My computer is really infected

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by Mom n Dad (administrator) on MOMNDAD-PC (12-09-2016 13:38:39)
Running from C:\Users\Mom n Dad\Downloads
Loaded Profiles: Mom n Dad (Available Profiles: Mom n Dad & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
() C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
() C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Pantech) C:\Program Files (x86)\NCMC\EUDL\UTM\PantechUTM.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(PC Drivers Headquarters) C:\Program Files (x86)\Driver Support\Driver Support\DriverSupport.exe
(Google Inc.) C:\Users\Mom n Dad\AppData\Local\Google\Update\GoogleUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
(Mindspark) C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\APPINTEGRATOR.EXE
(Mindspark) C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\AppIntegrator64.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\dlnaPlugin.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\SyncUP.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe
(Farbar) C:\Users\Mom n Dad\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760 2015-08-04] (Realtek Semiconductor)
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X8 (64-bit)\pua.exe [2012104 2015-11-28] (Corel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [133400 2011-12-16] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-17] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-11-29] (RealNetworks, Inc.)
HKLM-x32\...\Run: [InstaLAN] => C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe [1885088 2012-02-23] (Affinegy, Inc.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [HomeworkSimplified AppIntegrator 32-bit] => C:\PROGRA~2\HOMEWO~2\bar\1.bin\AppIntegrator.exe
HKLM-x32\...\Run: [HomeworkSimplified AppIntegrator 64-bit] => C:\PROGRA~2\HOMEWO~2\bar\1.bin\AppIntegrator64.exe
HKLM-x32\...\Run: [EasyMailLogin EPM Support] => C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\dimedint.exe [12824 2015-07-13] (Mindspark)
HKLM-x32\...\Run: [EasyMailLogin AppIntegrator 32-bit] => C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\APPINTEGRATOR.EXE [230424 2015-07-13] (Mindspark)
HKLM-x32\...\Run: [EasyMailLogin AppIntegrator 64-bit] => C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\AppIntegrator64.exe [265752 2015-07-13] (Mindspark)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\Run: [Driver Support] => C:\Program Files (x86)\Driver Support\Driver Support\DriverSupport.exe [5673824 2014-10-01] (PC Drivers Headquarters)
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\Run: [Google Update] => C:\Users\Mom n Dad\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-07-15] (Google Inc.)
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\Run: [Chromium] => c:\users\mom n dad\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\Run: [GoogleChromeAutoLaunch_EDEAD0EEDAACD124313EA82B8625168E] => C:\Users\Mom n Dad\AppData\Local\Chromium\Application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\RunOnce: [Uninstall C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\RunOnce: [Uninstall C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\RunOnce: [Uninstall C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mom n Dad\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\MountPoints2: {5d3af21f-6686-11e6-8d98-ed656eb76b56} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1399685641-2452391960-3966799618-1001\...\MountPoints2: {5d3af332-6686-11e6-8d98-ed656eb76b56} - "E:\HTC_Sync_Manager_PC.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:13101
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{1185df9b-6f1d-4fef-88ab-b9873ef8a071}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{285d4a35-be8b-4254-975d-0a0a65203b73}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
URLSearchHook: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 - (No Name) - {f78d8db4-444a-4a47-bec1-32164fe6b224} - C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\diSrcAs.dll (Mindspark)
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> {0D9AF04D-D70D-4AF8-A51B-CADA5C050768} URL = hxxps://delicious.com/search?p={searchTerms}
SearchScopes: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> {67A88121-0959-44EB-B659-E80911541B35} URL = hxxps://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=mkg028
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-08-27] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-27] (Microsoft Corporation)
BHO-x32: Toolbar BHO -> {2be98f70-2202-4f66-886c-c56f85bc28ce} -> C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\dibar.dll [2015-07-13] (Mindspark)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08] (CANON INC.)
BHO-x32: Search Assistant BHO -> {38c497c4-02cd-47d8-b69a-0658bdcc505c} -> C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\diSrcAs.dll [2015-07-13] (Mindspark)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2015-01-04] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-25] (Google Inc.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-01-04] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08] (CANON INC.)
Toolbar: HKLM-x32 - EasyMailLogin - {99d36030-fbbc-4f19-a436-3911134193db} - C:\Program Files (x86)\EasyMailLogin_di\bar\2.bin\dibar.dll [2015-07-13] (Mindspark)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-25] (Google Inc.)
