downloading issue

When trying to download new Cyberlink DVD software received and error. Details showed this:

PLATFORM VERSION INFO

Windows : 6.2.9200.0 (Win32NT)

Common Language Runtime : 4.0.30319.34209

System.Deployment.dll : 4.0.30319.34243 built by: FX452RTMGDR

clr.dll : 4.0.30319.34209 built by: FX452RTMGDR

dfdll.dll : 4.0.30319.34243 built by: FX452RTMGDR

dfshim.dll : 6.3.9600.16384 (winblue_rtm.130821-1623)

SOURCES

Deployment url : file:///C:/Users/Angela/Downloads/smartsource.MediaManager.application

IDENTITIES

Deployment Identity : SmartSource.MediaManager.application, Version=2.1.0.6, Culture=neutral, PublicKeyToken=026732f72353b55f, processorArchitecture=msil

APPLICATION SUMMARY

* Online only application.

* Trust url parameter is set.

ERROR SUMMARY

Below is a summary of the errors, details of these errors are listed later in the log.

* Activation of C:\Users\Angela\Downloads\smartsource.MediaManager.application resulted in exception. Following failure messages were detected:

+ Downloading file:///C:/Users/Angela/Downloads/Application Files/SmartSource.MediaManager_2_1_0_6/SmartSource.MediaManager.exe.manifest did not succeed.

+ Could not find a part of the path 'C:\Users\Angela\Downloads\Application Files\SmartSource.MediaManager_2_1_0_6\SmartSource.MediaManager.exe.manifest'.

COMPONENT STORE TRANSACTION FAILURE SUMMARY

No transaction error was detected.

WARNINGS

There were no warnings during this operation.

OPERATION PROGRESS STATUS

* [11/7/2015 6:59:11 AM] : Activation of C:\Users\Angela\Downloads\smartsource.MediaManager.application has started.

* [11/7/2015 6:59:11 AM] : Processing of deployment manifest has successfully completed.

* [11/7/2015 6:59:11 AM] : Installation of the application has started.

ERROR DETAILS

Following errors were detected during this operation.

* [11/7/2015 6:59:11 AM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)

- Downloading file:///C:/Users/Angela/Downloads/Application Files/SmartSource.MediaManager_2_1_0_6/SmartSource.MediaManager.exe.manifest did not succeed.

- Source: System.Deployment

- Stack trace:

at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)

at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()

at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)

at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)

at System.Deployment.Application.DownloadManager.DownloadApplicationManifest(AssemblyManifest deploymentManifest, String targetDir, Uri deploymentUri, IDownloadNotification notification, DownloadOptions options, Uri& appSourceUri, String& appManifestPath)

at System.Deployment.Application.DownloadManager.DownloadApplicationManifest(AssemblyManifest deploymentManifest, String targetDir, Uri deploymentUri, Uri& appSourceUri, String& appManifestPath)

at System.Deployment.Application.ApplicationActivator.DownloadApplication(SubscriptionState subState, ActivationDescription actDesc, Int64 transactionId, TempDirectory& downloadTemp)

at System.Deployment.Application.ApplicationActivator.InstallApplication(SubscriptionState& subState, ActivationDescription actDesc)

at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)

at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)

--- Inner Exception ---

System.Net.WebException

- Could not find a part of the path 'C:\Users\Angela\Downloads\Application Files\SmartSource.MediaManager_2_1_0_6\SmartSource.MediaManager.exe.manifest'.

- Source: System

- Stack trace:

at System.Net.FileWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.FileWebRequest.GetResponse()

at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)

--- Inner Exception ---

System.Net.WebException

- Could not find a part of the path 'C:\Users\Angela\Downloads\Application Files\SmartSource.MediaManager_2_1_0_6\SmartSource.MediaManager.exe.manifest'.

- Source: System

- Stack trace:

at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)

at System.Net.FileWebRequest.GetResponseCallback(Object state)

--- Inner Exception ---

System.IO.DirectoryNotFoundException

- Could not find a part of the path 'C:\Users\Angela\Downloads\Application Files\SmartSource.MediaManager_2_1_0_6\SmartSource.MediaManager.exe.manifest'.

- Source: mscorlib

- Stack trace:

at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)

at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)

at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)

at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, Boolean useAsync)

at System.Net.FileWebStream..ctor(FileWebRequest request, String path, FileMode mode, FileAccess access, FileShare sharing, Int32 length, Boolean async)

at System.Net.FileWebResponse..ctor(FileWebRequest request, Uri uri, FileAccess access, Boolean asyncHint)

COMPONENT STORE TRANSACTION DETAILS

No transaction information is available.

Installed and ran the FRST tool. Here is the results from it:

1st run

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-11-2015

Ran by Angela (administrator) on ANGELA (07-11-2015 07:41:03)

Running from C:\Users\Angela\Desktop

Loaded Profiles: Angela (Available Profiles: Angela)

Platform: Windows 8.1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Two Pilots) C:\Windows\VPDAgent_x64.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Coupons.com Inc.) C:\Program Files (x86)\Coupons\CouponPrinterService.exe

(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe

(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

() C:\Users\Angela\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe

(The Neat Company) C:\Program Files (x86)\Neat\exec\NeatStartupService.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Monotype Inc.) C:\Program Files\Monotype\SkyFonts\Monotype.SkyFonts.Service.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

() C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe

(DELL Inc.) C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe

(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Dropbox, Inc.) C:\Users\Angela\AppData\Local\Dropbox\Update\DropboxUpdate.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleChromeDAV.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATINIE.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\winword.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD15\Movie\PowerDVDMovie.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD15Agent.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD15\Common\CLMPSvc.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD15\Common\clmediaparsersb.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(OldTimer Tools) C:\Users\Angela\Downloads\OTL.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe

(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5762408 2013-06-03] (Dell Inc.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1677704 2015-09-08] (Bitdefender)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [134616 2013-12-11] (Intel Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-04-29] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2015-04-29] (Adobe Systems Inc.)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [650784 2015-01-20] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863776 2015-01-20] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4377256 2015-09-04] (Fitbit, Inc.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065968 2015-07-23] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

HKLM-x32\...\Run: [PowerDVD15Agent] => C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD15Agent.exe [949960 2015-10-11] (CyberLink Corp.)

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->

HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Monotype SkyFonts System Extension] => C:\Program Files\Monotype\SkyFonts\SkyFonts.exe [1124144 2014-05-30] (Monotype Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [CAHeadless] => C:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe [1401040 2014-06-20] (Adobe Systems Incorporated)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Google Update] => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1079592 2015-06-26] (Apple Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Amazon Music] => C:\Users\Angela\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4377256 2015-09-04] (Fitbit, Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [MediaFire Tray] => [X]

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1411976 2015-09-07] (Bitdefender)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Dropbox Update] => C:\Users\Angela\AppData\Local\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-28] (Dropbox, Inc.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [Zoom] => 0

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [EPLTarget\P0000000000000003] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATINIE.EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATINIE.EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [589312 2014-10-28] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\tray.exe [1010008 2015-04-10] (Garmin Ltd. or its subsidiaries)

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [1MediaFireIconError] -> {5EE8C634-CDC0-453D-9731-DF0B19F4E807} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon3_07def.dll [2015-04-23] (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconReadOnly] -> {7995D0FC-769B-4197-AEC0-991921CB99E1} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon5_07def.dll [2015-04-23] (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSynched] -> {9A3B79CB-D899-40B5-8DBC-20447F1ADC8F} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon_07def.dll [2015-04-23] (TODO: <Company name>)

ShellIconOverlayIdentifiers: [1MediaFireIconSyncing] -> {C4D81971-6B13-4173-AB21-F83AD20CCC04} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon2_07def.dll [2015-04-23] (TODO: <Company name>)

ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [MediaFireIconLock] -> {759F3E92-F4E8-4953-8315-238B8B17E0F3} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon4_07def.dll [2015-04-23] (TODO: <Company name>)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2014-04-20] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2014-04-20] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2014-04-20] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey IE RunOnce.lnk [2014-07-17]

ShortcutTarget: Install SafeKey IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (McAfee)

Startup: C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-10-28]

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{A777B2AD-3AFD-4726-8AD1-59C750F8E545}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://yahoo.com/

hxxp://google.com/

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-256437393-2301388578-1757125834-1001 -> DefaultScope {94F6B3A7-A7B8-4C7F-A608-F6F3C728CB2C} URL = hxxps://search.yahoo.com/search?fr=mcafee&type=B011US105D20140717&p={searchTerms}

