D82-8392-41E4C0F07EC9} - System32\Tasks\{8B5D59BA-6195-43B8-84B0-76396BA7F967} => pcalua.exe -a C:\Users\Owner\Downloads\Applications-programs\wlsetup-web.exe -d C:\Users\Owner\Downloads\Applications-programs
Task: {71337097-9F94-454C-94E3-6FD30106B933} - \PC TuneUp Maestro Startup No Task File <==== ATTENTION
Task: {76121EEE-434C-42DF-AC87-7EB6999EFA2E} - System32\Tasks\Google Update => C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {7F86EC89-2379-40C3-BF09-88524471D169} - System32\Tasks\{6ABA9986-39C4-4B3E-93C5-974D78626616} => C:\Program Files\PeerBlock\peerblock.exe
Task: {82A24E69-122A-4F51-B583-A348C7372769} - System32\Tasks\{2962B57C-4766-426A-8887-D12E28116F4B} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {8988B3B0-EF01-4FC2-8D61-C20A0C40EE29} - System32\Tasks\{EF80D55A-55E2-4909-AFCB-8CC9B9AC6FF5} => pcalua.exe -a D:\AutoRunPro.exe -d D:\
Task: {92672263-E352-43F9-94CC-2FB6436D6351} - System32\Tasks\{D5C773BB-EDAA-434D-84F5-BAFDD84D48C6} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {A2A18C4E-47D9-43CF-A655-070DCED2F16C} - System32\Tasks\{BA1F71DD-E433-457D-808E-DEE68AA0A978} => C:\Program Files\PeerBlock\peerblock.exe
Task: {ABA65842-BE6F-4CFB-8112-13781F34B3D5} - System32\Tasks\{0368CC1F-3E0C-49C3-9E79-F6923D8A3D4E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {B3C0CC0A-A52B-43D4-83F9-319AB1AB2F13} - System32\Tasks\{13E4E255-40ED-4E85-A5BB-3CF5AAB139D0} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B6893B4B-20AA-4829-A509-7ADC1620747B} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {B923A9D4-92E8-4C37-8BF2-87B375365D60} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"
Task: {BB4D7F4C-5DF5-4F47-BD33-CF71A35D2D87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {BBBAC0F0-1E55-4F45-953E-ADC4A1C6253F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-06-26] (Siber Systems)
Task: {BF95D427-4AA6-4CD3-AFE4-20795D2A668A} - System32\Tasks\{91B9C5A7-30E2-4EF3-A54B-EE275C8D90F3} => C:\Program Files\BitComet\BitComet.exe
Task: {DDB87CEA-DAEF-4B84-9B1F-52D4370730F4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-31] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {E6934196-7C8F-4304-BD9A-B013A451D3CB} - System32\Tasks\{BEEFDE71-9ADA-4208-AFA6-8591F44844C2} => pcalua.exe -a C:\Users\Owner\Downloads\pctum_setup_dmp_.exe -d C:\Users\Owner\Downloads
Task: {F141A988-0079-4D2B-A455-03886C5FBED7} - System32\Tasks\{A5FB1139-C3BA-43CB-B27B-EF5EF604DBFA} => C:\Program Files\PeerBlock\peerblock.exe
Task: {F4711B03-C555-43F9-8896-D90E8FD6D1D3} - System32\Tasks\{ADFFAF74-7253-4F28-A492-3BD29A94D612} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {FAE80FFA-2754-4FCF-A51D-945991F8B0F9} - System32\Tasks\{3BF27CA2-D8CC-48B6-98DC-2B89B8593AEC} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2010-02-01 12:20 - 2007-05-14 10:54 - 00272024 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-754179056-1382982999-2036298953-1000\...\hola.org -> hxxp://hola.org

