[alicedhouser]

Need optimum performance from my computer. Am long distance older student with all on-line courses. Can't connect to some work. Computer is very slow and appears to be running something in background at all times. Messages have starting showing up with "Oh, Snap" and Norton Video will not open for quizzes and tests. 

First log I forgot to paste the Addition.txt Sorry!

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2017

Ran by Alice (administrator) on ALICE (26-05-2017 10:21:45)

Running from C:\Users\Alice\Desktop

Loaded Profiles: Alice (Available Profiles: Alice)

Platform: Windows 8.1 (Update) (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfemms.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe

(Dashlane, Inc.) C:\Users\Alice\AppData\Roaming\Dashlane\Dashlane.exe

(Dashlane, Inc.) C:\Users\Alice\AppData\Roaming\Dashlane\DashlanePlugin.exe

(Dropbox, Inc.) C:\Users\Alice\AppData\Local\Dropbox\Update\DropboxUpdate.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Smilebox, Inc.) C:\Users\Alice\AppData\Roaming\Smilebox\SmileboxTray.exe

(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe

(Dropbox, Inc.) C:\Users\Alice\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Dropbox, Inc.) C:\Users\Alice\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Dropbox, Inc.) C:\Users\Alice\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Dell Inc.) C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\McCSPServiceHost.exe

(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe

(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe

(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe

(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe

(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRSync.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe

 

==================== Registry (Whitelisted) ====================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3863040 2014-10-31] (Dell Inc.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8447192 2015-01-28] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1392496 2015-01-26] (Realtek Semiconductor)

HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [609200 2015-03-01] (Waves Audio Ltd.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [320360 2014-06-25] (Intel Corporation)

HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"

HKLM-x32\...\Run: [DropboxOEM] => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [462160 2014-09-02] ()

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4596904 2016-08-12] (Fitbit, Inc.)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [Dashlane] => C:\Users\Alice\AppData\Roaming\Dashlane\Dashlane.exe [505296 2017-04-21] (Dashlane, Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [DashlanePlugin] => C:\Users\Alice\AppData\Roaming\Dashlane\DashlanePlugin.exe [552400 2017-04-21] (Dashlane, Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [Dropbox Update] => C:\Users\Alice\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [GoogleChromeAutoLaunch_BAD64A432570774A860D804351820E25] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640 2017-05-09] (Google Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [SmileboxTray] => C:\Users\Alice\AppData\Roaming\Smilebox\SmileboxTray.exe [346072 2016-11-06] (Smilebox, Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\Run: [Fitbit Connect] => C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe [4596904 2016-08-12] (Fitbit, Inc.)

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\MountPoints2: {3b92e87d-b327-11e6-8294-5ce0c541fb2b} - "D:\VerizonWirelessUpgradeAssistantSetup.exe" -a

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\...\MountPoints2: {a15a5d92-68a5-11e6-8288-5ce0c541fb2b} - "D:\VerizonWirelessUpgradeAssistantSetup.exe" -a

ShellIconOverlayIdentifiers: [DBRShellOverlayBackupFile] -> {831CEBDD-6BAF-4432-BE76-9E0989C14AEF} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconBackuped.dll [2014-12-30] (Softthinks SAS)

ShellIconOverlayIdentifiers: [DBRShellOverlayModifiedBackupFile] -> {275E4FD7-21EF-45CF-A836-832E5D2CC1B3} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconNotBackuped.dll [2014-12-30] (Softthinks SAS)

Startup: C:\Users\Alice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-08-24]

ShortcutTarget: Dropbox.lnk -> C:\Users\Alice\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Alice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2017-03-04]

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)

BootExecute: autocheck autochk * sdnclean64.exe

GroupPolicy: Restriction - Chrome <======= ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62

Tcpip\..\Interfaces\{E2B0786B-1A4E-4946-9C66-41773F0E80DA}: [DhcpNameServer] 172.61.1.171

Tcpip\..\Interfaces\{ECBA0863-08E9-4CC4-BBA4-E521383C8B75}: [DhcpNameServer] 209.18.47.61 209.18.47.62

 

Internet Explorer:

