[bluEhawK11]

Dell computer, 64bit, running Windows VISTA.

 

For all files, on the desktop or in a folder, the name displayed is the date/time the file was created and NOT the file name. If I right click on the file and choose "Properties" and "General" the correct file name is shown, but on the desktop and in the folder display the file name does not show, only the date/time.

 

I was running AVG free virus protection, but when I first noticed the virus I also noticed the AVG virus protection was disabled for some reason (I did not disable it). I attempted repairing AVG, but it would not let me. So, I did uninstall AVG and then it would not let me re-install AVG. So, I installed AVAST, and ran a scan, but AVAST says there is no virus found.

 

Thank you for your help.

 

 

--

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-10-2015 01

Ran by Melissa Copy (administrator) on FREEDOM (22-10-2015 17:14:32)

Running from C:\Users\Melissa Copy\Desktop

Loaded Profiles: Melissa Copy (Available Profiles: Carolyn & Melissa Copy & Carrie Copy)

Platform: Windows Vista ™ Home Premium Service Pack 2 (X64) Language: English (United States)

Internet Explorer Version 9 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Andrea Electronics Corporation) C:\Windows\System32\AERTSr64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

( ) C:\Windows\System32\dlcccoms.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Verizon) C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Viewpoint Corporation) C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(Realtek Semiconductor) C:\Windows\RAVCpl64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe

(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\HP Software Update\hpwuSchd2.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\gs_agent\dsc.exe

(SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe

(Verizon) C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\VzDetectAgent.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe

 

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6453760 2008-07-18] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] => Skytel.exe

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Dell DataSafe Online] => "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m

HKLM-x32\...\Run: [DellSupportCenter] => C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2008-12-16] (SupportSoft, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)

HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

HKLM-x32\...\Run: [Verizon Custom Uninstall Tracking] => C:\Users\Carolyn\AppData\Local\Temp\InstallHelper.exe /uninstalltrackingvendor=Verizon <===== ATTENTION

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-08-26] (AVAST Software)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-18\...\RunOnce: [{91120000-0030-0000-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-26] (AVAST Software)

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Melissa Copy\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll No File

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Melissa Copy\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll No File

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Melissa Copy\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll No File

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2009-10-18]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\Users\Carolyn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-22]

ShortcutTarget: Dropbox.lnk -> C:\Users\Melissa Copy\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)

Startup: C:\Users\Carolyn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iCloud - Shortcut.lnk [2012-04-05]

ShortcutTarget: iCloud - Shortcut.lnk ->  (No File)

Startup: C:\Users\Carrie Copy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk [2009-10-04]

ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-03-26]

ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-03-26]

ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

Startup: C:\Users\Melissa Copy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk [2009-10-04]

ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{DFE1ACB4-0463-4F74-80B1-0F1831EBA302}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yahoo.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yahoo.com

SearchScopes: HKLM-x32 -> {0B4A10D1-FBD6-451d-BFDA-F03252B05984} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&query={searchTerms}&invocationType=tb50trie7

SearchScopes: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&Form=DLCDF7&pc=MDDC&src={referrer:source?}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-26] (AVAST Software)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19] (Google Inc.)

BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-06-21] (Sun Microsystems, Inc.)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-26] (AVAST Software)

BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19] (Google Inc.)

BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-07-01] (Skype Technologies S.A.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-06-21] (Sun Microsystems, Inc.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19] (Google Inc.)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-19] (Google Inc.)

Toolbar: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-19] (Google Inc.)

Toolbar: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001 -> No Name - {61539ECD-CC67-4437-A03C-9AACCBD14326} -  No File

Toolbar: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File

DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-07-01] (Skype Technologies S.A.)

 

FireFox:

========

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [No File]

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-10-01] ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-02-18] (DivX,Inc.)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll [2012-06-21] (Sun Microsystems, Inc.)

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-06-21] (Sun Microsystems, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-04] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)

FF Plugin-x32: @unity3d.com/UnityPlayer -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll [2009-03-17] (Unity Technologies ApS)

FF Plugin-x32: @viewpoint.com/VMP -> C:\Program Files (x86)\Viewpoint\Viewpoint Media Player\npViewpoint.dll [2007-04-16] ()

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-26] (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-02] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-08-26] [not signed]

 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Profile: C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-22]

CHR Extension: (Google Docs) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-22]

CHR Extension: (Google Drive) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]

CHR Extension: (YouTube) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-22]

CHR Extension: (Google Search) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-22]

CHR Extension: (Avast SafePrice) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-10-22]

CHR Extension: (Google Sheets) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-22]

CHR Extension: (Google Docs Offline) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-22]

CHR Extension: (Avast Online Security) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-22]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-22]

CHR Extension: (Gmail) - C:\Users\Melissa Copy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-22]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-26]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-26]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AERTFilters; C:\Windows\system32\AERTSr64.exe [86016 2008-07-18] (Andrea Electronics Corporation)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-26] (AVAST Software)

