Computer extremely slow

Hello,

My computer is running extremely slow. The browser (chrome) are hanging more often than note and so do several applications such as Word and Excel.

FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019

Ran by The Grahams (administrator) on THEGRAHAMS-PC (22-03-2019 20:05:49)

Running from C:\Users\The Grahams\Desktop

Loaded Profiles: The Grahams (Available Profiles: The Grahams)

Platform: Windows 10 Home Version 1803 17134.648 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe

(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe

(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler64.exe

(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.41.54.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe

(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe

(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Corel Corporation -> WinZip Computing) C:\Program Files\WinZip\WzPreloader.exe

(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe

(F.lux Software LLC -> f.lux Software LLC) C:\Users\The Grahams\AppData\Local\FluxSoftware\Flux\flux.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe

(Facebook, Inc. -> Facebook) C:\Users\The Grahams\AppData\Local\Facebook\Games\FacebookGameroom.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe

(Facebook, Inc. -> The CefSharp Authors) C:\Users\The Grahams\AppData\Local\Facebook\Games\Facebook Gameroom Browser.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe

(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe

(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe

(Node.js Foundation -> Node.js) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-11-02] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2014-08-06] (Synaptics Incorporated -> Synaptics Incorporated)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2675176 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2862032 2019-01-31] (Corel Corporation -> Corel Corporation)

HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [130624 2019-01-31] (Corel Corporation -> WinZip Computing)

HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2019-01-31] (WinZip Computing LLC -> WinZip Computing, S.L.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2410960 2019-03-01] (Adobe Systems Incorporated -> Adobe Inc.)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4810224 2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\Run: [f.lux] => C:\Users\The Grahams\AppData\Local\FluxSoftware\Flux\flux.exe [1820168 2018-10-24] (F.lux Software LLC -> f.lux Software LLC)

HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-02-04] (Piriform Software Ltd -> Piriform Software Ltd)

HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\Run: [AdobeBridge] => [X]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\Installer\chrmstp.exe [2019-03-20] (Google LLC -> Google Inc.)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\72.0.1174.122\Installer\chrmstp.exe [2019-03-08] (AVAST Software s.r.o. -> AVAST Software)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast Cleanup Premium.lnk [2018-11-17]

ShortcutTarget: Avast Cleanup Premium.lnk -> C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe (AVAST Software s.r.o. -> AVAST Software)

Startup: C:\Users\The Grahams\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2019-01-31]

ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\The Grahams\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook, Inc. -> Facebook)

Startup: C:\Users\The Grahams\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2019-03-13]

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Tcpip\..\Interfaces\{07e05e12-4b35-4ceb-a314-795f04c3fae0}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{07e05e12-4b35-4ceb-a314-795f04c3fae0}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Tcpip\..\Interfaces\{97d3e8dd-f382-40ad-8d7b-2ea91575ad78}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Tcpip\..\Interfaces\{988c07e3-7b82-446c-9e26-974a23e98c5a}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Tcpip\..\Interfaces\{c14b9c8a-837b-417f-996a-d2e10fb2c711}: [DhcpNameServer] 172.16.0.1

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

SearchScopes: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15

SearchScopes: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Toolbar: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

FireFox:

========

FF DefaultProfile: p2ruiu4o.default

FF ProfilePath: C:\Users\The Grahams\AppData\Roaming\Mozilla\Firefox\Profiles\p2ruiu4o.default [2019-03-22]

FF Homepage: Mozilla\Firefox\Profiles\p2ruiu4o.default -> hxxps://www.malwarebytes.org/restorebrowser/param1=y6bdVFVIsvuYsgEClQfz8IfaIrULFWUA2DMVetLqXBoajImwSUqyU1dOCSSMcqZyODgJDbcUNK6a1xF8Fr3zWmI%2BByLXUyVQu4lga8%2Bn8muoF02E6hFn3jiHLj1K9BhdCkG8I2nWQzTTNR4Xz2ylIpsTUqEE6%2FyNESi%2F%2F9lhf3zVB%2B239PHwQ1fPmRBVsWueJPYdP5IpqS6rTAr8FUCs%2FT5gcVEZ6lJS1F30kyXIPQkGbFVBAKgyo0OGLt3Ft8xvNHl6Ekwuyi9pIoJNpnBx5nCxmqBK0ZbfCpsLAhRvVSE%3D

FF NewTabOverride: Mozilla\Firefox\Profiles\p2ruiu4o.default -> Enabled: {1e5e51a8-e7e9-4fe1-a683-462422abe05d}

FF Extension: (Avast SafePrice) - C:\Users\The Grahams\AppData\Roaming\Mozilla\Firefox\Profiles\p2ruiu4o.default\Extensions\[email protected] [2018-08-30] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]

FF Extension: (Avast Online Security) - C:\Users\The Grahams\AppData\Roaming\Mozilla\Firefox\Profiles\p2ruiu4o.default\Extensions\[email protected] [2018-08-30]

FF Extension: (Telemetry coverage) - C:\Users\The Grahams\AppData\Roaming\Mozilla\Firefox\Profiles\p2ruiu4o.default\features\{26876944-3d38-48e1-b5d4-17aa5157dd19}\[email protected] [2018-09-18] [Legacy]

FF SearchPlugin: C:\Users\The Grahams\AppData\Roaming\Mozilla\Firefox\Profiles\p2ruiu4o.default\searchplugins\Yahoo powered search.xml [2018-10-22]

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-01-31]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-03-01] (Adobe Systems Incorporated -> Adobe Systems)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-01-31] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-03-01] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Profile: C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default [2019-03-22]

CHR Extension: (Slides) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-30]

CHR Extension: (Docs) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-30]

CHR Extension: (Google Drive) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-16]

CHR Extension: (Skype Calling) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2018-08-30]

CHR Extension: (YouTube) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-30]

CHR Extension: (Honey) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-02-14]

CHR Extension: (eBay) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnadbgmffcofipfljniafanjcafjlbom [2018-08-30]

CHR Extension: (Word Search) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnjkggjhcbohgnikmegjkodmakmimlkj [2018-08-30]

CHR Extension: (Adobe Acrobat) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-02-17]

CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-02-04]

CHR Extension: (Sheets) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-30]

CHR Extension: (Google Docs Offline) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-30]

CHR Extension: (RetailMeNot Genie: Instant Coupon Finder) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjfblogammkiefalfpafidabbnamoknm [2019-03-20]

CHR Extension: (Personal Trainer) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmgohkgndpahjklgpdihieeedjeneoke [2018-08-30]

CHR Extension: (No Name) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\nenlahapcbofgnanklpelkaejcehkggg [2018-08-30]

CHR Extension: (Chrome Web Store Payments) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-30]

CHR Extension: (Gmail) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-08-30]