==================

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://googlechrome/

HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1862641308-2105632346-2877700689-1001 -> DefaultScope {FD99E90D-8228-40C5-81B1-201EA2ED0D0E} URL = 

SearchScopes: HKU\S-1-5-21-1862641308-2105632346-2877700689-1001 -> {FD99E90D-8228-40C5-81B1-201EA2ED0D0E} URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)

BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)

BHO-x32: Dashlane BHO -> {42D79B50-CC4A-4A8E-860F-BE674AF053A2} -> C:\Users\Alice\AppData\Roaming\Dashlane\ie\Dashlanei.dll [2017-04-21] (Dashlane, Inc.)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-30] (Oracle Corporation)

BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-30] (Oracle Corporation)

Toolbar: HKLM-x32 - Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\Alice\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2017-04-21] (Dashlane, Inc.)

IE Session Restore: HKU\S-1-5-21-1862641308-2105632346-2877700689-1001 -> is enabled.

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-05-16] (McAfee, Inc.)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-09-23] (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-09-23] (McAfee, Inc.)

 

FireFox:

========

FF DefaultProfile: [email protected]

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi

FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-04-18]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK

FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2016-08-15] [not signed]

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-09-23] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-30] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-30] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-09-23] ()

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-25] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-25] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)

 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com/webhp?nord=1"

CHR Profile: C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default [2017-05-26]

CHR Extension: (Google Slides) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-15]

CHR Extension: (Entanglement Web App) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2015-09-15]

CHR Extension: (Bejeweled) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2015-09-15]

CHR Extension: (Sudoku) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\agdhembpgcpfegeigidembjopfhghnpj [2015-09-15]

CHR Extension: (Google Docs) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-15]

CHR Extension: (Google Drive) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-20]

CHR Extension: (Tri Jeweled 2) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\bennkoppbniegdeakggleaifebacachi [2015-09-15]

CHR Extension: (YouTube) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]

CHR Extension: (Honey) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2017-05-19]

CHR Extension: (OnlineMapFinder) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceopoaldcnmhechacafgagdkklcogkgd [2017-05-17]

CHR Extension: (Adblock Plus) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-24]

CHR Extension: (Spotify - Music for every moment) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh [2015-09-15]

CHR Extension: (Google Search) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Adobe Acrobat) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-21]

CHR Extension: (Google Calendar) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-10]

CHR Extension: (Pandora) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl [2015-09-15]

CHR Extension: (Dashlane Secure Password Manager) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2017-05-17]

CHR Extension: (Google Sheets) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-15]

CHR Extension: (PicMonkey) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdgokchhicmaiacmgegjnppjkgogdhm [2016-06-08]

CHR Extension: (Google Docs Offline) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]

CHR Extension: (The Camelizer) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2017-03-13]

CHR Extension: (IE Tab) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2017-05-17]

CHR Extension: (a Google a Day) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfffneapblebcpnkjdocjgopbajigool [2015-09-15]

CHR Extension: (Grammarly for Chrome) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2017-05-19]

CHR Extension: (BeFrugal.com Add-On) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdcneeneoifbeenbbnjodcflhdbaggp [2016-12-15]

CHR Extension: (Pic Maker) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcmgcbgahjfokkiniknnafmeoaolkfab [2015-09-15]

CHR Extension: (Google Maps) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-18]

CHR Extension: (Poppit!) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2015-09-15]

CHR Extension: (Mahjong Solitaire) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\neojceinbonpjjcokpokpeobkhcpiloc [2015-09-15]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-13]

CHR Extension: (Memo Notepad) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmoihkoninaoanjobiiknmgenhpaecec [2016-06-29]

CHR Extension: (Rollip - Photo Effects) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooikhmcdpofogemaldinihdhidaokcmp [2015-09-15]

CHR Extension: (Outlook.com) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge [2015-09-15]

CHR Extension: (Gmail) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-15]

CHR Extension: (Chrome Media Router) - C:\Users\Alice\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-17]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-15]

CHR HKU\S-1-5-21-1862641308-2105632346-2877700689-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-15]

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3971264 2017-05-14] (Microsoft Corporation)

R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2016-12-21] (Dell Inc.)

