Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

RegSvr32 Error

Started by nicechaibabe , May 01 2016 05:53 PM

This topic is locked

#1
nicechaibabe

Posted 01 May 2016 - 05:53 PM

Member

Member
13 posts

I am at my wit's end with this error message, nothing I have tried will get rid of it. I have run more virus scans than I can count with Malwarebytes, tried cleaning up my registry keys with Piriform CC Cleaner, and even went as far as to try to restore my computer to a previous date (which failed and read a different error message) as well as run several CHKDSK /R through command prompt which also all failed. I realize there are probably several issues here, but the main one I'd like to tackle in hopes that it may cure some of the others is the error message I get whenever I boot up my computer, it states that the module "C:\Users\Me\AppData\Local\Icrsoft\loader_u.dll" failed to load. It then tells me to make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files. The last thing it says is that the specified module could not be found.

My laptop is a Lenovo Yoga, supposedly operating on Windows 8.1 (I think Windows 10 auto-installed itself on it, even though I've been trying to delay it until I got this resolved), with an Intel® Pentium® CPU N3520 @2.16GHz processor, 4.GB Installed Memory (RAM) and 64 bit OS with x64-based processor.

I stumbled across another user having more or less the same issue, and went ahead to run the FRST thing, but read the noticed that the resolutions were tailored to their computer and could potentially screw up mine, so rather than risk making everything worse, I am reaching out this way instead. Someone please help!

So here is the FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:01-05-2016

Ran by Me (administrator) on AUDRA (01-05-2016 12:33:00)

Running from C:\Users\Me\Downloads

Loaded Profiles: Me (Available Profiles: Me)

Platform: Windows 8.1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(COMODO Security Solutions) C:\Program Files\COMODO\COMMON\COSService.exe

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe

(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(SafeNet Inc.) C:\Windows\System32\hasplms.exe

(Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe

(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe

(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Lenovo) C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionPusher.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

() C:\Windows\SysWOW64\slpd.exe

(COMODO Security Solutions) C:\Program Files\COMODO\COMMON\SynchronizationService.exe

(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe

(Lenovo) C:\ProgramData\LenovoTransition\Server\x64\ymc.exe

() C:\Program Files (x86)\Lenovo\Yoga Picks\Service\x64\YogaPicks.AppService.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe

(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe

(Realtek semiconductor) C:\Windows\RTFTrack.exe

() C:\Program Files (x86)\Lenovo\Lenovo Transition\Transition.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe

() C:\Program Files (x86)\Lenovo\Lenovo Transition\TransitionServer.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\MSOSYNC.EXE

(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe

(Farbar) C:\Users\Me\Downloads\FRST64 (2).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\windows\system32\DptfPolicyLpmServiceHelper.exe [111488 2013-09-17] (Intel Corporation)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-04] (Conexant Systems, Inc.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891080 2013-10-17] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2013-09-06] (Realtek semiconductor)

HKLM\...\Run: [Yoga PhoneCompanion] => C:\Program Files\Lenovo Yoga PhoneCompanion\Yoga Phone Companion.exe [844304 2014-04-26] (Lenovo)

HKLM\...\Run: [AutoStartTransition] => C:\Program Files (x86)\Lenovo\Lenovo Transition\Transition.exe [294672 2014-04-26] ()

HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-04-26] (Lenovo(beijing) Limited)

HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-04-26] (Lenovo(beijing) Limited)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [164080 2015-06-27] (IvoSoft)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.)

HKLM-x32\...\Run: [Yoga Picks] => C:\Program Files (x86)\Lenovo\Yoga Picks\Yoga Picks.exe [119824 2013-12-02] (Lenovo)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248560 2016-04-08] (Dropbox, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-11-15] (Qualcomm®Atheros®)

HKLM\...\Policies\Explorer: [NoViewOnDrive] 0

HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0

HKLM\...\Policies\Explorer: [NoShellSearchButton] 0

HKLM\...\Policies\Explorer: [NoFind] 0

HKLM\...\Policies\Explorer: [NoFile] 0

HKLM\...\Policies\Explorer: [HideClock] 0

HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0

HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKLM\...\Policies\Explorer: [NoSetFolders] 0

HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKLM\...\Policies\Explorer: [NoSetTaskbar] 0