SearchScopes: HKU\S-1-5-21-256437393-2301388578-1757125834-1001 -> {943852A5-EF73-4F8C-87BD-1F323D91A009} URL =

SearchScopes: HKU\S-1-5-21-256437393-2301388578-1757125834-1001 -> {94F6B3A7-A7B8-4C7F-A608-F6F3C728CB2C} URL = hxxps://search.yahoo.com/search?fr=mcafee&type=B011US105D20140717&p={searchTerms}

BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-09-02] (Bitdefender)

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-04-20] (Microsoft Corporation)

BHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll [2014-07-17] (McAfee)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2014-04-20] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-04-20] (Microsoft Corporation)

BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-10-05] (Bitdefender)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2014-04-20] (Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)

BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-07-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO-x32: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar.dll [2014-07-17] (McAfee)

BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-04-29] (Adobe Systems Incorporated)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2014-04-20] (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2014-04-20] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)

BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-04-29] (Adobe Systems Incorporated)

Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll [2014-07-17] (McAfee)

Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-09-02] (Bitdefender)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-04-29] (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar.dll [2014-07-17] (McAfee)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)

Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2015-10-05] (Bitdefender)

Toolbar: HKU\S-1-5-21-256437393-2301388578-1757125834-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2015-09-02] (Bitdefender)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-04-20] (Microsoft Corporation)

FireFox:

========

FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-11] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-11] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [2014-03-04] (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-04-20] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-04-20] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.17\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.17\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-04-29] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)

FF Plugin HKU\S-1-5-21-256437393-2301388578-1757125834-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [No File]

FF Plugin HKU\S-1-5-21-256437393-2301388578-1757125834-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [No File]

FF Plugin HKU\S-1-5-21-256437393-2301388578-1757125834-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Angela\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2015-09-22] (Zoom Video Communications, Inc.)

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender 2016\bdwteff

FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\bdwteff [2015-09-17] [not signed]

FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-09-17] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2015-05-21] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-06-08] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-09-17] [not signed]

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

Chrome:

=======

CHR HomePage: Default -> hxxps://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.yahoo.com/","hxxp://www.msn.com/","hxxp://www/google.com/"

CHR Profile: C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (McAfee SafeKey) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\agbnjankikoaabjkmfbaceggjliabkbn [2014-09-06]

CHR Extension: (Angry Birds) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-13]

CHR Extension: (Google Docs) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-07]

CHR Extension: (Google Drive) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]

CHR Extension: (YouTube) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]

CHR Extension: (Solitaire) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpebaehgfgkcmmjjknibibbjacnplim [2014-08-31]

CHR Extension: (Twitter for Chrome) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdoinklelehcpndgmcddkkdhibpoglnk [2014-04-20]

CHR Extension: (Google Search) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-01]

CHR Extension: (ColorMandala) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbafebdejmcgpbfkppndjeajebpppnei [2014-04-17]

CHR Extension: (Winter Mahjong) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddmhicnhpjfpgmcebbidppnammjebnkp [2015-05-09]

CHR Extension: (Bitdefender Wallet) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhhejlifdlcgcmogbggeomfodgklfaem [2015-10-24]

CHR Extension: (NYTimes) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecmphppfkcfflgglcokcbdkofpfegoel [2014-04-17]

CHR Extension: (iCloud Bookmarks) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-07-24]

CHR Extension: (Katie's butterflies.) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbpkehnhcfehoeahdnpafnfffkdnnoeb [2015-06-14]

CHR Extension: (Facebook for Chrome) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp [2015-09-14]

CHR Extension: (Google Docs Offline) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-13]

CHR Extension: (Save to Google Drive) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2014-06-18]

CHR Extension: (Pin It Button) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-09-28]

CHR Extension: (Crackle) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfamoapbmmmlknoopmmfofgladlinic [2015-09-13]

CHR Extension: (The Weather Channel for Chrome) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop [2014-04-17]

CHR Extension: (SlingPlayer for DISH Anywhere) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcnpmlegoehfgohpkmjhpohjchokamnn [2015-04-19]

CHR Extension: (Google +1 Button) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgoepmocgafhnchmokaimcmlojpnlkhp [2014-04-17]

CHR Extension: (Google Play) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-02-12]

CHR Extension: (Save as PDF) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdjmbiefanbdgnkcikhllpmjnnllbbc [2014-04-17]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-21]

CHR Extension: (Google Mail Checker) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-04-17]

CHR Extension: (Mahjong Solitaire) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\neojceinbonpjjcokpokpeobkhcpiloc [2015-05-09]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24]

CHR Extension: (AdBlock Pro) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2015-11-05]

CHR Extension: (Spring Mahjong) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohmgpjbkliggjliakneoaedilbaihhl [2015-05-09]

CHR Extension: (Instagram for Chrome) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb [2015-11-05]

CHR Extension: (CNN) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\piaagpfopkmnmddehfppblapllldicbl [2014-10-08]

CHR Extension: (Gmail) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-19]

CHR HKLM-x32\...\Chrome\Extension: [agbnjankikoaabjkmfbaceggjliabkbn] - C:\Program Files (x86)\SafeKey\lpchrome.crx [2014-07-17]

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)

R2 Agent; C:\Windows\VPDAgent_x64.exe [148480 2013-11-14] (Two Pilots) [File not signed]

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2211000 2014-03-30] (Microsoft Corporation)

R2 CouponPrinterService; C:\Program Files (x86)\Coupons\CouponPrinterService.exe [179184 2014-10-15] (Coupons.com Inc.)

R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2574168 2015-09-11] (Dell Inc.)

R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201560 2015-09-11] (Dell Inc.)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5750440 2015-09-04] (Fitbit, Inc.)

R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [708104 2015-04-10] (Garmin Ltd. or its subsidiaries)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)

R2 Intel® Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]

S3 Intel® Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Corporation)

R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-10-15] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-12-11] (Intel Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 MF NTFS Monitor; C:\Users\Angela\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe [456176 2015-04-23] ()

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()

R2 Neat Startup Service; C:\Program Files (x86)\Neat\exec\NeatStartupService.exe [5632 2014-01-03] (The Neat Company) [File not signed]

R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [File not signed]

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [823840 2015-09-22] (Bitdefender)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-07-29] (CyberLink)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)

R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1924328 2014-09-18] (SoftThinks SAS)

R2 SkyFontsService; C:\Program Files\Monotype\SkyFonts\Monotype.SkyFonts.Service.exe [35120 2014-05-30] (Monotype Inc.)

R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [21160 2015-09-30] (Dell Inc.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [87408 2015-09-08] (Bitdefender)

S4 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1565976 2015-09-07] (Bitdefender)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

R2 WysePocketCloud; C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe [16176 2013-08-22] ()

R2 WyseRemoteAccess; C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe [1785344 2013-08-19] (DELL Inc.) [File not signed]

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)

S3 ENWLS; C:\Users\Angela\AppData\Local\Temp\WZSE0.TMP\Common\EpsonNet Setup\ENWLS.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1600512 2015-11-02] (BitDefender)

R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [282000 2015-11-02] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [775424 2015-11-02] (BitDefender)

S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107008 2013-07-29] (BitDefender LLC)

R1 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [79192 2013-07-30] (BitDefender)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)

R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows ® Win 7 DDK provider)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [119240 2013-10-15] (Intel Corporation)

R0 ignis; C:\Windows\system32\DRIVERS\ignis.sys [271808 2015-11-02] (Bitdefender)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-10-28] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [100312 2013-12-11] (Intel Corporation)

R2 mfmonitor; C:\Windows\System32\DRIVERS\mfmonitor_x64.sys [20696 2015-04-23] (Windows ® Win 7 DDK provider)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3494680 2015-03-09] (Intel Corporation)

R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-09-06] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [34544 2013-09-06] (Synaptics Incorporated)

R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

R2 {687703DE-DC6D-4649-892B-B8497854A6AB}; C:\Program Files (x86)\CyberLink\PowerDVD15\Common\NavFilter\000.fcl [29896 2015-10-11] (CyberLink Corp.)