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-754179056-1382982999-2036298953-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Owner^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Canon IJ Status Monitor Canon iP4500 series.lnk => C:\Windows\pss\Canon IJ Status Monitor Canon iP4500 series.lnk.Startup
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: hpqSRMon => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: InCD => C:\Program Files\Nero\Nero 7\InCD\InCD.exe
MSCONFIG\startupreg: LanguageShortcut => "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\MpcStar\Codecs\QuickTime\QTSystem\qttask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl => "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: SecurDisc => C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{0556D590-2A24-4CE5-A64E-46E99F078885}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{294FD7B7-0BF1-4804-9B8C-44AC4E0A5450}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{62073BA1-0C00-4122-9D03-ABF0B54D7A5F}] => (Allow) LPort=15081
FirewallRules: [{33D59C28-6226-4071-9E97-0D2633FFB3A6}] => (Allow) LPort=15081
FirewallRules: [UDP Query User{137FBEB4-7013-479D-80C2-F46CB1BA5A5F}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{38B99604-D6CB-4B7D-99A4-51542332812F}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{3897C1BE-1643-4A4F-ACED-B93F77ADA0E6}] => (Allow) LPort=8744
FirewallRules: [{0F356C19-83A1-419E-A9E4-0517CC6F88F5}] => (Allow) LPort=8744
FirewallRules: [{95EF5F9C-CEE0-45FB-8C75-9BFC2BD42257}] => (Allow) LPort=15081
FirewallRules: [{ABF1C57A-63CA-4E07-9C94-A5C3758A5F28}] => (Allow) LPort=15081
FirewallRules: [{EE573F82-ACA4-43DE-907E-1DC0D4C20E9A}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{BFD1A195-22BF-4B0B-B661-E27FD70117B7}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{422A09C5-101E-477F-953D-EC2969E60EAB}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{97830606-0FC2-44B1-9115-63798ECAC3B0}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{5FA6DECE-C167-4A53-A0A8-DE68725BCBB2}] => (Allow) LPort=19898
FirewallRules: [{45E1AF92-C1A2-4E34-A305-882F1518B390}] => (Allow) LPort=19898
FirewallRules: [{E66DDFA3-16FA-4A11-85E7-336AB8981FB2}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{D0C9A2A9-47DE-4315-9E80-ED178B5A720F}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{0D3FC62B-FDD1-4143-851B-D0B7BEBB39D7}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{26D294C1-8D89-40CB-B932-22DF0B47790C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{8E1D504B-F982-4D4B-8CD9-6C4EF271064F}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{25A8EFDD-A28B-4271-9023-E9CD2BB52B70}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{5DB5BD8B-9B74-403A-8D3E-A86E962B60CE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{F93C28FC-5327-45F7-A0DC-23E3C8A5F90E}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{EDDC5C3C-DD5A-467E-BEE1-4074AB1A97F7}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{C26B37C6-67B9-4349-8703-FBB672D5A93E}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{1B1EF8BF-A803-4E8D-AAEA-9F36470E1611}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [TCP Query User{D25C8134-6F41-414D-8BAB-CD7497916758}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{8CA4C3C3-C36E-4A9A-BC14-43C54916470B}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{40F158CC-0EF8-458B-A35A-0D608D03F2D0}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{63D75030-22BA-4491-99E6-9F79E065111F}] => (Allow) LPort=2869
FirewallRules: [{E3816C70-F398-48BA-815C-371898CB4C22}] => (Allow) LPort=1900
FirewallRules: [{183EF8A5-AE32-4707-8D74-78039396C39C}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{82F7A5A9-DCCE-4E7E-A6D4-6D1EAEEC05DB}] => (Allow) LPort=19898
FirewallRules: [{92965DC4-73AF-4EA9-91A1-C2A10C1F104E}] => (Allow) LPort=19898
FirewallRules: [{4C892165-4A30-4873-BE3C-3540B9A1D85A}] => (Allow) LPort=22668
FirewallRules: [{42F7D32B-9FB6-41D4-8D29-191D18E2DBFD}] => (Allow) LPort=22668
FirewallRules: [{0EB4AD3D-B5AF-46C9-8C33-314664668EB2}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{89DA5C7F-48FA-4206-AF0D-29D38C52A2F1}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{25565F1A-3B0E-43A1-AA79-F8CB63379205}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{1845CAD0-673A-445F-A8C9-FF6EF70E65CB}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{10978D0F-98B9-4069-B788-2445837A4FF9}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{C85EAB9F-72F2-4CE0-B4DB-D421F0561AAE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{0BA5E1B1-67DD-40DE-96F3-B09F9642C6BE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{D4EB235E-E125-4823-A979-295C26AFD865}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{F3B7D85F-0113-402F-8F73-7D8375AFFB0E}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{21A51679-94B0-483C-BA34-50407112E6A6}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{6C1549F0-E832-46A1-96FD-76BD3BAE148C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{26CF61FE-F204-49B5-87FD-2842A1F80D66}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (06/26/2015 07:59:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2015 07:57:59 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 07:57:45 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 07:55:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (2436) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Owner\AppData\Local\Microsoft\Windows\WebCache\V010017A.log.

Error: (06/26/2015 07:55:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 07:54:57 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 05:51:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2015 05:50:53 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 05:50:40 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error

Error: (06/26/2015 00:48:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (06/26/2015 07:57:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
sptd

Error: (06/26/2015 07:57:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Error: (06/26/2015 07:57:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Error: (06/26/2015 07:57:03 PM) (Source: sptd) (EventID: 4) (User: )
Description: Driver detected an internal error in its data structures for .

Error: (06/26/2015 07:57:29 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:55:12 PM on ‎6/‎26/‎2015 was unexpected.

Error: (06/26/2015 07:54:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
sptd

Error: (06/26/2015 07:54:15 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Error: (06/26/2015 07:54:29 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:52:16 PM on ‎6/‎26/‎2015 was unexpected.

Error: (06/26/2015 07:54:11 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Microsoft Office:
=========================
Error: (06/26/2015 07:59:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2015 07:57:59 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

Error: (06/26/2015 07:57:45 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

Error: (06/26/2015 07:55:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost2436WebCacheLocal: C:\Users\Owner\AppData\Local\Microsoft\Windows\WebCache\V010017A.log-1811

Error: (06/26/2015 07:55:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

Error: (06/26/2015 07:54:57 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

Error: (06/26/2015 05:50:53 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

Error: (06/26/2015 05:50:40 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error

CodeIntegrity Errors:
===================================
Date: 2015-06-08 01:20:59.996
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 01:20:59.963
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 01:05:54.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 01:05:54.226
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 01:03:29.035
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Temp\PendingDeletes\$$DeleteMe.bcrypt.dll.01c85bd5f6054314.0033 because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 01:03:28.999
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Temp\PendingDeletes\$$DeleteMe.bcrypt.dll.01c85bd5f6054314.0033 because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 00:57:42.766
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 00:57:42.736
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 00:56:55.888
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\wbem\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-06-08 00:56:55.844
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\wbem\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel® Core™2 Duo CPU E8500 @ 3.16GHz
Percentage of memory in use: 41%
Total physical RAM: 2046.49 MB
Available physical RAM: 1200.74 MB
Total Pagefile: 4092.98 MB
Available Pagefile: 2932.17 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:724.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 31AF88A9)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of log ============================

#2
Ricky_22

Posted 28 June 2015 - 02:58 PM

Member

Topic Starter
Member
349 posts

http://www.geekstogo...-2#entry2510320... thank you

Do you need me to do another Farbar scan - cause it's been a few days now ....

Ricky

Edited by Ricky_22, 30 June 2015 - 02:54 AM.

#3
Ricky_22

Posted 30 June 2015 - 02:55 AM

Member

Topic Starter
Member
349 posts

bump

#4
Dakeyras

Posted 02 July 2015 - 06:05 AM

Anti-Malware Mammoth

Expert
9,772 posts

Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post the appropriate logs in the Virus, Spyware, Malware Removal forum and wait for help.

Hi and welcome back to Geeks to Go.

