Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Pop Up for Quickbooks Support saying to call number because my QB is c

Started by CCWTech , Dec 19 2022 06:25 PM

Quickbooks Scam

Please log in to reply

#1
CCWTech

Posted 19 December 2022 - 06:25 PM

Member

Member
191 posts

Hi, I keep getting a pop up saying QB found some problems with your data file... Then it gives a number to call. QB (Intuit) says this is a scam. Trying to figure out how to remove this virus/spyware please.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-12-2022

Ran by Sue (administrator) on DESKTOP-E2I7FB8 (LENOVO 11JN0072US) (19-12-2022 17:55:15)

Running from C:\Users\Sue\Desktop

Loaded Profiles: Sue

Platform: Microsoft Windows 10 Pro Version 22H2 19045.2364 (X64) Language: English (United States)

Default browser: Edge

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(\\TTVC-SVR\AVImark\AVImark.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe

(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCopyAccelerator.exe

(explorer.exe ->) (McAllister Software Systems LLC. -> McAllister Software Systems Inc.) \\TTVC-SVR\AVImark\AVImark.exe

(Intuit, Inc. -> SAP SE or an SAP affiliate company) C:\Program Files\Intuit\QuickBooks 2023\QBDBMgr.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <19>

(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe

(services.exe ->) (mc.ntg.co-8edb73 -> ) [File not signed] C:\Program Files\Mesh Agent\MeshAgent.exe <3>

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80fb7173daab733\RtkAudUService64.exe

(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe

(svchost.exe ->) (Intuit, Inc. -> Intuit Inc.) C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21238.0_x64__8wekyb3d8bbwe\HxOutlook.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21238.0_x64__8wekyb3d8bbwe\HxTsr.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22092.214.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Solanki Piyushkumar -> ) C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80fb7173daab733\RtkAudUService64.exe [3496296 2022-07-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1318024 2021-04-15] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKLM-x32\...\Run: [Immunet Protect Iptray] => "C:\Program Files\Immunet\7.5.8.21178\iptray.exe" (No File)

HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (No File)

HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2626448 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\...\Run: [MicrosoftEdgeAutoLaunch_48FDC4BBB2BFB3180449326C7B7EF46E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3879848 2022-12-15] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIS3E.EXE [416896 2017-09-21] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\...\Run: [QuickBooks for Windows] => C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe [95080 2022-09-24] (Solanki Piyushkumar -> )

HKLM\...\Print\Monitors\EPSON ET-2760 Series 64MonitorBE: C:\Windows\system32\E_YLMBS3E.DLL [187392 2018-06-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)

HKLM\...\Print\Monitors\EpsonNet Print Port: C:\Windows\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [File not signed]

HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\108.0.5359.125\Installer\chrmstp.exe [2022-12-15] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2022-11-22]

ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit, Inc. -> Intuit Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IntuitDownloadManager.lnk [2022-11-21]

ShortcutTarget: IntuitDownloadManager.lnk -> C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe (Solanki Piyushkumar -> )

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2022-11-22]

ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files\Intuit\QuickBooks 2023\QBW.EXE (Intuit, Inc. -> Intuit Inc.)

BootExecute: autocheck autochk * bootdelete

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0EB2FD9D-A4AF-4F07-A043-656EF3843AA6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-27] (Adobe Inc. -> Adobe Inc.)

Task: {139615F1-B783-4CAF-AF94-3AA2334EDAFB} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\3.13.14.0\ScheduleEventAction.exe [27480 2022-05-24] (Lenovo -> Lenovo Group Ltd.)

Task: {1CAB845A-EFB0-45A2-8DE1-3F65EFFF3F5A} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\Installer\setup.exe [3367848 2022-12-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {216A41D9-449D-40CD-9B91-6363FDB405B6} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3259427507-1055586877-3198061443-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4189072 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {309C78F5-DFCA-45BE-8FAF-EF9ADB6547E7} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.14.0\ScheduleEventAction.exe [27480 2022-05-24] (Lenovo -> Lenovo Group Ltd.)

Task: {3939AB69-A43B-4561-9C6A-54A431D17C1A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144344 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {3A6C6083-5B8D-4A0F-95EF-8AB6A60CC0CB} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService

Task: {3ABBB444-6BCB-448F-9772-8232965A2E85} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION

Task: {5AF9E179-DCF7-4B52-BFAF-58D538B3A142} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308584 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {5D5D2BAA-F528-4590-A803-A5A97DA5F42F} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4189072 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {81E1AB3E-DC23-4A44-AD8E-E13D982CFFF3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\Windows\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [184656 2022-05-23] (Lenovo -> Lenovo Group Ltd.)

Task: {8E12C014-148F-4780-B94E-9019E0B9662D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {901A3E09-DD28-4C4E-8801-C8824C51B691} - \Lenovo\ImController\TimeBasedEvents\10a8f074-22a1-4370-bb82-5ecf54dbf8e3 -> No File <==== ATTENTION

Task: {9429409C-F658-481F-82D4-73CE86F835F6} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION

Task: {98015232-CD73-4C11-9D9E-47E4A8926F7D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144344 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {9F8516B3-965D-4CB4-84C8-3BA797197D41} - System32\Tasks\GoogleUpdateTaskMachineUA{7502EB32-9AA7-4409-A70A-5A0A783A8CB9} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-11-10] (Google LLC -> Google LLC)

Task: {A0D16F44-B686-46CA-A6A1-7F0CDC72B3EC} - \Lenovo\ImController\TimeBasedEvents\196a1ff6-3590-426e-8989-7fe35d618f54 -> No File <==== ATTENTION

Task: {A30D4232-8B51-4E53-A352-775421CFC9FD} - System32\Tasks\EPSON ET-2760 Series Update {7804B21A-373A-468A-A7B1-6F428643C8AB} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSS3E.EXE [680440 2017-06-06] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

Task: {AAA6E0C5-BBE9-449F-88ED-BF7E02C56709} - \Lenovo\ImController\TimeBasedEvents\46ca8c6b-2524-462b-866f-89d8b584add8 -> No File <==== ATTENTION

Task: {B7132DD9-FFA7-41BB-988F-5FC331B9ECF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B8D79FD1-0201-43C5-B4D0-0F22A5EFBD98} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION

Task: {BA16315F-9972-4FB7-BD4A-CE05647C3C37} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308584 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {BB757E02-9F4B-4F18-8E3D-EEEADB5E35B4} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [89408 2022-05-23] (Lenovo -> Lenovo Group Ltd.)

Task: {BBDB025B-950A-4C54-A6AC-9D087FAF158F} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.14.0\ScheduleEventAction.exe [27480 2022-05-24] (Lenovo -> Lenovo Group Ltd.)

Task: {C4029849-3F83-4719-8545-B464C0A68920} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {DA835E9F-8961-416B-819A-392E76426410} - System32\Tasks\GoogleUpdateTaskMachineCore{6A2DD8C7-7DB0-46A7-AC32-0FD8EC7C636A} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-11-10] (Google LLC -> Google LLC)

Task: {E633E663-F2CB-4D3F-A86B-A1E0FA3DA379} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [146816 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {FD787C0A-F968-4283-A769-D9319DE7F622} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\EPSON ET-2760 Series Update {7804B21A-373A-468A-A7B1-6F428643C8AB}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSS3E.EXE:/EXE:{7804B21A-373A-468A-A7B1-6F428643C8AB} /F:UpdateWORKGROUP\DESKTOP-E2I7FB8$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{ac8a25b1-8e84-445b-8d31-2b270eb6de82}: [DhcpNameServer] 192.168.1.1

Edge:

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\Sue\AppData\Local\Microsoft\Edge\User Data\Default [2022-12-19]

Edge HomePage: Default -> hxxp://www.msn.com/?pc=DCTE

Edge Extension: (URL Safety) - C:\Users\Sue\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\plkaklmpcfkechocmkmhjheonopjbnpo [2022-11-10]

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-16] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-10-16] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-16] (Microsoft Corporation -> Microsoft Corporation)

Chrome:

=======

CHR Profile: C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default [2022-12-19]

CHR Extension: (Google Docs Offline) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-12-13]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-10]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-27] (Adobe Inc. -> Adobe Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12540928 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncHelper.exe [3478928 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

S2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.13.14.0\LenovoVantageService.exe [31072 2022-05-24] (Lenovo -> Lenovo Group Ltd.)

R2 Mesh Agent; C:\Program Files\Mesh Agent\MeshAgent.exe [3457112 2022-11-10] (mc.ntg.co-8edb73 -> ) [File not signed]

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.238.1114.0002\OneDriveUpdaterService.exe [3845008 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

S3 QBFCService; C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2022-10-19] (Intuit Inc.) [File not signed]

S2 QBVSS; C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe [1570816 2022-10-08] (Intuit Inc.) [File not signed]

S2 QBWCMonitor; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBWebConnector3.0\Intuit.QBDT.Webconnector.QBWCMonitor.exe [47384 2022-12-02] (Intuit, Inc. -> )

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224184 2022-11-21] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16196920 2022-11-09] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

R2 UDCService; C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe [71504 2022-05-23] (Lenovo -> Lenovo Group Ltd.)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe [3191264 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe [133592 2022-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)

S2 EpsonCustomerResearchParticipation; "C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe" [X]

S2 HitmanPro38CrusaderBoot; "C:\Users\Sue\Downloads\HitmanPro_x64.exe" /crusader:boot [X]

S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [X]

S3 MicrosoftEdgeElevationService; "C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.46\elevation_service.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [33216 2021-12-02] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0374729.inf_amd64_acb1e75867156c4f\B374580\amdkmdag.sys [82880872 2021-12-09] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R4 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [42000 2022-12-15] (Microsoft Windows Hardware Compatibility Publisher -> )

R0 rtvdevw10; C:\Windows\System32\drivers\rtvdevw10x64.sys [50128 2022-08-18] (Realtek Semiconductor Corp. -> Realtek)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49568 2022-12-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [473376 2022-12-08] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [99616 2022-12-08] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-12-19 17:55 - 2022-12-19 17:55 - 000019912 _____ C:\Users\Sue\Desktop\FRST.txt

2022-12-19 17:54 - 2022-12-19 17:55 - 000000000 ____D C:\FRST

2022-12-19 17:53 - 2022-12-19 17:53 - 002375680 _____ (Farbar) C:\Users\Sue\Desktop\FRST64.exe

2022-12-19 15:03 - 2022-12-19 15:03 - 001494555 _____ C:\Users\Sue\Downloads\CA Weekly Promo_12.19-23_V3_Writable.pdf

2022-12-17 16:38 - 2022-12-17 16:38 - 012166202 _____ C:\Users\Sue\Downloads\2023 Zoetis Petcare Price List.pdf

2022-12-17 16:38 - 2022-12-17 16:38 - 012166202 _____ C:\Users\Sue\Downloads\2023 Zoetis Petcare Price List (1).pdf

2022-12-17 16:37 - 2022-12-17 16:37 - 000046545 _____ C:\Users\Sue\Downloads\Zoetis 2002 End of Year Shipping.pdf

2022-12-17 13:01 - 2022-12-17 13:01 - 000000000 ____D C:\Program Files (x86)\ScreenConnect Client (61e735463d3bf1de)

2022-12-15 16:08 - 2022-12-15 16:08 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe

2022-12-15 16:08 - 2022-12-15 16:08 - 000000304 _____ C:\Windows\system32\.crusader

2022-12-15 16:08 - 2022-12-15 16:08 - 000000254 _____ C:\Windows\system32\bootdelete.lst

2022-12-15 16:07 - 2022-12-15 16:07 - 000042000 _____ C:\Windows\system32\Drivers\hitmanpro37.sys