Toolbar: HKU\S-1-5-21-1399685641-2452391960-3966799618-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-26] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-26] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-26] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-01-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-01-04] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2013-11-29] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2013-11-29] (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1399685641-2452391960-3966799618-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF Plugin HKU\S-1-5-21-1399685641-2452391960-3966799618-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Mom n Dad\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-1399685641-2452391960-3966799618-1001: @talk.google.com/O1DPlugin -> C:\Users\Mom n Dad\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-1399685641-2452391960-3966799618-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Mom n Dad\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-1399685641-2452391960-3966799618-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Mom n Dad\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Mom n Dad\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Mom n Dad\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: (RealDownloader) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-29] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK => not found

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-24]
CHR Extension: (Google Docs) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-24]
CHR Extension: (Google Drive) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-22]
CHR Extension: (YouTube) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22]
CHR Extension: (Google Sheets) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-24]
CHR Extension: (Google Docs Offline) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-22]
CHR Extension: (RealDownloader) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2015-09-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-24]
CHR Extension: (Gmail) - C:\Users\Mom n Dad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-24]
CHR HKLM-x32\...\Chrome\Extension: [cnpkmcjgpcihgfnkcjapiaabbbplkcmf] - C:\Program Files (x86)\Coupons.com CouponBar\chrome\Coupons.com.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AffinegyService; C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe [563104 2012-02-23] (Affinegy, Inc.)
R2 Belkin Local Backup Service; C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [181760 2011-04-19] () [File not signed]
R2 Belkin Network USB Helper; C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [55296 2010-02-09] () [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2981056 2016-08-11] (Microsoft Corporation)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [137968 2015-09-22] (Dell Inc.)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2016-03-10] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2016-03-10] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
S2 Pantech UTM Service; C:\Program Files (x86)\NCMC\EUDL\UTM\PantechService.exe [65536 2011-05-20] (TODO: <Company name>) [File not signed]
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056 2015-08-04] (Realtek Semiconductor)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31928 2016-04-22] (Dell Inc.)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-06-30] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [73728 2011-11-29] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4341424 2016-01-19] (Qualcomm Atheros Communications, Inc.)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2016-01-05] (Dell Computer Corporation)
S1 gwrvpwes; C:\WINDOWS\system32\drivers\gwrvpwes.sys [55168 2016-09-12] (Microsoft Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
S2 sxuptp; C:\Windows\System32\drivers\sxuptp.sys [291352 2009-06-22] (silex technology, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R1 {10e3e2da-8f7b-42cc-9f00-90007ce494b8}Gw64; C:\Windows\System32\drivers\{10e3e2da-8f7b-42cc-9f00-90007ce494b8}Gw64.sys [48832 2014-11-06] (StdLib)