HKLM\...\Policies\Explorer: [NoDeletePrinter] 0

HKLM\...\Policies\Explorer: [NoDFSTab] 0

HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0

HKLM\...\Policies\Explorer: [NoLogoff] 0

HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0

HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0

HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKLM\...\Policies\Explorer: [NoResolveSearch] 0

HKLM\...\Policies\Explorer: [NoSaveSettings] 0

HKLM\...\Policies\Explorer: [NoHardwareTab] 0

HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKLM\...\Policies\Explorer: [NoDesktop] 0

HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0

HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0

HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0

HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0

HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0

HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0

HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23484296 2016-04-25] (Google)

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Run: [Icrsoft] => regsvr32.exe C:\Users\Me\AppData\Local\Icrsoft\loader_u.dll <===== ATTENTION

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2901584 2015-10-14] (Valve Corporation)

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Run: [GoogleChromeAutoLaunch_A1D915EA5DAE753EE11AF3AB6D0C4DBD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-04-27] (Google Inc.)

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\system: [DisableCMD] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\system: [NoDispAppearancePage] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\system: [NoDispBackgroundPage] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\system: [NoDispSettingsPage] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoHardwareTab] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [788480 2014-10-28] (Microsoft Corporation)

HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe [372408 2014-11-08] (Microsoft Corporation)

HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0

HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0

HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0

HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-04-25] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-04-25] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-04-25] (Google)

ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\FileSyncShell64.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\FileSyncShell64.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\FileSyncShell64.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

ShellIconOverlayIdentifiers: [COSDriveIconOverlay] -> {5FDACB62-6B7B-4116-9403-C5E0D3852A57} => C:\Program Files\COMODO\COMMON\ShellExtension.dll [2014-10-07] (C-O-M-O-D-O)

ShellIconOverlayIdentifiers: [COSSyncItemInSyncIconOverlay] -> {68F287EF-DA6D-4595-AF52-90FF6CE52AFE} => C:\Program Files\COMODO\COMMON\ShellExtension.dll [2014-10-07] (C-O-M-O-D-O)

ShellIconOverlayIdentifiers: [COSSyncItemModifiedIconOverlay] -> {AE67D273-7253-4236-B55E-D40055B305D6} => C:\Program Files\COMODO\COMMON\ShellExtension.dll [2014-10-07] (C-O-M-O-D-O)

ShellIconOverlayIdentifiers: [COSSyncItemNewIconOverlay] -> {022F23E9-DA0F-4A86-A728-CAF6150C0B63} => C:\Program Files\COMODO\COMMON\ShellExtension.dll [2014-10-07] (C-O-M-O-D-O)

ShellIconOverlayIdentifiers: [COSSyncItemUnsynchronizedIconOverlay] -> {4D7EE7CF-E7A1-45FE-8F80-3A37574918D7} => C:\Program Files\COMODO\COMMON\ShellExtension.dll [2014-10-07] (C-O-M-O-D-O)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileSyncShell.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileSyncShell.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Me\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileSyncShell.dll [2016-04-27] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

Startup: C:\Users\Me\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2014-10-13]

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{39D959D5-DF6C-485A-865E-473909CC08EA}: [DhcpNameServer] 150.201.1.2

Tcpip\..\Interfaces\{54A889E4-1F7B-4FE2-BEA0-9DCD20AB262E}: [DhcpNameServer] 192.168.1.1

ManualProxies:

Internet Explorer:

==================

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://home.lenovo.com

HKU\S-1-5-21-3877431653-220597728-3785205167-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://home.lenovo.com

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-3877431653-220597728-3785205167-1001 -> DefaultScope {55DB5020-5DB2-4B0E-9D50-EEAFCDDA079F} URL =

SearchScopes: HKU\S-1-5-21-3877431653-220597728-3785205167-1001 -> {55DB5020-5DB2-4B0E-9D50-EEAFCDDA079F} URL =

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-03-15] (Microsoft Corporation)

BHO: Pusnuugapecaceg -> {41590B24-FA55-4D1F-bFF1-18B2F966A124} -> C:\Program Files\Pusnuugapecaceg\Vepreoaj64.dll [2016-04-28] ()

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15] (Microsoft Corporation)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-06-27] (IvoSoft)

BHO-x32: Pusnuugapecaceg -> {41590B24-FA55-4D1F-bFF1-18B2F966A124} -> C:\Program Files\Pusnuugapecaceg\Vepreoaj.dll [2016-04-28] ()