U3 gzflt; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-07 07:41 - 2015-11-07 07:41 - 00042604 _____ C:\Users\Angela\Desktop\FRST.txt

2015-11-07 07:40 - 2015-11-07 07:41 - 00000000 ____D C:\FRST

2015-11-07 07:38 - 2015-11-07 07:39 - 02198528 _____ (Farbar) C:\Users\Angela\Desktop\FRST64.exe

2015-11-07 07:11 - 2015-11-07 07:11 - 00602112 _____ (OldTimer Tools) C:\Users\Angela\Downloads\OTL.exe

2015-11-07 06:52 - 2015-11-07 06:53 - 01747630 _____ C:\Users\Angela\Downloads\azDg5p6l.jpeg

2015-11-07 06:39 - 2015-11-07 06:40 - 00611894 _____ C:\Users\Angela\Downloads\u9xE325i.jpeg

2015-11-07 06:32 - 2015-11-07 06:32 - 00629327 _____ C:\Users\Angela\Downloads\kD9jQVFw.jpeg

2015-11-02 13:27 - 2015-11-02 13:27 - 00012370 _____ C:\Users\Angela\Desktop\LXPI40W0.log

2015-11-02 13:27 - 2015-11-02 13:26 - 00005557 _____ C:\Users\Angela\Downloads\smartsource.MediaManager.application

2015-11-02 13:14 - 2015-11-02 13:14 - 00000000 ____D C:\Users\Angela\AppData\Local\CyberLink

2015-11-02 13:13 - 2015-11-02 13:14 - 00000000 ____D C:\ProgramData\PDVD

2015-11-02 13:13 - 2015-11-02 13:13 - 00002463 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 15.lnk

2015-11-02 13:13 - 2015-11-02 13:13 - 00002451 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 15.lnk

2015-11-02 13:10 - 2015-11-02 13:10 - 00000000 ____D C:\ProgramData\SUPPORTDIR

2015-11-02 12:56 - 2015-11-02 13:10 - 202654328 _____ C:\Users\Angela\Documents\PowerDVD_15.0.2211.58_DVD150828-05.exe

2015-11-02 12:56 - 2015-11-02 12:56 - 01031608 _____ (CyberLink) C:\Users\Angela\Downloads\CyberLink_PowerDVD_Downloader.exe

2015-11-02 12:53 - 2015-11-02 12:54 - 00005557 _____ C:\Users\Angela\Desktop\smartsource.MediaManager (2).application

2015-11-02 11:12 - 2015-11-07 07:12 - 00000933 _____ C:\Windows\Tasks\EPSON XP-860 Series Update {083DD251-0941-43CB-93F3-6758B516FFCC}.job

2015-11-02 11:12 - 2015-11-02 11:12 - 00003964 _____ C:\Windows\System32\Tasks\EPSON XP-860 Series Update {083DD251-0941-43CB-93F3-6758B516FFCC}

2015-11-02 11:11 - 2015-11-07 07:11 - 00000933 _____ C:\Windows\Tasks\EPSON XP-860 Series Update {4A1B1EDE-7CB3-42E3-916B-379C4C3D9678}.job

2015-11-02 11:11 - 2015-11-02 11:11 - 00003964 _____ C:\Windows\System32\Tasks\EPSON XP-860 Series Update {4A1B1EDE-7CB3-42E3-916B-379C4C3D9678}

2015-11-02 10:58 - 2015-11-02 10:58 - 00282000 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys

2015-11-02 10:58 - 2015-11-02 10:58 - 00160032 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys

2015-11-02 10:10 - 2015-11-02 10:10 - 00000000 ____D C:\Program Files\Common Files\Intel

2015-11-02 10:10 - 2015-11-02 10:10 - 00000000 ____D C:\Program Files (x86)\Cisco

2015-11-02 10:07 - 2015-11-02 10:07 - 00000000 ____D C:\Windows\LastGood.Tmp

2015-11-02 09:41 - 2015-11-02 09:41 - 00412942 _____ C:\ProgramData\1446481385.bdinstall.bin

2015-11-02 09:31 - 2015-11-02 09:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016

2015-11-02 09:30 - 2015-11-02 09:19 - 00271808 _____ (Bitdefender) C:\Windows\system32\Drivers\ignis.sys

2015-11-02 09:28 - 2015-06-02 15:21 - 00477272 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys

2015-11-02 09:11 - 2015-11-02 09:11 - 00000264 _____ C:\Users\Angela\Downloads\debug.log

2015-11-02 06:55 - 2015-11-02 06:55 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell

2015-11-01 17:41 - 2015-11-01 18:06 - 98482320 _____ C:\Users\Angela\Downloads\PowerDVD_12.0.30302.5112_Dell_PDVD_Patch_DVD150114-02_Normal.exe

2015-10-26 16:56 - 2015-10-26 16:56 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

2015-10-26 16:53 - 2015-10-26 16:56 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Zoom

2015-10-26 16:53 - 2015-10-26 16:53 - 00133528 _____ (Zoom Video Communications, Inc.) C:\Users\Angela\Downloads\Zoom_launcher.exe

2015-10-25 18:35 - 2015-10-28 19:08 - 00000000 ____D C:\Users\Angela\Documents\Animals

2015-10-25 13:23 - 2015-10-25 13:26 - 15128864 _____ C:\Users\Angela\Downloads\epson17065.exe

2015-10-25 12:23 - 2015-10-25 12:29 - 14002464 _____ C:\Users\Angela\Downloads\epson15816.exe

2015-10-24 19:35 - 2015-10-24 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2015-10-20 19:29 - 2015-10-20 19:29 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-10-19 05:48 - 2015-10-24 19:28 - 00001799 _____ C:\Users\Public\Desktop\iTunes.lnk

2015-10-19 05:46 - 2015-10-24 19:28 - 00000000 ____D C:\Program Files\iTunes

2015-10-19 05:46 - 2015-10-24 19:27 - 00000000 ____D C:\Program Files (x86)\iTunes

2015-10-19 05:30 - 2015-10-19 05:45 - 133295384 _____ (Apple Inc.) C:\Users\Angela\Downloads\itunes64setup.exe

2015-10-19 05:24 - 2015-10-19 05:24 - 00000000 ____D C:\MATS

2015-10-19 05:23 - 2015-10-19 05:23 - 00347816 _____ (Microsoft Corporation) C:\Users\Angela\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe

2015-10-14 18:41 - 2015-09-18 20:18 - 00035384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-10-14 18:41 - 2015-09-18 06:42 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-10-14 18:41 - 2015-09-18 06:42 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-10-14 18:41 - 2015-09-18 06:42 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-10-14 18:41 - 2015-09-18 06:42 - 00699904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-10-14 18:41 - 2015-09-18 06:42 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-10-14 18:41 - 2015-09-18 06:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-10-13 23:19 - 2015-09-10 11:02 - 25851392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-10-13 23:19 - 2015-09-10 10:19 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-10-13 23:19 - 2015-09-10 10:18 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-10-13 23:19 - 2015-09-10 10:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-10-13 23:19 - 2015-09-10 10:14 - 05990400 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-10-13 23:19 - 2015-09-10 10:09 - 20358144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-10-13 23:19 - 2015-09-10 10:06 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-10-13 23:19 - 2015-09-10 10:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-10-13 23:19 - 2015-09-10 09:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-10-13 23:19 - 2015-09-10 09:39 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-10-13 23:19 - 2015-09-10 09:37 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-10-13 23:19 - 2015-09-10 09:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-10-13 23:19 - 2015-09-10 09:35 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-10-13 23:19 - 2015-09-10 09:33 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-10-13 23:19 - 2015-09-10 09:28 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-10-13 23:19 - 2015-09-10 09:28 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-10-13 23:19 - 2015-09-10 09:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-10-13 23:19 - 2015-09-10 09:24 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-10-13 23:19 - 2015-09-10 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-10-13 23:19 - 2015-09-10 09:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-10-13 23:19 - 2015-09-10 09:19 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-10-13 23:19 - 2015-09-10 09:19 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-10-13 23:19 - 2015-09-10 09:17 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-10-13 23:19 - 2015-09-10 09:17 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-10-13 23:19 - 2015-09-10 09:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-10-13 23:19 - 2015-09-10 09:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-10-13 23:19 - 2015-09-10 09:02 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-10-13 23:19 - 2015-09-10 09:01 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-10-13 23:19 - 2015-09-10 09:00 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-10-13 23:19 - 2015-09-10 08:57 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-10-13 23:19 - 2015-09-10 08:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-10-13 23:19 - 2015-09-10 08:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-10-13 23:19 - 2015-09-10 08:55 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-10-13 23:19 - 2015-09-10 08:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-10-13 23:19 - 2015-09-10 08:45 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-10-13 23:19 - 2015-09-10 08:34 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-10-13 23:19 - 2015-09-10 08:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-10-13 23:19 - 2015-09-10 08:27 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-10-13 23:19 - 2015-09-10 08:26 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-10-13 23:13 - 2015-08-26 19:43 - 22372152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-10-13 23:13 - 2015-08-26 19:42 - 19795904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-10-13 23:13 - 2015-08-07 14:40 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-10-13 23:13 - 2015-08-07 14:40 - 00686960 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-10-13 23:13 - 2015-08-07 14:40 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2015-10-13 23:13 - 2015-08-07 07:13 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-10-13 23:13 - 2015-08-06 09:47 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2015-10-13 23:13 - 2015-08-06 09:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2015-10-13 23:12 - 2015-09-29 05:31 - 07457624 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-10-13 23:12 - 2015-09-29 05:31 - 01658536 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-10-13 23:12 - 2015-09-29 05:31 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-10-13 23:12 - 2015-09-29 05:31 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-10-13 23:12 - 2015-09-29 05:31 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-10-13 23:12 - 2015-09-24 09:42 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll

2015-10-13 23:12 - 2015-09-24 09:40 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2015-10-13 23:12 - 2015-08-07 14:40 - 01736520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-10-13 23:12 - 2015-08-07 14:40 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-10-13 23:12 - 2015-08-06 10:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx

2015-10-13 23:12 - 2015-08-06 09:37 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx

2015-10-13 23:06 - 2015-09-29 05:29 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-10-13 23:06 - 2015-09-28 11:45 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-10-13 23:06 - 2015-09-28 11:26 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2015-10-13 23:06 - 2015-09-28 11:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-10-13 23:06 - 2015-09-28 11:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-10-13 23:06 - 2015-09-28 11:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-10-13 23:06 - 2015-09-28 11:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-10-13 23:06 - 2015-09-28 11:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-10-13 23:06 - 2015-09-28 11:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-10-13 23:06 - 2015-09-28 11:15 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-10-13 23:06 - 2015-09-28 11:13 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-10-13 23:06 - 2015-09-28 11:12 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll

2015-10-13 23:06 - 2015-08-22 06:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll

2015-10-13 23:06 - 2015-07-16 11:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll

2015-10-13 04:52 - 2015-10-13 04:52 - 00024806 _____ C:\ProgramData\1444737166.bdinstall.bin

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-07 07:38 - 2015-03-21 09:15 - 00000000 ____D C:\Users\Angela\Documents\Outlook Files

2015-11-07 07:33 - 2014-04-07 04:46 - 01580579 _____ C:\Windows\WindowsUpdate.log

2015-11-07 07:16 - 2014-04-17 04:42 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-11-07 07:00 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\system32\sru

2015-11-07 06:59 - 2014-04-17 04:41 - 00000000 ___HD C:\Users\Angela\AppData\Local\Deployment

2015-11-07 06:55 - 2014-04-27 07:20 - 00000000 ____D C:\Users\Angela\Desktop\Burn

2015-11-07 06:35 - 2014-04-16 20:20 - 00000000 ____D C:\Users\Angela\AppData\Local\Packages

2015-11-07 05:53 - 2014-05-10 15:48 - 00000000 ___HD C:\Users\Angela\AppData\Local\6A5912E2-B23C-44DB-8D36-B76C590889EB.aplzod

2015-11-07 02:00 - 2014-04-19 20:46 - 00000000 ___HD C:\Users\Angela\AppData\Local\Adobe

2015-11-06 17:26 - 2014-04-16 20:26 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-256437393-2301388578-1757125834-1001

2015-11-06 14:34 - 2015-09-19 20:50 - 00000000 ____D C:\Program Files\Bitdefender Agent

2015-11-06 13:39 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\AppReadiness

2015-11-06 09:16 - 2014-04-17 04:42 - 00000908 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-11-02 18:28 - 2014-06-15 12:58 - 00000000 ____D C:\Users\Angela\Documents\doTERRA

2015-11-02 13:15 - 2014-08-31 08:30 - 00000000 ____D C:\Users\Public\Documents\CyberLink

2015-11-02 13:15 - 2014-06-23 10:35 - 00000000 ____D C:\Users\Angela\Documents\CyberLink

2015-11-02 13:15 - 2014-06-23 10:35 - 00000000 ____D C:\Users\Angela\AppData\Roaming\CyberLink

2015-11-02 13:15 - 2014-04-07 04:50 - 00000000 ____D C:\ProgramData\CyberLink

2015-11-02 13:14 - 2014-04-07 04:54 - 00000000 ____D C:\Users\Public\CyberLink

2015-11-02 13:13 - 2014-04-07 04:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-11-02 13:11 - 2014-04-07 04:50 - 00000000 ____D C:\Program Files (x86)\CyberLink

2015-11-02 13:11 - 2014-04-07 04:46 - 00000000 ____D C:\ProgramData\Package Cache

2015-11-02 13:10 - 2014-04-07 04:51 - 00000000 ____D C:\ProgramData\install_clap

2015-11-02 13:05 - 2015-03-01 10:47 - 00000000 ____D C:\Users\Angela\Documents\Info

2015-11-02 12:26 - 2015-06-22 17:09 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask

2015-11-02 11:12 - 2015-05-09 13:51 - 00000870 _____ C:\Users\Public\Desktop\Print CD.lnk

2015-11-02 11:12 - 2015-05-09 13:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software

2015-11-02 11:12 - 2015-05-09 13:48 - 00000000 ____D C:\Program Files (x86)\EPSON Software

2015-11-02 10:58 - 2015-09-20 07:06 - 00000000 ____D C:\ProgramData\Bitdefender

2015-11-02 10:32 - 2014-04-19 21:10 - 00000000 ____D C:\ProgramData\softthinks

2015-11-02 10:32 - 2014-04-07 05:00 - 00000000 ____D C:\Program Files (x86)\Dell Backup and Recovery

2015-11-02 10:27 - 2014-04-16 20:24 - 00000000 ___DO C:\Users\Angela\SkyDrive

2015-11-02 10:16 - 2015-02-07 18:06 - 00021305 _____ C:\Windows\setupact.log

2015-11-02 10:16 - 2013-08-22 07:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-11-02 10:15 - 2013-08-22 06:25 - 00524288 ___SH C:\Windows\system32\config\BBI

2015-11-02 10:12 - 2014-04-07 04:42 - 00000000 ____D C:\Intel

2015-11-02 10:11 - 2014-04-07 04:45 - 00000000 ____D C:\ProgramData\Intel

2015-11-02 10:10 - 2014-04-07 04:43 - 00000000 ____D C:\Program Files (x86)\Intel

2015-11-02 10:10 - 2014-04-07 04:34 - 00865408 _____ C:\Windows\system32\PerfStringBackup.INI

2015-11-02 10:08 - 2014-04-07 04:43 - 00000000 ___HD C:\Program Files\Intel

2015-11-02 09:31 - 2015-09-20 07:49 - 00002247 _____ C:\Users\Public\Desktop\Bitdefender 2016.lnk

2015-11-02 09:31 - 2015-09-20 07:09 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Bitdefender

2015-11-02 09:28 - 2015-09-20 07:03 - 00000000 ____D C:\Program Files\Common Files\Bitdefender

2015-11-02 09:18 - 2015-09-20 07:49 - 00775424 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys

2015-11-02 09:17 - 2015-09-20 07:49 - 01600512 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys

2015-11-02 09:12 - 2015-01-29 17:59 - 00002234 _____ C:\Windows\System32\Tasks\GarminUpdaterTask

2015-11-02 09:12 - 2014-09-20 10:33 - 00001738 _____ C:\Windows\System32\Tasks\{1F9C8E06-4280-44D8-9DC9-E853B3CEEA3C}

2015-11-02 09:12 - 2014-08-04 17:40 - 00001654 _____ C:\Windows\System32\Tasks\{6E5F788F-7BFC-40E8-B977-C29A30B4524E}

2015-11-02 09:12 - 2014-04-07 04:48 - 00001880 _____ C:\Windows\System32\Tasks\PocketCloudUpdater