CHR Extension: (Chrome Media Router) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-13]

CHR Profile: C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1 [2019-03-21]

CHR Extension: (Slides) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-13]

CHR Extension: (Docs) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-13]

CHR Extension: (Google Drive) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-13]

CHR Extension: (YouTube) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-13]

CHR Extension: (Adobe Acrobat) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-11-13]

CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-11-26]

CHR Extension: (Sheets) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-13]

CHR Extension: (Google Docs Offline) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-26]

CHR Extension: (Avast Online Security) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-11-13]

CHR Extension: (Chrome Web Store Payments) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-13]

CHR Extension: (Gmail) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-13]

CHR Extension: (Chrome Media Router) - C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-13]

CHR Profile: C:\Users\The Grahams\AppData\Local\Google\Chrome\User Data\System Profile [2019-03-21]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2019-03-01] (Adobe Systems Incorporated -> Adobe Inc.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2917864 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2709480 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6570352 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-30] (AVAST Software s.r.o. -> AVAST Software)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [360440 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-30] (AVAST Software s.r.o. -> AVAST Software)

S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\72.0.1174.122\elevation_service.exe [1070600 2019-03-06] (AVAST Software s.r.o. -> AVAST Software)

S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

S3 becldr3Service; C:\Program Files\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [263168 2013-07-03] () [File not signed]

R2 CleanupPSvc; C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe [9874528 2019-01-17] (AVAST Software s.r.o. -> AVAST Software)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11129928 2019-03-06] (Microsoft Corporation -> Microsoft Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

S3 OpenVpnService; C:\Program Files (x86)\PureVPN\bin\openvpnserv2.exe [15872 2016-11-24] ( ) [File not signed]

S2 PureVPNService; C:\Program Files (x86)\PureVPN\PureVPNService.exe [105736 2018-11-12] (GZ Systems Limited -> )

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-03-02] (Microsoft Corporation -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-03-02] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37320 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205608 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254408 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196304 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320904 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [58168 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-05] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)

R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [249152 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42496 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [169104 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88152 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1034640 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476256 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220632 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380160 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)

R3 FwLnk; C:\WINDOWS\System32\drivers\FwLnk.sys [9216 2012-07-20] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation)

R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [12311776 2012-11-27] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

R3 Impcd; C:\WINDOWS\System32\drivers\Impcd.sys [151936 2009-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

R3 IntcDAud; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [244736 2009-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel® Corporation)

S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [11776 2008-04-15] (Microsoft Windows Hardware Compatibility Publisher -> MBB Incorporated)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-03-01] (Malwarebytes Corporation -> Malwarebytes)

S3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72864 2019-03-02] (Malwarebytes Corporation -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-03-22] (Malwarebytes Corporation -> Malwarebytes)

S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [114040 2019-03-01] (Malwarebytes Corporation -> Malwarebytes)

R2 rimspci; C:\WINDOWS\System32\drivers\rimspe64.sys [60416 2009-07-02] (Microsoft Windows Hardware Compatibility Publisher -> REDC)

R2 risdpcie; C:\WINDOWS\System32\drivers\risdpe64.sys [81408 2009-07-28] (Microsoft Windows Hardware Compatibility Publisher -> REDC)

R2 rixdpcie; C:\WINDOWS\System32\drivers\rixdpe64.sys [55808 2009-07-04] (Microsoft Windows Hardware Compatibility Publisher -> REDC)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-11] (Microsoft Windows -> Realtek )

R3 rtl8192se; C:\WINDOWS\System32\drivers\rtl8192se.sys [1222656 2018-04-11] (Microsoft Windows -> Realtek Semiconductor Corporation )

S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-08-06] (Synaptics Incorporated -> Synaptics Incorporated)

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-08-06] (Synaptics Incorporated -> Synaptics Incorporated)

S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [57648 2015-12-08] (DEVGURU CO LTD -> QUALCOMM Incorporated)

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39040 2018-02-06] (GZ Systems Limited -> The OpenVPN Project)

R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [45728 2015-08-07] (TOSHIBA CORPORATION -> Toshiba Corporation)

S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [333792 2019-03-02] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62432 2019-03-02] (Microsoft Windows -> Microsoft Corporation)

S3 ZTEusbgps; C:\WINDOWS\System32\drivers\ZTEusbgps.sys [121344 2008-04-15] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)

S3 ZTEusbnmea; C:\WINDOWS\System32\drivers\ZTEusbnmea.sys [121344 2008-04-15] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)

S3 ZTEusbnmeaext; C:\WINDOWS\System32\drivers\ZTEusbnmeaext.sys [121344 2008-04-15] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)

S3 ZTEusbser6k; C:\WINDOWS\System32\drivers\ZTEusbser6k.sys [121344 2008-04-15] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-22 20:05 - 2019-03-22 20:08 - 000032876 _____ C:\Users\The Grahams\Desktop\FRST.txt

2019-03-22 20:05 - 2019-03-22 20:05 - 000000000 ____D C:\FRST

2019-03-22 20:04 - 2019-03-22 20:04 - 002434048 _____ (Farbar) C:\Users\The Grahams\Desktop\FRST64.exe

2019-03-22 09:47 - 2019-03-22 09:47 - 000010726 _____ C:\Users\The Grahams\Downloads\meeting (8).collab

2019-03-21 19:28 - 2019-03-21 19:28 - 000002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002466 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2019-03-21 19:28 - 2019-03-21 19:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2019-03-21 19:06 - 2019-03-21 19:06 - 000000000 ____D C:\Program Files\Microsoft Office 15

2019-03-20 20:10 - 2019-03-22 16:04 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2019-03-20 11:45 - 2019-03-20 11:45 - 000010726 _____ C:\Users\The Grahams\Downloads\meeting (7).collab

2019-03-20 09:50 - 2019-03-20 09:50 - 000010726 _____ C:\Users\The Grahams\Downloads\meeting (6).collab

2019-03-20 09:47 - 2019-03-20 09:47 - 000010726 _____ C:\Users\The Grahams\Downloads\meeting (5).collab

2019-03-19 14:58 - 2019-03-19 14:55 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2019-03-19 09:46 - 2019-03-19 09:46 - 049298432 _____ C:\Users\The Grahams\Desktop\BlackboardCollaborateLauncher-Win.msi

2019-03-19 09:46 - 2019-03-19 09:46 - 000010726 _____ C:\Users\The Grahams\Downloads\meeting (4).collab