R2 dlcc_device; C:\Windows\system32\dlcccoms.exe [566768 2007-02-14] ( )

R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-09-23] (Stardock Corporation) [File not signed]

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [225280 2007-03-13] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-03-13] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [843264 2006-12-10] (Hewlett-Packard Co.) [File not signed]

R2 IHA_MessageCenter; C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [363128 2015-01-27] (Verizon) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [69632 2006-11-08] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [88064 2006-11-08] (Hewlett-Packard) [File not signed]

R2 Viewpoint Manager Service; C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe [24652 2007-01-04] (Viewpoint Corporation) [File not signed]

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-20] (Microsoft Corporation)

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-26] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-26] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [64712 2015-08-26] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-26] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-26] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-26] (AVAST Software)

R3 aswStmXP; C:\Windows\system32\drivers\aswStmXP.sys [210936 2015-08-26] (AVAST Software)

S3 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65224 2015-08-26] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-26] (AVAST Software)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-22] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

S3 PCD5SRVC{048DBD20-445E8C82-05040000}; \??\C:\PROGRA~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms [X]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-10-22 17:14 - 2015-10-22 17:15 - 00021558 _____ C:\Users\Melissa Copy\Desktop\FRST.txt

2015-10-22 17:12 - 2015-10-22 17:12 - 02196480 _____ (Farbar) C:\Users\Melissa Copy\Downloads\FRST64 (1).exe

2015-10-22 17:12 - 2015-10-22 17:12 - 02196480 _____ (Farbar) C:\Users\Melissa Copy\Desktop\FRST64.exe

2015-10-22 17:11 - 2015-10-22 17:11 - 02196480 _____ (Farbar) C:\Users\Melissa Copy\Downloads\FRST64.exe

2015-10-22 16:24 - 2015-10-22 17:07 - 00001987 _____ C:\Users\Melissa Copy\Desktop\Google Chrome.lnk

2015-10-22 16:24 - 2015-10-22 16:25 - 00000941 _____ C:\Users\Melissa Copy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-10-22 14:46 - 2015-10-22 14:47 - 00000000 ____D C:\Users\Carolyn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-10-14 03:03 - 2015-07-18 09:14 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00015200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00015200 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-10-14 03:03 - 2015-07-18 09:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-10-14 03:02 - 2015-07-28 20:46 - 11588096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-10-14 03:02 - 2015-07-28 20:31 - 12901888 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-10-14 03:00 - 2015-09-28 13:21 - 01586304 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-10-14 03:00 - 2015-09-28 13:21 - 01168600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-10-14 03:00 - 2015-09-26 12:03 - 04690880 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-10-13 15:54 - 2015-09-11 03:59 - 17890816 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-10-13 15:54 - 2015-09-11 03:56 - 02349568 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-10-13 15:54 - 2015-09-11 03:52 - 10936832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-10-13 15:54 - 2015-09-11 03:51 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-10-13 15:54 - 2015-09-11 03:51 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-10-13 15:54 - 2015-09-11 03:50 - 02158080 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-10-13 15:54 - 2015-09-11 03:50 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-10-13 15:54 - 2015-09-11 03:50 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-10-13 15:54 - 2015-09-11 03:49 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-10-13 15:54 - 2015-09-11 03:49 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-10-13 15:54 - 2015-09-11 03:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-10-13 15:54 - 2015-09-11 03:49 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-10-13 15:54 - 2015-09-11 03:49 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-10-13 15:54 - 2015-09-11 03:22 - 01814016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-10-13 15:54 - 2015-09-11 03:21 - 12388352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-10-13 15:54 - 2015-09-11 03:19 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-10-13 15:54 - 2015-09-11 03:17 - 09751552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-10-13 15:54 - 2015-09-11 03:16 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-10-13 15:54 - 2015-09-11 03:16 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-10-13 15:54 - 2015-09-11 03:15 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-10-13 15:54 - 2015-09-11 03:15 - 00422912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-10-13 15:54 - 2015-09-11 03:14 - 01804288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00718848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-10-13 15:54 - 2015-09-11 03:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-10-13 15:54 - 2015-09-11 03:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-10-13 15:54 - 2015-09-11 03:14 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-10-22 17:14 - 2015-08-27 08:21 - 00000000 ____D C:\FRST

2015-10-22 17:06 - 2015-08-26 11:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-10-22 16:54 - 2012-04-09 18:08 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-10-22 16:42 - 2010-01-31 15:46 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-10-22 16:37 - 2009-03-26 03:40 - 01515193 _____ C:\Windows\WindowsUpdate.log

2015-10-22 16:35 - 2015-07-07 09:26 - 00000926 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000UA.job

2015-10-22 16:26 - 2010-01-21 23:43 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2015-10-22 16:26 - 2009-10-04 23:25 - 00122960 _____ C:\Users\Melissa Copy\AppData\Local\GDIPFONTCACHEV1.DAT