2015-11-02 09:12 - 2014-04-07 04:48 - 00001862 _____ C:\Windows\System32\Tasks\PocketCloudVirtualChannel

2015-11-02 09:12 - 2014-04-07 04:48 - 00001760 _____ C:\Windows\System32\Tasks\PocketCloud

2015-11-02 09:12 - 2014-04-07 04:21 - 00001834 _____ C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements

2015-11-02 09:11 - 2014-04-17 04:42 - 00003884 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-11-02 09:11 - 2014-04-17 04:42 - 00003648 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-11-01 18:45 - 2013-08-22 06:25 - 00262144 ___SH C:\Windows\system32\config\ELAM

2015-11-01 18:44 - 2014-04-07 04:19 - 00164690 _____ C:\Windows\PFRO.log

2015-11-01 18:43 - 2013-08-22 08:20 - 00000000 ____D C:\Windows\CbsTemp

2015-11-01 18:06 - 2014-04-07 04:50 - 00000000 ____D C:\ProgramData\Temp

2015-11-01 17:20 - 2014-04-20 20:33 - 00000000 ___HD C:\Users\Angela\AppData\Local\Apple

2015-11-01 09:55 - 2014-05-22 19:42 - 00000000 ____D C:\Users\Angela\Documents\ebooks

2015-11-01 08:49 - 2014-04-27 16:16 - 00000000 ____D C:\ProgramData\boost_interprocess

2015-10-31 18:31 - 2014-04-27 07:20 - 00000000 ____D C:\Users\Angela\Desktop\SVG Files

2015-10-28 05:16 - 2015-09-21 09:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-10-27 18:36 - 2014-05-17 11:24 - 00000000 ____D C:\Users\Angela\Documents\Recipes

2015-10-26 18:22 - 2015-09-21 09:44 - 00001148 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-10-26 18:22 - 2015-09-21 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-10-26 18:22 - 2015-09-21 09:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-10-26 14:09 - 2014-05-15 18:53 - 00000000 ____D C:\Users\Angela\Documents\Health

2015-10-25 13:43 - 2014-04-16 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2015-10-25 13:43 - 2014-04-16 20:29 - 00000000 ____D C:\ProgramData\EPSON

2015-10-25 12:09 - 2015-05-09 13:47 - 00000980 _____ C:\Users\Public\Desktop\EPSON Scan.lnk

2015-10-24 19:28 - 2015-07-18 08:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-10-24 19:27 - 2014-04-20 20:33 - 00000000 ___HD C:\Program Files\Common Files\Apple

2015-10-21 20:59 - 2015-02-15 19:27 - 00003816 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate

2015-10-20 19:29 - 2015-03-20 07:52 - 00000000 ____D C:\Users\Angela\AppData\Roaming\Dropbox

2015-10-19 05:46 - 2015-08-29 06:59 - 00000000 ____D C:\Program Files\iPod

2015-10-19 05:46 - 2014-04-20 20:34 - 00000000 ____D C:\ProgramData\Apple Computer

2015-10-18 04:45 - 2014-04-16 20:19 - 00000000 ___HD C:\Users\Angela

2015-10-17 08:31 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\rescache

2015-10-16 17:56 - 2013-08-22 08:36 - 00000000 ___RD C:\Windows\ToastData

2015-10-15 21:51 - 2014-11-14 14:07 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-10-15 21:51 - 2014-11-14 14:07 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-15 05:26 - 2015-04-19 07:03 - 00000000 ____D C:\Windows\system32\appraiser

2015-10-15 05:26 - 2015-03-05 05:06 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-10-14 05:19 - 2014-04-16 22:09 - 00000000 ____D C:\Windows\system32\MRT

2015-10-14 05:13 - 2014-04-16 22:09 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2014-07-17 16:01 - 2014-07-17 16:01 - 27045552 _____ (McAfee) C:\Program Files (x86)\Common Files\lpuninstall.exe

2014-07-19 16:04 - 2015-09-28 10:17 - 0001456 ____H () C:\Users\Angela\AppData\Local\Adobe Save for Web 12.0 Prefs

2015-01-24 10:03 - 2015-01-24 10:03 - 0007619 ____H () C:\Users\Angela\AppData\Local\Resmon.ResmonCfg

2015-09-20 07:52 - 2015-09-20 07:52 - 1191395 _____ () C:\ProgramData\1442757842.bdinstall.bin

2015-10-13 04:52 - 2015-10-13 04:52 - 0024806 _____ () C:\ProgramData\1444737166.bdinstall.bin

2015-11-02 09:41 - 2015-11-02 09:41 - 0412942 _____ () C:\ProgramData\1446481385.bdinstall.bin

2014-04-07 04:21 - 2014-04-07 04:21 - 0000000 _____ () C:\ProgramData\DP45977C.lfl

2014-04-07 04:55 - 2014-04-07 04:55 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log

2014-04-07 04:51 - 2014-04-07 04:52 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log

2014-04-07 04:52 - 2014-04-07 04:53 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log

2014-04-07 04:53 - 2014-04-07 04:54 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log

2014-04-07 04:50 - 2014-04-07 04:50 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Files to move or delete:

====================

C:\Users\Angela\iCloudSetup.exe

C:\Users\Angela\silhouette-studio_v3.3.277.exe

Some files in TEMP:

====================

C:\Users\Angela\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmuqhmf.dll

C:\Users\Angela\AppData\Local\Temp\OfficeSetup.exe

C:\Users\Angela\AppData\Local\Temp\ose00000.exe

C:\Users\Angela\AppData\Local\Temp\setup32.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-29 05:33

==================== End of FRST.txt ============================

Addition run:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-11-2015

Ran by Angela (2015-11-07 07:41:37)

Running from C:\Users\Angela\Desktop

Windows 8.1 (X64) (2014-04-17 03:19:46)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-256437393-2301388578-1757125834-500 - Administrator - Disabled)

Angela (S-1-5-21-256437393-2301388578-1757125834-1001 - Administrator - Enabled) => C:\Users\Angela

Guest (S-1-5-21-256437393-2301388578-1757125834-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 16.2.1 - Hewlett-Packard) Hidden

Adobe Acrobat X Pro (HKLM-x32\...\{AC76BA86-1033-0000-7760-000000000005}) (Version: 10.1.14 - Adobe Systems)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.144 - Adobe Systems Incorporated)

Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.1.0.0 - Adobe Systems Incorporated)

Amazon 1Button App (HKLM-x32\...\{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}) (Version: 1.0.0.4 - Amazon)

Amazon Music (HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)

Amazon Music Importer (HKLM-x32\...\com.amazon.music.uploader) (Version: 3.1.0 - Amazon Services LLC)

Amazon Music Importer (x32 Version: 3.1.0 - Amazon Services LLC) Hidden

ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.18.1035 - Bitdefender)

Bitdefender Total Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.18.1037 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.1.3) (Version: 5.0.1.3 - Coupons.com Incorporated)

CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDVD 15 (HKLM-x32\...\{DE85B8F3-D088-4D6E-A970-EE0BC7883A66}) (Version: 15.0.2211.58 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)

Dell Data Vault (Version: 4.3.5.1 - Dell Inc.) Hidden

Dell Digital Delivery (HKLM-x32\...\{03A9F528-A754-460F-B2C1-AC125A147114}) (Version: 2.8.5000.0 - Dell Products, LP)

Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)

Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.1.14 - Dell)

Dell System Detect (HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\73f463568823ebbe) (Version: 6.7.0.2 - Dell)

Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 17.0.13.0 - Synaptics Incorporated)

Dell Update (HKLM-x32\...\{D9E0A33F-19D6-45A7-83BB-535C7B5F699B}) (Version: 1.5.3000.0 - Dell Inc.)