2022-12-15 16:06 - 2022-12-15 16:08 - 000000000 ____D C:\ProgramData\HitmanPro

2022-12-15 16:03 - 2022-12-15 16:04 - 000000000 ____D C:\AdwCleaner

2022-12-14 19:10 - 2022-12-14 19:20 - 000000000 ____D C:\Program Files\Immunet

2022-12-14 19:10 - 2022-12-14 19:10 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ImmunetNetworkMonitor_01009.Wdf

2022-12-14 19:10 - 2022-12-14 19:10 - 000000000 ____D C:\ProgramData\Immunet

2022-12-14 18:40 - 2022-12-14 18:40 - 000000000 ____D C:\Users\Sue\AppData\Local\mbam

2022-12-14 18:39 - 2022-12-15 15:54 - 000000000 ____D C:\Program Files\Malwarebytes

2022-12-14 15:41 - 2022-12-15 17:08 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2022-12-14 15:40 - 2022-12-14 15:41 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2022-12-14 15:40 - 2022-12-14 15:41 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2022-12-14 15:40 - 2022-12-14 15:41 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive

2022-12-14 15:40 - 2022-12-14 15:40 - 000000000 ___RD C:\Users\Default\OneDrive

2022-12-14 06:46 - 2022-12-14 06:46 - 000012367 _____ C:\Windows\system32\DrtmAuthTxt.wim

2022-12-14 06:42 - 2022-12-14 06:43 - 000000000 ___HD C:\$WinREAgent

2022-12-13 12:50 - 2022-12-13 12:50 - 067756032 _____ C:\Users\Sue\Documents\Nov22 Tender Touch Veterinary Care (Backup Dec 13,2022 12 49 PM).QBB

2022-12-13 10:57 - 2022-12-14 15:40 - 000000000 ____D C:\Program Files (x86)\LogMeIn Rescue Applet

2022-12-13 10:56 - 2022-12-13 11:37 - 000000000 ____D C:\Users\Sue\AppData\Local\LogMeIn Rescue Applet

2022-12-13 10:56 - 2022-12-13 10:56 - 000002321 _____ C:\Users\Sue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HelpDesk.lnk

2022-12-11 15:45 - 2022-12-11 15:45 - 000067703 _____ C:\Users\Sue\Downloads\TaxJurisdictionMonthly-en-us-4023877 (1).pdf

2022-12-11 13:22 - 2022-12-11 13:22 - 000000131 _____ C:\Users\Sue\Downloads\Reimbursements (1).csv

2022-12-11 13:01 - 2022-12-11 13:01 - 000000000 ____D C:\Users\Sue\AppData\LocalLow\Temp

2022-12-11 12:43 - 2022-12-11 12:43 - 000029683 _____ C:\Users\Sue\Downloads\Clinic - 4868_08-01-2022_12-15-2022.csv

2022-12-07 14:56 - 2022-12-07 14:56 - 000178749 _____ C:\Users\Sue\Downloads\Document (3).pdf

2022-12-07 14:56 - 2022-12-07 14:56 - 000178749 _____ C:\Users\Sue\Downloads\Document (2).pdf

2022-12-07 10:51 - 2022-12-07 10:51 - 000178749 _____ C:\Users\Sue\Downloads\Document.pdf

2022-12-07 10:51 - 2022-12-07 10:51 - 000178749 _____ C:\Users\Sue\Downloads\Document (1).pdf

2022-12-07 10:41 - 2022-12-07 10:41 - 000131708 _____ C:\Users\Sue\Downloads\ModelInfectionControlPlan (1).pdf

2022-12-07 10:41 - 2022-12-07 10:41 - 000131708 _____ C:\Users\Sue\Downloads\ModelInfectionControlPlan (1) (1).pdf

2022-12-06 11:46 - 2022-12-06 11:46 - 000431305 _____ C:\Users\Sue\Downloads\INVOICE#716A131.html

2022-12-05 16:33 - 2022-12-05 16:33 - 000034927 _____ C:\Users\Sue\Downloads\Statement.pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000041630 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632 (5).pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000041630 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632 (4).pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000041630 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632 (3).pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000041623 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632 (1).pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000025117 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632.pdf

2022-12-04 14:30 - 2022-12-04 14:30 - 000025117 _____ C:\Users\Sue\Downloads\2022-01-31 Statement - USB Savings 2632 (2).pdf

2022-12-04 14:29 - 2022-12-04 14:29 - 000000000 ____D C:\Users\Sue\Downloads\JAN22_files

2022-12-04 14:28 - 2022-12-04 14:29 - 000431599 _____ C:\Users\Sue\Downloads\JAN22.html

2022-12-04 14:27 - 2022-12-04 14:27 - 000039823 _____ C:\Users\Sue\Downloads\2022-02-28 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000048846 _____ C:\Users\Sue\Downloads\2022-11-30 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000044339 _____ C:\Users\Sue\Downloads\2022-10-31 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000041717 _____ C:\Users\Sue\Downloads\2022-03-31 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000039800 _____ C:\Users\Sue\Downloads\2022-06-30 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000039458 _____ C:\Users\Sue\Downloads\2022-07-31 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000039214 _____ C:\Users\Sue\Downloads\2022-09-30 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000037923 _____ C:\Users\Sue\Downloads\2022-04-30 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000036161 _____ C:\Users\Sue\Downloads\2022-05-31 Statement - USB Savings 2632.pdf

2022-12-04 14:26 - 2022-12-04 14:26 - 000020207 _____ C:\Users\Sue\Downloads\2022-08-31 Statement - USB Savings 2632.pdf

2022-12-04 14:03 - 2022-12-04 14:03 - 000002031 _____ C:\Users\Sue\Downloads\Savings - 2632_01-04-2022_12-08-2022.csv

2022-12-04 14:01 - 2022-12-04 14:01 - 000002568 _____ C:\Users\Sue\Downloads\building - 9319_01-01-2022_12-08-2022.csv

2022-12-03 15:21 - 2022-12-03 15:21 - 000119808 _____ C:\Users\Sue\Downloads\100991537_US_ah_2022_12.pdf

2022-12-03 15:20 - 2022-12-03 15:20 - 000068608 _____ C:\Users\Sue\Downloads\Invoice-6100988911.pdf

2022-12-03 15:09 - 2022-12-03 15:09 - 000106591 _____ C:\Users\Sue\Downloads\1c370d69-4218-47f1-8a1d-f5f90d378eb2.pdf

2022-12-02 10:36 - 2022-12-02 10:36 - 000084136 _____ C:\Users\Sue\Downloads\MVS Exclusive Promo DechraNutramax Nov 17-30.pdf

2022-11-30 10:42 - 2022-11-30 10:42 - 001679221 _____ C:\Users\Sue\Downloads\CA Weekly Promo_11.28-12.2_writable.pdf

2022-11-25 14:55 - 2022-11-25 14:55 - 001037515 _____ C:\Users\Sue\Downloads\Video.mov

2022-11-25 10:06 - 2022-11-25 10:06 - 000213027 _____ C:\Users\Sue\Downloads\976468ef-e02f-42ea-9f58-0ee93aa7eb40.pdf

2022-11-23 12:07 - 2022-11-23 12:07 - 000000410 _____ C:\Users\Sue\Downloads\Sue Vet license 2023.htm

2022-11-23 12:07 - 2022-11-23 12:07 - 000000000 ____D C:\Users\Sue\Downloads\Sue Vet license 2023_files

2022-11-23 09:48 - 2022-11-23 09:48 - 014486872 _____ (Glance Networks, Inc.) C:\Users\Sue\Downloads\GlanceGuestSetup_4.17.1 (1).exe

2022-11-23 09:48 - 2022-11-23 09:48 - 000000000 ____D C:\Users\Sue\AppData\Local\Glance

2022-11-23 09:47 - 2022-11-23 09:47 - 014486872 _____ (Glance Networks, Inc.) C:\Users\Sue\Downloads\GlanceGuestSetup_4.17.1.exe

2022-11-22 09:50 - 2022-11-22 09:50 - 000002196 _____ C:\Users\Public\Desktop\QuickBooks Premier Plus Edition 2023.lnk

2022-11-22 09:45 - 2022-11-22 09:47 - 1091567600 _____ (Intuit, Inc. ) C:\Users\Sue\AppData\Roaming\QuickBooksPremierSub2023.exe

2022-11-22 09:42 - 2022-11-22 09:42 - 071151810 _____ (Intuit, Inc. ) C:\Users\Sue\AppData\Roaming\QuickBooksPro2019.exe

2022-11-22 09:42 - 2022-11-22 09:42 - 001620600 _____ () C:\Users\Sue\Downloads\QuickBooks desktop manager (2).exe

2022-11-22 09:39 - 2022-11-22 09:39 - 001620600 _____ () C:\Users\Sue\Downloads\QuickBooks desktop manager (1).exe

2022-11-22 09:38 - 2022-11-22 09:38 - 001620600 _____ () C:\Users\Sue\Downloads\QuickBooks desktop manager.exe

2022-11-21 15:05 - 2022-11-24 01:03 - 000000000 ____D C:\ProgramData\SQL Anywhere 17

2022-11-21 15:03 - 2022-11-21 15:04 - 000000000 ____D C:\quickbooks2022

2022-11-21 14:48 - 2022-11-23 09:45 - 000000000 ____D C:\Users\Sue\AppData\Local\Intuit

2022-11-21 14:48 - 2022-11-22 09:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickBooks

2022-11-21 14:48 - 2022-11-21 14:48 - 000000000 ____D C:\Windows\SysWOW64\spool

2022-11-21 14:48 - 2022-11-21 14:48 - 000000000 ____D C:\Users\Sue\AppData\Roaming\SQL Anywhere 17

2022-11-21 14:48 - 2012-08-15 01:15 - 006525440 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\Windows\system32\cdintf450_64.dll

2022-11-21 14:48 - 2012-08-15 01:11 - 004809728 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\Windows\SysWOW64\cdintf450.dll

2022-11-21 14:46 - 2022-12-13 10:58 - 000000000 ____D C:\ProgramData\Intuit

2022-11-21 14:46 - 2022-11-22 09:48 - 000000095 _____ C:\Windows\QBChanUtil_Trigger.ini

2022-11-21 14:46 - 2022-11-22 09:47 - 000000000 ____D C:\ProgramData\Package Cache

2022-11-21 14:46 - 2022-11-22 09:47 - 000000000 ____D C:\Program Files\Intuit

2022-11-21 14:46 - 2022-11-22 09:47 - 000000000 ____D C:\Program Files\Common Files\Intuit

2022-11-21 14:46 - 2022-11-22 09:47 - 000000000 ____D C:\Program Files (x86)\Intuit

2022-11-21 14:43 - 2022-11-21 14:44 - 908359728 _____ (Intuit, Inc. ) C:\Users\Sue\Downloads\QuickBooksPremierSub2022.exe

2022-11-21 14:40 - 2022-12-07 10:50 - 000000000 ___HD C:\Users\Public\Documents\Windows

2022-11-21 14:40 - 2022-11-21 14:40 - 002672640 _____ C:\Users\Sue\Downloads\QuickBooks Setup.msi

2022-11-21 14:39 - 2022-11-22 09:48 - 000000000 ____D C:\Windows\Intuit

2022-11-21 14:36 - 2022-11-21 14:38 - 908359728 _____ (Intuit, Inc. ) C:\Users\Sue\Downloads\Setup_QuickBooksPremierSub2022.exe

2022-11-21 13:47 - 2022-11-22 09:47 - 000000000 ____D C:\Users\Public\Documents\Intuit

2022-11-21 13:44 - 2020-11-26 15:46 - 000002308 _____ C:\Users\Sue\Desktop\Server.rdp