I'm Dakeyras and I am going to try to assist you with your problem. Please take note of the below:

I will start working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for this issue on this machine!
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Refrain from running self fixes as this will hinder the malware removal process.
It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.

Before we start:

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Scan with aswMBR:

Please download aswMBR to your desktop.

Alternate downloads are here and here.

Right-click on aswMBR.exe and select Run as Administrator to launch the application.
If a prompt stating: The computer supports "Virtualization Technology" appears >> select Yes
When prompted with: The application can use the Avast! Free Antivirus for scanning >> select Yes
The Avast! virus definitions database will automatically be downloaded. Be patient this make take some time depending on the speed of your Internet Connection.
Once it has downloaded >> ensure the option next to AV scan: >> QuickScan is selected only. It should be by default.
Now click on the Scan button to start the scan.
On completion of the scan click Save Log, save it to your desktop and post the contents in your next reply
Click on Exit.

Note: There will also be a file on your desktop named MBR.dat(or similar) do not delete this for now it is a actual backup of the MBR(master boot record).

Re-scan with FRST:

Right-click on FRST.exe and select Run as Administrator to start FRST.
Under Optional Scan ensure both Drivers MD5 and Addition.txt are selected.
Now click on the Scan button/radio tab >> at the Scan completed prompt click on OK
At the next prompt denoting Addition.txt is saved in the same location FRST tool is run >> click on OK
There will now be two logs on your desktop, Addition.txt and FRST.txt. Post the contents of both in your next reply.

Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.

Next:

When completed the above, please post back the following in the order asked for:

How is your computer performing now, any further symptoms and or problems encountered?
aswMBR Log.
Both FRST logs. <-- Post them individually please, IE: one Log per post/reply.

#5
Ricky_22

Posted 02 July 2015 - 07:01 AM

Member

Topic Starter
Member
349 posts

Thank you so very much Dakeyras, I appreciate your time.

The old computer has certainly picked up a bit of speed, and so far is behaving well ... a pleasing sign I think

#6
Ricky_22

Posted 02 July 2015 - 07:03 AM

Member

Topic Starter
Member
349 posts

aswMBR version 1.0.1.2290 Copyright© 2014 AVAST Software
Run date: 2015-07-02 20:21:26
-----------------------------
20:21:26.157    OS Version: Windows 6.1.7601 Service Pack 1
20:21:26.157    Number of processors: 2 586 0x170A
20:21:26.157    ComputerName: OWNER-PC UserName: Owner
20:21:32.538    Initialize success
20:21:33.755    VM: initialized successfully
20:21:33.770    VM: Intel CPU supported
20:21:44.217    VM: supported disk I/O ataport.SYS
20:35:03.878    AVAST engine defs: 15070200
20:35:43.003    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
20:35:43.003    Disk 0 Vendor: WDC_WD10EADS-00M2B0 01.00A01 Size: 953868MB BusType: 3
20:35:43.112    VM: Disk 0 MBR read successfully
20:35:43.112    Disk 0 MBR scan
20:35:43.205    Disk 0 Windows 7 default MBR code
20:35:43.205    Disk 0 Partition 1 80 (A) 07      HPFS/NTFS NTFS       953866 MB offset 2048
20:35:43.237    Disk 0 default boot code
20:35:43.268    Disk 0 scanning sectors +1953519616
20:35:43.424    Disk 0 scanning C:\Windows\system32\drivers
20:35:58.150    Service scanning
20:36:10.583    Service MpKslec8ed3d8 c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{91E5326D-D574-4458-BA3F-245E969044B8}\MpKslec8ed3d8.sys **LOCKED** 32
20:36:28.617    Modules scanning
20:36:28.617    Disk 0 trace - called modules:
20:36:28.633    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys
20:36:28.633    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85c73880]
20:36:28.633    3 CLASSPNP.SYS[8939159e] -> nt!IofCallDriver -> [0x857a4918]
20:36:28.648    5 ACPI.sys[88c173d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x857c1030]
20:36:33.203    AVAST engine scan C:\Windows
20:36:45.683    AVAST engine scan C:\Windows\system32
20:40:18.265    AVAST engine scan C:\Windows\system32\drivers
20:40:37.235    AVAST engine scan C:\Users\Owner
20:46:07.659    AVAST engine scan C:\ProgramData
20:48:40.742    Disk 0 statistics 3309302/0/270 @ 4.10 MB/s
20:48:40.757    Scan finished successfully
20:50:48.662    Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat"
20:50:48.693    The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

#7
Ricky_22

Posted 02 July 2015 - 07:04 AM

Member

Topic Starter
Member
349 posts

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-06-2015 01
Ran by Owner (administrator) on OWNER-PC on 02-07-2015 21:12:52
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4915200 2008-02-13] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
Winlogon\Notify\!SASWinLogon: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [X]
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-754179056-1382982999-2036298953-1000\...\Run: [RoboForm] => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-06-26] (Siber Systems)
BootExecute: dfboottime \??\C:\Windows\System32\dfboottime.cfgautocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-754179056-1382982999-2036298953-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.co...q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {203A9549-7B06-4E7C-AE56-E4CA0D24AD4C} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {A10DB92A-868F-465D-A02D-318698A6C189} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {B157E6A5-6063-4608-85AB-AA683985F058} URL = https://www.google.c...?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28] (CANON INC.)
BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{246842DE-797F-4BF9-9856-10622A84D292}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{AF11A9A5-305F-4BAA-B81A-A5817B67F463}: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2571 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.1739 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-02-01]