2015-10-22 16:25 - 2009-10-05 20:27 - 00000000 ____D C:\Users\Melissa Copy\AppData\Roaming\Apple Computer

2015-10-22 16:25 - 2009-10-04 23:25 - 00000951 _____ C:\Users\Melissa Copy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

2015-10-22 16:25 - 2009-10-04 23:25 - 00000917 _____ C:\Users\Melissa Copy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2015-10-22 16:24 - 2010-01-31 15:46 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-10-22 16:24 - 2009-10-05 20:23 - 00000000 ____D C:\Users\Melissa Copy\AppData\Local\Google

2015-10-22 16:22 - 2009-06-26 16:34 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2015-10-22 16:22 - 2006-11-02 11:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-10-22 16:22 - 2006-11-02 11:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-10-22 16:22 - 2006-11-02 11:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-10-22 15:21 - 2009-11-02 08:43 - 00000012 _____ C:\Windows\bthservsdp.dat

2015-10-22 15:21 - 2006-11-02 11:42 - 00032624 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-10-22 14:47 - 2011-03-26 10:20 - 00000000 ____D C:\Users\Carolyn\AppData\Roaming\Dropbox

2015-10-22 14:41 - 2015-01-28 23:05 - 00000000 ___RD C:\Users\Carolyn\Dropbox

2015-10-22 14:35 - 2011-11-10 11:59 - 00000000 ___HD C:\Users\Carolyn\AppData\Local\D20953F9-F68E-42A2-A5C3-BE30CAFAD825.aplzod

2015-10-22 14:34 - 2009-08-07 15:58 - 00000000 ___HD C:\Users\Carolyn\Tracing

2015-10-22 13:35 - 2015-07-07 09:26 - 00000874 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000Core.job

2015-10-22 13:13 - 2006-11-02 09:34 - 00000000 ___HD C:\Windows\tracing

2015-10-17 12:54 - 2012-04-09 18:08 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-10-17 12:54 - 2012-04-09 18:08 - 00003682 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-10-17 12:54 - 2011-08-05 17:29 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-14 03:40 - 2006-11-02 09:33 - 00000000 ____D C:\Windows\rescache

2015-10-14 03:16 - 2013-08-08 03:07 - 00000000 ____D C:\Windows\system32\MRT

2015-10-14 03:09 - 2006-11-02 08:35 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2015-10-14 03:08 - 2009-05-06 20:31 - 00000000 ____D C:\ProgramData\Microsoft Help

 

==================== Files in the root of some directories =======

 

2009-10-05 20:20 - 2009-10-05 20:20 - 0007680 _____ () C:\Users\Melissa Copy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-04-04 23:39 - 2012-04-04 23:39 - 0000000 ____H () C:\ProgramData\-JP7xU5sUSWWWzR

2009-10-18 18:18 - 2010-07-16 08:10 - 0004230 _____ () C:\ProgramData\hpzinstall.log

2012-04-04 19:09 - 2012-04-04 23:33 - 0000256 ____H () C:\ProgramData\JP7xU5sUSWWWzR

2012-02-06 21:11 - 2012-02-06 21:13 - 0000319 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

 

Files to move or delete:

====================

C:\Users\Carolyn\jagex_runescape_preferences.dat

 

 

Some files in TEMP:

====================

C:\Users\Carolyn\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpde0mep.dll

 

 

==================== Bamital & volsnap =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-10-22 16:30

 

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:21-10-2015 01

Ran by Melissa Copy (2015-10-22 17:15:27)

Running from C:\Users\Melissa Copy\Desktop

Windows Vista ™ Home Premium Service Pack 2 (X64) (2009-03-26 07:41:52)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-1197641297-3925425794-1647420136-500 - Administrator - Disabled)

Carolyn (S-1-5-21-1197641297-3925425794-1647420136-1000 - Administrator - Enabled) => C:\Users\Carolyn

Carrie Copy (S-1-5-21-1197641297-3925425794-1647420136-1002 - Administrator - Enabled) => C:\Users\Carrie Copy

Guest (S-1-5-21-1197641297-3925425794-1647420136-501 - Limited - Enabled)

Melissa Copy (S-1-5-21-1197641297-3925425794-1647420136-1001 - Administrator - Enabled) => C:\Users\Melissa Copy

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

64 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard) Hidden

7300 (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden

7300_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden

7300Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden

Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)

Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)

Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Reader X (10.1.15) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.15 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.1.629 - Adobe Systems, Inc.)