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-09] (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-09] (Oracle Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-06-27] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:

========

FF ProfilePath: C:\Users\Me\AppData\Roaming\Mozilla\Firefox\Profiles\36u5pcxw.default

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-09] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-09] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-08-29] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

Chrome:

=======

CHR HomePage: Default -> hxxp://shs.suffield.org/home.aspx

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Profile: C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]

CHR Extension: (Bejeweled) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2015-02-19]

CHR Extension: (Google Docs) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]

CHR Extension: (Google Drive) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-20]

CHR Extension: (YouTube) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]

CHR Extension: (Google Search) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04]

CHR Extension: (Google Sheets) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]

CHR Extension: (Google Docs Offline) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-20]

CHR Extension: (AdBlock) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-04-17]

CHR Extension: (Pin It Button) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-09-24]

CHR Extension: (Asana Extension for Chrome) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\khnpeclbnipcdacdkhejifenadikeghk [2016-01-04]

CHR Extension: (Skype) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-04-28]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-06]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-07]

CHR Extension: (Gmail) - C:\Users\Me\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

CHR HKU\S-1-5-21-3877431653-220597728-3785205167-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 A590A28F-964A-4C77-8F34-9843761BE654; C:\Program Files\Pusnuugapecaceg\Peknhr.exe [275296 2016-04-28] ()

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2013-11-15] (Windows ® Win 7 DDK provider) [File not signed]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2828016 2016-02-09] (Microsoft Corporation)

R2 COSService.exe; C:\Program Files\COMODO\COMMON\COSService.exe [3550400 2014-10-07] (COMODO Security Solutions)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-22] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-22] (Dropbox, Inc.)

R2 DptfParticipantAcpiProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-09-17] (Intel Corporation)

R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [150760 2013-09-17] (Intel Corporation)

R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124904 2013-09-17] (Intel Corporation)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)

R2 hasplms; C:\windows\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)

R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel® Corporation) [File not signed]

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel® Corporation)

R2 LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [70416 2014-04-26] (Lenovo)

R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [163624 2013-11-04] (PointGrab LTD)

R2 PhoneCompanionPusher; C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionPusher.exe [285712 2014-04-26] (Lenovo)

S3 PhoneCompanionVap; C:\Program Files\Lenovo Yoga PhoneCompanion\PhoneCompanionVap.exe [304144 2014-04-26] (Lenovo)

S3 Pusnuugapecaceg Updater; C:\Program Files\Pusnuugapecaceg\Acidsaf.exe [273760 2016-04-28] ()

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()

R2 slpd; C:\Windows\SysWOW64\slpd.exe [88576 2015-04-09] () [File not signed]

R2 SynchronizationService.exe; C:\Program Files\COMODO\COMMON\SynchronizationService.exe [2575552 2014-10-07] (COMODO Security Solutions)

R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [File not signed]

R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [67856 2014-04-26] ()

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

R2 ymc; C:\ProgramData\LenovoTransition\Server\x64\ymc.exe [34576 2014-04-26] (Lenovo)

R2 YogaPicks.AppService; C:\Program Files (x86)\Lenovo\Yoga Picks\Service\x64\YogaPicks.AppService.exe [19440 2013-11-18] ()

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-11-15] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3858944 2013-10-17] (Qualcomm Atheros Communications, Inc.)

S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)

R0 bdisk; C:\Windows\System32\DRIVERS\bdisk.sys [85488 2014-10-07] (COMODO Security Solutions Inc.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-11-15] (Qualcomm Atheros)

R0 CBUFS; C:\Windows\System32\DRIVERS\CBUFS.sys [230712 2014-10-07] (COMODO Security Solutions Inc.)

R0 cbvd; C:\Windows\System32\DRIVERS\cbvd.sys [677744 2014-10-07] (COMODO Security Solutions Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)

R3 DptfDevAcpiProc; C:\Windows\system32\DRIVERS\DptfDevAcpiProc.sys [198808 2013-09-17] (Intel Corporation)

R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [78504 2013-09-17] (Intel Corporation)

R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [493240 2013-09-17] (Intel Corporation)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [24392 2013-10-16] (ELAN Microelectronic Corp.)

R2 hardlock; C:\windows\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)

R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2013-10-10] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)

R0 Reparse; C:\Windows\System32\DRIVERS\CBReparse.sys [674160 2014-10-07] (COMODO Security Solutions Inc.)