Chrome:
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-11]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-11]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-11]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-11]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-11]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-12]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-11]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-11]
CHR Extension: (No Name) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2015-05-11]
CHR HKLM\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - https://clients2.goo...ice/update2/crx
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-03-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-05-14] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 2WIREPCP; C:\Windows\System32\DRIVERS\2WirePCP.sys [60768 2007-03-23] (2Wire, Inc.) [File not signed]
R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [32896 2011-11-28] (AnvSoft Inc.) [File not signed]
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-11-05] (AVG Technologies)
S3 gdrv; C:\Windows\gdrv.sys [16608 2010-02-01] (Windows ® 2000 DDK provider)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKslec8ed3d8; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{91E5326D-D574-4458-BA3F-245E969044B8}\MpKslec8ed3d8.sys [39168 2015-07-02] (Microsoft Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2010-02-03] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2015-06-25] ()
S3 U2800Vid; C:\Windows\System32\DRIVERS⠀Vid.sys [347904 2009-08-19] (Compro Technology, Inc.)
S3 cpuz134; \??\C:\Users\Owner\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S3 MREMP50; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [X]
S3 MRESP50; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [X]
U3 aswMBR; \??\C:\Users\Owner\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\Owner\AppData\Local\Temp\aswVmm.sys [X]

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\2WirePCP.sys E1C786DAE44855D00DB51E0C13C0AA97
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys D0B388DA1D111A34366E04EB4A5DD156
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\atikmdag.sys F89643A2CA001B1162061E306F8BF267
C:\Windows\System32\DRIVERS\atikmpag.sys FB68E1B9CEC598F0F69503F3AEBB45DD
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2
C:\Windows\System32\drivers\anvsnddrv.sys EFA78DCA6DE1B9E5DFA1834AD9DD6B20
C:\Windows\system32\drivers\appid.sys 81F97D8F8B3FB94A451CC6F7CF8B2965
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athr.sys 76BAB0C824E2D05B940C4DD40A9B08BF
C:\Windows\system32\drivers\avgtpx86.sys 57D83B82117C2DDB9D7E9AEA691CEDFC
C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\cdrom.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys 33A60554882FDF59CDA3E1806370BBA1
C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 3051724F223EA48968B19567DE2A81F4
C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Dot4.sys B5E479EB83707DD698F66953E922042C
C:\Windows\System32\DRIVERS\Dot4Prt.sys CAEFD09B6A6249C53A67D55A9A9FCABF
C:\Windows\System32\DRIVERS\dot4usb.sys CF491FF38D62143203C065260567E2F7
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 3583A5A8CC2E682BFFBD4630D0FEC08B
C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\system32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\system32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 is legitB
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fssfltr.sys 2ED0BABD4CD98ED820FD0D0BCBE96721
C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05
C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit
C:\Windows\gdrv.sys 5C230948DD6652228F88CA7AE6CB276C
C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 185ADA973B5020655CEE342059A86CBB
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972
C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys 487569E5DA56A5A432FF8AF6D3599CF9
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys 5CD5F9A5444E6CDCB0AC89BD62D8B76E
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHDA.sys 7374C8A1E7EFBF15A2C2A681F3EF0C69
C:\Windows\System32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys EB34CE31FABD4DC4343FD2AD16D2CAF9
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 3C9D9DFCF517103677D7B6255C727B48
C:\Windows\System32\Drivers\ksecpkg.sys 0DFC56491C8B56A35AD52EAF770752FE
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mbam.sys AB73A39A5E45F465B02C11C500BB0278
C:\Windows\system32\drivers\mwac.sys 2A1B51A1FE8DC4DC0D52EC700CB02CEF
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys 644905A19D0F37F2233DFCE53BC4BC19
C:\Windows\System32\DRIVERS\MpFilter.sys F112DA773EC3E9D3CDE9221ED300E033
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{91E5326D-D574-4458-BA3F-245E969044B8}\MpKslec8ed3d8.sys BB7BB66A8DAF16950F83AE7BF498AF8F
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 03F899F521D2AAED1C55008F734DF252
C:\Windows\System32\DRIVERS\mrxsmb.sys 5D16C921E3671636C0EBA3BBAAC5FD25
C:\Windows\System32\DRIVERS\mrxsmb10.sys 6D17A4791ACA19328C685D256349FEFC
C:\Windows\System32\DRIVERS\mrxsmb20.sys B81F204D146000BE76651A50670A5E9E
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\system32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 8C9C922D71F1CD4DEF73F186416B7896
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\system32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\NisDrvWFP.sys 780FF28BCD8470C5FDDEEF69982AA295
C:\Windows\system32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Ntfs.sys C8DFF8D07755A66C7A4A738930F0FEAC
C:\Windows\system32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0
C:\Windows\system32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B
C:\Windows\System32\DRIVERS\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys AEBC369F7DC72AB3F5B9BDF34FA0D43F
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 65375DF758CA1872AB7EBBBA457FD5E6
C:\Windows\system32\Drivers\RDPWD.sys CD9214A6AE17D188D17C3CF8CB9CC693
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\revoflt.sys B9BB8E2093C1615AD6EA55AD96214354
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rtlh86.sys B7E1C523E2F7787D700766FC78E01F77
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\system32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\system32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\Drivers\sptd.sys 71E276F6D189413266EA22171806597B
C:\Windows\System32\DRIVERS\srv.sys E4C2764065D66EA1D2D3EBC28FE99C46
C:\Windows\System32\DRIVERS\srv2.sys 03F0545BD8D4C77FA0AE1CEEDFCC71AB
C:\Windows\System32\DRIVERS\srvnet.sys BE6BD660CAA6F291AE06A718A4FA8ABC
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\SWDUMon.sys 2C90F452B545C0534BA56FA75EF4E2CD
C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 5579DD18546999F5D0EC39D018726C6B
C:\Windows\System32\DRIVERS\tcpip.sys 5579DD18546999F5D0EC39D018726C6B
C:\Windows\System32\drivers\tcpipreg.sys 3EEBD3BD93DA46A26E89893C7AB2FF3B
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8
C:\Windows\System32\DRIVERS\tdx.sys 7FE680A3DFA421C4A8E4879AE4C5AAB0
C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys 6C5139E4283249518F7743D7043775B3
C:\Windows\System32\drivers\tsusbflt.sys C6A5FBD4977305E1FA23E02C042DB463
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS⠀Vid.sys 642FBF835BD54473EA20DB4995A04D2F
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys 0803FBA9FE829D61AE26EC0BCC910C46
C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041