2022-11-21 13:44 - 2019-05-19 13:31 - 731665752 _____ (Intuit, Inc. ) C:\Users\Sue\Desktop\QuickBooksPro2019.exe

2022-11-21 13:44 - 2016-05-26 16:37 - 637513640 _____ (Intuit, Inc. ) C:\Users\Sue\Desktop\QuickBooksPro2016.exe

2022-11-21 13:43 - 2022-11-21 13:43 - 000000000 ____D C:\Users\Sue\Downloads\sensor 1_files

2022-11-21 13:43 - 2022-11-21 13:43 - 000000000 ____D C:\Users\Sue\Downloads\MVSO New Launch Social Media Graphic_09.29_v2.jpg_files

2022-11-21 13:43 - 2022-11-21 13:43 - 000000000 ____D C:\Users\Sue\Downloads\BONIL_files

2022-11-21 13:43 - 2022-11-21 13:43 - 000000000 ____D C:\Users\Sue\Downloads\bank_files

2022-11-21 13:43 - 2022-11-21 13:43 - 000000000 ____D C:\Users\Sue\Downloads\Approval Requests - 7009284_files

2022-11-21 13:43 - 2022-09-17 11:08 - 000000116 _____ C:\Users\Sue\Downloads\payments.csv.crdownload

2022-11-21 13:43 - 2022-08-16 16:38 - 000023028 _____ C:\Users\Sue\Downloads\controlled1.html

2022-11-21 13:43 - 2022-01-15 15:22 - 000597859 _____ C:\Users\Sue\Downloads\w2 2021.pdf

2022-11-21 13:43 - 2021-04-29 11:18 - 002021327 _____ C:\Users\Sue\Downloads\first-aid-checklist (3).pdf

2022-11-21 13:43 - 2021-04-29 11:15 - 002021327 _____ C:\Users\Sue\Downloads\first-aid-checklist (2).pdf

2022-11-21 13:43 - 2021-04-28 11:34 - 002021327 _____ C:\Users\Sue\Downloads\first-aid-checklist (1).pdf

2022-11-21 13:43 - 2021-04-28 11:32 - 002021327 _____ C:\Users\Sue\Downloads\first-aid-checklist.pdf

2022-11-21 13:43 - 2021-04-11 13:01 - 000076440 _____ C:\Users\Sue\Downloads\INWKS941_210411_135949.pdf

2022-11-21 13:43 - 2021-03-24 07:53 - 000358990 _____ C:\Users\Sue\Downloads\bank.html

2022-11-21 13:43 - 2021-02-13 15:55 - 000051325 _____ C:\Users\Sue\Downloads\December 31, 2020 (3).pdf

2022-11-21 13:43 - 2021-02-13 15:44 - 000047031 _____ C:\Users\Sue\Downloads\January 31, 2020 (1).pdf

2022-11-21 13:43 - 2021-02-13 15:44 - 000042706 _____ C:\Users\Sue\Downloads\February 29, 2020 (1).pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000058815 _____ C:\Users\Sue\Downloads\March 31, 2020 (1).pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000051325 _____ C:\Users\Sue\Downloads\December 31, 2020 (1).pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000050666 _____ C:\Users\Sue\Downloads\January 31, 2021.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000046597 _____ C:\Users\Sue\Downloads\November 30, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000045178 _____ C:\Users\Sue\Downloads\October 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000045173 _____ C:\Users\Sue\Downloads\September 30, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000044267 _____ C:\Users\Sue\Downloads\April 30, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000043943 _____ C:\Users\Sue\Downloads\August 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000042571 _____ C:\Users\Sue\Downloads\July 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000042564 _____ C:\Users\Sue\Downloads\June 30, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:43 - 000037135 _____ C:\Users\Sue\Downloads\May 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:30 - 000051325 _____ C:\Users\Sue\Downloads\December 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:29 - 000058815 _____ C:\Users\Sue\Downloads\March 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:29 - 000042706 _____ C:\Users\Sue\Downloads\February 29, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:28 - 000047031 _____ C:\Users\Sue\Downloads\January 31, 2020.pdf

2022-11-21 13:43 - 2021-02-13 15:27 - 000053252 _____ C:\Users\Sue\Downloads\December 31, 2019.pdf

2022-11-21 13:43 - 2021-02-13 15:27 - 000042289 _____ C:\Users\Sue\Downloads\November 30, 2019.pdf

2022-11-21 13:43 - 2021-02-13 15:26 - 000045129 _____ C:\Users\Sue\Downloads\October 31, 2019.pdf

2022-11-21 13:43 - 2021-02-13 15:25 - 000044820 _____ C:\Users\Sue\Downloads\September 30, 2019.pdf

2022-11-21 13:43 - 2021-02-13 15:25 - 000040046 _____ C:\Users\Sue\Downloads\August 31, 2019 (1).pdf

2022-11-21 13:43 - 2021-02-13 15:24 - 000040046 _____ C:\Users\Sue\Downloads\August 31, 2019.pdf

2022-11-21 13:43 - 2021-02-10 13:55 - 000288465 _____ C:\Users\Sue\Downloads\iris-pocket-guide-2.pdf

2022-11-21 13:43 - 2021-02-08 10:56 - 000029431 _____ C:\Users\Sue\Downloads\TaxJurisdictionAnnually-en-us-4023877.mht

2022-11-21 13:43 - 2021-02-08 10:51 - 000084450 _____ C:\Users\Sue\Downloads\SVM00813-PBV00887.pdf

2022-11-21 13:43 - 2021-02-08 10:51 - 000084450 _____ C:\Users\Sue\Downloads\SVM00813-PBV00887 (1).pdf

2022-11-21 13:43 - 2021-02-05 16:55 - 000030393 _____ C:\Users\Sue\Downloads\14575.pdf

2022-11-21 13:43 - 2021-02-05 16:54 - 000067789 _____ C:\Users\Sue\Downloads\Inv_4816_from_Klings_Lawn__Landscape_LLC._5392.pdf

2022-11-21 13:43 - 2021-01-18 14:35 - 000000082 _____ C:\Users\Sue\Downloads\GlCodeSummaryReport_284360_001_20210118_153329 (2).csv

2022-11-21 13:43 - 2021-01-18 14:34 - 000020463 _____ C:\Users\Sue\Downloads\GlCodeDetailReport_284360_001_20210118_153329.csv

2022-11-21 13:43 - 2021-01-18 14:33 - 000000082 _____ C:\Users\Sue\Downloads\GlCodeSummaryReport_284360_001_20210118_153329.csv

2022-11-21 13:43 - 2021-01-18 14:33 - 000000082 _____ C:\Users\Sue\Downloads\GlCodeSummaryReport_284360_001_20210118_153329 (1).csv

2022-11-21 13:43 - 2021-01-10 15:46 - 000153983 _____ C:\Users\Sue\Downloads\11975871.pdf

2022-11-21 13:43 - 2021-01-10 15:46 - 000153983 _____ C:\Users\Sue\Downloads\11975871 (1).pdf

2022-11-21 13:43 - 2021-01-10 13:05 - 000067405 _____ C:\Users\Sue\Downloads\Inv_4783_from_Klings_Lawn__Landscape_LLC._1664.pdf

2022-11-21 13:43 - 2021-01-10 13:05 - 000067405 _____ C:\Users\Sue\Downloads\Inv_4783_from_Klings_Lawn__Landscape_LLC._1664 (1).pdf

2022-11-21 13:43 - 2020-12-06 16:30 - 000083963 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-11.pdf

2022-11-21 13:43 - 2020-12-06 16:28 - 000142603 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011987634.pdf

2022-11-21 13:43 - 2020-12-06 16:28 - 000083109 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011874619.pdf

2022-11-21 13:43 - 2020-12-06 16:28 - 000083109 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011874619 (1).pdf

2022-11-21 13:43 - 2020-12-06 16:28 - 000083087 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011874647.pdf

2022-11-21 13:43 - 2020-12-04 14:18 - 000042842 _____ C:\Users\Sue\Downloads\M234427803.PDF

2022-11-21 13:43 - 2020-12-04 14:17 - 000040366 _____ C:\Users\Sue\Downloads\M074018230.PDF

2022-11-21 13:43 - 2020-12-04 14:17 - 000040366 _____ C:\Users\Sue\Downloads\M074018230 (1).PDF

2022-11-21 13:43 - 2020-11-14 14:44 - 000301438 _____ C:\Users\Sue\Downloads\October 30, 2020.pdf

2022-11-21 13:43 - 2020-11-14 14:44 - 000301438 _____ C:\Users\Sue\Downloads\October 30, 2020 (1).pdf

2022-11-21 13:43 - 2020-11-14 12:06 - 000078641 _____ C:\Users\Sue\Downloads\October 23, 2020.pdf

2022-11-21 13:43 - 2020-11-10 10:14 - 001096493 _____ C:\Users\Sue\Downloads\Client information packet.zip

2022-11-21 13:43 - 2020-11-10 10:14 - 001096493 _____ C:\Users\Sue\Downloads\Client information packet (1).zip

2022-11-21 13:43 - 2020-11-07 15:42 - 000046479 _____ C:\Users\Sue\Downloads\midwestvet_4023877_20201101_8252840_2539518666 (1).pdf

2022-11-21 13:43 - 2020-11-07 15:39 - 000046479 _____ C:\Users\Sue\Downloads\midwestvet_4023877_20201101_8252840_2539518666.pdf

2022-11-21 13:43 - 2020-11-07 15:32 - 000153969 _____ C:\Users\Sue\Downloads\11543996.pdf

2022-11-21 13:43 - 2020-10-26 07:12 - 000153947 _____ C:\Users\Sue\Downloads\11679460.pdf

2022-11-21 13:43 - 2020-10-26 07:12 - 000153947 _____ C:\Users\Sue\Downloads\11679460 (1).pdf

2022-11-21 13:43 - 2020-10-19 14:07 - 001488986 _____ C:\Users\Sue\Downloads\05a Vetwatch Commentary-Week 40.pdf

2022-11-21 13:43 - 2020-10-15 13:55 - 001914679 _____ C:\Users\Sue\Downloads\VS.VEHCS Flier July 2020.pdf

2022-11-21 13:43 - 2020-10-15 13:55 - 000252928 _____ C:\Users\Sue\Downloads\Q3 NVAP Newsletter - supplemental export newsletter for SC Madison (3).pub

2022-11-21 13:43 - 2020-10-15 13:54 - 000252928 _____ C:\Users\Sue\Downloads\Q3 NVAP Newsletter - supplemental export newsletter for SC Madison.pub

2022-11-21 13:43 - 2020-10-15 13:54 - 000252928 _____ C:\Users\Sue\Downloads\Q3 NVAP Newsletter - supplemental export newsletter for SC Madison (2).pub

2022-11-21 13:43 - 2020-10-15 13:54 - 000252928 _____ C:\Users\Sue\Downloads\Q3 NVAP Newsletter - supplemental export newsletter for SC Madison (1).pub

2022-11-21 13:43 - 2020-10-15 13:27 - 000138734 _____ C:\Users\Sue\Downloads\Approval Requests - 7009284.html

2022-11-21 13:43 - 2020-10-06 12:52 - 000088977 _____ C:\Users\Sue\Downloads\ResumeAshleyToledo.pdf

2022-11-21 13:43 - 2020-10-05 07:13 - 000530604 _____ C:\Users\Sue\Downloads\MVSO New Launch Social Media Graphic_09.29_v2.jpg.html

2022-11-21 13:43 - 2020-09-20 12:06 - 000084698 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-04.pdf