R1 {255a824a-3cde-4dee-9785-284605606456}Gw64; C:\Windows\System32\drivers\{255a824a-3cde-4dee-9785-284605606456}Gw64.sys [48832 2014-10-28] (StdLib)
R1 {3cac76e7-8310-45ea-8277-96d048a78c60}Gw64; C:\Windows\System32\drivers\{3cac76e7-8310-45ea-8277-96d048a78c60}Gw64.sys [48784 2014-11-27] (StdLib)
R1 {4530e639-76ab-4435-889d-a5e81ae090a4}Gw64; C:\Windows\System32\drivers\{4530e639-76ab-4435-889d-a5e81ae090a4}Gw64.sys [48784 2014-10-20] (StdLib)
R1 {46a147d8-5171-42d8-b8a8-6a187525781d}Gw64; C:\Windows\System32\drivers\{46a147d8-5171-42d8-b8a8-6a187525781d}Gw64.sys [48784 2014-10-15] (StdLib)
R1 {51b9c91c-8e38-40ae-80de-58a590512b6b}Gw64; C:\Windows\System32\drivers\{51b9c91c-8e38-40ae-80de-58a590512b6b}Gw64.sys [48832 2014-11-10] (StdLib)
R1 {55dce8ba-9dec-4013-937e-adbf9317d990}Gw64; C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}Gw64.sys [61072 2014-07-24] (StdLib)
R1 {67f29abb-07b3-41f5-94cd-f819d7c1fc76}Gw64; C:\Windows\System32\drivers\{67f29abb-07b3-41f5-94cd-f819d7c1fc76}Gw64.sys [48784 2014-10-20] (StdLib)
R1 {6c84eb28-66c4-4e3d-8a5a-46ab94f0575a}Gw64; C:\Windows\System32\drivers\{6c84eb28-66c4-4e3d-8a5a-46ab94f0575a}Gw64.sys [48784 2014-10-19] (StdLib)
R1 {733fb217-c049-41ba-9504-3f2045e61977}Gw64; C:\Windows\System32\drivers\{733fb217-c049-41ba-9504-3f2045e61977}Gw64.sys [48784 2014-10-21] (StdLib)
R1 {94d62e35-4b43-494c-bf52-ba5935df36ef}Gw64; C:\Windows\System32\drivers\{94d62e35-4b43-494c-bf52-ba5935df36ef}Gw64.sys [48784 2014-12-01] (StdLib)
R1 {94d62e35-4b43-494c-bf52-ba5935df36ef}w64; C:\Windows\System32\drivers\{94d62e35-4b43-494c-bf52-ba5935df36ef}w64.sys [48784 2015-01-13] (StdLib)
R1 {9d5747ee-0448-4681-8337-1555de75a3b6}w64; C:\Windows\System32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}w64.sys [61120 2014-06-16] (StdLib)
R1 {b0c7827f-c845-429a-833b-c2a798fc4fc3}Gw64; C:\Windows\System32\drivers\{b0c7827f-c845-429a-833b-c2a798fc4fc3}Gw64.sys [48784 2014-10-25] (StdLib)
R1 {b59efc84-8479-4faa-b02a-e5c7e85c7926}Gw64; C:\Windows\System32\drivers\{b59efc84-8479-4faa-b02a-e5c7e85c7926}Gw64.sys [48784 2014-11-26] (StdLib)
R1 {bb7b7a60-f574-47c2-8a0b-4c56f2da9802}Gw64; C:\Windows\System32\drivers\{bb7b7a60-f574-47c2-8a0b-4c56f2da9802}Gw64.sys [48784 2014-10-05] (StdLib)
R1 {d428f5a9-a362-4938-a8b7-f0abd920078b}Gw64; C:\Windows\System32\drivers\{d428f5a9-a362-4938-a8b7-f0abd920078b}Gw64.sys [48784 2014-12-01] (StdLib)
R1 {d997fcb4-42b4-4f84-a147-2e498567c954}Gw64; C:\Windows\System32\drivers\{d997fcb4-42b4-4f84-a147-2e498567c954}Gw64.sys [48784 2014-11-28] (StdLib)
R1 {dc592624-f532-4311-9fc7-6920126fc404}Gw64; C:\Windows\System32\drivers\{dc592624-f532-4311-9fc7-6920126fc404}Gw64.sys [48784 2014-10-22] (StdLib)
R1 {f5d136d7-adc2-4c84-85b2-e564334ab0bc}Gw64; C:\Windows\System32\drivers\{f5d136d7-adc2-4c84-85b2-e564334ab0bc}Gw64.sys [48784 2014-10-22] (StdLib)
R1 {f63e4e62-e47d-4415-9bb4-c9b1dfe161b9}Gw64; C:\Windows\System32\drivers\{f63e4e62-e47d-4415-9bb4-c9b1dfe161b9}Gw64.sys [48832 2014-11-03] (StdLib)
R1 {fc7329ef-e953-454c-8e78-ed2cf0acb2ef}Gw64; C:\Windows\System32\drivers\{fc7329ef-e953-454c-8e78-ed2cf0acb2ef}Gw64.sys [48832 2014-10-31] (StdLib)
S1 ajcqhycc; \??\C:\WINDOWS\system32\drivers\ajcqhycc.sys [X]
U3 idsvc; no ImagePath
U5 REALPLAYERUPDATESVC; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-12 13:38 - 2016-09-12 13:39 - 00029884 _____ C:\Users\Mom n Dad\Downloads\FRST.txt
2016-09-12 13:37 - 2016-09-12 13:37 - 02397696 _____ (Farbar) C:\Users\Mom n Dad\Downloads\FRST64 (1).exe
2016-09-12 13:27 - 2016-09-12 13:38 - 00000000 ____D C:\FRST
2016-09-12 13:25 - 2016-09-12 13:25 - 00055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gwrvpwes.sys
2016-09-12 13:09 - 2016-09-12 13:10 - 03826240 _____ C:\Users\Mom n Dad\Downloads\adwcleaner_6.010.exe
2016-09-07 20:42 - 2016-09-07 20:42 - 00001273 _____ C:\Users\Mom n Dad\Desktop\Continue Flash Player Pro Installation.lnk
2016-09-06 22:12 - 2016-09-06 22:37 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\PlutoTV
2016-09-06 22:07 - 2016-09-06 22:07 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\IsolatedStorage