C:\Windows\System32\DRIVERS\usbehci.sys D40855F89B69305140BBD7E9A3BA2DA6
C:\Windows\System32\DRIVERS\usbhub.sys EDF2DF71C4F1E13A6AC75F5224DE655A
C:\Windows\system32\drivers\usbohci.sys 9828C8D14CC2676421778F0DE638CF97
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys FC6B21DB4B5B398AB93DBE59CBF11036
C:\Windows\System32\DRIVERS\USBSTOR.SYS F991AB9CC6B908DB552166768176896A
C:\Windows\System32\DRIVERS\usbuhci.sys 800AABFD625EEFF899F7E5496BDE37AB
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 7090D3436EEB4E7DA3373090A23448F7
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-02 21:12 - 2015-07-02 21:13 - 00029235 _____ C:\Users\Owner\Desktop\FRST.txt
2015-07-02 21:11 - 2015-07-02 21:11 - 01636352 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2015-07-02 20:50 - 2015-07-02 20:50 - 00002299 _____ C:\Users\Owner\Desktop\aswMBR.txt
2015-07-02 20:50 - 2015-07-02 20:50 - 00000512 _____ C:\Users\Owner\Desktop\MBR.dat
2015-07-02 20:16 - 2015-07-02 20:16 - 05200384 _____ (AVAST Software) C:\Users\Owner\Desktop\aswmbr.exe
2015-07-02 20:15 - 2015-07-02 21:11 - 00000000 ____D C:\Users\Owner\AppData\Roaming\BitComet
2015-07-02 11:57 - 2015-07-02 14:12 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-07-02 09:47 - 2015-07-02 09:47 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Google
2015-07-02 09:32 - 2015-07-02 11:34 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-30 19:23 - 2015-07-02 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet
2015-06-30 19:23 - 2015-07-02 14:12 - 00000000 ____D C:\Program Files\BitComet
2015-06-30 19:23 - 2015-06-30 19:23 - 00000925 _____ C:\Users\Public\Desktop\BitComet.lnk
2015-06-29 22:42 - 2015-07-02 14:14 - 00223328 _____ C:\Windows\setupact.log
2015-06-29 22:42 - 2015-06-29 22:42 - 00000000 _____ C:\Windows\setuperr.log
2015-06-28 15:18 - 2015-06-28 15:18 - 65485636 _____ C:\Users\Owner\Documents\Pianist and singer Isaac melts the Judges' hearts _ Britain's Got Talent 2015.mp4
2015-06-28 15:16 - 2015-06-28 15:16 - 48641146 _____ C:\Users\Owner\Documents\Musician Isaac Waddington can't make you love him _ Semi-Final 4 _ Britain's Got Talent 2015.mp4
2015-06-28 15:09 - 2015-06-28 15:09 - 55459990 _____ C:\Users\Owner\Documents\Britain's Got Talent 2015 S09E03 Isaac Waddington Sings Heartfelt Rendition of She's Always A Woman.mp4
2015-06-27 03:42 - 2015-06-27 03:42 - 00000119 _____ C:\Users\Owner\Documents\email adds.txt
2015-06-26 20:47 - 2015-06-26 20:47 - 00000543 _____ C:\Users\Owner\Documents\my gov user name.txt
2015-06-26 20:04 - 2015-07-02 21:12 - 00000000 ____D C:\FRST
2015-06-26 13:09 - 2015-06-26 13:09 - 00000286 _____ C:\Users\Owner\Documents\cc_20150626_130859.reg
2015-06-26 09:24 - 2015-06-26 09:24 - 00011782 _____ C:\Users\Owner\Documents\cc_z20150626_092343.reg
2015-06-25 18:20 - 2015-06-03 03:35 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-25 18:20 - 2015-05-26 01:00 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-25 18:20 - 2015-05-23 11:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-25 18:20 - 2015-05-23 11:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-25 18:20 - 2015-05-23 11:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-25 18:20 - 2015-05-23 11:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-25 18:20 - 2015-05-23 11:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-25 18:20 - 2015-05-23 11:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-25 18:20 - 2015-05-23 11:05 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-25 18:20 - 2015-05-23 11:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-25 18:20 - 2015-05-23 11:00 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-25 18:20 - 2015-05-23 10:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-25 18:20 - 2015-05-23 10:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-25 18:20 - 2015-05-23 10:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-25 18:20 - 2015-05-23 10:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-25 18:20 - 2015-05-23 02:03 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 18:20 - 2015-05-23 01:58 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 18:20 - 2015-05-21 21:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 18:19 - 2015-05-27 22:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-25 18:19 - 2015-05-23 11:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-25 18:19 - 2015-05-23 11:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-25 18:19 - 2015-05-23 11:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-25 18:19 - 2015-05-23 11:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-25 18:19 - 2015-05-23 11:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-25 18:19 - 2015-05-23 11:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-25 18:19 - 2015-05-23 11:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-25 18:19 - 2015-05-23 10:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-25 18:19 - 2015-05-23 10:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-25 18:19 - 2015-05-23 10:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-25 18:19 - 2015-05-23 10:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-25 18:19 - 2015-05-23 10:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-25 18:19 - 2015-05-23 10:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-25 18:17 - 2015-05-26 02:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-25 18:17 - 2015-05-26 02:07 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-25 18:17 - 2015-05-26 02:04 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-25 18:17 - 2015-05-26 02:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-25 18:17 - 2015-05-26 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-25 18:17 - 2015-05-26 01:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-25 18:17 - 2015-05-26 00:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-25 18:12 - 2015-05-09 11:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-25 18:12 - 2015-05-09 11:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-25 18:12 - 2015-05-09 11:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-25 18:12 - 2015-04-30 02:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-25 18:11 - 2015-05-09 11:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-25 18:11 - 2015-04-25 01:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-20 05:53 - 2015-06-20 05:53 - 00002732 _____ C:\Users\Owner\Documents\collabro.txt
2015-06-19 14:39 - 2015-06-19 14:39 - 00000000 ____D C:\eb3fe3f8d4cd1ec3b5e698b3
2015-06-17 07:02 - 2015-06-17 07:02 - 00000468 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2015-06-15 22:48 - 2015-06-26 20:45 - 00000187 _____ C:\Users\Owner\Documents\Incredimail licence.txt
2015-06-14 06:45 - 2015-06-14 06:45 - 36382247 _____ C:\Users\Owner\Documents\One direction - No control (Music video).mp4
2015-06-13 20:51 - 2015-06-13 20:51 - 00004032 _____ C:\Users\Owner\Documents\stere kicks.txt
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Windows\MATS
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Program Files\Microsoft Fix it Center
2015-06-12 13:23 - 2015-06-12 13:23 - 00000017 _____ C:\Users\Owner\AppData\Local\resmon.resmoncfg
2015-06-06 08:52 - 2015-06-06 08:52 - 00000300 _____ C:\Users\Owner\Documents\cc_20150606_085234.reg
2015-06-05 15:50 - 2015-06-05 15:50 - 00001957 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail.lnk
2015-06-05 15:50 - 2015-06-05 15:50 - 00001945 _____ C:\Users\Public\Desktop\IncrediMail.lnk
2015-06-04 04:04 - 2015-06-04 04:04 - 00006628 _____ C:\Users\Owner\Documents\cc_20150604_040408.reg