Dropbox (HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)

Easy Photo Scan (HKLM-x32\...\{1A6DED1E-A024-455D-AA82-203D6B3B0CBC}) (Version: 1.00.0006 - Seiko Epson Corporation)

Elements 12 Organizer (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden

Elevated Installer (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden

EPSON Artisan 1430 Series Printer Uninstall (HKLM\...\EPSON Artisan 1430 Series) (Version: - SEIKO EPSON Corporation)

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)

Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.7.0.0 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{5662F323-3D9C-4100-B60C-BC71B47DD0A1}) (Version: 3.10.0041 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.53.00 - SEIKO EPSON CORPORATION)

EPSON NX230 Series Printer Uninstall (HKLM\...\EPSON NX230 Series) (Version: - SEIKO EPSON Corporation)

Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )

Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.42.00 - SEIKO EPSON CORPORATION)

Epson Printer Connection Checker (HKLM-x32\...\{7BE20D33-EAE9-4E85-870F-204F65E04F89}) (Version: 1.0.1.0 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)

EPSON XP-860 Series Printer Uninstall (HKLM\...\EPSON XP-860 Series) (Version: - SEIKO EPSON Corporation)

Epson XP-860 User's Guide version 1.0 (HKLM-x32\...\UsersGuideEpson XP-860 User's Guide_is1) (Version: 1.0 - )

EpsonNet Print (HKLM\...\{F983229B-587E-4322-BCB9-D7A49734E5CD}) (Version: 3.0.0.0 - SEIKO EPSON CORPORATION)

Evernote v. 5.8.13 (HKLM-x32\...\{A229420E-204B-11E5-B844-0050569584E9}) (Version: 5.8.13.8152 - Evernote Corp.)

Fitbit Connect (HKLM-x32\...\{E54705FB-98A6-4C03-B2DC-D8C3B5486DCD}) (Version: 2.0.0.6512 - Fitbit Inc.)

Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)

Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)

Garmin Express (HKLM-x32\...\{01b90f4a-c495-47c4-a33b-1391f41398ce}) (Version: 4.0.16.0 - Garmin Ltd or its subsidiaries)

Garmin Express (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden

Garmin Express Tray (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)

Google Photos Backup (HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\Google Photos Backup) (Version: 1.1.0.239 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.17 - Google Inc.) Hidden

iCloud (HKLM\...\{B33C558F-772F-4308-A059-390FBF9BAAAE}) (Version: 5.0.2.61 - Apple Inc.)

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)

Intel® PROSet/Wireless Software for Bluetooth® Technology(patch version 3.0.1342.1) (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{313c06de-4aa7-4a1f-930a-f10f80380426}) (Version: 17.14.0 - Intel Corporation)

iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Liberty Court Player 7.0 (build 625) (HKLM-x32\...\{9200C761-AB86-47BC-8CAA-5C718AB6310C}) (Version: 7.0.625 - High Criteria, Inc.)

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

McAfee SafeKey(uninstall only) (HKLM-x32\...\SafeKey) (Version: 2.1.6 - McAfee, Inc.)

McAfee Virtual Technician (HKLM-x32\...\McAfee Virtual Technician) (Version: 7.5.0.3093 - McAfee, Inc.)

MediaFire Desktop (HKLM-x32\...\MediaFire Desktop 1.4.29.10845) (Version: 1.4.29.10845 - MediaFire)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4605.1003 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

My Craft Studio Elite 3.1.9.0 (HKLM-x32\...\{0A4240E4-9A49-4551-8557-12F8887B0DCA}_is1) (Version: 3.1.9.0 - Craft Channel Productions Ltd)

Neat (HKLM-x32\...\Neat) (Version: 5.4.1.273 - The Neat Company)

Neat ADF Scanner 2008 Driver (HKLM\...\{8A2BC7D4-A7D3-45D5-B3D2-394718C53C41}) (Version: 2.0.1.5 - The Neat Company)

Neat ADF Scanner Driver (HKLM\...\{A55F1206-BFA7-4027-92B8-CE4EFDBC3CF2}) (Version: 2.0.2.1 - The Neat Company)

Neat Core Files (x32 Version: 5.4.1.273 - The Neat Company) Hidden

Neat Mobile Scanner (Silver) Driver (HKLM\...\{D1108D4B-72F8-419F-88C5-ABB8DC09B3C7}) (Version: 2.0.1.5 - The Neat Company)

Neat Mobile Scanner 2008 Driver (HKLM\...\{DDE25FC9-892D-4D24-9325-3BAA5C15ACA9}) (Version: 2.0.1.4 - The Neat Company)

Neat Mobile Scanner Driver (HKLM\...\{7EA2D88A-C8B7-4102-8644-0A437B6FC143}) (Version: 2.0.1.2 - The Neat Company)

NeatConnect Scanner Driver (HKLM\...\{6895EF47-6BD8-468E-BA09-B33636C65B7C}) (Version: 2.0.2.26 - The Neat Company)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4454.1510 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4454.1510 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4454.1510 - Microsoft Corporation) Hidden

PocketCloud (HKLM-x32\...\{D9752C7D-A595-4687-A0D5-362E9C311C55}) (Version: 2.7.14 - Wyse Technology)

Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.021 - Dell Inc.)

QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

RadiAnt DICOM Viewer (64-bit) (HKLM-x32\...\RadiAnt64) (Version: 1.9.16.7446 - Medixant)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7023 - Realtek Semiconductor Corp.)

Send To Neat (HKLM\...\{237E305C-B625-466A-88CE-1E121BF4FDB1}) (Version: 1.1.0.0 - The Neat Company)

Silhouette Studio (HKLM-x32\...\{BBF0A6BB-0E33-4FB9-A5B2-62908C9236F8}) (Version: 3.3.638 - Silhouette America)

SkyFonts™ (HKLM\...\{FF120142-9831-434A-8545-64868F254878}) (Version: 4.4.0.0 - Monotype Inc.)

Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION) <==== ATTENTION

Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

Zoom (HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Angela\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-256437393-2301388578-1757125834-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Angela\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

==================== Restore Points =========================

19-10-2015 05:24:25 Restore Point before iTunes was removed using Program Install and Uninstall troubleshooter

25-10-2015 13:36:31 Installed Epson Event Manager

01-11-2015 18:06:23 Installed PowerDVD

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2015-11-02 08:45 - 00002880 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0D8A891D-890C-4808-84D8-2F436AB14653} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION

Task: {1274336E-AB06-46B6-A48C-0671C5557CC6} - \Microsoft\Windows\TaskScheduler\Maintenance Configurator -> No File <==== ATTENTION

Task: {1687544D-7247-4F5A-965A-A6E920E55278} - \Microsoft\Windows\TaskScheduler\Manual Maintenance -> No File <==== ATTENTION

Task: {16A44543-88B3-42EB-9D3E-62447F90595C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-04-20] (Microsoft Corporation)

Task: {1A7D3345-EBAF-4856-A602-AC3791AF4B2B} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2015-05-25] (PC-Doctor, Inc.)

Task: {206203FB-09E9-41F5-B013-60A8DB27CBBB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {273FC218-5E23-45B7-B96B-D844D0CC464E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-14] (Microsoft Corporation)

Task: {2F9300CF-6B15-4A0E-B717-1548060EB607} - System32\Tasks\{6E5F788F-7BFC-40E8-B977-C29A30B4524E} => pcalua.exe -a "C:\Program Files (x86)\Google\Picasa3\Uninstall.exe"

Task: {3CC428A4-7D9D-4ABF-BAB8-A00AA5D8D262} - System32\Tasks\EPSON XP-860 Series Update {083DD251-0941-43CB-93F3-6758B516FFCC} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNIE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {5378CA11-4E05-4147-ABBD-ECDCFB0D11D7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)

Task: {5AF3A5FF-9023-4706-ADC4-BA828D6E95C7} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2015-10-21] (Apple Inc.)

Task: {6A4FFE60-DD47-4C07-9480-7F2047C3263E} - System32\Tasks\EPSON XP-860 Series Update {4A1B1EDE-7CB3-42E3-916B-379C4C3D9678} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNIE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {6F02587F-8A2B-4552-97F6-DEEF229E335B} - \Microsoft\Windows\TaskScheduler\Idle Maintenance -> No File <==== ATTENTION

Task: {707F9104-4CF9-46B5-9A6A-C177CE729F23} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-05-25] (PC-Doctor, Inc.)

Task: {738BB5AD-9466-4864-9513-4FA6E74599F9} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe

Task: {768AC765-93D9-4527-B738-FD6E36277260} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-09-30] (Dell Inc.)

Task: {774444A4-F028-4A62-8866-44620A49A581} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe

Task: {7F032D1A-8050-4732-BB1E-3EC93CCC3F31} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-22] (CyberLink Corp.)