AIO_CDB_ProductContext (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden

AIO_CDB_Software (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden

AIO_CDB_ToolboxIni64 (Version: 82.0.242.000 - Hewlett-Packard) Hidden

AIO_Scan (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

Apple Application Support (HKLM-x32\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.3.2225 - AVAST Software)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

Carbonite Online Backup Setup (HKLM-x32\...\Carbonite Setup Lite) (Version: 3.7.3 - Carbonite Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)

Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Copy (x32 Version: 82.0.188.000 - Hewlett-Packard) Hidden

CustomerResearchQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

Defraggler (HKLM\...\Defraggler) (Version: 2.09 - Piriform)

Dell Dock (HKLM\...\{F6CB42B9-F033-4152-8813-FF11DA8E6A78}) (Version: 1.0.0 - Dell)

Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)

Dell Support Center (Support Software) (HKLM-x32\...\{E3BFEE55-39E2-4BE0-B966-89FE583822C1}) (Version: 2.5.08318 - Dell)

DELL0604 (x32 Version: 1.0.0 - WildTangent) Hidden

Dell-eBay (HKLM-x32\...\{B935C985-A17F-484B-8470-09E4FC27DC26}) (Version: 1.00.0000 - Dell)

Destinations (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

DeviceManagementQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

DivX Plus Web Player (HKLM-x32\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 2.0.0 - DivX,Inc.)

DocProc (x32 Version: 8.1.0.0 - Hewlett-Packard) Hidden

DocProcQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

Download Updater (AOL LLC) (HKLM-x32\...\SoftwareUpdUtility) (Version:  - ) <==== ATTENTION

ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version:  - Lars Hederer)

eSupportQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

Fax (x32 Version: 82.0.188.000 - Hewlett-Packard) Hidden

Google Calendar Sync (HKLM-x32\...\Google Calendar Sync) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6904.2028 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden

Graboid Video 1.73 (HKLM-x32\...\Graboid Video) (Version: 1.73 - Graboid Inc.)

Harry Potter and the Prisoner of Azkaban™ (HKLM-x32\...\{A4CBCF09-0C7E-40AA-0080-34B8A5CFE7FA}) (Version:  - )

HP Customer Participation Program 8.0 (HKLM\...\HPExtendedCapabilities) (Version: 8.0 - HP)

HP Driver Diagnostics (HKLM-x32\...\{0EC7C406-B592-4686-BAC1-AD29A85EAE6A}) (Version: 1.03.0005 - Hewlett-Packard Company)

HP Imaging Device Functions 8.0 (HKLM\...\HP Imaging Device Functions) (Version: 8.0 - HP)

HP OCR Software 8.0 (HKLM\...\HPOCR) (Version: 8.0 - HP)

HP Photosmart Essential (HKLM-x32\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)

HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B (HKLM\...\{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}) (Version: 8.0 - HP)

HP Solution Center 8.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 8.0 - HP)

HP Update (HKLM-x32\...\{8C6027FD-53DC-446D-BB75-CACD7028A134}) (Version: 4.000.005.006 - Hewlett-Packard)

HPProductAssistant (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

HPSSupply (HKLM-x32\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)

iCloud (HKLM\...\{CE97E4D3-9F91-4D72-8A29-ED9EA90E5A15}) (Version: 2.1.3.25 - Apple Inc.)

IHA_MessageCenter (HKLM-x32\...\{53C49C8D-DFB2-42B9-A7EF-0F9CA386CC13}) (Version: 1.8.17 - Verizon)

Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )

iPhone Configuration Utility (HKLM-x32\...\{FA54AFB1-5745-4389-B8C1-9F7509672ED1}) (Version: 2.1.0.163 - Apple Inc.)

iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.)

Java™ 6 Update 33 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216033FF}) (Version: 6.0.330 - Oracle)

Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

LEGO MINDSTORMS Edu NXT - English Language Pack (HKLM-x32\...\{1461AA33-AB75-4E27-A832-CA0328AD7FAA}) (Version: 1.1.100.0 - LEGO)

LEGO MINDSTORMS Edu NXT Software v1.1 (HKLM-x32\...\{32C7D34A-4ADF-46F1-9E75-A3E446A76D10}) (Version: 1.1.429.0 - LEGO)

LEGO MINDSTORMS NXT Driver for x64 (HKLM\...\{54B94792-8FD4-460E-998E-3F8A8598AC02}) (Version: 1.16.769 - LEGO)

LEGO MINDSTORMS NXT Edu Migration Package (HKLM-x32\...\{E9AF380B-40FA-4D83-A5C7-A80D9BB8E566}) (Version: 1.2.8.0 - LEGO)

Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)

MarketResearch (x32 Version: 82.0.174.000 - Hewlett-Packard) Hidden

Memorex exPressit Label Design Studio (HKLM-x32\...\MVApplication1) (Version:  - )

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Visio Viewer 2010 (HKLM-x32\...\{95140000-0052-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)

MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

NetDeviceManager64 (Version: 82.0.173.000 - Hewlett-Packard) Hidden

ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 2.9.0105 - ooVoo LLC.)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.5.0 - Prolific Technology INC)

QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - Realtek Semiconductor Corp.)