2016-09-06 22:06 - 2016-09-06 22:06 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\CEF
2016-09-06 22:05 - 2016-09-06 22:38 - 00000000 ____D C:\Program Files\COMODO
2016-09-06 22:05 - 2016-09-06 22:10 - 00000000 ____D C:\ProgramData\COMODO
2016-09-06 22:03 - 2016-09-06 22:04 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\Setup548490453
2016-09-06 22:03 - 2016-09-06 22:04 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\sano
2016-09-06 14:56 - 2016-09-06 14:56 - 00001936 _____ C:\Users\Mom n Dad\Desktop\Dawn.lnk
2016-09-06 11:59 - 2016-09-06 12:09 - 00000000 ____D C:\Users\Mom n Dad\Mail_20160906
2016-09-05 17:37 - 2016-09-05 17:37 - 04016517 _____ C:\Users\Mom n Dad\Downloads\F9 FIS Packet.pdf
2016-09-03 11:23 - 2016-09-03 11:23 - 00000000 ____D C:\ProgramData\Roblox
2016-09-03 11:22 - 2016-09-03 11:22 - 00000000 ____D C:\Program Files (x86)\Roblox
2016-08-31 10:12 - 2016-08-31 10:12 - 00000000 _____ C:\Users\Mom n Dad\Desktop\refresh (1) - Shortcut.lnk
2016-08-23 14:07 - 2016-08-23 14:07 - 00003348 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-23 14:05 - 2016-08-23 14:05 - 00000000 ____D C:\Users\Mom n Dad\AppData\Roaming\Skype
2016-08-22 23:27 - 2016-08-22 23:27 - 00001940 _____ C:\Users\Mom n Dad\Desktop\rFactor.lnk
2016-08-22 23:24 - 2016-08-22 23:24 - 00000000 ____D C:\Users\Mom n Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\rFactor
2016-08-22 23:23 - 2016-08-22 23:26 - 00000000 ____D C:\Program Files (x86)\rFactor
2016-08-22 23:10 - 2016-08-22 23:10 - 00000000 ____D C:\Users\Mom n Dad\AppData\Roaming\YourUpdater
2016-08-22 23:08 - 2016-09-07 10:47 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-08-22 23:08 - 2016-08-23 12:20 - 00000000 ____D C:\Program Files (x86)\SoftwareUpd
2016-08-22 23:08 - 2016-08-22 23:08 - 00000000 ____D C:\Program Files (x86)\SafeSavings
2016-08-22 23:08 - 2016-08-22 23:08 - 00000000 ____D C:\Program Files (x86)\PC_Support
2016-08-22 23:07 - 2016-08-22 23:07 - 00000003 _____ C:\Users\Mom n Dad\Desktop\2.txt
2016-08-22 23:07 - 2016-08-22 23:07 - 00000003 _____ C:\Users\Mom n Dad\Desktop\1.txt
2016-08-20 10:52 - 2016-08-20 10:52 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\oneClickRoot
2016-08-20 10:52 - 2016-08-20 10:52 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\AWSToolkit
2016-08-20 10:52 - 2016-08-20 10:52 - 00000000 ____D C:\Users\Mom n Dad\.android
2016-08-20 10:52 - 2016-08-20 10:52 - 00000000 ____D C:\Program Files (x86)\One Click Root
2016-08-20 10:51 - 2016-08-20 10:51 - 00000000 ____D C:\Users\Mom n Dad\AppData\Roaming\One Click Root
2016-08-16 03:18 - 2016-08-16 03:18 - 00159936 _____ (MBB) C:\WINDOWS\system32\Drivers\usb2ser.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-12 13:39 - 2014-04-18 05:52 - 00000368 _____ C:\WINDOWS\Tasks\CIMT_S-1-5-21-1399685641-2452391960-3966799618-1001.job
2016-09-12 13:39 - 2012-04-29 00:54 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-09-12 13:38 - 2012-09-22 21:23 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\Nero
2016-09-12 13:37 - 2012-04-29 01:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-09-12 13:30 - 2016-07-26 10:17 - 00000000 ____D C:\Users\Mom n Dad\Desktop\Mail_20160726
2016-09-12 13:25 - 2016-01-22 05:01 - 01021998 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-12 13:25 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF
2016-09-12 13:20 - 2013-11-29 19:38 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-12 13:18 - 2015-07-30 07:33 - 00000946 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1399685641-2452391960-3966799618-1001UA.job
2016-09-12 13:17 - 2016-01-22 05:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-12 13:17 - 2015-10-30 01:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-09-12 13:16 - 2016-01-22 05:02 - 00000000 ____D C:\Users\Mom n Dad
2016-09-12 13:15 - 2014-06-22 11:58 - 00000000 ____D C:\AdwCleaner
2016-09-12 13:14 - 2012-10-16 13:43 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2016-09-12 13:13 - 2014-03-22 20:20 - 00000000 ____D C:\Users\Mom n Dad\AppData\LocalLow\Yahoo!