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-02 14:30 - 2014-07-16 07:39 - 01943626 _____ C:\Windows\WindowsUpdate.log
2015-07-02 14:29 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-02 14:29 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-02 14:14 - 2011-07-16 00:48 - 00000000 ____D C:\Users\Owner
2015-07-02 14:14 - 2009-07-14 12:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-02 14:13 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\wfp
2015-07-02 14:12 - 2015-04-06 23:47 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-02 14:12 - 2010-02-01 13:26 - 00000000 ____D C:\Windows\system32\Macromed
2015-07-02 14:12 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\NDF
2015-07-02 14:12 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\registration
2015-07-02 14:11 - 2015-05-31 04:18 - 00000000 ____D C:\ProgramData\Google
2015-07-02 14:11 - 2011-11-17 02:19 - 00000000 ____D C:\Program Files\Google
2015-07-02 14:11 - 2010-02-03 01:04 - 00000000 ____D C:\Users\Owner\AppData\Local\Google
2015-07-02 11:57 - 2010-02-02 13:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-02 04:33 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-07-01 06:54 - 2015-02-08 08:41 - 00013824 ___SH C:\Users\Owner\AppData\Thumbs.db
2015-06-26 13:20 - 2015-01-22 19:36 - 00000000 ____D C:\Users\Owner\Desktop\Receipts
2015-06-26 12:53 - 2012-11-29 03:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2015-06-26 09:34 - 2015-01-29 05:27 - 00000000 ____D C:\Users\Owner\Desktop\Autoruns
2015-06-26 09:23 - 2015-01-19 04:44 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps
2015-06-26 09:21 - 2015-05-31 05:51 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-06-26 09:21 - 2015-05-31 05:51 - 00000000 ____D C:\Program Files\CCleaner
2015-06-26 02:00 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\rescache
2015-06-26 00:22 - 2014-11-13 03:30 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieBrowserModeList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieUserList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieSiteList
2015-06-26 00:20 - 2011-07-16 01:37 - 00781346 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-26 00:14 - 2009-07-14 12:33 - 00269880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-26 00:11 - 2014-05-07 03:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 00:10 - 2014-12-11 03:18 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 23:56 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 23:50 - 2011-08-12 14:59 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-25 23:37 - 2015-05-31 04:19 - 00002091 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\Realtek
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\InstallShield Installation Information
2015-06-25 17:42 - 2011-11-11 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-06-25 17:38 - 2010-02-01 13:27 - 00000000 ____D C:\Program Files\DIFX
2015-06-25 17:34 - 2014-05-01 09:45 - 00013464 _____ C:\Windows\system32\Drivers\SWDUMon.sys
2015-06-25 17:11 - 2015-05-31 04:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-25 17:11 - 2010-11-29 10:45 - 00000000 ____D C:\Users\Owner\AppData\Roaming\vlc
2015-06-25 17:11 - 2010-02-01 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2015-06-25 17:11 - 2009-07-14 12:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-25 17:10 - 2010-02-01 19:31 - 00000000 ____D C:\Users\Owner\AppData\Local\IM
2015-06-25 17:10 - 2009-07-14 10:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-24 07:19 - 2015-01-21 02:02 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-22 02:52 - 2011-07-30 19:29 - 00000000 ____D C:\Windows\Minidump
2015-06-19 17:33 - 2015-02-17 09:21 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2015-06-12 14:39 - 2015-04-15 13:28 - 00338620 _____ C:\Users\Owner\AppData\Local\census.cache
2015-06-12 14:39 - 2015-04-15 13:28 - 00146372 _____ C:\Users\Owner\AppData\Local\ars.cache
2015-06-07 20:02 - 2015-04-09 08:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-07 16:41 - 2015-01-16 16:04 - 00000281 _____ C:\DelFix.txt
2015-06-07 03:51 - 2009-07-14 12:53 - 00032626 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2015-04-07 22:44 - 2015-04-07 23:06 - 0000115 _____ () C:\Users\Owner\AppData\Roaming\LogFile.txt
2013-04-01 19:07 - 2013-04-01 19:07 - 0026108 _____ () C:\Users\Owner\AppData\Roaming\UserTile.png
2015-04-07 21:45 - 2015-05-07 03:27 - 0000436 _____ () C:\Users\Owner\AppData\Roaming\Weather Meter_Settings.ini
2015-04-15 13:28 - 2015-06-12 14:39 - 0146372 _____ () C:\Users\Owner\AppData\Local\ars.cache
2015-04-15 13:28 - 2015-06-12 14:39 - 0338620 _____ () C:\Users\Owner\AppData\Local\census.cache
2014-09-11 19:44 - 2014-09-11 19:44 - 0003584 _____ () C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-15 08:28 - 2015-04-15 08:28 - 0000036 _____ () C:\Users\Owner\AppData\Local\housecall.guid.cache
2015-06-12 13:23 - 2015-06-12 13:23 - 0000017 _____ () C:\Users\Owner\AppData\Local\resmon.resmoncfg
2014-02-11 09:56 - 2015-01-22 05:42 - 0010278 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-06-23 11:39