2022-11-21 13:43 - 2020-09-20 12:06 - 000084698 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-04 (1).pdf

2022-11-21 13:43 - 2020-09-20 12:06 - 000084489 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-03.pdf

2022-11-21 13:43 - 2020-09-20 12:06 - 000084489 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-03 (1).pdf

2022-11-21 13:43 - 2020-09-20 12:06 - 000084272 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-01.pdf

2022-11-21 13:43 - 2020-09-20 12:06 - 000084272 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-01 (1).pdf

2022-11-21 13:43 - 2020-09-20 12:05 - 000084469 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-07.pdf

2022-11-21 13:43 - 2020-09-20 12:05 - 000084335 _____ C:\Users\Sue\Downloads\Zoetis-statement-2020-08.pdf

2022-11-21 13:43 - 2020-09-19 17:18 - 000001711 _____ C:\Users\Sue\Downloads\ph_wFQCA3.CSV

2022-11-21 13:43 - 2020-09-19 17:16 - 000164526 _____ C:\Users\Sue\Downloads\dnld20200919191635.pdf

2022-11-21 13:43 - 2020-09-19 17:15 - 001693563 _____ C:\Users\Sue\Downloads\dnld20200919191540.pdf

2022-11-21 13:43 - 2020-09-19 17:03 - 000110673 _____ C:\Users\Sue\Downloads\dnld20200919190346.pdf

2022-11-21 13:43 - 2020-09-19 16:47 - 000305087 _____ C:\Users\Sue\Downloads\dnld20200919184746.pdf

2022-11-21 13:43 - 2020-09-19 16:47 - 000305087 _____ C:\Users\Sue\Downloads\dnld20200919184744.pdf

2022-11-21 13:43 - 2020-09-19 16:41 - 000083069 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011319753.pdf

2022-11-21 13:43 - 2020-09-19 16:40 - 000082873 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9011072887.pdf

2022-11-21 13:43 - 2020-08-16 13:45 - 000048336 _____ C:\Users\Sue\Downloads\Credit Card Agreement Form.pdf

2022-11-21 13:43 - 2020-08-15 17:39 - 000078513 _____ C:\Users\Sue\Downloads\July 23, 2020.pdf

2022-11-21 13:43 - 2020-08-14 12:36 - 000037544 _____ C:\Users\Sue\Downloads\ResumeDanielleJohnson.pdf

2022-11-21 13:43 - 2020-08-14 12:36 - 000036951 _____ C:\Users\Sue\Downloads\ResumeMariaPrzislicki.pdf

2022-11-21 13:43 - 2020-08-11 08:00 - 000131640 _____ C:\Users\Sue\Downloads\boni lacross Rabies certficate (1).pdf

2022-11-21 13:43 - 2020-08-11 07:57 - 000131640 _____ C:\Users\Sue\Downloads\boni lacross Rabies certficate.pdf

2022-11-21 13:43 - 2020-08-11 07:51 - 000789989 _____ C:\Users\Sue\Downloads\Boni Lacross paperwork for travel 2.pdf

2022-11-21 13:43 - 2020-08-10 16:04 - 000458831 _____ C:\Users\Sue\Downloads\Boni Lacross paperwork of travel.pdf

2022-11-21 13:43 - 2020-08-10 15:52 - 002359472 _____ C:\Users\Sue\Downloads\Boni Lacross.pdf

2022-11-21 13:43 - 2020-08-10 15:52 - 002359472 _____ C:\Users\Sue\Downloads\Boni Lacross (1).pdf

2022-11-21 13:43 - 2020-08-10 11:31 - 000063040 _____ C:\Users\Sue\Downloads\BONIL.html

2022-11-21 13:43 - 2020-08-01 09:19 - 000082926 _____ C:\Users\Sue\Downloads\Zoetis-invoice-9010929400.pdf

2022-11-21 13:43 - 2020-07-31 15:20 - 000045292 _____ C:\Users\Sue\Downloads\Sue20200731_13321631.pdf

2022-11-21 13:43 - 2020-07-31 15:20 - 000045292 _____ C:\Users\Sue\Downloads\Sue20200731_13321631 (2).pdf

2022-11-21 13:43 - 2020-07-31 15:20 - 000045292 _____ C:\Users\Sue\Downloads\Sue20200731_13321631 (1).pdf

2022-11-21 13:43 - 2020-07-28 10:14 - 000030738 _____ C:\Users\Sue\Downloads\CPV2 CDV Results C Klamert Webster July 2020.pdf

2022-11-21 13:43 - 2020-07-28 09:19 - 000042060 _____ C:\Users\Sue\Downloads\ResumeLoriBierman.pdf

2022-11-21 13:43 - 2020-07-28 09:19 - 000042060 _____ C:\Users\Sue\Downloads\ResumeLoriBierman (1).pdf

2022-11-21 13:43 - 2020-07-27 07:49 - 000035963 _____ C:\Users\Sue\Downloads\ResumeCourtneyThistle.pdf

2022-11-21 13:43 - 2020-07-27 07:49 - 000035963 _____ C:\Users\Sue\Downloads\ResumeCourtneyThistle (1).pdf

2022-11-21 13:43 - 2020-07-25 11:53 - 000094387 _____ C:\Users\Sue\Downloads\sensor 1.pdf

2022-11-21 13:43 - 2020-07-25 11:35 - 000090787 _____ C:\Users\Sue\Downloads\VEHCS flyer_MARCH 2017 (1).pdf

2022-11-21 13:43 - 2020-07-25 11:29 - 000341449 _____ C:\Users\Sue\Downloads\AVMA Poster VEHCS.PDF

2022-11-21 13:43 - 2020-07-25 11:27 - 000090787 _____ C:\Users\Sue\Downloads\VEHCS flyer_MARCH 2017.pdf

2022-11-21 13:43 - 2020-07-25 11:24 - 000041290 _____ C:\Users\Sue\Downloads\M011214551.PDF

2022-11-21 13:43 - 2020-07-25 11:24 - 000041290 _____ C:\Users\Sue\Downloads\M011214551 (1).PDF

2022-11-21 13:43 - 2020-07-23 12:40 - 000127688 _____ C:\Users\Sue\Downloads\CBS August 2020.pptx

2022-11-21 13:43 - 2020-07-23 12:40 - 000127688 _____ C:\Users\Sue\Downloads\CBS August 2020 (1).pptx

2022-11-21 13:43 - 2020-07-17 15:37 - 000605107 _____ C:\Users\Sue\Downloads\image1.jpeg

2022-11-21 13:43 - 2020-07-17 15:36 - 000666325 _____ C:\Users\Sue\Downloads\image0 (2).jpeg

2022-11-21 13:43 - 2020-07-17 15:36 - 000659535 _____ C:\Users\Sue\Downloads\image0 (1).jpeg

2022-11-21 13:43 - 2020-07-17 15:32 - 000659535 _____ C:\Users\Sue\Downloads\image0.jpeg

2022-11-21 13:43 - 2020-07-17 13:15 - 000132110 _____ C:\Users\Sue\Downloads\REPORT_ Sammy Name_ Beringer^Sammy^^^ Species_ CANINE At Tender Touch Veterinary Care.pdf

2022-11-21 13:43 - 2020-07-15 17:50 - 000583246 _____ C:\Users\Sue\Downloads\sensor 1.html

2022-11-21 13:43 - 2020-04-18 09:07 - 002238453 _____ C:\Users\Sue\Downloads\PPP1.pdf

2022-11-21 13:43 - 2020-04-18 09:07 - 000111748 _____ C:\Users\Sue\Downloads\ppp2.pdf

2022-11-21 13:43 - 2020-04-07 15:10 - 003713997 _____ C:\Users\Sue\Downloads\Gravity_Documents_for_Tender_Touch_Veterinary.pdf

2022-11-21 13:43 - 2020-04-02 10:22 - 000044185 _____ C:\Users\Sue\Downloads\ResumeCharityNelson.pdf

2022-11-21 13:43 - 2020-03-31 17:04 - 000068646 _____ C:\Users\Sue\Downloads\magnet.pdf

2022-11-21 13:43 - 2020-02-14 14:57 - 000036657 _____ C:\Users\Sue\Downloads\mortgage 2020 part 2.pdf

2022-11-21 13:43 - 2020-02-14 14:56 - 000113023 _____ C:\Users\Sue\Downloads\Tender Touch Renewal2020 mortgage.pdf

2022-11-21 13:43 - 2019-10-08 14:07 - 000085272 _____ C:\Users\Sue\Downloads\ConnectWiseControl.Client (2).exe

2022-11-21 13:43 - 2019-10-01 12:20 - 000630331 _____ C:\Users\Sue\Downloads\6291FD2D-3380-4574-913C-97C80B8AE5A2.pdf

2022-11-21 13:43 - 2019-09-03 15:21 - 000075853 _____ C:\Users\Sue\Downloads\aero.txt

2022-11-21 13:43 - 2019-01-11 11:44 - 000054561 _____ C:\Users\Sue\Downloads\February 28, 2018 (1).pdf

2022-11-21 13:43 - 2019-01-11 11:43 - 000042175 _____ C:\Users\Sue\Downloads\April 30, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:43 - 000040277 _____ C:\Users\Sue\Downloads\January 31, 2018 (2).pdf

2022-11-21 13:43 - 2019-01-11 11:43 - 000037068 _____ C:\Users\Sue\Downloads\March 31, 2018 (1).pdf

2022-11-21 13:43 - 2019-01-11 11:42 - 000042147 _____ C:\Users\Sue\Downloads\May 31, 2018 (1).pdf

2022-11-21 13:43 - 2019-01-11 11:42 - 000037085 _____ C:\Users\Sue\Downloads\June 30, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:41 - 000042283 _____ C:\Users\Sue\Downloads\July 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:38 - 000041815 _____ C:\Users\Sue\Downloads\October 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000054561 _____ C:\Users\Sue\Downloads\February 28, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000043434 _____ C:\Users\Sue\Downloads\September 30, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000042158 _____ C:\Users\Sue\Downloads\December 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000042158 _____ C:\Users\Sue\Downloads\December 31, 2018 (1).pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000042155 _____ C:\Users\Sue\Downloads\August 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000042147 _____ C:\Users\Sue\Downloads\May 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000040519 _____ C:\Users\Sue\Downloads\November 30, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:37 - 000037068 _____ C:\Users\Sue\Downloads\March 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:36 - 000040277 _____ C:\Users\Sue\Downloads\January 31, 2018.pdf

2022-11-21 13:43 - 2019-01-11 11:36 - 000040277 _____ C:\Users\Sue\Downloads\January 31, 2018 (1).pdf

2022-11-21 13:43 - 2019-01-11 11:30 - 000414497 _____ C:\Users\Sue\Downloads\Amortization_Schedule (4).pdf

2022-11-21 13:43 - 2019-01-11 11:28 - 000414442 _____ C:\Users\Sue\Downloads\Amortization_Schedule (3).pdf

2022-11-21 13:43 - 2019-01-08 12:03 - 000186549 _____ C:\Users\Sue\Downloads\Vet License.pdf

2022-11-21 13:43 - 2019-01-01 14:01 - 002491413 _____ C:\Users\Sue\Downloads\AVImark-End-of-the-Year-FAQs.pdf

2022-11-21 13:43 - 2018-12-04 13:39 - 000417558 _____ C:\Users\Sue\Downloads\Amortization_Schedule (2).pdf

2022-11-21 13:43 - 2018-11-15 17:21 - 000027476 _____ C:\Users\Sue\Downloads\export 1.csv

2022-11-21 13:43 - 2018-08-19 12:45 - 000034657 _____ C:\Users\Sue\Downloads\July 23, 2018.pdf