R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell)

R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [77648 2016-12-22] (Dell Inc.)

R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2571352 2016-01-05] (Dell Inc.)

R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201816 2016-01-05] (Dell Inc.)

S3 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [278568 2014-10-31] (Aviata, Inc.)

R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)

R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-08-28] (Intel Corporation)

R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5911720 2016-08-12] (Fitbit, Inc.)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-06-25] (Intel Corporation)

R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [121288 2014-08-13] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2015-01-19] (Intel Corporation)

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Corporation)

S3 iumsvc; C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [158496 2014-10-10] (Intel Corporation)

R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [188256 2017-05-16] (McAfee, Inc.)

R3 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [993824 2016-09-23] (McAfee, Inc.)

S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)

R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe [1910000 2016-05-31] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [816128 2016-06-21] (McAfee, Inc.)

S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-04-26] (McAfee, Inc.)

R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-07-11] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [277744 2016-04-26] (McAfee, Inc.)

R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1454216 2016-09-13] (McAfee, Inc.)

S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265936 2014-10-29] ()

R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1045336 2016-05-25] (Intel Security, Inc.)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [293080 2014-12-23] (Realtek Semiconductor)

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [2020240 2015-01-23] (SoftThinks SAS)

R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31928 2016-03-14] (Dell Inc.)

R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [563456 2015-01-20] (Waves Audio Ltd.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3818704 2014-10-29] (Intel® Corporation)

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [78632 2016-04-27] (McAfee, Inc.)

R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-05-22] (Dell Computer Corporation)

R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)

R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [41824 2014-08-28] (Intel Corporation)

R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-08-28] (Intel Corporation)

R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-08-28] (Intel Corporation)

R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [215848 2014-08-28] (Intel Corporation)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [216704 2016-08-02] (McAfee, Inc.)

R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [35832 2014-08-15] (Intel Corporation)

R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [120312 2014-08-15] (Intel Corporation)

S3 iaLPSS_SPI; C:\Windows\System32\drivers\iaLPSS_SPI.sys [100856 2014-08-15] (Intel Corporation)

S3 iaLPSS_UART2; C:\Windows\System32\drivers\iaLPSS_UART2.sys [143864 2014-08-15] (Intel Corporation)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [219592 2014-08-13] (Intel Corporation)

R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [129312 2014-10-10] (Intel Corporation)

R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419616 2016-04-27] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349480 2016-04-27] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83608 2016-04-27] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [493352 2016-04-27] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [843048 2016-04-27] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [519456 2016-08-01] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100136 2016-08-01] (McAfee, Inc.)

R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [243488 2016-04-27] (McAfee, Inc.)

R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-12-04] (Intel Corporation)

S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [92376 2013-10-09] (Realtek                                            )

R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)

R3 VirtualButtons; C:\Windows\System32\drivers\VirtualButtons.sys [31512 2014-07-16] (Intel Corporation)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-05-26 10:21 - 2017-05-26 10:21 - 02429952 _____ (Farbar) C:\Users\Alice\Desktop\FRST64.exe

2017-05-26 10:21 - 2017-05-26 10:21 - 00034179 _____ C:\Users\Alice\Desktop\FRST.txt

2017-05-26 09:55 - 2017-05-26 09:58 - 00050004 _____ C:\Users\Alice\Downloads\Addition.txt

2017-05-26 09:54 - 2017-05-26 09:58 - 00049907 _____ C:\Users\Alice\Downloads\FRST.txt

2017-05-26 09:53 - 2017-05-26 10:21 - 00000000 ____D C:\FRST

2017-05-26 09:52 - 2017-05-26 09:52 - 02429952 _____ (Farbar) C:\Users\Alice\Downloads\FRST64.exe

2017-05-25 20:02 - 2017-05-25 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2017-05-25 13:46 - 2017-05-25 13:46 - 00004468 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier

2017-05-25 13:46 - 2017-05-25 13:46 - 00004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2017-05-23 16:35 - 2017-05-23 16:35 - 00000121 _____ C:\Users\Alice\Downloads\FlashcardsChapterprelude01.csv