==================== End of log ============================

#8
Ricky_22

Posted 02 July 2015 - 07:17 AM

Member

Topic Starter
Member
349 posts

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-06-2015 01
Ran by Owner at 2015-07-02 21:13:13
Running from C:\Users\Owner\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
Adobe Acrobat 4.0 (HKLM\...\Adobe Acrobat 4.0) (Version: 4.0 - Adobe Systems, Inc.)
Any Video Converter 5.7.3 (HKLM\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Any Video Converter Ultimate 4.6.0 (HKLM\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
Ashampoo Burning Studio 14 (HKLM\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 8.09 (HKLM\...\Ashampoo Burning Studio 8_is1) (Version: 8.0.9 - ashampoo GmbH & Co. KG)
BitComet 1.38 (HKLM\...\BitComet) (Version: 1.38 - CometNetwork)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
Canon Easy-WebPrint EX (HKLM\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.00 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM\...\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows (HKLM\...\{75B61CF0-B8A8-46E2-8709-C4A79898AC1D}) (Version: 1.17 - Western Digital Corporation)
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
Easy Thumbnails (Remove only) (HKLM\...\Easy Thumbnails_is1) (Version: 3.0 - Fookes Software)
Go PDF Reader (HKLM\...\GoPDFReader) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
IncrediMail (Version: 6.6.0.5288 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5288 - IncrediMail Ltd.)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Calculator Plus (HKLM\...\{83073C45-3003-4671-9A86-243AAADD915A}) (Version: 1.0.0 - Microsoft)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PhotoMail Maker (Version: 6.0.0.1007 - IncrediMail) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - )
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
RoboForm 7-9-14-4 (All Users) (HKLM\...\AI RoboForm) (Version: 7-9-14-4 - Siber Systems)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.4 - Krzysztof Kowalczyk)
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 Upgrade Advisor (HKLM\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
YTD Video Downloader 4.9 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