R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8874712 2013-09-06] (Realtek Semiconductor Corp.)

R3 SensorsServiceDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-28] (Microsoft Corporation)

R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)

R3 vdbus; C:\Windows\System32\drivers\vdbus.sys [826040 2014-10-07] (COMODO Security Solutions Inc.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

S1 bsdpr64; \??\C:\windows\system32\Drivers\bsdpr64.sys [X]

U0 SR; no ImagePath

U2 srservice; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-01 12:33 - 2016-05-01 12:34 - 00040035 _____ C:\Users\Me\Downloads\FRST.txt

2016-05-01 12:32 - 2016-05-01 12:33 - 00000000 ____D C:\FRST

2016-05-01 12:32 - 2016-05-01 12:32 - 02377216 _____ (Farbar) C:\Users\Me\Downloads\FRST64 (2).exe

2016-05-01 12:32 - 2016-05-01 12:32 - 02377216 _____ (Farbar) C:\Users\Me\Downloads\FRST64 (1).exe

2016-05-01 12:31 - 2016-05-01 12:31 - 02377216 _____ (Farbar) C:\Users\Me\Downloads\FRST64.exe

2016-04-30 17:07 - 2016-04-30 17:07 - 00006592 ____N C:\bootsqm.dat

2016-04-30 13:51 - 2016-04-30 13:51 - 00000000 ____D C:\Users\Me\Downloads\GoFlex_BundledSW (1)

2016-04-30 13:46 - 2016-04-30 13:48 - 194852403 _____ C:\Users\Me\Downloads\GoFlex_BundledSW (1).zip

2016-04-30 13:37 - 2016-04-30 13:37 - 00000000 ____D C:\Users\Me\AppData\Local\ElevatedDiagnostics

2016-04-30 13:33 - 2016-04-30 13:34 - 00541302 _____ C:\Users\Me\Downloads\DeviceWin8.meta.diagcab

2016-04-29 19:44 - 2016-04-29 19:44 - 00002298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-04-29 19:44 - 2016-04-29 19:44 - 00002286 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-04-29 19:42 - 2016-04-29 19:43 - 00987728 _____ (Google Inc.) C:\Users\Me\Downloads\ChromeSetup.exe

2016-04-29 19:35 - 2016-04-29 19:44 - 00000000 ____D C:\Users\Me\AppData\Local\Mozilla

2016-04-29 19:35 - 2016-04-29 19:38 - 00000000 ____D C:\Users\Me\AppData\Roaming\Mozilla

2016-04-29 19:35 - 2016-04-29 19:35 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2016-04-29 19:35 - 2016-04-29 19:35 - 00001170 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2016-04-29 19:35 - 2016-04-29 19:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-04-29 19:35 - 2016-04-29 19:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-04-29 19:34 - 2016-04-29 19:34 - 00242160 _____ C:\Users\Me\Downloads\Firefox Setup Stub 46.0.exe

2016-04-29 14:44 - 2016-04-29 14:44 - 00209030 ____T C:\Users\Me\Desktop\Prom Ballot.oxps

2016-04-29 13:18 - 2016-04-29 13:18 - 00003094 _____ C:\windows\System32\Tasks\{6C232F94-5963-423B-B0A9-78786CAB52D0}

2016-04-28 09:45 - 2016-04-29 13:09 - 00000000 ____D C:\Users\Me\AppData\Roaming\Hejij

2016-04-28 09:45 - 2016-04-29 13:09 - 00000000 ____D C:\Users\Me\AppData\Roaming\CebsuPaje

2016-04-28 09:45 - 2016-04-29 13:09 - 00000000 ____D C:\Users\Me\AppData\LocalLow\Company

2016-04-28 09:45 - 2016-04-28 09:45 - 00000000 ____D C:\uninst

2016-04-28 09:44 - 2016-04-29 15:04 - 00000000 ____D C:\Program Files\Pusnuugapecaceg

2016-04-28 09:44 - 2016-04-29 13:10 - 00000000 ____D C:\Users\Me\AppData\Local\Tempfolder

2016-04-28 09:44 - 2016-04-28 21:26 - 00000000 ____D C:\Program Files\PusnuugapecacegUn

2016-04-28 09:44 - 2016-04-28 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\SrpnFiles