2022-11-21 13:43 - 2018-08-19 12:45 - 000034657 _____ C:\Users\Sue\Downloads\July 23, 2018 (1).pdf

2022-11-21 13:43 - 2018-04-22 07:04 - 000439287 _____ C:\Users\Sue\Downloads\Amortization_Schedule (1).pdf

2022-11-21 13:43 - 2018-03-25 09:24 - 000443812 _____ C:\Users\Sue\Downloads\Amortization_Schedule.pdf

2022-11-21 13:43 - 2018-02-15 16:48 - 000841268 _____ C:\Users\Sue\Downloads\Royal 2018.pdf

2022-11-21 13:43 - 2017-12-26 18:02 - 000347897 _____ C:\Users\Sue\Downloads\international cert Shilio.pdf

2022-11-21 13:43 - 2017-10-25 14:27 - 000381821 _____ C:\Users\Sue\Downloads\Ann Gutting 2018 COI plit.pdf

2022-11-21 13:43 - 2017-10-25 14:25 - 000187137 _____ C:\Users\Sue\Downloads\Gutting 2019 wi license.pdf

2022-11-21 13:43 - 2017-09-19 13:26 - 445123208 _____ (Intuit Inc.) C:\Users\Sue\Downloads\qbwebpatch.exe

2022-11-21 13:43 - 2017-06-07 11:10 - 002833655 _____ C:\Users\Sue\Downloads\[Untitled] (2).pdf

2022-11-21 13:43 - 2017-06-07 10:57 - 000154944 _____ C:\Users\Sue\Downloads\[Untitled] (1).pdf

2022-11-21 13:43 - 2017-05-30 08:23 - 000684067 _____ C:\Users\Sue\Downloads\VGP Overview Sheet.pdf

2022-11-21 13:43 - 2017-05-30 08:19 - 000726779 _____ C:\Users\Sue\Downloads\VGP 2017 June Pathway Planning Workshop Flyer_Chicago_Rd03.pdf

2022-11-21 13:43 - 2017-05-24 16:21 - 006262463 _____ C:\Users\Sue\Downloads\MER-17022_Summer_Sell-in_Promotion_detailer_Scroll indd.pdf

2022-11-21 13:43 - 2017-05-24 16:19 - 000102364 _____ C:\Users\Sue\Downloads\Suggested Order for TENDER TOUCH__ VET CARE-TENDER TOUCH VET CARE - 051917....pdf

2022-11-21 13:43 - 2017-05-21 09:30 - 000003554 _____ C:\Users\Sue\Downloads\sigimg0

2022-11-21 13:43 - 2017-05-21 09:30 - 000003503 _____ C:\Users\Sue\Downloads\sigimg1

2022-11-21 13:43 - 2017-05-10 10:21 - 000332456 _____ C:\Users\Sue\Downloads\Customizing Treatment Options (3).pdf

2022-11-21 13:43 - 2017-05-10 08:17 - 000625606 _____ C:\Users\Sue\Downloads\CYT Recommended Order Sell Sheet.pdf

2022-11-21 13:43 - 2017-05-10 08:15 - 000765038 _____ C:\Users\Sue\Downloads\CYT Dosing Cling .pdf

2022-11-21 13:43 - 2017-05-10 08:12 - 000332456 _____ C:\Users\Sue\Downloads\Customizing Treatment Options.pdf

2022-11-21 13:43 - 2017-05-10 08:12 - 000332456 _____ C:\Users\Sue\Downloads\Customizing Treatment Options (2).pdf

2022-11-21 13:43 - 2017-05-10 08:12 - 000332456 _____ C:\Users\Sue\Downloads\Customizing Treatment Options (1).pdf

2022-11-21 13:43 - 2017-05-10 08:11 - 001244205 _____ C:\Users\Sue\Downloads\CYT Now Available Flyer (Color) -.pdf

2022-11-21 13:43 - 2017-05-02 16:44 - 000142364 _____ C:\Users\Sue\Downloads\[Untitled].pdf

2022-11-21 13:43 - 2017-04-26 16:06 - 000774086 _____ C:\Users\Sue\Downloads\CatFoodProteinFatCarbPhosphorusChart.pdf

2022-11-21 13:43 - 2017-04-21 15:49 - 001364249 _____ C:\Users\Sue\Downloads\Tender Touch Veterinary Care - IT Support Plans and Estimate.pdf

2022-11-21 13:43 - 2017-04-10 09:40 - 000107100 _____ C:\Users\Sue\Downloads\20003110 Tender Touch Vet Care - Bladview 4343R CSI (1).pdf

2022-11-21 13:43 - 2017-04-10 09:20 - 000107100 _____ C:\Users\Sue\Downloads\20003110 Tender Touch Vet Care - Bladview 4343R CSI.pdf

2022-11-21 13:43 - 2017-03-24 12:42 - 000128358 _____ C:\Users\Sue\Downloads\Tender Touch Veterinary Care 03-24-17_v1.pdf

2022-11-21 13:43 - 2017-03-24 12:41 - 000437797 _____ C:\Users\Sue\Downloads\Computers Supplied by VetRay Technologies.pdf

2022-11-21 13:43 - 2017-03-24 08:14 - 000015147 _____ C:\Users\Sue\Downloads\Vet exposure chart_V20170321.xlsx

2022-11-21 13:43 - 2017-03-22 09:03 - 000952320 _____ C:\Users\Sue\Downloads\20003110 Tender Touch Vet Care - Bladview 4343R CSI (EVB).xls

2022-11-21 13:43 - 2017-03-15 13:47 - 000333594 _____ C:\Users\Sue\Downloads\1 Brochure Precision DR C 1417 Low 1500L C.pdf

2022-11-21 13:43 - 2017-03-15 13:47 - 000333594 _____ C:\Users\Sue\Downloads\1 Brochure Precision DR C 1417 Low 1500L C (2).pdf

2022-11-21 13:43 - 2017-03-15 13:47 - 000333594 _____ C:\Users\Sue\Downloads\1 Brochure Precision DR C 1417 Low 1500L C (1).pdf

2022-11-21 13:43 - 2017-03-06 10:53 - 000115396 _____ C:\Users\Sue\Downloads\2016-09-29_Education Coordinator.pdf

2022-11-21 13:43 - 2017-02-27 13:56 - 000430284 _____ C:\Users\Sue\Downloads\fluhr 2-26.pdf

2022-11-21 13:43 - 2017-02-21 12:31 - 000144714 _____ C:\Users\Sue\Downloads\Invoice INV211128487.pdf

2022-11-21 13:43 - 2017-02-07 15:28 - 000026241 _____ C:\Users\Sue\Downloads\ResumeJudiMihas.pdf

2022-11-21 13:43 - 2017-02-05 12:23 - 000008470 _____ C:\Users\Sue\Downloads\ResumeEmilyOgnenoff.pdf

2022-11-21 13:43 - 2017-02-05 12:20 - 000014677 _____ C:\Users\Sue\Downloads\ResumeSamanthaMiller.pdf

2022-11-21 13:43 - 2017-02-05 12:14 - 000188316 _____ C:\Users\Sue\Downloads\7152218001_20170204_191532.wav

2022-11-21 13:43 - 2017-02-05 12:14 - 000101286 _____ C:\Users\Sue\Downloads\6082890689_20170205_075711.wav

2022-11-21 13:43 - 2017-02-05 12:14 - 000098935 _____ C:\Users\Sue\Downloads\2622241144_20170204_182321.wav

2022-11-21 13:43 - 2017-02-05 12:13 - 000096663 _____ C:\Users\Sue\Downloads\8003090524_20170205_115430.wav

2022-11-21 13:43 - 2017-02-05 12:13 - 000096663 _____ C:\Users\Sue\Downloads\8003090524_20170205_115430 (1).wav

2022-11-21 13:43 - 2017-01-25 16:44 - 000166335 _____ C:\Users\Sue\Downloads\2629394965_20170125_162055.wav

2022-11-21 13:43 - 2017-01-18 15:30 - 000103652 _____ C:\Users\Sue\Downloads\Statement 305310.pdf

2022-11-21 13:43 - 2017-01-09 10:29 - 000221798 _____ C:\Users\Sue\Downloads\sales and use 2015.pdf

2022-11-21 13:43 - 2017-01-06 13:09 - 000034603 _____ C:\Users\Sue\Downloads\Invoice-000114-01_05_2017.pdf

2022-11-21 13:43 - 2017-01-02 08:50 - 000038442 _____ C:\Users\Sue\Downloads\Invoice-000111-12_31_2016.pdf

2022-11-21 13:43 - 2016-12-07 14:48 - 000004143 _____ C:\Users\Sue\Downloads\Invoice- Beth.pdf

2022-11-21 13:43 - 2016-11-30 12:34 - 000137380 _____ C:\Users\Sue\Downloads\2626896424_20161130_122602.wav

2022-11-21 13:43 - 2016-11-25 17:12 - 000035830 _____ C:\Users\Sue\Downloads\Invoice-000108-11_22_2016.pdf

2022-11-21 13:43 - 2016-11-11 16:02 - 000109107 _____ C:\Users\Sue\Downloads\Suggested Order for TENDER TOUCH__ VET CARE-2016 Winter Sell-In PromotionTrue.pdf

2022-11-21 13:43 - 2016-11-07 17:25 - 000091023 _____ C:\Users\Sue\Downloads\M16-27013_F_20161107113339 (2).PDF

2022-11-21 13:43 - 2016-11-07 17:24 - 000091279 _____ C:\Users\Sue\Downloads\M16-27013_P_20161006180202.PDF

2022-11-21 13:43 - 2016-11-07 16:58 - 000091023 _____ C:\Users\Sue\Downloads\M16-27013_F_20161107113339 (1).PDF

2022-11-21 13:43 - 2016-11-07 16:56 - 000091023 _____ C:\Users\Sue\Downloads\M16-27013_F_20161107113339.PDF

2022-11-21 13:43 - 2016-10-31 12:42 - 000042114 _____ C:\Users\Sue\Downloads\Invoice-000107-10_28_2016.pdf

2022-11-21 13:43 - 2016-10-05 16:09 - 000126392 _____ C:\Users\Sue\Downloads\RptAccPrint.pdf

2022-11-21 13:43 - 2016-10-02 11:03 - 000035717 _____ C:\Users\Sue\Downloads\Invoice-000097-09_30_2016.pdf

2022-11-21 13:43 - 2016-09-23 14:25 - 000385460 _____ C:\Users\Sue\Downloads\F1683216.pdf

2022-11-21 13:43 - 2016-08-31 10:42 - 000034924 _____ C:\Users\Sue\Downloads\Invoice-000095-08_30_2016.pdf

2022-11-21 13:43 - 2016-08-05 09:26 - 000385792 _____ C:\Users\Sue\Downloads\F1667213.pdf

2022-11-21 13:43 - 2016-07-27 13:38 - 000063603 _____ C:\Users\Sue\Downloads\Lab Report - 094-026472-A01.pdf

2022-11-21 13:43 - 2016-07-27 13:38 - 000063603 _____ C:\Users\Sue\Downloads\Lab Report - 094-026472-A01 (1).pdf

2022-11-21 13:43 - 2016-07-25 12:00 - 000246416 _____ C:\Users\Sue\Downloads\7.4.27 - Public Relations Coordinator.pdf

2022-11-21 13:43 - 2016-07-18 13:19 - 000209516 _____ C:\Users\Sue\Downloads\Grrow,Elsa-paper file bldwork.pdf

2022-11-21 13:43 - 2016-07-14 13:19 - 000344268 _____ C:\Users\Sue\Downloads\bugatti gundrum international certificate (2).pdf