Task: {877039A4-8BBE-404E-8528-05CC742737FA} - System32\Tasks\PocketCloud => C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudDesktopApp.exe [2013-08-22] ()

Task: {8C05D878-DCAC-4302-8D82-EF946188311C} - System32\Tasks\PocketCloudUpdater => C:\Program

Task: {8F4FFDF0-E858-4A92-99C2-219E13942AFD} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)

Task: {94D6053E-E041-4B28-B3DE-94E6A616A545} - System32\Tasks\{1F9C8E06-4280-44D8-9DC9-E853B3CEEA3C} => pcalua.exe -a "C:\Users\Angela\Desktop\SVG Files\Fonts\ldoz.exe" -d "C:\Users\Angela\Desktop\SVG Files\Fonts"

Task: {A938B1BC-2EEE-45B0-AE05-66DA2BCDEAF9} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-06] (Synaptics Incorporated)

Task: {B7992938-01F1-4F40-A0EC-0D23D2F0F152} - \Microsoft\Windows\TaskScheduler\Regular Maintenance -> No File <==== ATTENTION

Task: {BCB1275D-4046-495F-8FFF-8D70EC29D085} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-04-20] (Microsoft Corporation)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - \Microsoft\Windows\SettingSync\BackupTask -> No File <==== ATTENTION

Task: {D062BBD2-3269-483B-BABE-63533437E0D8} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-03-04] (CyberLink)

Task: {DA0CD975-FF14-4033-B4BA-FB6785FCECFB} - System32\Tasks\PocketCloudVirtualChannel => C:\Program Files (x86)\Wyse\PocketCloud\WPCRDPVirtualChannelServer.exe [2013-08-22] ()

Task: {DCF1EBD9-380D-4883-91FE-38608EBA08B6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-03-30] (Microsoft Corporation)

Task: {F1E64AAC-6C07-4E6A-A17F-3324203E3C72} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core.job => C:\Users\Angela\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\EPSON XP-860 Series Update {083DD251-0941-43CB-93F3-6758B516FFCC}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNIE.EXE:/EXE:{083DD251-0941-43CB-93F3-6758B516FFCC} /F:UpdateWORKGROUP\ANGELA$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\Windows\Tasks\EPSON XP-860 Series Update {4A1B1EDE-7CB3-42E3-916B-379C4C3D9678}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNIE.EXE:/EXE:{4A1B1EDE-7CB3-42E3-916B-379C4C3D9678} /F:UpdateWORKGROUP\ANGELA$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1cfaf3b2f11f8ab.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1cfed9884e7d3ab.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1cfffa1dab4bae.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1d040f7651a068b.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1d09007c341cf99.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-256437393-2301388578-1757125834-1001Core1d0bf4766d79e3d.job => C:\Users\Angela\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-04-27 16:07 - 2013-11-14 01:05 - 00054784 _____ () C:\Windows\System32\sdtnpm.dll

2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2014-04-27 05:46 - 2013-10-31 18:13 - 00102568 ____H () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-04-16 20:51 - 2014-03-25 13:21 - 00629928 ____H () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll

2015-08-05 05:08 - 2015-04-23 06:47 - 00456176 _____ () C:\Users\Angela\AppData\Local\MediaFire Desktop\MFUsnMonitorService.exe

2015-11-02 09:31 - 2015-09-07 22:31 - 00335120 ____N () C:\Program Files\Bitdefender\Bitdefender 2016\bdconnect.dll

2013-08-22 11:40 - 2013-08-22 11:40 - 00016176 _____ () C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe

2013-08-22 11:40 - 2013-08-22 11:40 - 00040240 _____ () C:\Program Files (x86)\Wyse\PocketCloud\AetherServiceLib.dll

2013-08-22 11:40 - 2013-08-22 11:40 - 00046384 _____ () C:\Program Files (x86)\Wyse\PocketCloud\AetherHelperLib.dll

2014-04-16 20:53 - 2014-04-20 18:56 - 06522480 ____H () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-04-07 04:43 - 2014-10-03 17:36 - 00457616 _____ () C:\Windows\system32\igfxTray.exe

2015-11-02 09:31 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2013-08-22 00:19 - 2013-08-21 23:54 - 00174592 _____ () C:\Windows\system32\WinMetadata\Windows.UI.winmd

2014-09-18 11:37 - 2014-07-02 19:55 - 00487144 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe

2014-04-07 04:45 - 2013-12-11 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2014-04-07 04:53 - 2013-03-26 21:40 - 00045129 ____N () C:\Program Files (x86)\Cyberlink\Shared files\RichVideops.dll

2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-04-16 20:51 - 2014-04-20 18:57 - 06522480 ____H () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll

2015-09-02 13:10 - 2015-08-27 17:17 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll

2015-09-02 13:10 - 2015-08-27 17:17 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll

2014-09-18 11:37 - 2014-07-30 15:37 - 01906464 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll

2014-04-07 05:01 - 2012-11-25 22:19 - 01153384 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll

2014-09-18 11:37 - 2012-11-25 22:19 - 00117608 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll

2014-04-16 20:51 - 2014-04-20 18:54 - 00309376 ____H () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2014-04-16 20:51 - 2014-04-20 18:57 - 06522480 ____H () C:\Program Files\Microsoft Office 15\Root\Office15\1033\GrooveIntlResource.dll

2015-11-02 13:13 - 2015-10-11 08:17 - 00873912 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\common\UNO\UNO.dll

2015-11-02 13:12 - 2013-12-10 04:31 - 00074240 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_ctypes.pyd

2015-11-02 13:12 - 2013-12-10 04:31 - 00285184 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_hashlib.pyd

2015-11-02 13:12 - 2013-12-10 04:31 - 00041984 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_sqlite3.pyd

2015-11-02 13:13 - 2013-12-10 04:31 - 00337920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\sqlite3.dll

2015-11-02 13:13 - 2015-10-11 08:20 - 00184248 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\AudioFilter\CLVistaAudioMixer.dll

2015-11-02 13:12 - 2013-12-10 04:31 - 00040960 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_socket.pyd

2015-11-02 13:12 - 2013-12-10 04:31 - 00721920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_ssl.pyd

2015-11-02 13:12 - 2013-12-10 04:31 - 00877056 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\_bsddb.pyd

2015-11-02 13:13 - 2015-09-30 09:23 - 00695808 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\subsys\PyMediaInfo\tag.dll

2015-11-02 13:12 - 2013-12-10 04:31 - 00103424 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\Koan\pyexpat.pyd

2015-11-02 13:13 - 2015-10-11 08:17 - 00873912 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\UNO\UNO.dll

2015-11-02 13:13 - 2015-09-30 09:28 - 00337920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\sqlite3.dll

2015-11-02 13:13 - 2015-10-11 08:17 - 00249344 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\NavFilter\libebml.dll

2015-11-02 13:13 - 2015-10-11 08:17 - 00548352 _____ () C:\Program Files (x86)\CyberLink\PowerDVD15\Common\NavFilter\libmatroska.dll

2014-04-16 20:52 - 2014-04-20 18:56 - 01014352 ____H () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll

2014-04-16 20:51 - 2014-04-20 18:59 - 00321088 ____H () C:\Program Files\Microsoft Office 15\root\office15\msfad.dll

2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll

2014-04-16 20:51 - 2014-04-20 18:56 - 00121936 ____H () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll

2014-04-16 20:51 - 2014-04-20 18:54 - 00309376 ____H () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Angela\Downloads\epson15816.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\epson17065.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\itunes64setup.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\mbam-setup-2.1.8.1057.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\PowerDVD_12.0.30302.5112_Dell_PDVD_Patch_DVD150114-02_Normal.exe:BDU

AlternateDataStreams: C:\Users\Angela\Downloads\Zoom_launcher.exe:BDU

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\dell.com -> dell.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Angela\Pictures\2015-03-21\IMG_0841.JPG

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "Install SafeKey IE RunOnce.lnk"

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

HKLM\...\StartupApproved\Run: => "BTMTrayAgent"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"

HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "BrowserAppCoreService"

HKLM\...\StartupApproved\Run32: => "FUFAXRCV"

HKLM\...\StartupApproved\Run32: => "FUFAXSTM"

HKLM\...\StartupApproved\Run32: => "Fitbit Connect"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "ApplePhotoStreams"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "iCloudServices"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "Monotype SkyFonts System Extension"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "Google+ Auto Backup"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "AppleIEDAV"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "Amazon Music"