2019-03-13 18:29 - 2019-03-06 02:03 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-03-13 18:29 - 2019-03-06 01:44 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-03-13 18:29 - 2019-03-06 01:36 - 022716928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-03-13 18:29 - 2019-03-06 01:28 - 004937728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2019-03-13 18:29 - 2019-03-05 23:14 - 006568528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-03-13 18:29 - 2019-03-05 22:49 - 004516352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2019-03-13 18:29 - 2019-02-16 03:24 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2019-03-13 18:28 - 2019-03-06 08:37 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-03-13 18:28 - 2019-03-06 08:17 - 012730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-03-13 18:28 - 2019-03-06 05:09 - 011919360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-03-13 18:28 - 2019-03-06 02:29 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-03-13 18:28 - 2019-03-06 02:16 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-03-13 18:28 - 2019-03-06 02:16 - 001188000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2019-03-13 18:28 - 2019-03-06 02:07 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-03-13 18:28 - 2019-03-06 02:07 - 001023800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-03-13 18:28 - 2019-03-06 02:06 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-03-13 18:28 - 2019-03-06 02:04 - 002765856 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-03-13 18:28 - 2019-03-06 02:03 - 002465784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2019-03-13 18:28 - 2019-03-06 02:02 - 002421048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2019-03-13 18:28 - 2019-03-06 01:36 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-03-13 18:28 - 2019-03-06 01:34 - 004866048 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2019-03-13 18:28 - 2019-03-06 01:32 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-03-13 18:28 - 2019-03-06 01:31 - 007598592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-03-13 18:28 - 2019-03-06 01:31 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-03-13 18:28 - 2019-03-06 01:31 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-03-13 18:28 - 2019-03-06 01:29 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2019-03-13 18:28 - 2019-03-06 01:28 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-03-13 18:28 - 2019-03-06 01:27 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-03-13 18:28 - 2019-03-05 23:17 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2019-03-13 18:28 - 2019-03-05 23:15 - 002253488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-03-13 18:28 - 2019-03-05 23:05 - 022018048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-03-13 18:28 - 2019-03-05 22:56 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-03-13 18:28 - 2019-03-05 22:53 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2019-03-13 18:28 - 2019-03-05 22:52 - 005790720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-03-13 18:28 - 2019-03-05 22:50 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-03-13 18:28 - 2019-02-16 06:02 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2019-03-13 18:28 - 2019-02-16 06:02 - 001644040 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-03-13 18:28 - 2019-02-16 06:02 - 000808456 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2019-03-13 18:28 - 2019-02-16 06:02 - 000735752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2019-03-13 18:28 - 2019-02-16 06:02 - 000620040 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2019-03-13 18:28 - 2019-02-16 05:53 - 001516416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2019-03-13 18:28 - 2019-02-16 05:34 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-03-13 18:28 - 2019-02-16 05:32 - 003646976 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-03-13 18:28 - 2019-02-16 05:22 - 001322176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2019-03-13 18:28 - 2019-02-16 05:06 - 002890752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-03-13 18:28 - 2019-02-16 03:22 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2019-03-13 18:28 - 2019-02-16 01:16 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2019-03-13 18:28 - 2019-02-16 01:03 - 007901392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2019-03-13 18:28 - 2019-02-16 01:03 - 005625360 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-03-13 18:28 - 2019-02-16 01:02 - 003291632 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2019-03-13 18:28 - 2019-02-16 00:57 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2019-03-13 18:28 - 2019-02-16 00:51 - 002479168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2019-03-13 18:28 - 2019-02-16 00:37 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2019-03-13 18:28 - 2019-02-16 00:36 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2019-03-13 18:28 - 2019-02-16 00:36 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll

2019-03-13 18:28 - 2019-02-16 00:35 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2019-03-13 18:28 - 2019-02-16 00:35 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2019-03-13 18:28 - 2019-02-16 00:34 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2019-03-13 18:28 - 2019-02-16 00:33 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2019-03-13 18:28 - 2019-02-16 00:32 - 002969088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2019-03-13 18:28 - 2019-02-16 00:29 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-03-13 18:28 - 2019-02-16 00:28 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll

2019-03-13 18:28 - 2019-02-16 00:26 - 001459712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2019-03-13 18:27 - 2019-03-06 08:39 - 000720536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll

2019-03-13 18:27 - 2019-03-06 08:36 - 001047352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2019-03-13 18:27 - 2019-03-06 08:19 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll

2019-03-13 18:27 - 2019-03-06 08:17 - 000810496 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2019-03-13 18:27 - 2019-03-06 08:17 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys

2019-03-13 18:27 - 2019-03-06 08:14 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2019-03-13 18:27 - 2019-03-06 08:14 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2019-03-13 18:27 - 2019-03-06 08:14 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2019-03-13 18:27 - 2019-03-06 08:13 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2019-03-13 18:27 - 2019-03-06 08:13 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2019-03-13 18:27 - 2019-03-06 08:13 - 001662976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2019-03-13 18:27 - 2019-03-06 08:13 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll

2019-03-13 18:27 - 2019-03-06 08:12 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2019-03-13 18:27 - 2019-03-06 05:18 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2019-03-13 18:27 - 2019-03-06 05:18 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll

2019-03-13 18:27 - 2019-03-06 05:10 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll

2019-03-13 18:27 - 2019-03-06 05:05 - 004054016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2019-03-13 18:27 - 2019-03-06 05:05 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2019-03-13 18:27 - 2019-03-06 05:04 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2019-03-13 18:27 - 2019-03-06 05:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2019-03-13 18:27 - 2019-03-06 02:16 - 001457032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-03-13 18:27 - 2019-03-06 02:16 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-03-13 18:27 - 2019-03-06 02:16 - 000722744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2019-03-13 18:27 - 2019-03-06 02:16 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2019-03-13 18:27 - 2019-03-06 02:16 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2019-03-13 18:27 - 2019-03-06 02:11 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2019-03-13 18:27 - 2019-03-06 02:10 - 000248880 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll

2019-03-13 18:27 - 2019-03-06 02:07 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2019-03-13 18:27 - 2019-03-06 02:06 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-03-13 18:27 - 2019-03-06 02:06 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2019-03-13 18:27 - 2019-03-06 02:05 - 000439224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2019-03-13 18:27 - 2019-03-06 02:05 - 000436240 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-03-13 18:27 - 2019-03-06 02:05 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe

2019-03-13 18:27 - 2019-03-06 02:04 - 000945464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys

2019-03-13 18:27 - 2019-03-06 02:04 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll

2019-03-13 18:27 - 2019-03-06 02:03 - 002719544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2019-03-13 18:27 - 2019-03-06 02:03 - 001921848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys

2019-03-13 18:27 - 2019-03-06 02:03 - 000793400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-03-13 18:27 - 2019-03-06 02:03 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-03-13 18:27 - 2019-03-06 02:03 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2019-03-13 18:27 - 2019-03-06 02:02 - 001257672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2019-03-13 18:27 - 2019-03-06 02:02 - 001140480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2019-03-13 18:27 - 2019-03-06 02:02 - 000982912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2019-03-13 18:27 - 2019-03-06 02:02 - 000626488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2019-03-13 18:27 - 2019-03-06 01:33 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2019-03-13 18:27 - 2019-03-06 01:32 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys

2019-03-13 18:27 - 2019-03-06 01:31 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2019-03-13 18:27 - 2019-03-06 01:31 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2019-03-13 18:27 - 2019-03-06 01:31 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll

2019-03-13 18:27 - 2019-03-06 01:31 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll

2019-03-13 18:27 - 2019-03-06 01:31 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2019-03-13 18:27 - 2019-03-06 01:29 - 002174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-03-13 18:27 - 2019-03-06 01:29 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-03-13 18:27 - 2019-03-06 01:29 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2019-03-13 18:27 - 2019-03-06 01:27 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2019-03-13 18:27 - 2019-03-06 01:27 - 000542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-03-13 18:27 - 2019-03-06 01:27 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2019-03-13 18:27 - 2019-03-06 01:26 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys

2019-03-13 18:27 - 2019-03-05 23:17 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe

2019-03-13 18:27 - 2019-03-05 23:15 - 000434488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2019-03-13 18:27 - 2019-03-05 23:14 - 000785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2019-03-13 18:27 - 2019-03-05 23:14 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-03-13 18:27 - 2019-03-05 23:14 - 000450872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll

2019-03-13 18:27 - 2019-03-05 23:14 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-03-13 18:27 - 2019-03-05 23:13 - 000607248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2019-03-13 18:27 - 2019-03-05 22:53 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2019-03-13 18:27 - 2019-03-05 22:52 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2019-03-13 18:27 - 2019-03-05 22:52 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll

2019-03-13 18:27 - 2019-03-05 22:51 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2019-03-13 18:27 - 2019-03-05 22:51 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2019-03-13 18:27 - 2019-03-05 22:50 - 001347584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2019-03-13 18:27 - 2019-03-05 22:49 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll

2019-03-13 18:27 - 2019-03-05 22:48 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2019-03-13 18:27 - 2019-03-05 22:48 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-03-13 18:27 - 2019-02-20 20:26 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll

2019-03-13 18:27 - 2019-02-16 06:02 - 000460296 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2019-03-13 18:27 - 2019-02-16 06:02 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-03-13 18:27 - 2019-02-16 06:02 - 000147464 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2019-03-13 18:27 - 2019-02-16 06:02 - 000071176 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2019-03-13 18:27 - 2019-02-16 05:57 - 001048472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2019-03-13 18:27 - 2019-02-16 05:57 - 000506088 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe

2019-03-13 18:27 - 2019-02-16 05:56 - 000549520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll

2019-03-13 18:27 - 2019-02-16 05:56 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2019-03-13 18:27 - 2019-02-16 05:34 - 001725952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2019-03-13 18:27 - 2019-02-16 05:34 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll

2019-03-13 18:27 - 2019-02-16 05:33 - 001786880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll

2019-03-13 18:27 - 2019-02-16 05:32 - 002051072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll

2019-03-13 18:27 - 2019-02-16 05:31 - 001271808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll

2019-03-13 18:27 - 2019-02-16 05:31 - 001003520 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll

2019-03-13 18:27 - 2019-02-16 05:31 - 000861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll

2019-03-13 18:27 - 2019-02-16 05:31 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll

2019-03-13 18:27 - 2019-02-16 05:30 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2019-03-13 18:27 - 2019-02-16 05:24 - 000444176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll

2019-03-13 18:27 - 2019-02-16 05:08 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll

2019-03-13 18:27 - 2019-02-16 05:07 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll

2019-03-13 18:27 - 2019-02-16 05:07 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll

2019-03-13 18:27 - 2019-02-16 05:06 - 001530880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2019-03-13 18:27 - 2019-02-16 05:06 - 001451520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll

2019-03-13 18:27 - 2019-02-16 05:06 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll

2019-03-13 18:27 - 2019-02-16 05:06 - 000765952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll

2019-03-13 18:27 - 2019-02-16 01:15 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2019-03-13 18:27 - 2019-02-16 01:15 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2019-03-13 18:27 - 2019-02-16 01:05 - 000087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe

2019-03-13 18:27 - 2019-02-16 01:04 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2019-03-13 18:27 - 2019-02-16 01:03 - 000510288 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2019-03-13 18:27 - 2019-02-16 01:02 - 005821440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2019-03-13 18:27 - 2019-02-16 01:02 - 001934800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-03-13 18:27 - 2019-02-16 01:02 - 001792712 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2019-03-13 18:27 - 2019-02-16 01:02 - 000705848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2019-03-13 18:27 - 2019-02-16 01:02 - 000432952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2019-03-13 18:27 - 2019-02-16 01:02 - 000413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 001285424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2019-03-13 18:27 - 2019-02-16 01:01 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 001098056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 001028920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2019-03-13 18:27 - 2019-02-16 01:01 - 001014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000735464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000641984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-03-13 18:27 - 2019-02-16 01:01 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000480840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2019-03-13 18:27 - 2019-02-16 01:01 - 000161664 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll

2019-03-13 18:27 - 2019-02-16 00:53 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2019-03-13 18:27 - 2019-02-16 00:51 - 001584536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2019-03-13 18:27 - 2019-02-16 00:51 - 000170952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 001805648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 001171336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 000560384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2019-03-13 18:27 - 2019-02-16 00:50 - 000504072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll

2019-03-13 18:27 - 2019-02-16 00:33 - 006646784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2019-03-13 18:27 - 2019-02-16 00:31 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll

2019-03-13 18:27 - 2019-02-16 00:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll

2019-03-13 18:27 - 2019-02-16 00:30 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll

2019-03-13 18:27 - 2019-02-16 00:30 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll

2019-03-13 18:27 - 2019-02-16 00:30 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2019-03-13 18:27 - 2019-02-16 00:29 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2019-03-13 18:27 - 2019-02-16 00:28 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll

2019-03-13 18:27 - 2019-02-16 00:28 - 002585600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2019-03-13 18:27 - 2019-02-16 00:28 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll

2019-03-13 18:27 - 2019-02-16 00:28 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2019-03-13 18:27 - 2019-02-16 00:28 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2019-03-13 18:27 - 2019-02-16 00:27 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll

2019-03-13 18:27 - 2019-02-16 00:27 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2019-03-13 18:27 - 2019-02-16 00:27 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-03-13 18:27 - 2019-02-16 00:26 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2019-03-13 18:27 - 2019-02-16 00:26 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll

2019-03-13 18:27 - 2019-02-16 00:26 - 000935424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2019-03-13 18:27 - 2019-02-16 00:25 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2019-03-13 18:27 - 2019-02-16 00:25 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2019-03-13 18:26 - 2019-03-06 08:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2019-03-13 18:26 - 2019-03-06 05:06 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2019-03-13 18:26 - 2019-03-06 04:59 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll

2019-03-13 18:26 - 2019-03-06 01:32 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2019-03-13 18:26 - 2019-03-06 01:31 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2019-03-13 18:26 - 2019-03-06 01:31 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys

2019-03-13 18:26 - 2019-03-06 01:31 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-03-13 18:26 - 2019-03-06 01:26 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll

2019-03-13 18:26 - 2019-03-06 01:26 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys

2019-03-13 18:26 - 2019-03-06 01:25 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys

2019-03-13 18:26 - 2019-03-06 00:08 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim

2019-03-13 18:26 - 2019-03-05 22:51 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2019-03-13 18:26 - 2019-03-05 22:50 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2019-03-13 18:26 - 2019-03-05 22:49 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2019-03-13 18:26 - 2019-02-16 05:36 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2019-03-13 18:26 - 2019-02-16 05:30 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2019-03-13 18:26 - 2019-02-16 05:29 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll

2019-03-13 18:26 - 2019-02-16 05:29 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe

2019-03-13 18:26 - 2019-02-16 05:04 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe

2019-03-13 18:26 - 2019-02-16 00:34 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll

2019-03-13 18:26 - 2019-02-16 00:34 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2019-03-13 18:26 - 2019-02-16 00:33 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll

2019-03-13 18:26 - 2019-02-16 00:33 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll

2019-03-13 18:26 - 2019-02-16 00:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll

2019-03-13 18:26 - 2019-02-16 00:33 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2019-03-13 18:26 - 2019-02-16 00:32 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2019-03-13 18:26 - 2019-02-16 00:31 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2019-03-13 18:26 - 2019-02-16 00:31 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll

2019-03-13 18:26 - 2019-02-16 00:31 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2019-03-13 18:26 - 2019-02-16 00:30 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll

2019-03-13 18:26 - 2019-02-16 00:30 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll

2019-03-13 18:26 - 2019-02-16 00:30 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2019-03-13 18:26 - 2019-02-16 00:26 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2019-03-10 14:58 - 2019-03-10 14:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

2019-03-10 14:58 - 2019-03-10 14:58 - 000000000 ____D C:\Program Files\Speccy

2019-03-08 19:04 - 2019-03-20 20:57 - 000001421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2019-03-04 15:50 - 2019-03-04 15:50 - 000148971 _____ C:\Users\The Grahams\Downloads\8th Grade Math Practice Test PT 2017.pdf

2019-03-04 15:49 - 2019-03-04 15:49 - 001243344 _____ C:\Users\The Grahams\Downloads\8th Grade Math Practice Test 2016.pdf

2019-03-04 15:49 - 2019-03-04 15:49 - 000719648 _____ C:\Users\The Grahams\Downloads\8th Grade Math Practice Test PT 2013.pdf

2019-03-04 15:49 - 2019-03-04 15:49 - 000148998 _____ C:\Users\The Grahams\Downloads\8th Grade Math Practice Test PT 2017 Scoring Guide.pdf

2019-03-04 15:48 - 2019-03-04 15:48 - 001422039 _____ C:\Users\The Grahams\Downloads\Answer Key to 8th Grade SBAC Practice Test.pdf

2019-03-04 14:19 - 2019-03-04 14:19 - 000144291 _____ C:\Users\The Grahams\Downloads\4.17 Unit 4 Part 2.pdf

2019-03-04 14:17 - 2019-03-04 14:17 - 000411434 _____ C:\Users\The Grahams\Downloads\Unit 1.09 Test Part 2.pdf

2019-03-01 01:14 - 2019-03-02 20:30 - 000072864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2019-03-01 01:13 - 2019-03-01 01:13 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2019-03-01 01:13 - 2019-03-01 01:13 - 000114040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2019-02-25 17:13 - 2019-02-25 17:13 - 000650080 _____ C:\Users\The Grahams\Desktop\2905-EG_Application for Assistance.pdf

2019-02-21 21:38 - 2019-02-21 21:38 - 000012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe

2019-02-21 20:44 - 2019-02-21 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro

2019-02-21 20:44 - 2019-02-21 20:44 - 000000000 ____D C:\Program Files\HitmanPro

2019-02-21 20:36 - 2019-02-21 21:41 - 000000000 ____D C:\ProgramData\HitmanPro

2019-02-21 20:20 - 2019-02-21 20:27 - 000000000 ____D C:\AdwCleaner

2019-02-20 20:21 - 2019-02-20 20:21 - 000120107 _____ C:\Users\The Grahams\Downloads\EightCig.pdf

2019-02-20 11:22 - 2019-02-20 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2019-02-20 11:22 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2019-02-20 11:22 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-22 20:01 - 2018-04-11 16:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-03-22 19:47 - 2019-02-16 20:07 - 000000000 ___RD C:\Users\The Grahams\Creative Cloud Files

2019-03-22 19:47 - 2018-09-03 17:13 - 000000000 ____D C:\Users\The Grahams\AppData\Local\Adobe

2019-03-22 19:44 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-03-22 19:42 - 2018-10-22 21:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-03-22 16:02 - 2019-01-12 16:47 - 005072080 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2019-03-22 16:00 - 2018-10-22 21:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-03-22 15:20 - 2018-09-01 22:19 - 000000000 ____D C:\Users\The Grahams\AppData\Local\CrashDumps

2019-03-22 14:10 - 2018-11-12 13:00 - 000002828 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-TheGrahams-PC-The Grahams

2019-03-22 14:10 - 2018-10-22 21:57 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2019-03-22 14:10 - 2018-10-22 21:57 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2019-03-22 14:10 - 2018-10-22 21:57 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software

2019-03-21 20:18 - 2018-08-30 17:02 - 000000000 ____D C:\Users\The Grahams\AppData\Local\Packages

2019-03-21 20:17 - 2018-08-22 10:18 - 000000000 ____D C:\Users\The Grahams\Desktop\School

2019-03-21 20:16 - 2018-11-08 22:50 - 000000000 ____D C:\Users\The Grahams\Desktop\Zach

2019-03-21 19:40 - 2018-08-30 17:02 - 000000000 ____D C:\Users\The Grahams\AppData\Local\ConnectedDevicesPlatform

2019-03-21 19:33 - 2018-11-08 22:54 - 000000000 ____D C:\Users\The Grahams\Desktop\Gabe

2019-03-21 19:27 - 2018-08-30 19:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2019-03-21 19:19 - 2018-08-30 19:51 - 000000000 ____D C:\Users\The Grahams\Desktop\Recipes