2022-11-21 13:43 - 2016-07-14 13:08 - 000342933 _____ C:\Users\Sue\Downloads\bugatti gundrum international certificate (1).pdf

2022-11-21 13:43 - 2016-07-14 13:07 - 000342933 _____ C:\Users\Sue\Downloads\bugatti gundrum international certificate.pdf

2022-11-21 13:43 - 2016-07-13 08:47 - 001600002 _____ C:\Users\Sue\Downloads\mod09_web_completion_certificate (1).pdf

2022-11-21 13:43 - 2016-07-13 08:38 - 001600002 _____ C:\Users\Sue\Downloads\mod09_web_completion_certificate.pdf

2022-11-21 13:43 - 2016-07-13 08:38 - 001583676 _____ C:\Users\Sue\Downloads\mod07_web_completion_certificate.pdf

2022-11-21 13:43 - 2016-07-13 08:38 - 001583676 _____ C:\Users\Sue\Downloads\mod07_web_completion_certificate (1).pdf

2022-11-21 13:43 - 2016-07-13 08:37 - 000904469 _____ C:\Users\Sue\Downloads\mod10_web_completion_certificate.pdf

2022-11-21 13:43 - 2016-06-27 10:51 - 000445248 _____ C:\Users\Sue\Downloads\document-0.pdf

2022-11-21 13:43 - 2016-06-06 12:59 - 166179864 _____ (Kaspersky Lab) C:\Users\Sue\Downloads\kts16.0.1.445abcen_10308 (1).exe

2022-11-21 13:43 - 2016-06-06 10:53 - 166179864 _____ (Kaspersky Lab) C:\Users\Sue\Downloads\kts16.0.1.445abcen_10308.exe

2022-11-21 13:43 - 2016-05-31 09:59 - 000035981 _____ C:\Users\Sue\Downloads\Invoice-000082-05_27_2016.pdf

2022-11-21 13:43 - 2016-05-26 16:30 - 000537328 _____ C:\Users\Sue\Downloads\Setup_QuickBooksPro2016.exe

2022-11-21 13:43 - 2016-05-26 16:26 - 001838632 _____ (LogMeIn, Inc.) C:\Users\Sue\Downloads\Support-LogMeInRescue.exe

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\winnie_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\U.S. Bank - My Loan2-20-22_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\RenderReport_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\Online Return Center_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\lock box_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\license 2023_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\licence 2023_files

2022-11-21 13:41 - 2022-11-21 13:41 - 000000000 ____D C:\Users\Sue\Documents\Custom Office Templates

2022-11-21 13:41 - 2022-08-19 14:03 - 000303653 _____ C:\Users\Sue\Documents\AFASTIntroductiontoItsTargetOrganApproachandFluidScoringSystems (1).pdf

2022-11-21 13:41 - 2022-08-19 14:01 - 000303653 _____ C:\Users\Sue\Documents\AFASTIntroductiontoItsTargetOrganApproachandFluidScoringSystems.pdf

2022-11-21 13:41 - 2022-07-27 15:29 - 000000084 _____ C:\Users\Sue\Documents\payments.csv

2022-11-21 13:41 - 2022-07-11 12:54 - 000024251 _____ C:\Users\Sue\Documents\iris reciept.pdf

2022-11-21 13:41 - 2022-07-10 12:13 - 000425521 _____ C:\Users\Sue\Documents\Online Return Center.html

2022-11-21 13:41 - 2022-06-28 10:34 - 000675159 _____ C:\Users\Sue\Documents\2021 Fluhr, Suzanne Individual Client Copy personal taxes.pdf

2022-11-21 13:41 - 2022-06-25 13:41 - 000479981 _____ C:\Users\Sue\Documents\TENDER TOUCH VETERINARY CARE INC_2021_1120S_Tax Returns.pdf

2022-11-21 13:41 - 2022-06-25 13:31 - 000874920 _____ C:\Users\Sue\Documents\TENDER TOUCH VETERINARY CARE INC_2021_1120S_Tax Returns (7).zip

2022-11-21 13:41 - 2022-06-25 13:23 - 000771014 _____ C:\Users\Sue\Documents\TENDER TOUCH VETERINARY CARE INC_2021_1120S_Tax Returns (5).zip

2022-11-21 13:41 - 2022-06-01 13:17 - 009204132 _____ C:\Users\Sue\Documents\lock box.html

2022-11-21 13:41 - 2022-05-29 13:27 - 000025725 _____ C:\Users\Sue\Documents\Dr Sue License.pdf

2022-11-21 13:41 - 2022-05-24 11:00 - 000274268 _____ C:\Users\Sue\Documents\winnie.html

2022-11-21 13:41 - 2022-03-23 14:17 - 000108754 _____ C:\Users\Sue\Documents\Insurance Census 2022.pdf

2022-11-21 13:41 - 2022-03-11 17:26 - 000141974 _____ C:\Users\Sue\Documents\MYS.jpeg

2022-11-21 13:41 - 2022-02-22 14:01 - 009160564 _____ C:\Users\Sue\Documents\-vs2-operator_s-manual-no-crops.pdf

2022-11-21 13:41 - 2022-02-19 14:25 - 000394929 _____ C:\Users\Sue\Documents\U.S. Bank - My Loan2-20-22.html

2022-11-21 13:41 - 2022-02-13 14:28 - 000213687 _____ C:\Users\Sue\Documents\jan 22 sales tax.pdf

2022-11-21 13:41 - 2022-02-09 17:26 - 000068071 _____ C:\Users\Sue\Documents\TaxJurisdictionMonthly-en-us-4023877 (1) jan 2022.pdf

2022-11-21 13:41 - 2022-02-09 17:24 - 000051557 _____ C:\Users\Sue\Documents\TaxSummaryMonthly-en-us-4023877Jan 2021.pdf

2022-11-21 13:41 - 2022-01-28 16:57 - 000100656 _____ C:\Users\Sue\Documents\2021 Updated Employee W-2s.pdf

2022-11-21 13:41 - 2022-01-21 09:31 - 001160720 _____ C:\Users\Sue\Documents\ColdWeatherSafety.pdf

2022-11-21 13:41 - 2022-01-16 14:31 - 000042428 _____ C:\Users\Sue\Documents\2021-01-27 Statement - USB Sue Savings 3473.pdf

2022-11-21 13:41 - 2022-01-15 13:41 - 000051110 _____ C:\Users\Sue\Documents\MYS Dec 21 Tax.pdf

2022-11-21 13:41 - 2022-01-01 13:03 - 009434929 _____ C:\Users\Sue\Documents\contract signed.pdf

2022-11-21 13:41 - 2022-01-01 13:01 - 001185532 _____ C:\Users\Sue\Documents\document.pdf

2022-11-21 13:41 - 2022-01-01 13:01 - 000187956 _____ C:\Users\Sue\Documents\VEBLegalCertificateAllison.pdf

2022-11-21 13:41 - 2022-01-01 12:57 - 000000082 _____ C:\Users\Sue\Documents\GlCodeSummaryReport_284360_001_20220101_135733.csv

2022-11-21 13:41 - 2022-01-01 12:42 - 000806662 _____ C:\Users\Sue\Documents\AVImark-Year-End-Processes_12092021.pdf

2022-11-21 13:41 - 2022-01-01 11:57 - 000029370 _____ C:\Users\Sue\Documents\Amortization schedule1-1-22.pdf

2022-11-21 13:41 - 2022-01-01 10:36 - 000050838 _____ C:\Users\Sue\Documents\TaxSummaryMonthly-en-us-4023877.pdf

2022-11-21 13:41 - 2021-12-29 12:38 - 000000400 _____ C:\Users\Sue\Documents\licence 2023.htm

2022-11-21 13:41 - 2021-12-29 12:37 - 000000400 _____ C:\Users\Sue\Documents\RenderReport.htm

2022-11-21 13:41 - 2021-12-26 16:00 - 000000400 _____ C:\Users\Sue\Documents\license 2023.htm

2022-11-21 13:41 - 2021-12-25 17:23 - 000000000 ____D C:\Users\Sue\Documents\FeedbackHub

2022-11-21 13:41 - 2021-12-22 18:46 - 000188529 _____ C:\Users\Sue\Documents\VEBLegalCertificatelicense 2023.pdf

2022-11-21 13:41 - 2021-12-14 16:16 - 003900274 _____ C:\Users\Sue\Documents\VINFoundation_ModelEmploymentAgreement_042018.pdf

2022-11-21 13:41 - 2021-10-02 16:25 - 000067863 _____ C:\Users\Sue\Documents\TaxJurisdictionMonthly-en-us-4023877.pdf

2022-11-21 13:41 - 2021-09-30 14:43 - 000020970 _____ C:\Users\Sue\Documents\DEA2021.pdf

2022-11-21 13:41 - 2021-05-16 13:56 - 000924264 _____ C:\Users\Sue\Documents\fte.pdf

2022-11-21 13:41 - 2021-05-16 13:43 - 001300599 _____ C:\Users\Sue\Documents\222.pdf

2022-11-21 13:41 - 2021-05-16 13:42 - 001513069 _____ C:\Users\Sue\Documents\sum.pdf

2022-11-21 13:41 - 2021-05-16 13:39 - 003213569 _____ C:\Users\Sue\Documents\nov2.pdf

2022-11-21 13:41 - 2021-05-16 13:38 - 003053350 _____ C:\Users\Sue\Documents\nov1.pdf

2022-11-21 13:41 - 2021-05-16 13:34 - 009751493 _____ C:\Users\Sue\Documents\sobs.pdf

2022-11-21 13:41 - 2021-05-16 13:25 - 009910722 _____ C:\Users\Sue\Documents\jsbs.pdf

2022-11-21 13:41 - 2021-05-16 13:18 - 009165865 _____ C:\Users\Sue\Documents\bsmj.pdf

2022-11-21 13:41 - 2021-05-16 13:13 - 006799728 _____ C:\Users\Sue\Documents\Scan.pdf

2022-11-21 13:41 - 2021-05-16 12:59 - 006857725 _____ C:\Users\Sue\Documents\941 for PPP.pdf

2022-11-21 13:41 - 2021-05-12 07:58 - 001302991 _____ C:\Users\Sue\Documents\Scan 222.pdf

2022-11-21 13:41 - 2021-03-13 11:31 - 000137444 _____ C:\Users\Sue\Documents\tax feb.oxps

2022-11-21 13:41 - 2021-01-13 15:22 - 000143715 _____ C:\Users\Sue\Documents\[email protected]

2022-11-21 13:41 - 2020-11-21 14:19 - 000071457 _____ C:\Users\Sue\Documents\20200331_INWKS941.pdf

2022-11-21 13:41 - 2020-11-21 14:10 - 000176205 _____ C:\Users\Sue\Documents\20200930_INWKS941.pdf

2022-11-21 13:41 - 2020-11-21 14:07 - 000537581 _____ C:\Users\Sue\Documents\20200630_INWKS941.pdf

2022-11-21 13:41 - 2020-11-21 14:05 - 000005809 _____ C:\Users\Sue\Documents\20200930_WIUCT101.pdf

2022-11-21 13:41 - 2020-11-21 13:58 - 000005808 _____ C:\Users\Sue\Documents\20200630_WIUCT101.pdf

2022-11-21 13:41 - 2020-08-11 08:00 - 000131640 _____ C:\Users\Sue\Documents\bonilacrossR.pdf

2022-11-21 13:41 - 2020-08-11 07:58 - 000131640 _____ C:\Users\Sue\Documents\Rabie Boni.pdf

2022-11-21 13:41 - 2020-08-11 07:52 - 000789989 _____ C:\Users\Sue\Documents\BoniLacrosstravel2.pdf