HKU\S-1-5-21-256437393-2301388578-1757125834-1001\...\StartupApproved\Run: => "Fitbit Connect"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{1E11B887-4A35-4835-AA31-1F8F4EE8F702}] => (Allow) C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudDesktopApp.exe

FirewallRules: [{DB947868-91B1-4B60-A76C-21D4C02C25FE}] => (Allow) C:\Program Files (x86)\Wyse\PocketCloud\AetherWindowsService.exe

FirewallRules: [{D901890F-831D-4EF7-82EF-F721E37DE9DE}] => (Allow) C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe

FirewallRules: [{3167BB45-6504-4405-B9D4-E18098B45013}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{69A4F00B-CBD7-4C4A-8E6C-B6C33B2AA4DA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{D4306DD2-96CF-4AFB-9DF4-8954DCFC130D}] => (Allow) LPort=2869

FirewallRules: [{9225EBF1-A91C-4582-9652-27D546E12849}] => (Allow) LPort=1900

FirewallRules: [{ED2E3257-CD0C-4125-8506-31CACD656425}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

FirewallRules: [{C5F43521-0976-4342-B2EA-7A138ADEC730}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

FirewallRules: [{CD7E549C-E207-4F00-BA9A-63498D6D8AF4}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{007BA693-62A8-4AD5-9D57-3BC213850617}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{5FD85F07-E64C-41A4-BD9C-A47CAF618B19}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{C4B5240D-DBAB-476C-909F-7BBA66675C92}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{A87E9666-81CA-4A73-AA9B-C7BF1FF67AE9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{F4DB024C-2E59-46B9-9D08-06505FC14378}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{81D676F4-CA85-4E03-AC4C-2C6500B5171A}] => (Allow) C:\Users\Angela\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{518386A0-CA9A-4239-BAF3-FA90686C3EE8}] => (Allow) C:\Users\Angela\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{D4FA143E-DDFC-400D-913D-DEDE14A8A3DC}C:\users\angela\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\angela\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{8132C771-4B08-4E2E-8F5D-0FA71DF10FE3}C:\users\angela\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\angela\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{EF4D5CEE-A6DC-468D-B07E-D6040031772A}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

FirewallRules: [{24F209B7-D670-4850-80F6-D00225435E22}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

FirewallRules: [{D10B3181-BC51-490A-88CA-DC1A77C7A559}] => (Allow) D:\Common\EpsonNet Setup\ENEasyApp.exe

FirewallRules: [{372C5ED5-7C1F-4E0C-8D62-CF29B791D693}] => (Allow) D:\Common\EpsonNet Setup\ENEasyApp.exe

FirewallRules: [{52373BC1-7579-4D57-88B5-86139B73B643}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [{3131AC05-1B9D-4EB2-9241-042AD109AA9F}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [TCP Query User{4439196D-0D95-4D54-BA25-F01607438122}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{3290F57E-CA05-4398-83D6-E77375CEC3F7}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{755B8D7D-9C1A-4F5E-9A3B-5AE08784063B}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe] => (Allow) C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe

FirewallRules: [UDP Query User{B208F31A-DC24-433D-8A3E-A09062FAF1B1}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe] => (Allow) C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe

FirewallRules: [{896D7BC9-DF3D-436C-A5CB-86B128C5795F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{0687A225-9C0D-4444-A64C-424D10B3CDF3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{9EDA4DF2-051E-4BD7-A558-A32F0124C45D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{3DF0F3E0-1173-4E20-B4BF-9ADF0446254A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{DF1D488D-E680-438A-8798-F22FE9B0A975}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{3212A6A4-BC7A-48F5-A59C-BD77238E5B6E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe

FirewallRules: [{9FECFEDE-3647-4C20-9150-D50F2AFED216}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{F1BF4B37-EB8A-40D0-B4D4-3D5A25A2573E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD.exe

FirewallRules: [{E77FFD4F-049C-417C-AA2C-98EBC430F0FA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD15\Kernel\DMS\CLMSServerPDVD15.exe

FirewallRules: [{7B52FF38-574F-43DA-9844-1AB2B8F31841}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD15Agent.exe

FirewallRules: [{7736D80D-BC3E-4026-8171-E64DF80C05B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD15\Movie\PowerDVDMovie.exe

FirewallRules: [{3D3F508D-D48E-4E42-A39E-1EB640A1F3FC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD15\Movie\PowerDVD Cinema\PowerDVDCinema.exe

FirewallRules: [{253EDDBE-3B62-4D09-AE05-9DF85888DBD4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/06/2015 05:36:04 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "AppVOpcServices.dll,processorArchitecture="x86",type="win32",version="4.6.0.111"1".

Dependent Assembly AppVOpcServices.dll,processorArchitecture="x86",type="win32",version="4.6.0.111" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (11/06/2015 05:26:46 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "AppVOpcServices.dll,processorArchitecture="x86",type="win32",version="4.6.0.111"1".

Dependent Assembly AppVOpcServices.dll,processorArchitecture="x86",type="win32",version="4.6.0.111" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (11/06/2015 04:20:59 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/06/2015 01:38:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: iCloudServices.exe, version: 34.0.0.12, time stamp: 0x561ca2e5

Faulting module name: What the....dll, version: 7601.2003.0.4, time stamp: 0x55e933dc

Exception code: 0xc0000005

Fault offset: 0x00001883

Faulting process id: 0x18e4

Faulting application start time: 0xiCloudServices.exe0

Faulting application path: iCloudServices.exe1

Faulting module path: iCloudServices.exe2

Report Id: iCloudServices.exe3

Faulting package full name: iCloudServices.exe4

Faulting package-relative application ID: iCloudServices.exe5

Error: (11/05/2015 04:08:57 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/05/2015 04:22:49 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 3484

Start Time: 01d117bc3412b9d7

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 8a8926ac-83af-11e5-82ac-8086f2009ca3

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (11/04/2015 10:24:45 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: downloader.exe, version: 1.0.30.400, time stamp: 0x53cfd46a

Faulting module name: wslib.dll, version: 4.0.0.118, time stamp: 0x55926788

Exception code: 0xc0000417

Fault offset: 0x000000000009b5d8

Faulting process id: 0x3ad0

Faulting application start time: 0xdownloader.exe0

Faulting application path: downloader.exe1

Faulting module path: downloader.exe2

Report Id: downloader.exe3

Faulting package full name: downloader.exe4

Faulting package-relative application ID: downloader.exe5

Error: (11/04/2015 03:56:55 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/03/2015 03:44:53 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

Error: (11/02/2015 03:33:21 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll8

System errors:

=============

Error: (11/02/2015 09:32:23 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Type with the following error:

%%5

Error: (11/02/2015 09:31:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Type with the following error:

%%5

Error: (11/02/2015 09:31:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Type with the following error:

%%5

Error: (11/02/2015 09:31:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Type with the following error:

%%5

Error: (11/02/2015 09:31:51 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Type with the following error:

%%5

Error: (11/02/2015 09:24:53 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for DeleteFlag with the following error:

%%5

Error: (11/02/2015 09:24:52 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for DeleteFlag with the following error:

%%5

Error: (11/02/2015 09:24:33 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Bitdefender Virus Shield service terminated unexpectedly. It has done this 1 time(s).

Error: (11/02/2015 09:24:30 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for DeleteFlag with the following error:

%%5

Error: (11/02/2015 08:05:37 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)

Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

CodeIntegrity:

===================================

Date: 2015-11-07 07:39:32.290

Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-11-07 07:39:32.083

Date: 2015-11-07 07:11:19.795

Date: 2015-11-07 07:11:19.520

Date: 2015-11-07 06:56:08.765

Date: 2015-11-07 06:56:08.576

Date: 2015-11-06 04:50:03.485

Date: 2015-11-06 04:50:03.233

Date: 2015-11-05 04:52:14.521

Date: 2015-11-05 04:52:14.321

==================== Memory info ===========================

Processor: Intel® Core™ i7-4500U CPU @ 1.80GHz

Percentage of memory in use: 48%

Total physical RAM: 16264.96 MB

Available physical RAM: 8313.85 MB

Total Virtual: 18696.96 MB

Available Virtual: 9029.59 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:922.15 GB) (Free:205.59 GB) NTFS

Drive w: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.19 GB) NTFS

Drive x: (PBR Image) (Fixed) (Total:8.23 GB) (Free:0.7 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 567EF5AB)

Partition: GPT.

==================== End of Addition.txt ============================Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-11-2015