2016-04-28 09:43 - 2016-04-28 09:43 - 04280320 _____ C:\Users\Me\Downloads\Harold_pinter_the_homecoming_script_pdf (4).iso

2016-04-28 09:43 - 2016-04-28 09:43 - 04280320 _____ C:\Users\Me\Downloads\Harold_pinter_the_homecoming_script_pdf (3).iso

2016-04-28 09:43 - 2016-04-28 09:43 - 04280320 _____ C:\Users\Me\Downloads\Harold_pinter_the_homecoming_script_pdf (2).iso

2016-04-28 09:42 - 2016-04-28 09:42 - 04280320 _____ C:\Users\Me\Downloads\Harold_pinter_the_homecoming_script_pdf (1).iso

2016-04-28 09:40 - 2016-04-28 09:41 - 04280320 _____ C:\Users\Me\Downloads\Harold_pinter_the_homecoming_script_pdf.iso

2016-04-27 17:06 - 2016-04-27 17:06 - 00002300 _____ C:\Users\Me\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2016-04-26 08:14 - 2016-04-26 08:14 - 00016182 ____H C:\Users\Me\Desktop\~WRL0549.tmp

2016-04-19 09:52 - 2016-04-19 09:53 - 03054080 _____ C:\Users\Me\Downloads\Cloud 9_s.ppt

2016-04-17 23:26 - 2016-04-05 17:53 - 00829944 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2016-04-17 23:26 - 2016-04-05 17:53 - 00176632 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-04-17 13:54 - 2016-04-17 13:54 - 119223343 _____ C:\Users\Me\Downloads\Photos.zip

2016-04-16 15:07 - 2016-04-16 15:08 - 12140644 _____ C:\Users\Me\Downloads\Presentation1.pptx

2016-04-15 17:46 - 2016-04-15 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2016-04-13 16:54 - 2016-04-13 16:54 - 00273581 _____ C:\Users\Me\Downloads\Cherry O assignment.pdf

2016-04-13 00:22 - 2016-02-02 14:16 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rasl2tp.sys

2016-04-13 00:21 - 2016-03-30 20:54 - 25817600 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2016-04-13 00:21 - 2016-03-30 20:31 - 02892800 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2016-04-13 00:21 - 2016-03-30 20:28 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2016-04-13 00:21 - 2016-03-30 20:25 - 06052352 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2016-04-13 00:21 - 2016-03-30 20:17 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2016-04-13 00:21 - 2016-03-30 20:03 - 20352512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2016-04-13 00:21 - 2016-03-30 19:56 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2016-04-13 00:21 - 2016-03-30 19:56 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2016-04-13 00:21 - 2016-03-30 19:55 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2016-04-13 00:21 - 2016-03-30 19:53 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2016-04-13 00:21 - 2016-03-30 19:51 - 02285056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2016-04-13 00:21 - 2016-03-30 19:50 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll

2016-04-13 00:21 - 2016-03-30 19:45 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2016-04-13 00:21 - 2016-03-30 19:45 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2016-04-13 00:21 - 2016-03-30 19:43 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2016-04-13 00:21 - 2016-03-30 19:43 - 00725504 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2016-04-13 00:21 - 2016-03-30 19:43 - 00379392 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2016-04-13 00:21 - 2016-03-30 19:42 - 02131968 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2016-04-13 00:21 - 2016-03-30 19:39 - 15415808 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2016-04-13 00:21 - 2016-03-30 19:30 - 04611072 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2016-04-13 00:21 - 2016-03-30 19:30 - 02596864 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2016-04-13 00:21 - 2016-03-30 19:30 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2016-04-13 00:21 - 2016-03-30 19:30 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2016-04-13 00:21 - 2016-03-30 19:27 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll

2016-04-13 00:21 - 2016-03-30 19:24 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2016-04-13 00:21 - 2016-03-30 19:23 - 02056192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2016-04-13 00:21 - 2016-03-30 19:23 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2016-04-13 00:21 - 2016-03-30 19:23 - 00330752 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2016-04-13 00:21 - 2016-03-30 19:21 - 13811712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2016-04-13 00:21 - 2016-03-30 19:18 - 01547264 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2016-04-13 00:21 - 2016-03-30 19:06 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2016-04-13 00:21 - 2016-03-30 19:05 - 02121216 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2016-04-13 00:21 - 2016-03-30 19:02 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2016-04-13 00:21 - 2016-03-30 19:00 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2016-04-13 00:15 - 2016-03-15 19:00 - 00561952 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys

2016-04-13 00:15 - 2016-03-15 10:14 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll

2016-04-13 00:15 - 2016-03-11 10:48 - 00833024 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll

2016-04-13 00:15 - 2016-03-10 14:22 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys

2016-04-13 00:15 - 2016-03-10 14:21 - 00401920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys

2016-04-13 00:15 - 2016-03-10 14:20 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys

2016-04-13 00:15 - 2016-03-10 13:44 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll

2016-04-13 00:15 - 2016-03-10 13:16 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll

2016-04-13 00:15 - 2016-03-10 13:03 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\samlib.dll

2016-04-13 00:15 - 2016-03-10 12:48 - 00064512 _____ (Microsoft Corporation) C:\windows\SysWOW64\samlib.dll

2016-04-13 00:14 - 2016-01-21 15:35 - 00952928 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll

2016-04-13 00:14 - 2016-01-21 14:42 - 00786152 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll

2016-04-13 00:13 - 2016-04-04 02:35 - 00046768 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe

2016-04-13 00:13 - 2016-04-02 09:26 - 01386496 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll

2016-04-13 00:13 - 2016-04-02 09:26 - 01169408 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll

2016-04-13 00:13 - 2016-03-28 09:21 - 00698368 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll

2016-04-13 00:13 - 2016-03-28 09:21 - 00499200 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll

2016-04-13 00:13 - 2016-03-28 09:21 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll

2016-04-13 00:13 - 2016-03-28 09:21 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll

2016-04-13 00:13 - 2016-03-28 09:21 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll

2016-04-13 00:12 - 2016-03-02 21:39 - 01661576 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll

2016-04-13 00:12 - 2016-03-02 21:39 - 01212248 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll

2016-04-13 00:12 - 2016-02-05 10:46 - 01455104 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe

2016-04-13 00:11 - 2016-01-27 11:18 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll

2016-04-13 00:10 - 2016-03-03 12:47 - 02345472 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll

2016-04-13 00:10 - 2016-03-03 12:33 - 01556992 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll

2016-04-13 00:10 - 2016-02-08 21:31 - 22365472 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll

2016-04-13 00:10 - 2016-02-08 21:31 - 19794896 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll

2016-04-13 00:10 - 2016-02-08 21:31 - 02757616 _____ (Microsoft Corporation) C:\windows\explorer.exe

2016-04-13 00:10 - 2016-02-08 21:31 - 02412576 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe

2016-04-13 00:10 - 2016-02-08 21:31 - 00273264 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe

2016-04-13 00:10 - 2016-02-08 16:55 - 02712576 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll

2016-04-13 00:10 - 2016-02-08 16:15 - 02551808 _____ (Microsoft Corporation) C:\windows\SysWOW64\themecpl.dll

2016-04-13 00:10 - 2016-02-08 16:02 - 01197056 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll

2016-04-13 00:10 - 2016-02-08 15:48 - 12879360 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll

2016-04-13 00:10 - 2016-02-08 15:43 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncHost.exe

2016-04-13 00:10 - 2016-02-08 15:40 - 00539648 _____ (Microsoft Corporation) C:\windows\SysWOW64\hgcpl.dll

2016-04-13 00:10 - 2016-02-08 15:39 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll

2016-04-13 00:10 - 2016-02-08 15:37 - 00141312 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingMonitor.dll

2016-04-13 00:10 - 2016-02-08 15:35 - 00954880 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll

2016-04-13 00:10 - 2016-02-08 15:34 - 00667648 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSyncCore.dll

2016-04-13 00:10 - 2016-02-08 15:33 - 00520192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll

2016-04-13 00:10 - 2016-02-08 14:50 - 03120640 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll

2016-04-13 00:10 - 2016-02-08 13:55 - 02592256 _____ (Microsoft Corporation) C:\windows\system32\themecpl.dll

2016-04-13 00:10 - 2016-02-08 13:33 - 01278464 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll

2016-04-13 00:10 - 2016-02-08 13:12 - 14466560 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll

2016-04-13 00:10 - 2016-02-08 13:02 - 00653824 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncHost.exe