Redist (HKLM-x32\...\{0F052922-4BCE-4763-A540-00857554336D}) (Version: 3.00.0000 - Verizon)

Risk® (HKLM-x32\...\Risk®) (Version: 32.0.0.0 - Shockwave.com)

Roxio Creator DE (HKLM-x32\...\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}) (Version: 10.1 - Roxio)

Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)

Scan (x32 Version: 8.1.0.0 - Hewlett-Packard) Hidden

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Skype Toolbars (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.5.7896 - Skype Technologies S.A.)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

SolutionCenter (x32 Version: 82.0.188.000 - Hewlett-Packard) Hidden

Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Status (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Toolbox (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 82.0.188.000 - Hewlett-Packard) Hidden

Unity Web Player (HKLM-x32\...\UnityWebPlayer) (Version: 2.5.0f5_21627 - Unity Technologies ApS)

UnloadSupport (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden

Verizon Broadband Toolbar (HKLM-x32\...\vol_toolbar) (Version:  - )

Verizon FiOS Connection Wizard (HKLM-x32\...\{BBB08B2B-F1F7-43BF-803F-AA3AA807E9FF}) (Version: 3.16 - Verizon)

Verizon Media Manager (HKLM-x32\...\Verizon Media Manager) (Version: 9.4.94 - Verizon)

VEX Programming Driver 64-bit (HKLM-x32\...\{00B74926-F27A-4661-8827-6BFCAFD35AF0}) (Version: 1.0.0.2 - VEX Robotics, Inc.)

Viewpoint Media Player (HKLM-x32\...\ViewpointMediaPlayer) (Version:  - )

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 1.0.1 (HKLM-x32\...\VLC media player) (Version: 1.0.1 - VideoLAN Team)

WebReg (x32 Version: 82.0.173.000 - Hewlett-Packard) Hidden

West Point Bridge Designer 2007 (HKLM-x32\...\West_Point_Bridge_Designer_2007) (Version:  - )

WildTangent Games (HKLM-x32\...\WildTangent dell Master Uninstall) (Version: 1.0.0.71 - WildTangent)

Windows Essentials Media Codec Pack 2.3b (HKLM-x32\...\Windows Essentials Media Codec Pack) (Version: 2.3b - Media Codec)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)

Windows Live Sign-in Assistant (HKLM-x32\...\{9422C8EA-B0C6-4197-B8FC-DC797658CA00}) (Version: 5.000.818.6 - Microsoft Corporation)

Windows Live Sync (HKLM-x32\...\{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}) (Version: 14.0.8050.1202 - Microsoft Corporation)

Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )

Wizard101 (HKLM-x32\...\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)

Yahoo! Detect (HKLM-x32\...\YTdetect) (Version:  - )

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Melissa Copy\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => No File

CustomCLSID: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Melissa Copy\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => No File

CustomCLSID: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Melissa Copy\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => No File

CustomCLSID: HKU\S-1-5-21-1197641297-3925425794-1647420136-1001_Classes\CLSID\{FE0D8F60-5A07-40a1-85EC-4FFB7E0F2306}\localserver32 -> C:\Users\Melissa Copy\AppData\Local\Roblox\Versions\version-371a4ef279b14764\RobloxApp.exe => No Fil (the data entry has 1 more characters).

 

==================== Restore Points =========================

 

01-10-2015 00:00:01 Scheduled Checkpoint

02-10-2015 00:00:01 Scheduled Checkpoint

03-10-2015 00:00:01 Scheduled Checkpoint

04-10-2015 00:00:01 Scheduled Checkpoint

05-10-2015 00:00:01 Scheduled Checkpoint

06-10-2015 00:00:01 Scheduled Checkpoint

06-10-2015 20:14:05 Windows Update

08-10-2015 00:23:30 Scheduled Checkpoint

09-10-2015 00:08:02 Scheduled Checkpoint

10-10-2015 00:00:01 Scheduled Checkpoint

11-10-2015 00:15:32 Scheduled Checkpoint

12-10-2015 00:00:01 Scheduled Checkpoint

13-10-2015 00:00:01 Scheduled Checkpoint

13-10-2015 01:45:50 Windows Update

14-10-2015 00:00:03 Scheduled Checkpoint

14-10-2015 03:00:32 Windows Update

15-10-2015 00:00:01 Scheduled Checkpoint

16-10-2015 00:00:03 Scheduled Checkpoint

17-10-2015 00:00:03 Scheduled Checkpoint

18-10-2015 00:00:02 Scheduled Checkpoint

19-10-2015 00:00:01 Scheduled Checkpoint

20-10-2015 01:52:02 Windows Update

20-10-2015 14:18:45 Scheduled Checkpoint

22-10-2015 00:00:02 Scheduled Checkpoint

22-10-2015 17:03:42 Scheduled Checkpoint

 

==================== Hosts content: ===============================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2006-11-02 08:34 - 2006-09-18 17:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

 

127.0.0.1       localhost

::1             localhost

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {1020B95E-7206-4431-99CF-5BB32D2622C6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd)

Task: {25986679-2EC8-46F7-9E57-2296389132EA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)

Task: {30A92CFB-2345-4B84-96AB-9A034902174B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000Core => C:\Users\Carolyn\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-07] (Dropbox, Inc.)