2022-11-21 13:41 - 2020-08-10 16:08 - 000458831 _____ C:\Users\Sue\Documents\Bonilacross.pdf

2022-11-21 13:41 - 2020-08-10 16:07 - 000458831 _____ C:\Users\Sue\Documents\Boni Lacross 1.pdf

2022-11-21 13:41 - 2020-08-10 16:04 - 000458831 _____ C:\Users\Sue\Documents\Boni Lacross paperwork of travel.pdf

2022-11-21 13:41 - 2020-08-10 11:29 - 000272498 _____ C:\Users\Sue\Documents\BONI.pdf

2022-11-21 13:41 - 2020-08-10 11:24 - 000272029 _____ C:\Users\Sue\Documents\Boni Lacross.pdf

2022-11-21 13:41 - 2020-06-11 11:09 - 000000000 ____D C:\Users\Sue\Documents\Zoom

2022-11-21 13:41 - 2020-03-29 14:06 - 001996755 _____ C:\Users\Sue\Documents\TenderTouch (1).pdf

2022-11-21 13:41 - 2020-02-19 16:16 - 000207178 _____ C:\Users\Sue\Documents\Max 2020.oxps

2022-11-21 13:41 - 2018-02-25 10:44 - 000004704 _____ C:\Users\Sue\Documents\payment-confirmation-2-24-18.pdf

2022-11-21 13:41 - 2016-11-06 14:01 - 000164751 _____ C:\Users\Sue\Documents\Book2.xlsx

2022-11-21 13:36 - 2022-11-21 13:36 - 000000000 ___HD C:\OneDriveTemp

2022-11-21 13:34 - 2022-11-21 13:36 - 000000000 ____D C:\Users\Sue\AppData\Local\Notepad

2022-11-21 13:32 - 2022-11-21 13:32 - 000297472 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll

2022-11-21 13:20 - 2022-11-21 13:20 - 000000625 _____ C:\Users\Sue\Desktop\SharedDocuments (TTVC-SVRData) (S) - Shortcut.lnk

2022-11-21 13:01 - 2022-11-21 15:02 - 000000000 ____D C:\Backup

2022-11-21 12:26 - 2022-11-21 12:33 - 000000000 ____D C:\ProgramData\scre..tion_b15b0581876c57b7_0015.000d_86ab3ae43306d26a

2022-11-21 12:26 - 2022-11-21 12:26 - 000086688 _____ C:\Users\Sue\Downloads\ConnectWiseControl.Client (1).exe

2022-11-19 16:09 - 2022-11-19 16:11 - 037942757 _____ C:\Users\Sue\Downloads\Protect Every Pet Clinic Toolkit.zip

2022-11-19 15:57 - 2022-11-19 15:57 - 000067704 _____ C:\Users\Sue\Downloads\TaxJurisdictionMonthly-en-us-4023877.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-12-19 17:51 - 2021-10-27 11:15 - 000000000 ____D C:\Windows\system32\SleepStudy

2022-12-19 17:28 - 2022-11-10 21:23 - 000000000 ____D C:\Program Files (x86)\Google

2022-12-19 17:16 - 2019-12-07 03:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-12-19 14:07 - 2019-12-07 03:14 - 000000000 ___HD C:\Program Files\WindowsApps

2022-12-19 14:07 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\AppReadiness

2022-12-17 12:14 - 2022-11-10 17:12 - 000000000 ____D C:\ProgramData\ScreenConnect Client (61e735463d3bf1de)

2022-12-17 11:04 - 2022-11-11 09:00 - 000004784 _____ C:\Windows\system32\Tasks\MicrosoftEdgeShadowStackRollbackTask

2022-12-17 11:04 - 2021-10-27 11:15 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2022-12-16 11:19 - 2022-11-10 17:13 - 000000000 ____D C:\Users\Sue\AppData\Local\D3DSCache

2022-12-15 16:04 - 2022-11-11 10:37 - 000000000 ____D C:\ProgramData\EPSON

2022-12-15 16:04 - 2022-11-11 10:37 - 000000000 ____D C:\Program Files\epson

2022-12-15 16:04 - 2022-11-10 17:13 - 000000000 ____D C:\Users\Sue\AppData\Local\Lenovo

2022-12-15 16:04 - 2022-06-20 22:51 - 000000000 ____D C:\ProgramData\Lenovo

2022-12-15 16:04 - 2022-06-20 22:00 - 000000000 ____D C:\Windows\system32\Tasks\Lenovo

2022-12-15 16:04 - 2022-06-20 22:00 - 000000000 ____D C:\Windows\Lenovo

2022-12-15 15:58 - 2019-12-07 03:14 - 000000000 ___HD C:\Windows\ELAMBKUP

2022-12-15 15:29 - 2022-11-10 21:24 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2022-12-15 15:29 - 2022-11-10 21:24 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2022-12-14 15:56 - 2019-12-07 03:13 - 000000000 ____D C:\Windows\INF

2022-12-14 15:47 - 2022-09-21 18:43 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI

2022-12-14 15:42 - 2022-11-10 17:15 - 000000000 ___RD C:\Users\Sue\OneDrive

2022-12-14 15:41 - 2022-11-10 21:23 - 000003596 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3259427507-1055586877-3198061443-1001

2022-12-14 15:41 - 2022-11-10 16:03 - 000000000 ____D C:\Program Files\Mesh Agent

2022-12-14 15:40 - 2022-11-10 15:57 - 000000000 ____D C:\Program Files\TeamViewer

2022-12-14 15:40 - 2022-06-20 22:01 - 000000000 ____D C:\Program Files\Microsoft Office

2022-12-14 15:40 - 2021-10-27 11:15 - 000454824 _____ C:\Windows\system32\FNTCACHE.DAT

2022-12-14 15:40 - 2021-10-27 11:15 - 000008192 ___SH C:\DumpStack.log.tmp

2022-12-14 15:40 - 2021-10-27 11:15 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2022-12-14 15:40 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\ServiceState

2022-12-14 15:40 - 2019-12-07 03:03 - 000524288 _____ C:\Windows\system32\config\BBI

2022-12-14 15:39 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\bcastdvr

2022-12-14 15:39 - 2019-12-07 03:14 - 000000000 ____D C:\Program Files\Common Files\System

2022-12-14 15:37 - 2022-11-10 17:12 - 000000000 ____D C:\Users\Sue

2022-12-14 15:37 - 2019-12-07 03:03 - 000000000 ____D C:\Windows\CbsTemp

2022-12-14 06:41 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates

2022-12-14 06:40 - 2022-11-10 15:38 - 000000000 ____D C:\Windows\system32\MRT

2022-12-14 06:39 - 2022-11-10 15:38 - 148633544 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2022-12-13 14:04 - 2022-11-10 21:12 - 000002208 _____ C:\Users\Sue\Desktop\AVImark - Shortcut.lnk

2022-12-08 16:47 - 2021-10-27 11:15 - 000000000 ____D C:\Windows\system32\Drivers\wd

2022-12-06 17:03 - 2022-11-10 17:13 - 000000000 ____D C:\Users\Sue\AppData\Local\Packages

2022-11-21 15:05 - 2022-11-10 17:13 - 000000000 ____D C:\Users\Sue\AppData\Local\AMD

2022-11-21 14:58 - 2022-06-20 22:56 - 000000000 ____D C:\Windows\SystemTemp

2022-11-21 13:35 - 2022-11-10 17:13 - 000000000 ____D C:\Users\Sue\AppData\Local\ConnectedDevicesPlatform

2022-11-21 13:35 - 2022-06-20 22:51 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ___SD C:\Windows\system32\UNP

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SysWOW64\Dism

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SystemResources

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\SystemApps

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\WinMetadata

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\lv-LV

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\lt-LT

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\et-EE

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\es-MX

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\system32\Dism

2022-11-21 13:35 - 2019-12-07 03:14 - 000000000 ____D C:\Windows\Provisioning

2022-11-21 13:32 - 2021-10-27 11:17 - 003014656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2022-11-21 12:26 - 2022-11-10 15:54 - 000000000 ____D C:\Users\Sue\AppData\Local\Deployment

==================== Files in the root of some directories ========

2022-10-19 14:00 - 2022-10-19 14:00 - 000513168 _____ (Intuit Inc.) C:\Program Files\Common Files\GraphSeriesCol.dll

2022-11-22 09:45 - 2022-11-22 09:47 - 1091567600 _____ (Intuit, Inc. ) C:\Users\Sue\AppData\Roaming\QuickBooksPremierSub2023.exe

2022-11-22 09:42 - 2022-11-22 09:42 - 071151810 _____ (Intuit, Inc. ) C:\Users\Sue\AppData\Roaming\QuickBooksPro2019.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-12-2022

Ran by Sue (19-12-2022 17:56:00)

Running from C:\Users\Sue\Desktop

Microsoft Windows 10 Pro Version 22H2 19045.2364 (X64) (2022-11-10 22:45:14)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3259427507-1055586877-3198061443-500 - Administrator - Disabled)

ccwadmin (S-1-5-21-3259427507-1055586877-3198061443-1002 - Administrator - Enabled)

DefaultAccount (S-1-5-21-3259427507-1055586877-3198061443-503 - Limited - Disabled)

Guest (S-1-5-21-3259427507-1055586877-3198061443-501 - Limited - Enabled)

Sue (S-1-5-21-3259427507-1055586877-3198061443-1001 - Administrator - Enabled) => C:\Users\Sue

WDAGUtilityAccount (S-1-5-21-3259427507-1055586877-3198061443-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABS PDF Install (HKLM-x32\...\{C42DD564-7DCD-4555-A7F3-15C0F46221D0}) (Version: 4.6.0 - Atlas Business Solutions, Inc.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 22.003.20263 - Adobe)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.14.04.018 - Advanced Micro Devices, Inc.)

AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden

AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.82 - Advanced Micro Devices, Inc.) Hidden

AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 4.13.0.0 - Advanced Micro Devices, Inc.) Hidden

AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 6.0.0.9 - Advanced Micro Devices, Inc.) Hidden

AMD SBxxx SMBus Driver Alpha (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden

AMD_Chipset_Drivers (HKLM-x32\...\{71990c55-cd9c-43d0-9271-e2d3941f3ca8}) (Version: 2.14.04.018 - Advanced Micro Devices, Inc.) Hidden

EPSON ET-2760 Series Printer Uninstall (HKLM\...\EPSON ET-2760 Series) (Version: - Seiko Epson Corporation)

Epson ET-2760 User’s Guide (HKLM-x32\...\UsersGuideEpson ET-2760 User’s Guide_is1) (Version: 1.0 - Epson America, Inc.)

Epson Event Manager (HKLM-x32\...\{3ACC34BD-4B01-49CA-9859-0FDD746BB36E}) (Version: 3.11.0058 - Seiko Epson Corporation)

Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)

EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)

Epson Software Updater (HKLM-x32\...\{26A9B753-4B5D-46D8-A329-5CEF96FC22D2}) (Version: 4.6.5 - Seiko Epson Corporation)

EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 108.0.5359.125 - Google LLC)

HP Unified IO (HKLM\...\{5C76ED0D-0F6F-4985-8B34-F9AE7834848F}) (Version: 2.0.0.434 - HP) Hidden

HP Unified IO (HKLM-x32\...\{F1390872-2500-4408-A46C-CD16C960C661}) (Version: 2.0.0.434 - HP) Hidden

Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.13.14.0 - Lenovo Group Ltd.)