2016-09-12 13:13 - 2012-10-16 13:48 - 00000000 ____D C:\Users\Mom n Dad\AppData\Roaming\Yahoo!
2016-09-12 12:48 - 2013-11-29 19:38 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-12 09:09 - 2012-09-22 21:52 - 00004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7A768056-8E95-406D-9C2A-AB86A5C81525}
2016-09-12 08:27 - 2016-02-03 02:27 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\CrashDumps
2016-09-12 02:47 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-11 15:18 - 2015-09-18 17:52 - 00000894 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1399685641-2452391960-3966799618-1001Core.job
2016-09-10 07:12 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-07 21:09 - 2016-02-08 13:06 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\FlickrUploadrWindows
2016-09-07 19:28 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-09-07 12:04 - 2012-09-23 12:09 - 00000000 ____D C:\ProgramData\PCDr
2016-09-07 11:04 - 2014-06-22 13:32 - 00000233 _____ C:\Users\Mom n Dad\AppData\Roaming\WB.CFG
2016-09-06 22:03 - 2014-10-07 03:38 - 00000258 __RSH C:\ProgramData\ntuser.pol
2016-09-06 12:34 - 2016-05-11 21:46 - 00000000 ____D C:\Users\Mom n Dad\Documents\Outlook Files
2016-09-06 11:45 - 2016-01-22 05:01 - 01035958 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-09-03 17:33 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-09-03 17:33 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-03 11:41 - 2016-05-06 20:11 - 00000000 ____D C:\Users\Mom n Dad\AppData\LocalLow\RbxLogs
2016-09-03 11:23 - 2016-05-06 20:11 - 00000244 _____ C:\Users\Mom n Dad\AppData\LocalLow\rbxcsettings.rbx
2016-09-02 11:00 - 2012-11-04 19:46 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-08-31 13:40 - 2014-08-14 19:15 - 00000000 ____D C:\Users\Mom n Dad\AppData\Local\Packages
2016-08-31 13:23 - 2013-03-03 12:16 - 00000048 _____ C:\Users\Mom n Dad\jagex_cl_oldschool_LIVE.dat
2016-08-30 08:43 - 2012-10-07 14:56 - 00000000 _____ C:\Users\Mom n Dad\Desktop\Games - Shortcut.lnk
2016-08-29 09:29 - 2016-06-01 11:30 - 00000000 _____ C:\Users\Mom n Dad\Desktop\Person 1 - Chromium.lnk
2016-08-29 05:45 - 2016-07-13 12:43 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-27 00:27 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-24 21:08 - 2014-07-24 17:23 - 00000000 ____D C:\Users\Mom n Dad\Downloads\Driver Support
2016-08-23 14:07 - 2015-11-12 09:48 - 00002423 _____ C:\Users\Mom n Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-23 14:07 - 2015-11-12 09:48 - 00000000 ___RD C:\Users\Mom n Dad\OneDrive
2016-08-23 12:21 - 2016-01-22 04:54 - 00366152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-18 08:59 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache
2016-08-17 14:23 - 2015-09-10 00:42 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-17 14:13 - 2015-10-30 04:07 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-17 14:13 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Windows Defender
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-08-17 14:12 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender

==================== Files in the root of some directories =======

2003-03-18 22:20 - 2003-03-18 22:20 - 1060864 _____ (Microsoft Corporation) C:\Program Files (x86)\mfc71.dll