2017-05-22 12:31 - 2017-05-22 12:31 - 02442291 _____ C:\Users\Alice\Downloads\Summer 2017 Booklist.pdf

2017-05-22 12:16 - 2017-05-22 12:16 - 00000000 ____D C:\Users\Alice\Documents\New folder

2017-05-22 12:15 - 2017-05-23 08:30 - 00000000 ____D C:\Users\Alice\Documents\OCTech  Summer 2017

2017-05-18 17:11 - 2017-04-28 18:44 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2017-05-18 17:11 - 2017-04-28 18:44 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2017-05-17 11:41 - 2017-05-17 11:41 - 00000000 ____D C:\Users\Alice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2017-05-11 14:50 - 2017-04-28 17:15 - 07444824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2017-05-11 14:50 - 2017-04-26 10:06 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2017-05-11 14:50 - 2017-04-16 06:23 - 02176584 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2017-05-11 14:50 - 2017-04-16 06:23 - 01662096 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2017-05-11 14:50 - 2017-04-16 06:23 - 01063464 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2017-05-11 14:50 - 2017-04-16 06:18 - 01135288 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2017-05-11 14:50 - 2017-04-16 06:18 - 00803192 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2017-05-11 14:50 - 2017-04-16 05:07 - 01566032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2017-05-11 14:50 - 2017-04-16 05:07 - 01213792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2017-05-11 14:50 - 2017-04-16 05:07 - 00548032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll

2017-05-11 14:50 - 2017-04-16 05:05 - 00612096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2017-05-11 14:50 - 2017-04-16 04:54 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2017-05-11 14:50 - 2017-04-16 04:54 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2017-05-11 14:50 - 2017-04-16 04:51 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2017-05-11 14:50 - 2017-04-16 04:37 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2017-05-11 14:50 - 2017-04-16 04:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2017-05-11 14:50 - 2017-04-16 04:35 - 25741312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2017-05-11 14:50 - 2017-04-16 04:18 - 05977600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2017-05-11 14:50 - 2017-04-16 04:16 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2017-05-11 14:50 - 2017-04-16 04:10 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2017-05-11 14:50 - 2017-04-16 04:03 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2017-05-11 14:50 - 2017-04-16 04:02 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2017-05-11 14:50 - 2017-04-16 04:01 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-05-11 14:50 - 2017-04-16 04:00 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2017-05-11 14:50 - 2017-04-16 04:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2017-05-11 14:50 - 2017-04-16 03:53 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2017-05-11 14:50 - 2017-04-16 03:52 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2017-05-11 14:50 - 2017-04-16 03:49 - 20278272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-05-11 14:50 - 2017-04-16 03:47 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2017-05-11 14:50 - 2017-04-16 03:43 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2017-05-11 14:50 - 2017-04-16 03:40 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2017-05-11 14:50 - 2017-04-16 03:40 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2017-05-11 14:50 - 2017-04-16 03:40 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2017-05-11 14:50 - 2017-04-16 03:37 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2017-05-11 14:50 - 2017-04-16 03:29 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2017-05-11 14:50 - 2017-04-16 03:24 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2017-05-11 14:50 - 2017-04-16 03:23 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2017-05-11 14:50 - 2017-04-16 03:22 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2017-05-11 14:50 - 2017-04-16 03:22 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2017-05-11 14:50 - 2017-04-16 03:17 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2017-05-11 14:50 - 2017-04-16 03:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2017-05-11 14:50 - 2017-04-16 03:10 - 15250944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2017-05-11 14:50 - 2017-04-16 03:10 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-05-11 14:50 - 2017-04-16 03:10 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2017-05-11 14:50 - 2017-04-16 03:08 - 04548608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-05-11 14:50 - 2017-04-16 03:08 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2017-05-11 14:50 - 2017-04-16 03:04 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2017-05-11 14:50 - 2017-04-16 03:02 - 00267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll

2017-05-11 14:50 - 2017-04-16 02:53 - 13661184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-05-11 14:50 - 2017-04-16 02:50 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2017-05-11 14:50 - 2017-04-16 02:40 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2017-05-11 14:50 - 2017-04-16 02:37 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-05-11 14:50 - 2017-04-16 02:34 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-05-11 14:50 - 2017-04-16 02:34 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-05-11 14:50 - 2017-04-09 18:00 - 01548640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2017-05-11 14:50 - 2017-04-09 18:00 - 00388448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2017-05-11 14:50 - 2017-04-07 19:20 - 01375960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2017-05-11 14:50 - 2017-04-07 09:56 - 01094656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2017-05-11 14:50 - 2017-04-02 12:41 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2017-05-11 14:50 - 2017-04-02 12:41 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2017-05-11 14:50 - 2017-03-31 19:16 - 01968408 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2017-05-11 14:50 - 2017-03-31 17:59 - 01612504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2017-05-11 14:50 - 2017-03-13 12:38 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\wmitomi.dll

2017-05-11 14:50 - 2017-03-13 12:29 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2017-05-11 14:50 - 2017-03-13 12:25 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2017-05-11 14:50 - 2017-03-13 12:13 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmitomi.dll

2017-05-11 14:50 - 2017-03-13 12:07 - 02170880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2017-05-11 14:50 - 2017-03-13 12:06 - 00236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2017-05-11 14:50 - 2017-03-11 15:34 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2017-05-11 14:50 - 2017-03-11 15:32 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2017-05-11 14:50 - 2017-03-11 15:32 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2017-05-11 14:50 - 2017-03-11 14:49 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2017-05-11 14:50 - 2017-03-11 13:58 - 01437696 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2017-05-11 14:50 - 2017-03-11 13:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2017-05-11 14:50 - 2017-03-10 19:38 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2017-05-11 14:50 - 2017-03-10 19:38 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2017-05-11 14:50 - 2017-03-09 16:52 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll

2017-05-11 14:50 - 2017-03-09 15:17 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll

2017-05-11 14:50 - 2017-03-07 22:44 - 00448285 _____ C:\Windows\system32\ApnDatabase.xml

2017-05-11 14:48 - 2017-03-30 09:15 - 00875712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll

2017-05-11 14:48 - 2017-03-30 09:15 - 00869568 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2017-05-11 14:48 - 2017-03-30 09:15 - 00678592 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll

2017-05-11 14:48 - 2017-03-30 09:15 - 00536768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll

2017-04-30 22:53 - 2017-05-24 20:40 - 00000000 ____D C:\Windows\Minidump

2017-04-27 20:03 - 2017-04-27 20:03 - 00000000 ____D C:\Users\Alice\AppData\Roaming\Google

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-05-26 09:30 - 2015-09-12 12:49 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1180CF88-4C39-42A8-B913-91E75CEAA0E8}

2017-05-25 21:04 - 2015-09-11 21:49 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1862641308-2105632346-2877700689-1001

2017-05-25 19:04 - 2015-06-29 10:34 - 00000000 ____D C:\Program Files (x86)\Dell Backup and Recovery

2017-05-25 14:58 - 2013-08-22 11:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-05-25 14:56 - 2015-06-29 10:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2017-05-25 14:56 - 2013-08-22 09:36 - 00000000 ____D C:\Windows\Inf

2017-05-25 14:49 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\NDF

2017-05-25 14:31 - 2014-11-21 00:42 - 00865408 _____ C:\Windows\system32\PerfStringBackup.INI

2017-05-25 14:27 - 2015-09-11 21:48 - 00000000 ____D C:\Users\Alice\OneDrive

2017-05-25 14:25 - 2015-09-11 21:43 - 00000000 __SHD C:\Users\Alice\IntelGraphicsProfiles

2017-05-25 14:23 - 2013-08-22 10:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2017-05-25 14:23 - 2013-08-22 09:25 - 00524288 ___SH C:\Windows\system32\config\BBI

2017-05-25 13:46 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2017-05-25 13:46 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\system32\Macromed

2017-05-25 13:45 - 2016-02-09 13:35 - 00000000 ____D C:\Users\Alice\AppData\Local\Adobe