14-06-2015 06:50:48 Windows Update
17-06-2015 12:35:14 Windows Update
19-06-2015 03:20:39 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 8
19-06-2015 03:25:38 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
19-06-2015 13:49:04 Restore Operation
19-06-2015 14:28:39 Windows Update
19-06-2015 15:19:02 Windows Update
21-06-2015 14:31:04 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
21-06-2015 14:37:29 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
23-06-2015 09:51:10 Windows Update
25-06-2015 07:00:20 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
25-06-2015 07:04:38 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 07:08:54 Revo Uninstaller Pro's restore point - BitComet 1.38
25-06-2015 07:11:05 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 10:47:14 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 10:49:51 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 15:12:51 Restore Operation
25-06-2015 17:27:17 Revo Uninstaller Pro's restore point - My Online Toolkit
25-06-2015 17:30:08 Revo Uninstaller Pro's restore point - MpcStar 5.3
25-06-2015 17:34:03 Installed DriverUpdate
25-06-2015 17:36:44 Revo Uninstaller Pro's restore point - Windows Driver Package - 2Wire (2WIREPCP) Net (03/22/2007 2.0)
25-06-2015 17:38:48 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 17:41:09 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 17:42:37 Revo Uninstaller Pro's restore point - DriverUpdate
25-06-2015 17:42:59 Removed DriverUpdate
25-06-2015 17:44:59 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 17:46:26 Revo Uninstaller Pro's restore point - Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
25-06-2015 17:57:25 Windows Update
25-06-2015 23:49:08 Windows Update
29-06-2015 12:44:56 Windows Update
01-07-2015 05:21:55 Revo Uninstaller Pro's restore point - BitComet 1.38
02-07-2015 09:34:00 avast! antivirus system restore point
02-07-2015 11:22:14 Revo Uninstaller Pro's restore point - Avast Free Antivirus
02-07-2015 11:26:29 Revo Uninstaller Pro's restore point - Avast Free Antivirus
02-07-2015 11:27:28 avast! antivirus system restore point
02-07-2015 14:09:22 Restore Operation
02-07-2015 14:26:52 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 18:23 - 2006-09-19 05:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DC0B543-5117-4B29-8FDD-6B8D699FB33B} - System32\Tasks\{FB687851-6320-4D70-A607-9ED3EA25F95F} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {1260FC21-28CB-409A-AFE8-4A8B73884E21} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....IGJKJMIBNKJHIKJ"
Task: {14FF1700-BA4C-4FC0-A89D-96D97D103D00} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....NNICMJNDJCMKJBJ"
Task: {1946ADEB-A7AD-4E17-9A7F-E9280DA1CC6A} - System32\Tasks\{54FFE30A-7439-482D-8E6F-497ABD851E8D} => C:\Program Files\Microsoft Silverlight\5.1.40416.0\Silverlight.Configuration.exe [2015-04-15] (Microsoft Corporation)
Task: {19C01C1D-48C6-46DB-9111-9A2A9D2ACBED} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Owner logon => C:\Program Files\Auslogics\BoostSpeed\BoostSpeed.exe
Task: {1C4A8493-30A2-47E5-9BE8-C1D793217A0D} - System32\Tasks\{C7C592A1-4609-49D9-8CAB-B26A0395DBCE} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {21E9703A-B00E-4010-811A-36A6A6E08D9B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {27039341-AF5E-4AA3-8019-9D360F4811AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-02] (Piriform Ltd)
Task: {3043F7F1-BD5D-4537-9DAD-CDDE8B72A895} - System32\Tasks\{DED62F59-5C9E-4A85-8440-E42E28096822} => C:\Users\Owner\Downloads\OneDriveSetup.exe
Task: {45B44DE6-0F07-4F6E-9B58-1770136EC6A9} - System32\Tasks\IHUninstallTrackingTASK => CMD
Task: {4B39CC67-88E0-42F3-9EEB-BE01803A9BA9} - System32\Tasks\{F4C92BD5-C5A1-4437-AAC2-A55EBA33700D} => C:\Program Files\BitComet\BitComet.exe [2015-03-30] (www.BitComet.com)
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {56D3ABCE-0501-46AD-8FFF-C6F0785C6142} - System32\Tasks\{04EB4926-E829-487F-A4A3-F39F51CB7E1E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {662D36BA-5126-470B-93F1-C778D97D1541} - System32\Tasks\{5D97E633-0979-482E-A862-CD2D354C08F3} => C:\Program Files\PeerBlock\peerblock.exe
Task: {6F10174E-7813-4D82-8392-41E4C0F07EC9} - System32\Tasks\{8B5D59BA-6195-43B8-84B0-76396BA7F967} => pcalua.exe -a C:\Users\Owner\Downloads\Applications-programs\wlsetup-web.exe -d C:\Users\Owner\Downloads\Applications-programs
Task: {71337097-9F94-454C-94E3-6FD30106B933} - \PC TuneUp Maestro Startup No Task File <==== ATTENTION
Task: {76121EEE-434C-42DF-AC87-7EB6999EFA2E} - System32\Tasks\Google Update => C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {7F86EC89-2379-40C3-BF09-88524471D169} - System32\Tasks\{6ABA9986-39C4-4B3E-93C5-974D78626616} => C:\Program Files\PeerBlock\peerblock.exe
Task: {82A24E69-122A-4F51-B583-A348C7372769} - System32\Tasks\{2962B57C-4766-426A-8887-D12E28116F4B} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {8988B3B0-EF01-4FC2-8D61-C20A0C40EE29} - System32\Tasks\{EF80D55A-55E2-4909-AFCB-8CC9B9AC6FF5} => pcalua.exe -a D:\AutoRunPro.exe -d D:\
Task: {92672263-E352-43F9-94CC-2FB6436D6351} - System32\Tasks\{D5C773BB-EDAA-434D-84F5-BAFDD84D48C6} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {A2A18C4E-47D9-43CF-A655-070DCED2F16C} - System32\Tasks\{BA1F71DD-E433-457D-808E-DEE68AA0A978} => C:\Program Files\PeerBlock\peerblock.exe
Task: {ABA65842-BE6F-4CFB-8112-13781F34B3D5} - System32\Tasks\{0368CC1F-3E0C-49C3-9E79-F6923D8A3D4E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {B3C0CC0A-A52B-43D4-83F9-319AB1AB2F13} - System32\Tasks\{13E4E255-40ED-4E85-A5BB-3CF5AAB139D0} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B6893B4B-20AA-4829-A509-7ADC1620747B} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {B923A9D4-92E8-4C37-8BF2-87B375365D60} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"
Task: {BB4D7F4C-5DF5-4F47-BD33-CF71A35D2D87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {BBBAC0F0-1E55-4F45-953E-ADC4A1C6253F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-06-26] (Siber Systems)
Task: {BF95D427-4AA6-4CD3-AFE4-20795D2A668A} - System32\Tasks\{91B9C5A7-30E2-4EF3-A54B-EE275C8D90F3} => C:\Program Files\BitComet\BitComet.exe [2015-03-30] (www.BitComet.com)
Task: {DDB87CEA-DAEF-4B84-9B1F-52D4370730F4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-31] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {E6934196-7C8F-4304-BD9A-B013A451D3CB} - System32\Tasks\{BEEFDE71-9ADA-4208-AFA6-8591F44844C2} => pcalua.exe -a C:\Users\Owner\Downloads\pctum_setup_dmp_.exe -d C:\Users\Owner\Downloads
Task: {F141A988-0079-4D2B-A455-03886C5FBED7} - System32\Tasks\{A5FB1139-C3BA-43CB-B27B-EF5EF604DBFA} => C:\Program Files\PeerBlock\peerblock.exe
Task: {F4711B03-C555-43F9-8896-D90E8FD6D1D3} - System32\Tasks\{ADFFAF74-7253-4F28-A492-3BD29A94D612} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {FAE80FFA-2754-4FCF-A51D-945991F8B0F9} - System32\Tasks\{3BF27CA2-D8CC-48B6-98DC-2B89B8593AEC} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Loaded Modules (Whitelisted) ==============

2010-02-01 12:20 - 2007-05-14 10:54 - 00272024 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe
2015-06-05 15:47 - 2015-06-05 15:47 - 00033128 _____ () C:\Program Files\IncrediMail\Bin\IMHttpComm.dll
2015-06-05 15:47 - 2015-06-05 15:47 - 00072104 _____ () C:\Program Files\IncrediMail\Bin\wlessfp1.dll
2015-06-05 15:47 - 2015-06-05 15:47 - 00272808 _____ () C:\Program Files\IncrediMail\Bin\ImLookExU.dll
2015-06-05 15:47 - 2015-06-05 15:47 - 00080296 _____ () C:\Program Files\IncrediMail\bin\ImAppRU.dll
2015-06-05 15:47 - 2015-06-05 15:47 - 00133544 _____ () C:\Program Files\IncrediMail\Bin\ImComUtlU.dll
2015-06-05 15:47 - 2015-06-05 15:47 - 00108888 _____ () C:\Program Files\IncrediMail\Bin\pmc.dll