Task: {332DAF92-EEEF-4B62-8AC7-2DEA82B127A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {4C5B7048-8263-4E81-AEA3-2A5B85A8C650} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {727E66E0-1165-46B3-AE92-D7B57C05FB86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {7672B098-CEDB-4AD7-93C6-F97A4F92D71B} - System32\Tasks\{E7C551D5-78E5-4CCB-9B26-7B4270DD8DC5} => pcalua.exe -a "C:\Users\Carolyn\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NYSKBFR\GraboidVideoSetup-1.73d-complete[1].exe" -d C:\Users\Carolyn\Desktop

Task: {76CE8FE4-5E8B-44CC-8055-C47CB6DF822E} - System32\Tasks\{56E23DC1-26B6-483E-8576-1127614F21F5} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)

Task: {963D90A1-AB05-429E-9234-774194C4CB52} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-08-26] (AVAST Software)

Task: {99B2330A-01DF-4FC0-9F53-B59241CEE442} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-20] (Microsoft Corporation)

Task: {9FEFB142-7D64-40C9-B6EE-2CF3F1253697} - System32\Tasks\{EBD7236B-F7C5-4C9D-AE1F-E166B31D2F96} => pcalua.exe -a E:\Setup.exe -d E:\

Task: {A825EF35-CD89-48FF-8C44-25F02E25F494} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {AA26C859-BB66-440A-A679-D0763B7DFE67} - System32\Tasks\0814avUpdateInfo => C:\ProgramData\Avg_Update_0814av\0814av_AVG-Secure-Search-Update.exe [2014-08-12] ()

Task: {C6965399-695D-45A8-A2DD-D03466BC7686} - System32\Tasks\{14AEFCCB-9EFF-4EFD-9021-A31CC41E991C} => pcalua.exe -a C:\Windows\iun6002.exe -c "C:\Program Files (x86)\West Point Bridge Designer 2007\irunin.ini"

Task: {FB1A2939-D951-4016-8071-E504376C59A3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000UA => C:\Users\Carolyn\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-07] (Dropbox, Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\0814avUpdateInfo.job => C:\ProgramData\Avg_Update_0814av\0814av_AVG-Secure-Search-Update.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000Core.job => C:\Users\Carolyn\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1197641297-3925425794-1647420136-1000UA.job => C:\Users\Carolyn\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (Whitelisted) ==============

 

2010-12-03 23:56 - 2010-03-15 12:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll

2013-10-31 14:47 - 2013-10-31 14:47 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll

2015-09-09 04:04 - 2015-09-09 04:04 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\df368fdacb040729b66b3e4323426e76\VistaBridgeLibrary.ni.dll

2015-08-26 18:47 - 2015-08-26 18:47 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2015-08-26 18:47 - 2015-08-26 18:47 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2015-10-22 05:02 - 2015-10-22 05:02 - 02996080 _____ () C:\Program Files\AVAST Software\Avast\defs\15102200\algo.dll

2015-10-22 16:24 - 2015-10-22 16:24 - 02969088 _____ () C:\Program Files\AVAST Software\Avast\defs\15102201\algo.dll

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

AlternateDataStreams: C:\Users\.DS_Store:AFP_AfpInfo

AlternateDataStreams: C:\ProgramData\TEMP:5D432CE3

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo

AlternateDataStreams: C:\Users\RDG Archive\.DS_Store:AFP_AfpInfo

AlternateDataStreams: C:\Users\RDG Movie Downloads\.DS_Store:AFP_AfpInfo

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

 

==================== EXE Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-1197641297-3925425794-1647420136-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [{D5882C65-F69F-4883-998C-652FFE61A18D}] => (Allow) C:\Program Files (x86)\Dell Video Chat\DellVideoChat.exe

FirewallRules: [{EAC61C81-EABF-4F60-990C-9A850B25A2C2}] => (Allow) C:\Program Files (x86)\Dell Video Chat\DellVideoChat.exe

FirewallRules: [{06E2EBBE-057A-4210-8911-CB90611F2752}] => (Allow) C:\Program Files (x86)\Dell Remote Access\ezi_ra.exe

FirewallRules: [{4D5976A9-29B7-4F86-8D6B-4F545C5E767E}] => (Allow) C:\Program Files (x86)\Dell Remote Access\ezi_ra.exe

FirewallRules: [{206CB70C-9673-4F85-933A-4DA16204CB5A}] => (Allow) C:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe

FirewallRules: [{E303489E-8C50-4EC7-85B1-6BC51F08503D}] => (Allow) C:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe

FirewallRules: [{E70252C7-3836-49C4-A894-B460C17CACC6}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe

FirewallRules: [{7636F591-B4C3-4B20-8A00-FE96FC6806F3}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{D515652A-EAB5-4EAC-9FFE-410E299F4557}] => (Allow) svchost.exe