2003-03-18 21:44 - 2003-03-18 21:44 - 0040960 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71CHS.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0045056 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71CHT.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0065536 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71DEU.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0057344 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71ENU.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0061440 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71ESP.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0061440 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71FRA.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0061440 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71ITA.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0049152 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71JPN.DLL
2003-03-18 21:44 - 2003-03-18 21:44 - 0049152 _____ (Microsoft Corporation) C:\Program Files (x86)\MFC71KOR.DLL
2003-03-18 22:12 - 2003-03-18 22:12 - 1047552 _____ (Microsoft Corporation) C:\Program Files (x86)\mfc71u.dll
2016-06-10 13:17 - 2016-06-10 13:17 - 2049556 _____ () C:\Users\Mom n Dad\AppData\Roaming\sb359.dat
2016-06-10 13:17 - 2016-06-10 13:17 - 0253952 _____ () C:\Users\Mom n Dad\AppData\Roaming\Setup47968.exe
2014-06-22 13:32 - 2016-09-07 11:04 - 0000233 _____ () C:\Users\Mom n Dad\AppData\Roaming\WB.CFG
2015-01-04 20:58 - 2015-01-04 20:58 - 0000010 _____ () C:\Users\Mom n Dad\AppData\Local\DSI.DAT
2015-01-04 20:58 - 2015-01-04 20:58 - 0022528 _____ () C:\Users\Mom n Dad\AppData\Local\dsisetup2094711532.exe
2014-07-19 12:16 - 2014-07-19 12:16 - 0000017 _____ () C:\Users\Mom n Dad\AppData\Local\resmon.resmoncfg
2015-12-19 17:32 - 2015-12-19 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{0698FE7B-E414-4BB9-8209-FEAB7FB84A34}
2015-12-26 17:32 - 2015-12-26 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{4F9E012A-B0F7-4988-8C86-80C15AFAC133}
2015-12-20 17:32 - 2015-12-20 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{5B0B5687-B085-47B9-9266-0AC8894FBC48}
2015-12-25 17:32 - 2015-12-25 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{6BCFBDB5-13CA-4BA0-9D52-F5DED8CDCCAB}
2015-12-24 17:32 - 2015-12-24 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{7C950353-CCB5-4619-BEC1-845D41D0A3EE}
2015-12-22 17:32 - 2015-12-22 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{99ADE811-4040-48CB-AB88-B99011B5366C}
2015-12-23 17:32 - 2015-12-23 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{9CD32FAC-56F8-47B0-8929-2100E8BE3501}
2015-12-21 17:32 - 2015-12-21 17:32 - 0000000 _____ () C:\Users\Mom n Dad\AppData\Local\{DB925C31-3D0E-4629-B67A-C92960EF44E9}
2013-01-11 22:55 - 2013-01-11 22:55 - 0000069 _____ () C:\ProgramData\dsgsdgdsgdsgw.bat
2013-01-11 22:55 - 2013-01-11 22:55 - 0000159 _____ () C:\ProgramData\dsgsdgdsgdsgw.reg
2015-09-19 13:39 - 2015-09-19 13:39 - 5133208 _____ (© PC Cleaners Inc) C:\ProgramData\pclunst.exe

Files to move or delete:
====================
C:\ProgramData\dsgsdgdsgdsgw.bat
C:\ProgramData\dsgsdgdsgdsgw.reg
C:\ProgramData\pclunst.exe

Some files in TEMP:
====================
C:\Users\Mom n Dad\AppData\Local\Temp\CorrLinks.exe
C:\Users\Mom n Dad\AppData\Local\Temp\DRHelper_installFinish.exe
C:\Users\Mom n Dad\AppData\Local\Temp\DRHelper_installStart.exe
C:\Users\Mom n Dad\AppData\Local\Temp\DRHelper_uninstallComplete.exe
C:\Users\Mom n Dad\AppData\Local\Temp\ICReinstall_FlashPlayerPro (2).exe
C:\Users\Mom n Dad\AppData\Local\Temp\ICReinstall_FlashPlayerPro.exe
C:\Users\Mom n Dad\AppData\Local\Temp\libeay32.dll
C:\Users\Mom n Dad\AppData\Local\Temp\lowproc.exe
C:\Users\Mom n Dad\AppData\Local\Temp\msvcr120.dll
C:\Users\Mom n Dad\AppData\Local\Temp\pspx8.0_cnet.exe
C:\Users\Mom n Dad\AppData\Local\Temp\sqlite3.dll
C:\Users\Mom n Dad\AppData\Local\Temp\stubhelper.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-09-05 20:03

==================== End of FRST.txt ============================