2019-03-21 19:06 - 2018-04-11 16:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2019-03-21 19:00 - 2018-09-03 17:25 - 000000000 ____D C:\Program Files (x86)\McAfee Safe Connect

2019-03-21 19:00 - 2018-04-11 16:36 - 000000000 ____D C:\WINDOWS\INF

2019-03-21 18:56 - 2018-09-03 17:18 - 000000000 ____D C:\ProgramData\McAfee

2019-03-21 18:33 - 2018-10-22 21:57 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update

2019-03-21 18:31 - 2018-11-17 00:39 - 000004286 _____ C:\WINDOWS\System32\Tasks\Avast Cleanup Update

2019-03-21 18:21 - 2018-10-22 21:37 - 000000000 ____D C:\Users\The Grahams

2019-03-21 17:38 - 2018-04-11 16:38 - 000000000 ___HD C:\Program Files\WindowsApps

2019-03-20 20:56 - 2018-09-03 17:15 - 000000000 ____D C:\Program Files (x86)\Adobe

2019-03-20 20:07 - 2018-04-11 14:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2019-03-20 17:38 - 2018-08-31 16:53 - 000000000 ____D C:\Program Files\rempl

2019-03-20 15:22 - 2018-08-30 17:41 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-03-19 14:58 - 2018-04-11 16:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2019-03-19 14:56 - 2019-02-15 12:29 - 000249152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys

2019-03-19 14:56 - 2018-10-22 22:33 - 000042496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000476256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000380160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000220632 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000169104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2019-03-19 14:56 - 2018-08-30 18:03 - 000088152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys

2019-03-19 14:55 - 2019-01-05 21:18 - 000037320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys

2019-03-19 14:55 - 2018-08-30 18:03 - 001034640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

2019-03-19 14:55 - 2018-08-30 18:03 - 000205608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys

2019-03-19 14:54 - 2019-01-14 10:10 - 000254408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys

2019-03-19 14:54 - 2019-01-05 21:18 - 000320904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys

2019-03-19 14:54 - 2019-01-05 21:18 - 000196304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys

2019-03-19 14:54 - 2019-01-05 21:18 - 000058168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys

2019-03-14 00:27 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2019-03-14 00:01 - 2018-10-22 21:50 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ___SD C:\WINDOWS\system32\UNP

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ___RD C:\Program Files\Windows Defender

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\TextInput

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\oobe

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\system32\appraiser

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\ShellExperiences

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-03-13 23:51 - 2018-04-11 16:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender

2019-03-13 19:34 - 2018-12-06 21:50 - 000000000 ____D C:\Users\The Grahams\AppData\Roaming\.minecraft

2019-03-13 19:28 - 2018-12-06 21:50 - 000000000 ____D C:\Program Files (x86)\Minecraft

2019-03-13 18:52 - 2018-04-11 16:30 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-03-12 18:33 - 2018-08-30 17:02 - 000000000 ____D C:\Users\The Grahams\AppData\Roaming\Adobe

2019-03-12 14:22 - 2018-08-31 16:40 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-03-12 14:07 - 2018-08-31 16:40 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-03-12 13:37 - 2019-02-12 11:44 - 000013974 _____ C:\Users\The Grahams\Desktop\Kid's To Do and Make Up.xlsx

2019-03-11 23:55 - 2018-07-23 02:26 - 000024545 _____ C:\Users\The Grahams\Desktop\TV.xlsx

2019-03-10 14:55 - 2018-11-17 16:43 - 000000000 ____D C:\Users\The Grahams\Desktop\Grace O'Malley

2019-03-08 19:51 - 2018-08-30 18:16 - 000002509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk

2019-03-03 22:35 - 2018-09-23 17:02 - 000192741 _____ C:\Users\The Grahams\Desktop\Chicagoverse Timeline _ Fiction Timelines.pdf

2019-03-03 19:13 - 2018-12-30 12:23 - 000000000 ____D C:\Users\The Grahams\Desktop\Carla's Pics

2019-03-03 09:54 - 2018-04-11 16:41 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2019-03-03 09:54 - 2018-04-11 16:41 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2019-03-03 01:09 - 2018-12-15 13:31 - 000200548 _____ C:\Users\The Grahams\Documents\Chicagoverse Timeline _ Fiction Timelines.pdf

2019-03-02 18:51 - 2018-11-09 14:26 - 000000000 ____D C:\Users\The Grahams\Desktop\eBay Working

2019-03-02 13:30 - 2018-09-11 17:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2019-03-01 13:55 - 2018-09-11 15:05 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2019-02-27 21:33 - 2018-11-12 00:51 - 000000000 ____D C:\Users\The Grahams\Desktop\Pirate

2019-02-27 21:32 - 2018-12-16 13:06 - 000000000 ____D C:\Users\The Grahams\Desktop\Crafts

2019-02-27 21:32 - 2018-12-07 20:20 - 000000000 ____D C:\Users\The Grahams\Desktop\Carla

2019-02-26 05:24 - 2019-01-19 11:01 - 000000000 ____D C:\Users\The Grahams\Desktop\Misc

2019-02-23 11:23 - 2019-02-17 01:56 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk

2019-02-23 11:21 - 2018-08-30 17:02 - 000000000 ____D C:\Users\The Grahams\AppData\Local\VirtualStore

2019-02-22 14:28 - 2018-08-28 11:38 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-02-21 22:14 - 2018-11-08 18:31 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

==================== Files in the root of some directories =======

2019-02-13 11:01 - 2019-02-13 11:01 - 056134208 _____ (Oracle Corporation) C:\Users\The Grahams\JavaSetup.exe

2019-01-21 17:48 - 2019-01-21 17:49 - 000000132 _____ () C:\Users\The Grahams\AppData\Roaming\Adobe PNG Format CS6 Prefs

2018-11-14 00:41 - 2018-11-14 00:41 - 000000000 _____ () C:\Users\The Grahams\AppData\Local\oobelibMkey.log

2019-02-06 17:30 - 2019-02-06 17:30 - 000000218 _____ () C:\Users\The Grahams\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\dllhost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-10-22 21:30

==================== End of FRST.txt ============================

Additions log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019

Ran by The Grahams (22-03-2019 20:09:27)

Running from C:\Users\The Grahams\Desktop

Windows 10 Home Version 1803 17134.648 (X64) (2018-10-23 04:59:47)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3227822872-1343042388-3299788018-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3227822872-1343042388-3299788018-503 - Limited - Disabled)

Guest (S-1-5-21-3227822872-1343042388-3299788018-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3227822872-1343042388-3299788018-1004 - Limited - Enabled)

The Grahams (S-1-5-21-3227822872-1343042388-3299788018-1001 - Administrator - Enabled) => C:\Users\The Grahams

WDAGUtilityAccount (S-1-5-21-3227822872-1343042388-3299788018-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.8.1.435 - Adobe Systems Incorporated)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)

Adobe Illustrator CC 2019 (HKLM-x32\...\ILST_23_0_2) (Version: 23.0.2 - Adobe Systems Incorporated)

Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_3) (Version: 20.0.3 - Adobe Systems Incorporated)

Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 18.3.6507 - AVAST Software)

Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)

Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 72.0.1174.122 - AVAST Software)

Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden

Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)

BCL easyConverter SDK 3 (Word Version) 64 (HKLM\...\{350CC85B-CA59-4F85-909D-8E4CDBF532FA}) (Version: 3.0.64 - BCL Technologies)

Blackboard Collaborate Launcher (HKLM-x32\...\{51D4C008-F059-4447-BEC7-2DFECD932E35}) (Version: 1.6.5.0 - Blackboard)

calibre 64bit (HKLM\...\{8CD5399E-7215-4BAB-A9F0-EB44B787F7D8}) (Version: 3.39.1 - Kovid Goyal)

CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)

Deluge 1.3.15 (HKLM-x32\...\Deluge) (Version: - )

f.lux (HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\Flux) (Version: - f.lux Software LLC)

Facebook Gameroom 1.21.6907.27509 (HKLM-x32\...\{E34773A0-158F-4322-8849-2C13BBCD6C68}) (Version: 1.21.6907.27509 - Facebook)

Family Tree Maker 2014 (HKLM\...\{39EF38DF-2727-4C09-A165-FD3B87BA3AE9}) (Version: 22.0.207 - Ancestry.com, Inc.) Hidden

Family Tree Maker 2014 (HKLM-x32\...\Family Tree Maker 2014) (Version: 22.0.207 - Ancestry.com, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.86 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden

HitmanPro 3.8 (HKLM\...\HitmanPro38) (Version: 3.8.0.295 - SurfRight B.V.)

HP ENVY 4500 series Basic Device Software (HKLM\...\{6915424E-704F-4F5D-9057-9C7B406B36DB}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)

HP ENVY 4500 series Help (HKLM-x32\...\{95BECC50-22B4-4FCA-8A2E-BF77713E6D3A}) (Version: 30.0.0 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

Living Cookbook 2015 (HKLM-x32\...\{1DA632BA-F963-4B97-A2B6-50F9003A13B8}) (Version: 5.0.85 - Radium Technologies) Hidden

Living Cookbook 2015 (HKLM-x32\...\Living Cookbook 2015) (Version: 5.0.85 - Radium Technologies, Inc.)

Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.11328.20158 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{2D1ED4EA-B59D-4665-ACB3-9325872A300D}) (Version: 1.0.4.0 - Mojang)

Mozilla Firefox 63.0.3 (x64 en-US) (HKLM\...\Mozilla Firefox 63.0.3 (x64 en-US)) (Version: 63.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 61.0.2 - Mozilla)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden

PE-DESIGN NEXT (HKLM-x32\...\{041EDAC5-853E-4A10-A0C8-ED0CF7769306}) (Version: 9.01.0000 - Brother Industries, Ltd.)

Private Internet Access v81 (HKLM-x32\...\{148169C2-5558-4C3E-B38A-7B1813A264CA}_is1) (Version: 81 - London Trust Media, Inc.)

Product Improvement Study for HP ENVY 4500 series (HKLM\...\{58139103-BACF-4BDC-B71C-955F9164ADA6}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)

PureVPN (HKLM-x32\...\{5a4554ca-71a3-4c6e-81df-0cbfecee4836}) (Version: 6.3.0.0 - ) Hidden

PureVPN (HKLM-x32\...\PureVPN) (Version: 6.3.0.0 - PureVPN)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5972 - Realtek Semiconductor Corp.)

Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)

SSOption (HKLM-x32\...\SSOptin) (Version: 2.0.7.5 - MidnightBlueSoft Co.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.10.51 - Synaptics Incorporated)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{FBA3961B-D1DF-493C-BC1F-E67D3B832895}) (Version: 2.56.0.0 - Microsoft Corporation)

UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden

Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )

WinZip 23.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C2411D}) (Version: 23.0.13300 - Corel Corporation)

World of Tanks (HKLM-x32\...\World of Tanks) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}

CustomCLSID: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-AFDB592613A1} -> [Creative Cloud Files] => C:\Users\The Grahams\Creative Cloud Files [2019-02-16 20:07]

CustomCLSID: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll (Corel Corporation -> )

CustomCLSID: HKU\S-1-5-21-3227822872-1343042388-3299788018-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )

ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)

ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2019-01-31] (Corel Corporation -> WinZip Computing)

ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)

ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2019-01-31] (Corel Corporation -> WinZip Computing)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2012-11-27] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )

ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2019-01-31] (Corel Corporation -> WinZip Computing)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {205B4FE0-22F0-429F-9FAF-D169285092C2} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures

Task: {262FCE33-3376-48AF-B9AD-056C9904686D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {290C9DA1-574D-4194-9F09-78ED94B2650E} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

Task: {2CB9F439-6499-4B1F-ABFE-0320A74B14C8} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {2EF5C7A7-293B-4BA4-904E-0A025FDD3947} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {32AC06E4-D91E-412F-BF99-783EA0D27841} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe (Corel Corporation -> Corel Corporation)

Task: {3DD25183-8912-4081-A43B-96DD6CB1A30E} - System32\Tasks\AdobeGCInvoker-1.0-TheGrahams-PC-The Grahams => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe (Adobe Systems Incorporated -> Adobe Systems, Incorporated)

Task: {4B0E3B82-1FEB-49A5-AECF-8878B29C9D07} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe (Corel Corporation -> Corel Corporation)

Task: {592DA1C0-9A81-4B2B-8D94-92BD79C513D0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {5B5EBC99-1DB6-4C6D-9C38-3DF1DC9DA180} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe (Corel Corporation -> Corel Corporation)

Task: {678F75E0-5D4B-4950-8C3A-7F19CC04B219} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

Task: {6E7FB484-5799-4BDC-B654-ED7301169FFE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

Task: {70DC8CD6-FA9B-487D-80C3-82F0D1BBE3DC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)

Task: {82E4CC6E-29B3-4F9E-B02E-E22B2B188D92} - System32\Tasks\Private Internet Access Startup => %SYSTEMDRIVE%/Program Files/pia_manager/pia_manager.exe

Task: {897F5D32-7FD1-44E2-88F2-1B9DF8E6B8E8} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

Task: {9B191858-1D58-44DA-838C-6A0BF48DACD2} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {A61EDB2D-40ED-49B9-A405-B5D8BB0E1EA0} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

Task: {B563CDC6-664A-4210-91A2-ECFE593096BE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Software Ltd -> Piriform Software Ltd)

Task: {BC735F4C-DB64-4033-BB09-265DE1EEE8EB} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {BCB94C60-CE5E-4915-8057-69394EEE401E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

Task: {CB447D5A-5B1B-412F-9B11-E9B9DB521EF6} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {DC519997-E9B1-476A-B91D-E8996531BE92} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)

Task: {E5ADB3B7-B446-4590-B095-339E5AB9F78C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)

Task: {E751D373-7BFF-4B79-8E37-FE2505A10F1B} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

Task: {F3E21B8E-7CE5-4D2B-BCC6-6E4CA7DE8A2D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {FC0DA281-971F-447D-9DEA-E5246A8FDDE7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\The Grahams\Desktop\Games\World of Tanks.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://cpm.wargaming.net/8jf5rtfg/?pub_id=100&xid=mSofR54uF0ebWR0y6C5qMYIuGWTPfxoyyC1IMsx5SiiqdLRc2giiripJgAAAK4aLgYie --app-window-size=1366,768

==================== Loaded Modules (Whitelisted) ==============

2019-02-20 11:21 - 2019-02-01 10:56 - 003084800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 004571648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000438272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 005139968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 002950144 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 002234880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll

2019-02-20 11:21 - 2019-02-01 10:55 - 005010944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 001181184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000124928 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000259584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000729088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000073216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000179712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000101888 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll

2019-02-20 11:21 - 2019-02-01 10:56 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\iconengines\qsvgicon.dll

2018-11-17 00:39 - 2016-09-12 15:53 - 048936448 _____ () [File not signed] C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 001184256 _____ () [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\CefSharp.Core.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 071641088 _____ () [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\libcef.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 000433664 _____ (The Chromium Authors) [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\chrome_elf.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 000774656 _____ () [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\CefSharp.BrowserSubprocess.Core.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 003149824 _____ () [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\libglesv2.dll

2018-11-29 16:19 - 2018-11-29 16:19 - 000078848 _____ () [File not signed] C:\Users\The Grahams\AppData\Local\Facebook\Games\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-08-30 17:16 - 2019-03-21 18:56 - 000000888 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\The Grahams\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 68.105.28.11 - 68.105.29.11

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"

HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"

HKU\S-1-5-21-3227822872-1343042388-3299788018-1001\...\StartupApproved\StartupFolder: => "Send to OneNote.lnk"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{DE957A6C-E772-4B89-BDE1-B6E7C1D5D6DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )

FirewallRules: [{F6C1249D-72C6-4B11-898C-1A3C680890D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe (Valve -> )

FirewallRules: [{8581F700-AAD7-463D-9258-CACAF9FCCE4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)

FirewallRules: [{82A0D15F-34EB-4A30-B419-637BFE1C7A43}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)

FirewallRules: [UDP Query User{B200AF72-17A2-45AA-89DB-9CDA588C74FF}C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe] => (Block) C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe

FirewallRules: [TCP Query User{7548B2EB-1D04-42D2-AA88-870262C473E6}C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe] => (Block) C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe

FirewallRules: [{FB6B9A13-3868-4B0D-84F2-B8F42B67A909}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

FirewallRules: [{36508C98-19FE-4774-9A99-F9EFE99342A0}] => (Allow) LPort=5357

FirewallRules: [{C9F556A6-D137-474A-9734-EEB6D68343E8}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

FirewallRules: [{AF705FF2-CA42-4054-930F-6931D001562F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{75A0E103-005C-4194-B01E-4D9EA13CA67F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{B4E04E54-7426-42E2-97C4-7999479CE494}C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe] => (Block) C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe

FirewallRules: [UDP Query User{264773A0-0E8A-42E9-83E7-371530EEC5C4}C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe] => (Block) C:\users\the grahams\appdata\local\programs\blackboard\blackboard collaborate launcher\resources\java\jre1.7.0_80\bin\javaw.exe

FirewallRules: [{D9D16D6B-AC55-4096-BDE0-F4864880BD24}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

FirewallRules: [{3BCC37BD-240B-4783-BD23-3088BFCE65C7}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe (AVAST Software s.r.o. -> AVAST Software)

FirewallRules: [TCP Query User{7B4C96D7-E7D4-4620-A8D4-2581094F361A}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [UDP Query User{576C31A7-0F99-40DC-BEEE-1975686C366E}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [{4C46B3C5-C9F5-4BD2-B3BC-558EF308A0DF}] => (Block) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [{12812E3D-FD57-4CFE-AEC6-CD2FD82AA89C}] => (Block) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [{34D66434-69F3-4D7C-A92C-5DF5ADE352CE}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)

FirewallRules: [{693C25C6-E592-47A3-8ECD-E9B3E2035EC2}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)

FirewallRules: [{96C092D4-B1D9-4379-9673-B1BFF969E5A1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{EACCF4AE-D7E2-43C1-B997-153D9967C82B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{51726F1D-3354-4D21-B006-9D530E01A290}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{F20DC9BC-726A-47C9-8F20-34AC54C4E853}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{AB17A30A-7E09-4E90-89C1-9CCE5BE03246}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{46D590A5-4C61-4377-948D-2D85CD1BE1FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{B9738656-F3A8-42B7-BA5A-7341983DB982}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{818031CE-0A92-4172-8216-7FB45DD821BC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.101.348.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{36B8F50D-2F58-4A24-B513-F6BDA9BBD52C}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)

FirewallRules: [{3750E8F5-03D6-4C63-BEC0-DE28199B563F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

FirewallRules: [{63DC641F-7288-4F42-9C54-B8829EC5C939}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

10-03-2019 22:27:38 Scheduled Checkpoint

20-03-2019 17:33:09 Windows Update

21-03-2019 18:57:14 Removed McAfee Safe Connect

==================== Faulty Device Manager Devices =============

Name: Synaptics PS/2 Port TouchPad

Description: Synaptics PS/2 Port TouchPad

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Synaptics

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:

==================

Error: (03/22/2019 07:50:34 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )

Description: Event-ID 0

Error: (03/22/2019 07:45:15 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program svchost.exe version 10.0.17134.556 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 848

Start Time: 01d4e1031951abab

Termination Time: 4294967295

Application Path: C:\Windows\System32\svchost.exe

Report Id: e8344085-b80d-43dc-bb2e-0c320309b601

Faulting package full name:

Faulting package-relative application ID:

Error: (03/22/2019 06:30:58 PM) (Source: ESENT) (EventID: 489) (User: )

Description: taskhostw (3968,G,0) An attempt to open the file "C:\Users\The Grahams\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (03/22/2019 04:03:28 PM) (Source: COM) (EventID: 10031) (User: )

Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {41FD88F7-F295-4D39-91AC-A85F3149A05B} was rejected