2017-05-24 21:25 - 2015-09-12 20:04 - 00000000 ____D C:\Users\Alice\AppData\Roaming\Dashlane

2017-05-23 18:36 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\rescache

2017-05-23 17:17 - 2015-09-13 15:29 - 00000000 ____D C:\Windows\system32\MRT

2017-05-23 17:14 - 2015-09-13 15:28 - 132223576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2017-05-23 09:30 - 2015-09-11 21:43 - 00000000 ____D C:\Users\Alice\AppData\Local\Packages

2017-05-20 10:19 - 2015-09-14 08:31 - 00000000 ____D C:\Users\Alice\AppData\Local\Dropbox

2017-05-20 10:18 - 2015-06-29 10:37 - 00000000 ____D C:\Program Files (x86)\McAfee

2017-05-18 17:12 - 2013-08-22 09:25 - 00262144 ___SH C:\Windows\system32\config\ELAM

2017-05-18 13:15 - 2013-08-22 10:44 - 00481880 _____ C:\Windows\system32\FNTCACHE.DAT

2017-05-18 13:11 - 2013-08-22 11:36 - 00000000 ____D C:\Windows\PolicyDefinitions

2017-05-17 11:41 - 2015-09-14 08:31 - 00000000 ____D C:\Users\Alice\AppData\Roaming\Dropbox

2017-05-16 09:28 - 2015-09-15 17:05 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-05-14 22:07 - 2013-08-22 11:20 - 00000000 ____D C:\Windows\CbsTemp

2017-05-11 15:32 - 2015-09-14 08:33 - 00000000 ___RD C:\Users\Alice\Dropbox

2017-05-11 14:30 - 2016-08-30 17:06 - 00000000 ____D C:\Users\Alice\AppData\Local\IE Tab

2017-05-04 17:12 - 2016-02-09 13:39 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2017-04-30 22:59 - 2016-09-03 15:27 - 00001958 _____ C:\Users\Alice\Desktop\Dashlane.lnk

2017-04-30 22:59 - 2015-09-12 20:04 - 00000000 ____D C:\Users\Alice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane

2017-04-30 22:54 - 2015-09-11 21:41 - 00000000 ____D C:\Users\Alice

2017-04-27 19:57 - 2015-09-15 17:04 - 00003330 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2017-04-27 19:57 - 2015-09-15 17:04 - 00003202 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

 

==================== Files in the root of some directories =======

 

2015-06-29 10:30 - 2015-06-29 10:30 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

 

==================== Bamital & volsnap ======================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2017-05-23 17:13

 

==================== End of FRST.txt ============================

[Advertisements]

Uninstall Spybot - Search & Destroy.  Not recommended for newer PCs.

 

After you uninstall it, reboot and then run a new FRST scan with Addition.txt checked and post both logs.

(Multiple post are OK)

Get Process Explorer

 

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  

 

View, Select Column, check Verified Signer, OK

Options, Verify Image Signatures

 

 

Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

 

Wait a full minute then:

 

File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.

 

 

Get the free version of Speccy:

 

http://www.filehippo...download_speccy (Look in the upper right for the Download

Latest Version button  - Do NOT press the large Start Download button on the upper left!)  

Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), 

File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  

(It will be near the top about 10-20 lines down.) Save the file.  Attach the file to your next post.  (More Reply Options, Choose File, Open, Attach This File)

 

[RKinner]

Uninstall Spybot - Search & Destroy.  Not recommended for newer PCs.

 

After you uninstall it, reboot and then run a new FRST scan with Addition.txt checked and post both logs.

(Multiple post are OK)

Get Process Explorer

 

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  

 

View, Select Column, check Verified Signer, OK

Options, Verify Image Signatures

 

 

Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

 

Wait a full minute then:

 

File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.

 

 

Get the free version of Speccy:

 

http://www.filehippo...download_speccy (Look in the upper right for the Download

Latest Version button  - Do NOT press the large Start Download button on the upper left!)  

Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), 

File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  

(It will be near the top about 10-20 lines down.) Save the file.  Attach the file to your next post.  (More Reply Options, Choose File, Open, Attach This File)