2016-04-13 00:10 - 2016-02-08 13:00 - 00599552 _____ (Microsoft Corporation) C:\windows\system32\hgcpl.dll

2016-04-13 00:10 - 2016-02-08 12:58 - 00336384 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll

2016-04-13 00:10 - 2016-02-08 12:55 - 00173056 _____ (Microsoft Corporation) C:\windows\system32\SettingMonitor.dll

2016-04-13 00:10 - 2016-02-08 12:53 - 02171904 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll

2016-04-13 00:10 - 2016-02-08 12:53 - 01348096 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll

2016-04-13 00:10 - 2016-02-08 12:50 - 01220096 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll

2016-04-13 00:10 - 2016-02-08 12:50 - 00841728 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncCore.dll

2016-04-13 00:10 - 2016-02-08 12:48 - 00655872 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll

2016-04-13 00:10 - 2016-02-08 12:47 - 02819584 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll

2016-04-13 00:10 - 2016-02-08 12:44 - 00955392 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll

2016-04-13 00:10 - 2016-02-03 11:14 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys

2016-04-13 00:10 - 2016-02-02 13:51 - 00162304 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll

2016-04-13 00:10 - 2016-02-02 13:19 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll

2016-04-13 00:10 - 2016-02-02 13:01 - 00031744 _____ (Microsoft Corporation) C:\windows\system32\WsmAgent.dll

2016-04-13 00:10 - 2016-02-02 12:51 - 02609152 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll

2016-04-13 00:10 - 2016-02-02 12:48 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll

2016-04-13 00:10 - 2016-02-02 12:46 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAgent.dll

2016-04-13 00:10 - 2016-02-02 12:41 - 02170880 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll

2016-04-13 00:10 - 2016-02-02 12:39 - 00236032 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll

2016-04-13 00:10 - 2014-11-07 22:38 - 00166912 _____ (Microsoft Corporation) C:\windows\system32\AppxAllUserStore.dll

2016-04-13 00:10 - 2014-11-07 22:17 - 00143360 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxAllUserStore.dll

2016-04-13 00:05 - 2016-02-03 11:11 - 01673728 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll

2016-04-13 00:05 - 2016-02-02 13:15 - 00787456 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll

2016-04-12 23:59 - 2016-03-10 15:19 - 07452512 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

2016-04-12 23:59 - 2016-03-10 15:17 - 01663192 _____ (Microsoft Corporation) C:\windows\system32\winload.efi

2016-04-12 23:59 - 2016-03-10 15:17 - 01523216 _____ (Microsoft Corporation) C:\windows\system32\winload.exe

2016-04-12 23:59 - 2016-03-10 15:17 - 01490128 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi

2016-04-12 23:59 - 2016-03-10 15:17 - 01358960 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe

2016-04-12 23:59 - 2016-03-10 15:17 - 01133752 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll

2016-04-12 23:59 - 2016-03-10 13:48 - 00862720 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.d

#2
zep516

Posted 01 May 2016 - 08:40 PM

Trusted Helper

Malware Removal
8,090 posts

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

You're running Windows 8.1

Download the enclosed =>

fixlist.txt 10.76KB 224 downloads Save it in the location FRST64 is->(Your downloads folder). Now run FRST and click on the Fix button. Wait until finished.
The tool will make a log in the location FRST is, (Fixlog.txt). Please post it to your reply. After you post the fix log,

Do this below and post both logs.

Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

Double-click to run it. When the tool opens click Yes to disclaimer.
Make sure you checkmark Addition.txt box.
Press Scan button.
Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.

#3
nicechaibabe

Posted 02 May 2016 - 01:30 PM

Member

Topic Starter
Member
13 posts

Thank you so much for helping! I'm sorry for replying so late, I had just decided that I probably wasn't going to get a reply until the morning, I think, when you responded. I'm putting my texts in blue to distinguish my words from the log entries since there's so much text, if that is not helpful please let me know! The first log, when running the "Fix" option is as follows:

Fix result of Farbar Recovery Scan Tool (x64) Version:01-05-2016

Ran by Me (2016-05-02 15:10:22) Run:1

Running from C:\Users\Me\Downloads

Loaded Profiles: Me (Available Profiles: Me)

Boot Mode: Normal

==============================================

fixlist content:

*****************

CloseProcesses:

CreateRestorePoint: