Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Windows 7 ULT Dell M4500 laptop just seems slow, sluggish cursor [Solv

Started by elkski , Apr 13 2020 12:19 PM

This topic is locked

#1
elkski

Posted 13 April 2020 - 12:19 PM

Member

Member
193 posts

I may have a virus.. I did hit a suspect website. DELL M4500

I am near full memory but even after clearing 20 GB my cursor and loading pages just seems slow. Heck it is slow... I worry about a key logger program or something.

Here are my FRST reports.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-04-2020

Ran by Laptop (administrator) on LAPTOP-PC (Dell Inc. Precision M4500) (12-04-2020 18:32:52)

Running from C:\Users\Laptop\Desktop

Loaded Profiles: Laptop (Available Profiles: Laptop & bart)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe

(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe

(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe

(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Autodesk, Inc.) [File not signed] C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe

(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe

(Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks (2)\sldworks_fs.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe

(Intel Corporation - Mobile Wireless Group -> Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel Corporation - Mobile Wireless Group -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(LINE Corporation -> LINE Corporation) C:\Users\Laptop\AppData\Local\LINE\bin\current\LINE.exe

(LINE Corporation -> LINE Corporation) C:\Users\Laptop\AppData\Local\LINE\Data\plugin\LineMediaPlayer\1.1.0.241\LineMediaPlayer.exe

(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\sp6\LU2\LogitechUpdate.exe

(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\sp6\LU2\LULnchr.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe

(Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe

(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Motorola Mobility LLC) [File not signed] C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe

(Motorola Mobility LLC) [File not signed] C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe

(Motorola) [File not signed] C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe

(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvwmi64.exe <2>

(Plantronics) [File not signed] C:\Program Files (x86)\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe

(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE

(STMicroelectronics -> ) C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe

(WinZip Computing LLC -> Nico Mak Computing) C:\Program Files\File Association Helper\FAHWindow.exe

(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe

(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2722080 2013-09-05] (NVIDIA Corporation -> )

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech -> Logitech, Inc.)

HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686744 2012-09-05] (STMicroelectronics -> )

HKLM\...\Run: [FAHConsole] => C:\Program Files\File Association Helper\FAHConsole.exe [729272 2014-01-28] (WinZip Computing LLC -> Nico Mak Computing)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [698712 2013-02-21] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-25] (Logitech Inc -> Logitech, Inc.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) [File not signed]

HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe

HKLM-x32\...\Run: [Plantronics MyHeadset Updater] => C:\Program Files (x86)\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [80384 2015-07-14] (Plantronics) [File not signed]

HKLM-x32\...\Run: [PLTUpdater.exe] => C:\Program Files (x86)\Plantronics\Spokes3G\PLTUpdater.exe -min

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session --flag-switches-begin --flag-switches-end - (the data entry has 102 more characters).

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\Policies\Explorer: []

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\MountPoints2: {282af288-13e0-11e6-9f3e-f07bcbab03a4} - H:\VerizonWirelessUpgradeAssistantSetup.exe -a

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\MountPoints2: {51ec015a-88af-11e5-8d27-f07bcbab03a4} - H:\VerizonWirelessUpgradeAssistantSetup.exe -a

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\MountPoints2: {5a4c564f-f212-11e6-b922-f07bcbab03a4} - G:\VerizonWirelessUpgradeAssistantSetup.exe

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\MountPoints2: {76cc7af2-1d56-11e6-9f24-0024d72d4080} - G:\setup.exe -ap

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\...\MountPoints2: {a7a26aae-d363-11e6-b444-f07bcbab03a4} - G:\VerizonWirelessUpgradeAssistantSetup.exe

HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc -> Autodesk, Inc.)

HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"

HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.163\Installer\chrmstp.exe [2020-04-07] (Google LLC -> Google LLC)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-05-02] (Adobe Inc. -> Adobe Systems, Inc.)

HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks 2013 Fast Start.lnk [2013-12-02]

ShortcutTarget: SolidWorks 2013 Fast Start.lnk -> C:\Windows\Installer\{B6B5EA7E-B91F-443D-A958-B0062FB53804}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software, Inc.) [File not signed]

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Background Downloader.lnk [2013-12-02]

ShortcutTarget: SolidWorks Background Downloader.lnk -> C:\Program Files (x86)\Common Files\SolidWorks Installation Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corp.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {104CA4FD-74B4-46DB-A0A3-F1324959ACEF} - System32\Tasks\{2986DFE6-C269-4FDE-859D-2C6565F7C95C} => C:\Program Files (x86)\QuickTime\PictureViewer.exe [561152 2013-05-01] (Apple Inc.) [File not signed]

Task: {34B2A7D6-EC49-412D-9801-00040AF15BB8} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {3F533DA1-40CB-41D0-AE27-351190FDAEB0} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_344_Plugin.exe [1458232 2020-03-11] (Adobe Inc. -> Adobe)

Task: {4910D3B1-0C2D-45B4-8B88-374B11C7A881} - System32\Tasks\{85C367A8-9A88-4074-B818-5B8E380E7D28} => C:\Windows\system32\pcalua.exe -a C:\Users\Laptop\AppData\Local\LINE\bin\LineLauncher.exe -d C:\Users\Laptop\AppData\Local\LINE\bin

Task: {61986B7C-029C-4F51-90E7-A2A7018FF109} - System32\Tasks\{E4EC4D8C-3F7B-4D34-8E9A-EF4A8D8C9AD6} => C:\Windows\system32\pcalua.exe -a C:\Users\Laptop\Desktop\sync-installer.exe -d C:\Users\Laptop\Desktop

Task: {64E36CC5-5E3E-4DFD-A3BE-D73ADFA64CA5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)

Task: {69371B8A-6E11-49EC-A5B7-F273454C0B3F} - System32\Tasks\{D2A9BBCC-87D5-48E2-9FBC-99750D18C2E5} => C:\Windows\system32\pcalua.exe -a C:\Users\Laptop\Desktop\sw\SW2013_SP0.0_64bits_Crack_[hispargentino]\SW2013_SP0.0_[hispargentino]\setup.exe -d C:\Users\Laptop\Desktop\sw\SW2013_SP0.0_64bits_Crack_[hispargentino]\SW2013_SP0.0_[hispargentino]

Task: {7068124D-9EB8-4BAE-B59D-FA7CB4853ACC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)

Task: {7311F00B-9D80-46EF-B06B-58968945AD35} - System32\Tasks\G2MUpdateTask-S-1-5-21-1790939574-762709250-2766489150-1000 => C:\Users\Laptop\AppData\Local\GoToMeeting\17359\g2mupdate.exe [32256 2020-04-10] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {9FDDFE7B-A899-48E2-932F-09102B2A23DF} - System32\Tasks\Verizon Wireless Upgrade Assistant Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\VerizonWirelessUpgradeAssistantUpdate.exe [880944 2016-03-21] (Motorola Mobility Inc. -> )

Task: {AACE0B54-D33B-4EB8-B69F-CE2CA4BC8093} - System32\Tasks\G2MUploadTask-S-1-5-21-1790939574-762709250-2766489150-1000 => C:\Users\Laptop\AppData\Local\GoToMeeting\17359\g2mupload.exe [32256 2020-04-10] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {CE751E0A-6A06-4486-BF1F-5C70058F4CC5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)

Task: {D6D44E08-1154-49BD-9C56-E0C3183168C4} - System32\Tasks\Verizon Wireless Upgrade Assistant Update Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\VerizonWirelessUpgradeAssistantUpdate.exe [880944 2016-03-21] (Motorola Mobility Inc. -> )

Task: {E2B04AB2-7E1D-4BE1-9D77-A381671F03C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe)

Task: {E6E2A169-279C-4E92-9F9A-80C326A18C85} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}

Task: {EC6783E1-C203-4320-A0D3-67585C099A06} - System32\Tasks\{AE1AB881-EEFC-4FCF-82C8-30F65BCDDA81} => C:\Windows\system32\pcalua.exe -a C:\dell\drivers\R243252\setup.exe -d C:\dell\drivers\R243252

Task: {F9C0C008-9FAE-4B09-B2AA-034D70872207} - System32\Tasks\{D0087600-138A-45E8-AFE6-EE703E72E9FE} => C:\Windows\system32\pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\QuickTime\PictureViewer.exe"

Task: {FD2657A8-DDA7-489E-B2A1-5233A857B031} - System32\Tasks\{6AEC449D-30AD-47A3-AA89-DC045A3EAD92} => C:\Windows\system32\pcalua.exe -a C:\Users\Laptop\Downloads\QuickTimeInstaller.exe -d C:\Users\Laptop\Downloads

Task: {FE3958F1-2113-4862-95DC-C16562D88C11} - System32\Tasks\{69476F29-CEDA-4EDD-A7EF-996FC5F09178} => C:\Program Files (x86)\QuickTime\PictureViewer.exe [561152 2013-05-01] (Apple Inc.) [File not signed]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-1790939574-762709250-2766489150-1000.job => C:\Users\Laptop\AppData\Local\GoToMeeting\17359\g2mupdate.exe

Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-1790939574-762709250-2766489150-1000.job => C:\Users\Laptop\AppData\Local\GoToMeeting\17359\g2mupload.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

Winsock: Catalog5 10 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)

Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392 2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392 2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

Winsock: Catalog5-x64 10 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{1F478E2E-E729-413C-AEC9-BA829D616DD0}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{938676AF-2B6C-423F-8AF4-256604705397}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKU\S-1-5-21-1790939574-762709250-2766489150-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

URLSearchHook: HKU\S-1-5-21-1790939574-762709250-2766489150-1000 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc. -> Yahoo! Inc.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-1790939574-762709250-2766489150-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech Inc -> Logitech, Inc.)

BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc.)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-12] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech Inc -> Logitech, Inc.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-12] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc)

Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc.)

DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab

Handler-x32: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll [2005-09-23] (Microsoft Corporation) [File not signed]

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:

========

FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\t2mfldmg.default [2014-12-25]

FF Extension: (Bitdefender QuickScan) - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\t2mfldmg.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-08-31] [Legacy] [not signed]

FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-01-19] [Legacy] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_344.dll [2020-03-11] (Adobe Inc. -> )

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_344.dll [2020-03-11] (Adobe Inc. -> )

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation -> Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation -> Foxit Corporation)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google Inc -> Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-12] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-12] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA CORPORATION -> NVIDIA Corporation) [File not signed]

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA CORPORATION -> NVIDIA Corporation) [File not signed]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1790939574-762709250-2766489150-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Laptop\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-10-08] (Citrix Online -> Citrix Online)

FF Plugin HKU\S-1-5-21-1790939574-762709250-2766489150-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\Laptop\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-04-09] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default [2020-04-12]

CHR DownloadDir: C:\Users\Laptop\Desktop

CHR Notifications: Default -> hxxp://www.thaivisa.com; hxxps://drive.google.com; hxxps://www.thaivisa.com; hxxps://www.vietnamcupid.com

CHR NewTab: Default -> Not-active:"chrome-extension://kopiddhkilolngafkbmhddeickkjfncb/newtab/newtab.html", Not-active:"chrome-extension://npmoikddpdgbhgbkjgjemncoegpojpng/stubby.html"

CHR Extension: (Docs) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-16]

CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]

CHR Extension: (DuckDuckGo) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2020-04-10]

CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-04]

CHR Extension: (Google Search) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Adobe Acrobat) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-03-09]

CHR Extension: (Office Editing for Docs, Sheets & Slides) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj [2020-03-11]

CHR Extension: (Google Docs Offline) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-11]

CHR Extension: (Quick) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdeojccbnhekeopkifinihckfhefndh [2017-09-12]

CHR Extension: (My Quick Converter) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\kopiddhkilolngafkbmhddeickkjfncb [2018-02-06]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-25]

CHR Extension: (MyTransitGuide) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\npmoikddpdgbhgbkjgjemncoegpojpng [2019-12-22]

CHR Extension: (Gmail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-11]

CHR Extension: (Chrome Media Router) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-05]

CHR Profile: C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\System Profile [2019-11-08]

CHR HKU\S-1-5-21-1790939574-762709250-2766489150-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2010-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation)

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]

S3 CoordinatorServiceHost; C:\Program Files\SolidWorks Corp\SolidWorks (2)\swScheduler\DTSCoordinatorService.exe [77352 2013-03-28] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corp.)

R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [128512 2015-04-15] (Motorola Mobility LLC) [File not signed]

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)

R2 NVIDIA Performance Driver Service; C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [6237800 2010-04-30] (NVIDIA Corporation -> )

R2 NVWMI; C:\Windows\system32\nvwmi64.exe [1290016 2013-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]

R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]

S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2013-12-02] (SolidWorks) [File not signed]

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [263168 2010-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Windows -> Microsoft Corporation)

R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096 2011-03-28] (Microsoft Corporation -> Microsoft Corp.)

R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare Technology Co.,Ltd -> Wondershare)

R2 WsDrvInst; C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe [120096 2018-01-16] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 Acceler; C:\Windows\System32\DRIVERS\accelern.sys [27760 2012-05-23] (STMicroelectronics -> ST Microelectronics)

S3 CSRBC; C:\Windows\System32\Drivers\csrbcx64.sys [38400 2015-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CSR plc.)

S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [79592 2013-07-12] (Future Technology Devices International Ltd -> FTDI Ltd.)

S3 FTSER2K; C:\Windows\System32\drivers\ftser2k.sys [86376 2013-07-12] (Future Technology Devices International Ltd -> FTDI Ltd.)

S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (3am.com(Test) -> HTC, Corporation)

S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (Sqa.com(Test) -> QUALCOMM Incorporated)

R3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [255552 2009-02-24] (JiaPing Gan -> MagicISO, Inc.)

R3 mcdbus; C:\Windows\SysWOW64\DRIVERS\mcdbus.sys [255552 2009-02-24] (JiaPing Gan -> MagicISO, Inc.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)

R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)

R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)

R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [22128 2011-07-15] (STMicroelectronics -> ST Microelectronics)

R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [515584 2010-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)

S3 swiwdmbx; C:\Windows\System32\DRIVERS\swiwdmbx.sys [114424 2013-03-26] (Sierra Wireless Inc. -> Sierra Wireless Inc.)

S3 swiwdmbxum; C:\Windows\System32\DRIVERS\swiwdmbxum.sys [114424 2013-03-26] (Sierra Wireless Inc. -> Sierra Wireless Inc.)

S3 swUMmbb00; C:\Windows\System32\DRIVERS\swUMmbb00.sys [482608 2013-03-21] (Sierra Wireless -> Sierra Wireless Incorporated)

S3 swUMser00; C:\Windows\System32\DRIVERS\swUMser00.sys [269872 2013-04-01] (Sierra Wireless -> Sierra Wireless Incorporated)

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S2 SCWFPFilter; system32\DRIVERS\WFPFilter.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-04-12 18:32 - 2020-04-12 18:34 - 000032995 _____ C:\Users\Laptop\Desktop\FRST.txt

2020-04-12 18:31 - 2020-04-12 18:31 - 002281472 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe

2020-04-12 11:19 - 2020-04-12 11:19 - 000731697 _____ C:\Users\Laptop\Desktop\Nips (1).zip

2020-04-12 11:06 - 2020-04-12 11:22 - 000000022 _____ C:\Users\Laptop\Desktop\Nips.zip

2020-04-09 22:36 - 2020-04-09 22:36 - 000294240 _____ C:\Windows\Minidump\040920-708774-01.dmp

2020-04-09 12:14 - 2020-04-09 12:14 - 000000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

2020-04-06 06:00 - 2020-04-06 06:00 - 000001306 _____ C:\Users\Public\Desktop\Skype.lnk

2020-04-06 06:00 - 2020-04-06 06:00 - 000001306 _____ C:\ProgramData\Desktop\Skype.lnk

2020-04-06 05:59 - 2020-04-06 06:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2020-04-05 21:52 - 2020-04-05 21:53 - 070018920 _____ (Skype Technologies S.A.) C:\Users\Laptop\Desktop\Skype-8.58.0.98.exe

2020-04-04 13:36 - 2020-04-04 13:36 - 000000000 ____D C:\Users\Laptop\Documents\Zoom

2020-04-04 13:32 - 2020-04-09 12:14 - 000000000 ____D C:\Users\Laptop\AppData\Roaming\Zoom

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-04-12 18:33 - 2016-01-19 18:14 - 000000000 ____D C:\FRST

2020-04-12 18:25 - 2012-11-17 13:33 - 000003934 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{240E4B9B-B7D5-4AE5-9F7F-89B4F516F6CF}

2020-04-12 18:20 - 2014-10-08 12:45 - 000000544 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-1790939574-762709250-2766489150-1000.job

2020-04-12 16:41 - 2015-05-29 23:07 - 000000640 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-1790939574-762709250-2766489150-1000.job

2020-04-12 09:20 - 2009-07-13 22:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2020-04-12 09:20 - 2009-07-13 22:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2020-04-12 09:14 - 2009-07-13 23:13 - 000782470 _____ C:\Windows\system32\PerfStringBackup.INI

2020-04-12 09:14 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\inf

2020-04-12 09:09 - 2014-07-29 16:55 - 000000000 ____D C:\temp

2020-04-12 09:08 - 2012-12-11 21:06 - 000000000 ____D C:\ProgramData\NVIDIA

2020-04-12 09:08 - 2009-07-13 23:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2020-04-11 07:43 - 2020-02-05 08:13 - 000000000 ____D C:\Users\Laptop\Documents\K1 Mayuree

2020-04-11 07:37 - 2014-02-20 09:28 - 000410112 ___SH C:\Users\Laptop\Documents\Thumbs.db

2020-04-10 22:44 - 2017-08-01 16:53 - 000000000 ____D C:\Users\Laptop\AppData\Local\GoToMeeting

2020-04-10 22:44 - 2015-05-29 23:07 - 000003670 _____ C:\Windows\system32\Tasks\G2MUploadTask-S-1-5-21-1790939574-762709250-2766489150-1000

2020-04-10 22:44 - 2014-10-08 12:45 - 000003574 _____ C:\Windows\system32\Tasks\G2MUpdateTask-S-1-5-21-1790939574-762709250-2766489150-1000

2020-04-09 22:01 - 2014-02-24 11:07 - 000000000 ____D C:\Users\Laptop\AppData\Local\ElevatedDiagnostics

2020-04-09 22:01 - 2009-07-13 21:20 - 000000000 ____D C:\Windows\system32\NDF

2020-04-07 16:30 - 2013-12-07 20:19 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-04-07 16:30 - 2013-12-07 20:19 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2020-04-07 16:30 - 2013-12-07 20:19 - 000002183 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2020-04-01 17:49 - 2012-11-17 14:40 - 000744808 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2020-03-20 16:22 - 2013-12-07 20:12 - 000003334 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA

2020-03-20 16:22 - 2013-12-07 20:12 - 000003206 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore

2020-03-19 10:46 - 2015-01-02 17:12 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task

2020-03-19 10:44 - 2018-02-06 10:10 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2020-03-14 06:48 - 2012-11-17 13:16 - 000000000 ____D C:\Users\Laptop

==================== Files in the root of some directories ========

2014-01-08 13:58 - 2014-01-08 13:58 - 000003709 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml

2013-08-29 13:05 - 2013-08-29 13:05 - 000889416 _____ (Microsoft Corporation) C:\Users\Laptop\AppData\Roaming\dotNetFx40_Full_setup.exe

2013-12-19 02:36 - 2014-12-19 01:06 - 000000181 _____ () C:\Users\Laptop\AppData\Roaming\WB.CFG

2015-04-29 12:53 - 2015-04-29 12:53 - 000034634 _____ () C:\Users\Laptop\AppData\Roaming\XFLR5.ini

2015-02-04 09:52 - 2017-11-12 13:02 - 000005632 _____ () C:\Users\Laptop\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-12-01 18:06 - 2014-12-17 01:06 - 000000010 _____ () C:\Users\Laptop\AppData\Local\DSI.DAT

2014-12-17 01:06 - 2014-12-17 01:06 - 000022528 _____ () C:\Users\Laptop\AppData\Local\dsisetup2287432982.exe

2014-12-01 18:06 - 2014-12-01 18:06 - 000022528 _____ () C:\Users\Laptop\AppData\Local\dsisetup2906464762.exe

2017-06-08 13:10 - 2017-06-08 13:10 - 011791872 _____ () C:\Users\Laptop\AppData\Local\Sync-1496949014.msi

2017-06-08 13:10 - 2017-06-08 13:12 - 000207778 _____ () C:\Users\Laptop\AppData\Local\Sync-1496949014.msi.log

2014-05-07 20:54 - 2014-07-22 17:17 - 000000000 _____ () C:\Users\Laptop\AppData\Local\Temptable.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2020-04-07 00:53

==================== End of FRST.txt ========================Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-04-2020