FirewallRules: [{10D46378-FFFB-48BC-ADE3-04A1398B8490}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{1CFF8D88-F537-4627-B4DB-A9922DCABCBC}] => (Allow) C:\Program Files (x86)\Common Files\Dell\VLC\vlc.exe

FirewallRules: [{B5C52D95-71C7-4D65-B512-EE2DDA55A4E2}] => (Allow) C:\Program Files (x86)\Common Files\Dell\VLC\vlc.exe

FirewallRules: [{76687017-54E3-4865-9A0C-9E738C9439EC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{24FA445B-243B-4A45-924C-64E2B2B781B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [TCP Query User{535A482C-400D-44EF-A031-F5E3617756AB}F:\techwizard.exe] => (Allow) F:\techwizard.exe

FirewallRules: [UDP Query User{28A192E0-D8B6-4CBD-BD0A-935BA3483FD3}F:\techwizard.exe] => (Allow) F:\techwizard.exe

FirewallRules: [TCP Query User{B251087D-F1F6-4ABD-A2D2-22F49A19FB4F}C:\program files (x86)\dell video chat\dellvideochat.exe] => (Allow) C:\program files (x86)\dell video chat\dellvideochat.exe

FirewallRules: [UDP Query User{14125759-5E10-4B1A-AC18-16807D152845}C:\program files (x86)\dell video chat\dellvideochat.exe] => (Allow) C:\program files (x86)\dell video chat\dellvideochat.exe

FirewallRules: [{774EDB86-BCD3-4817-874B-8F9932E1FE6F}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MNA\McNaSvc.exe

FirewallRules: [{232EC99C-26FE-4358-8FC4-454A767C8053}] => (Allow) C:\Program Files (x86)\Common Files\AOL\Loader\aolload.exe

FirewallRules: [{BF7B12B7-6A44-48AF-B2C5-255ECC0FA3C6}] => (Allow) C:\Program Files (x86)\Common Files\AOL\Loader\aolload.exe

FirewallRules: [{C7782CB2-1E45-4180-9E9C-EB4DA62E491C}] => (Allow) C:\Program Files (x86)\AIM6\aim6.exe

FirewallRules: [{710A7C47-9FA1-46BF-BEE0-AF94FDC0F4E6}] => (Allow) C:\Program Files (x86)\AIM6\aim6.exe

FirewallRules: [{4D520BD8-CC37-40C6-9E40-6D79CB432844}] => (Allow) C:\Users\Carolyn\AppData\Local\Temp\7zS2B6F\setup\HPZnui40.exe

FirewallRules: [{B01D27CE-4AED-4B6B-B9FC-F5A40AD9347D}] => (Allow) C:\Users\Carolyn\AppData\Local\Temp\7zS2B6F\setup\HPZnui40.exe

FirewallRules: [{D25A1F80-749B-475E-BA82-5AF5747B5656}] => (Allow) C:\Windows\System32\dlcccoms.exe

FirewallRules: [{A685A72D-E587-4C53-8449-944D8C08229B}] => (Allow) C:\Windows\System32\dlcccoms.exe

FirewallRules: [{37DD5B59-5EFD-412D-A232-E3D8F061D19A}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

FirewallRules: [{23CC205E-828D-4A5F-B062-190D420B2A36}] => (Allow) LPort=80

FirewallRules: [{FC1DEE7A-9A21-4CA9-9B1B-5C5EA89FC714}] => (Allow) LPort=80

FirewallRules: [{C2B76A0F-AEAB-4D24-9179-890957F3F4AC}] => (Allow) LPort=80

FirewallRules: [{D709B545-AA11-4EF6-A2BD-17BB44E9FD3C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6E774AD5-04A0-424B-BCBD-DAE8A047EE6A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{71AF27F4-A122-410B-B01E-7F657B7899EA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{95BBE35F-CA54-44E5-92F9-F8EF8EAC5EEF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{C0FF5431-6695-4D99-9256-EBCCD304D561}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{4506A9CD-A351-4DD1-81D1-075796A25E4D}] => (Allow) LPort=50000

FirewallRules: [{AB4CDFEA-5DC6-48EE-8E01-8201771D3288}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

FirewallRules: [{D0E88C7A-5329-4982-BE00-BD2A3F900A67}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

FirewallRules: [{47D09AAE-9219-4362-B00E-7226EB50EF7D}] => (Allow) LPort=50000

FirewallRules: [{DAB29F34-17B9-47E0-91B5-3458AC6DDACB}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{C076735E-0105-40EC-9206-054E8C9BEEFB}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{0E553D89-4BA2-4856-A740-4214FF8A1B80}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [TCP Query User{AA21E7B6-155F-43C9-9DB6-12A350116F6E}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe

FirewallRules: [UDP Query User{D81ECCB7-AA05-4E8E-9DC4-A9EDF79E3666}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe

FirewallRules: [TCP Query User{A408A7C1-E9DE-4289-BD5C-4AB2A002F84F}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe

FirewallRules: [UDP Query User{772B18D3-EB97-4D52-9131-D1C702B3B3C3}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe

FirewallRules: [TCP Query User{EC66981C-58F1-4876-B3F0-1AAF4239C8EC}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{E55B7399-8E38-4E78-A630-8D6B88E1BD38}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [TCP Query User{8944C6FE-7C9F-40DC-96D4-838833593AE8}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe

FirewallRules: [UDP Query User{E928EAA9-4F90-4DC1-9FA9-09234B03A409}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe

FirewallRules: [{6AB5C398-E066-4332-A8C3-1F296376EA74}] => (Allow) C:\Users\Carolyn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [{CDB59EEF-AABB-4297-842D-05ABA5A227E2}] => (Allow) C:\Users\Carolyn\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{A017F92D-702A-48D1-BF5E-0D1FD7C84A24}] => (Allow) C:\Users\Carolyn\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{B28C5740-CEC6-4FD5-9DFE-7A4A0EA1CCAB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

 

==================== Faulty Device Manager Devices =============

 

Name: Dell Photo AIO Printer 924 #2

Description: Dell Photo AIO Printer 924

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: Dell

Service: usbscan

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

 

Name: Officejet 7300 series

Description: Officejet 7300 series

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (10/22/2015 04:25:06 PM) (Source: ESENT) (EventID: 215) (User: )

Description: WinMail (3688) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

 

Error: (10/22/2015 04:24:56 PM) (Source: ESENT) (EventID: 215) (User: )

Description: WinMail (2176) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

 

Error: (10/22/2015 04:22:52 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/22/2015 03:26:31 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/22/2015 03:26:07 PM) (Source: EventSystem) (EventID: 4609) (User: )

Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

 

Error: (10/22/2015 02:49:59 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plUtil.exe, version 1.950.21.0, time stamp 0x52a29ce8, faulting module MSVCR80.dll, version 6.0.6002.19503, time stamp 0x5606c25a, exception code 0xc0000135, fault offset 0x0006f40f,

process id 0x14dc, application start time 0xplUtil.exe0.

 

Error: (10/22/2015 02:49:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plUtil.exe, version 1.950.21.0, time stamp 0x52a29ce8, faulting module MSVCR80.dll, version 6.0.6002.19503, time stamp 0x5606c25a, exception code 0xc0000135, fault offset 0x0006f40f,

process id 0x1978, application start time 0xplUtil.exe0.

 

Error: (10/22/2015 02:48:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plUtil.exe, version 1.950.21.0, time stamp 0x52a29ce8, faulting module MSVCR80.dll, version 6.0.6002.19503, time stamp 0x5606c25a, exception code 0xc0000135, fault offset 0x0006f40f,

process id 0x1948, application start time 0xplUtil.exe0.

 

Error: (10/22/2015 02:48:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plUtil.exe, version 1.950.21.0, time stamp 0x52a29ce8, faulting module MSVCR80.dll, version 6.0.6002.19503, time stamp 0x5606c25a, exception code 0xc0000135, fault offset 0x0006f40f,

process id 0x1b60, application start time 0xplUtil.exe0.

 

Error: (10/22/2015 05:57:00 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: PNRPsvcC:\Windows\system32\pnrpperf.dll8

 

 

System errors:

=============

Error: (10/22/2015 03:26:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network List ServiceNetwork Location Awareness%%1068

 

Error: (10/22/2015 03:26:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network List ServiceNetwork Location Awareness%%1068

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network List ServiceNetwork Location Awareness%%1068

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network List ServiceNetwork Location Awareness%%1068

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: AFD

aswRdr

aswRvrt

aswSnx

aswSP

aswVmm

DfsC

NetBIOS

netbt

nsiproxy

PSched

RasAcd

rdbss

Smb

spldr

Tcpip

tdx

Wanarpv6

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network List ServiceNetwork Location Awareness%%1068

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: TCP/IP Registry CompatibilityTCP/IP Protocol Driver%%31

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Network Location AwarenessTCP/IP Protocol Driver%%31

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: IP HelperNetwork Store Interface Service%%1068

 

Error: (10/22/2015 03:26:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Bonjour ServiceTCP/IP Protocol Driver%%31

 

 

CodeIntegrity:

===================================

  Date: 2015-10-22 17:14:49.125

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 17:14:48.800

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 17:14:48.471

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 17:14:48.137

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:08.991

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:08.606

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:08.253

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:07.860

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:07.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2015-10-22 15:17:07.112

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™2 Duo CPU E7400 @ 2.80GHz

Percentage of memory in use: 52%

Total physical RAM: 4084.27 MB

Available physical RAM: 1922.93 MB

Total Virtual: 8393.8 MB

Available Virtual: 6173.67 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:451.07 GB) (Free:73.19 GB) NTFS ==>[drive with boot components (obtained from BCD)]

Drive d: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:7.1 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: 19F5C167)

Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)

Partition 2: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS)

Partition 3: (Active) - (Size=451.1 GB) - (Type=07 NTFS)

 

==================== End of Addition.txt ============================