Mesh Agent (HKLM\...\Mesh Agent) (Version: 2022-08-25 00:17:18.000-07:00 - )

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 108.0.1462.54 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 108.0.1462.54 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.238.1114.0002 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{80F1AF52-7AC0-42A3-9AF0-689BFB271D1D}) (Version: 3.68.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23026 (HKLM-x32\...\{BE960C1C-7BAD-3DE6-8B1A-2616FE532845}) (Version: 14.0.23026 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23026 (HKLM-x32\...\{A2563E55-3BEC-3828-8D67-E5E8B9E8B675}) (Version: 14.0.23026 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.30.30704 (HKLM\...\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}) (Version: 14.30.30704 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.30.30704 (HKLM\...\{662A0088-6FCD-45DD-9EA7-68674058AED5}) (Version: 14.30.30704 - Microsoft Corporation) Hidden

Microsoft Word 2021 - en-us (HKLM\...\Word2021Retail - en-us) (Version: 16.0.15831.20208 - Microsoft Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15831.20184 - Microsoft Corporation) Hidden

QuickBooks (HKLM\...\{3F034BE4-4FD8-4B4C-B9A7-BE9BF17C3CA4}) (Version: 33.0.4003.3302 - Intuit Inc.) Hidden

QuickBooks (HKLM\...\{A8FB867A-1595-43B2-8F8C-B6112C77CB8D}) (Version: 32.0.4006.3201 - Intuit Inc.) Hidden

QuickBooks Premier Edition 2022 (HKLM\...\{C32D73A9-B060-4D84-BEBB-5B595944E9E3}) (Version: 32.0.4006.3201 - Intuit Inc.)

QuickBooks Premier Edition 2023 (HKLM\...\{A9C6041A-3497-4CA5-86D1-F8759DD1BE58}) (Version: 33.0.4003.3302 - Intuit Inc.)

QuickBooks Runtime Redistributable (HKLM\...\{F2A4F809-2DE6-4D27-888B-4D2BB8DAF20E}) (Version: 1.00.0000 - Intuit Inc.)

Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9098.1 - Realtek Semiconductor Corp.)

ScreenConnect Client (61e735463d3bf1de) (HKLM-x32\...\{59AE0A72-DD3C-442C-AA9A-4529DA385797}) (Version: 21.13.4914.7937 - ScreenConnect Software)

TeamViewer (HKLM\...\TeamViewer) (Version: 15.35.9 - TeamViewer)

Packages:

=========

AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.40031.0_x64__0a9344xs7nr4m [2022-11-10] (Advanced Micro Devices Inc.) [Startup Task]

AV1 Video Extension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.52851.0_x64__8wekyb3d8bbwe [2022-12-08] (Microsoft Corporation)

Lenovo Commercial Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoSettingsforEnterprise_10.2210.33.0_x64__k1h2ywk1493x8 [2022-11-12] (LENOVO INC.)

MPEG-2 Video Extension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.50901.0_x64__8wekyb3d8bbwe [2022-11-12] (Microsoft Corporation)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.36.273.0_x64__dt26b99r8h8gj [2022-11-12] (Realtek Semiconductor Corp)

Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.15.12020.0_x64__8wekyb3d8bbwe [2022-12-08] (Microsoft Studios) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{05EC5C13-D255-4592-9CCB-98615172F0D6}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{0ADF9C35-0D5E-4B75-88DD-B64868907E17}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{123FAF7F-3FB1-4B8F-AD18-0047401D436A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{1B3210AF-E236-46D4-83EF-6421F2FF543C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{1E78DD72-771E-42BF-8B4B-363CEB18E07B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTVIEW.OCx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{22664BE2-0806-4BA4-8643-DE40C9149176}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{2A9EBDB5-0600-4E8C-B910-4001BEB2DD8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{349D777D-F7A2-4AAE-967F-A54F05A7FF3B}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBFinder.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{37A2FC00-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{37A2FC02-1795-4679-94A3-A153F1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{38F58721-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\COMObjectFactory.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{38F58742-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{38F58743-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{38F58744-5F93-11D5-9F94-0008C7AA5BD9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{4716D3CE-55DB-4D2A-818C-87D912895890}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{4844F3F7-2161-4AC4-B219-B3B4311782AA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{4E5E74B5-8EB5-4859-A335-837EED412620}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{5249684A-D7A2-4DBE-94F4-B90923A7BC64}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{547C8F00-5567-4AE3-8BB0-CC3CE2AB9070}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{57D590F1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{596801D8-2C9D-4627-9C67-195CB81B655A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{61B76A32-6422-11D5-A590-0050DABD6B8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{61B76A34-6422-11D5-A590-0050DABD6B8C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{63B5B272-1760-4A4F-922B-57F274900044}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{70478C56-E77F-4134-B3E3-3B18EE036D71}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{7DBF8260-30AD-4D1B-876A-8032B87B809F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{828E5386-74CF-4019-B356-C857CD028A7D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{82CC31B3-53B4-4161-A4E9-6B4F1290A6C8}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{8572570D-12D9-4F2C-8BB8-EB8848178B94}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{8E590317-1329-11D1-B70B-00805F29CD16}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2023\qbw.exe (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F2-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F3-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F4-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F5-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F6-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{9D9B61F7-9E2B-492A-81B3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{A14A674B-E0BE-48C1-BAB2-6ACBA33CA8CF}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\qfill.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{A58C4EAB-2DB8-445E-9CAE-2AE197A5C708}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{A63E42D0-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{A63E42D2-9C63-47B5-ABF2-0C839EC20778}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{AF5E0A13-CEAB-47CE-991D-77E82CD1BF3F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{B10BFAC3-EFF1-40D9-ADA0-BEBE037C24CA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{B66F2BF1-91EB-44CE-8088-AE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{b775f163-bef1-433e-aaab-c4344a51c94c}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2023\qbw.exe (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{BCD594EA-15C3-4FD8-B92B-114BB9694537}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBCtrIPMDS2.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{CBEF1FB5-78FF-4B14-9B0F-275493FB589C}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{CE18240D-F3F8-43AE-9EA0-A0DC85A95375}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D14FD6B3-6A9F-4537-9460-07B836707127}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D4A12AAF-E15E-470B-A6B6-63032186F91F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9B9C060-0954-11D3-9E07-00104BD2BE34}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSource.dll (Intuit, Inc. -> Intuit, Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6F81-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc. -> Intuit, Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6F84-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc. -> Intuit, Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6F87-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\cominifile.dll (Intuit, Inc. -> Intuit, Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FA1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FA3-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FA5-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FA6-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\GraphSeriesCol.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FB2-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\StorageClasses.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{D9BC6FC1-A54B-11D4-A516-0050DA68678D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\ViewSrcColumns.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{DCB2B478-EFF6-48F6-B718-13E98876854E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{DFD0AF10-B86C-4AF3-B609-1348D513E565}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{E1A173E1-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{E1A173E3-D957-4C3E-A098-43756A3DB454}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{e64977bd-9e0b-498d-843e-1776102710aa}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2022\qbw.exe (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{E6E4DF8B-17CE-43ED-B2C7-2CE10457552D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{E7D2D0F6-B754-438D-B5C9-BF848D311A0F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBDTRatios.dll => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{EADA914E-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{EAEF733D-5B08-4E85-8440-5A087504DF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{F9EF917A-E55E-4242-B205-E778395AC313}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\BbfDepCalc.ocx => No File

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{FAC93D42-FFC2-11d1-9DEB-0008C7A08EBA}\localserver32 -> C:\Program Files\Intuit\QuickBooks 2023\qbw.exe (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{FB17915F-06D1-4214-A902-CC5EE05186E9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

CustomCLSID: HKU\S-1-5-21-3259427507-1055586877-3198061443-1001_Classes\CLSID\{FB359C2A-6927-4AD7-8F1B-B6472CA7CDE7}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\QBObjProxy.dll (Intuit, Inc. -> Intuit Inc.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.238.1114.0002\FileSyncShell64.dll [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Windows\System32\atiacm64.dll [2021-12-09] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2009-09-16 20:44 - 2009-09-16 20:44 - 000153088 _____ (Hewlett Packard) [File not signed] C:\Windows\System32\hptcpmib.dll

2009-09-16 20:45 - 2009-09-16 20:45 - 000331264 _____ (Hewlett Packard) [File not signed] C:\Windows\System32\HpTcpMon.dll

2009-09-16 13:44 - 2009-09-16 13:44 - 000132096 _____ (Hewlett Packard) [File not signed] C:\Windows\System32\hpzjrd01.dll

2022-10-19 12:12 - 2022-10-19 12:12 - 005182464 _____ (Intuit Inc.) [File not signed] C:\Windows\SYSTEM32\InetClnt.dll

2022-08-26 03:12 - 2022-08-26 03:12 - 000944128 _____ (Intuit, Inc.) [File not signed] C:\Program Files\Common Files\Intuit\Entitlement Client\v8\Client\EntitlementClientBootstrap.dll

2009-09-16 20:45 - 2009-09-16 20:45 - 000317440 _____ (Microsoft Corporation) [File not signed] C:\Windows\System32\HPTcpMUI.dll

2022-06-20 22:01 - 2022-06-20 22:01 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll

2022-06-20 22:01 - 2022-06-20 22:01 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll

2016-09-14 16:31 - 2016-09-14 16:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [File not signed] C:\Windows\System32\enppmon.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Mesh Agent => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ScreenConnect Client (61e735463d3bf1de) => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-11-16] (Microsoft Corporation -> Microsoft Corporation)

Handler: intu-help-qb15 - {0EEC9CBF-4C3D-45B3-9384-3C3CA3034A8B} - C:\Program Files\Intuit\QuickBooks 2022\HelpAsyncPluggableProtocol.dll [2022-10-19] (Intuit, Inc. -> Intuit, Inc.)

Handler: intu-help-qb16 - {6995859E-9BFA-4D54-9059-180AA18A20CF} - C:\Program Files\Intuit\QuickBooks 2023\HelpAsyncPluggableProtocol.dll [2022-10-08] (Intuit, Inc. -> Intuit, Inc.)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\SysWOW64\mscoree.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 03:14 - 2019-12-07 03:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3259427507-1055586877-3198061443-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sue\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3A41CBAC-D63D-45B0-BCDD-CE593C6EB293}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{53A494BB-440B-43BB-B888-4E5C7905CBA8}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{947D4551-4AEB-464F-B053-BC1819DB6DE9}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{E531F30C-28D8-49F5-9C51-F22377CC989E}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{0EAF02BE-2725-4A97-849D-3AF2C042552E}] => (Allow) C:\Program Files\Mesh Agent\MeshAgent.exe (mc.ntg.co-8edb73 -> ) [File not signed]

FirewallRules: [{EF13EEE1-2B37-4589-9615-0DB450A3A347}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

FirewallRules: [{6926B347-FC06-4364-AB7C-3791D62D4A3E}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

FirewallRules: [TCP Query User{E70C39EE-C537-4B53-8CAD-0CD0D6D5DC62}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

FirewallRules: [UDP Query User{7273A62E-C192-4FBE-B0A7-2749E19437B7}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

FirewallRules: [{9A6F0C91-EDAC-4E0A-835D-DCF6AD8E3745}] => (Allow) C:\Users\Public\Documents\Windows\QuickBooksDownloder.exe (Solanki Piyushkumar -> )

FirewallRules: [{25640E72-63CB-41AA-AAB7-3E771EA5461B}] => (Allow) C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe (Solanki Piyushkumar -> )

FirewallRules: [{7D6F1BBE-49E3-4419-A620-F54CD2574AA4}] => (Allow) C:\Users\Public\Documents\Windows\QuickBooksDownloder.exe (Solanki Piyushkumar -> )

FirewallRules: [{82331809-63A0-49F2-9DCF-4F5D31D6030E}] => (Allow) C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe (Solanki Piyushkumar -> )

FirewallRules: [{D40BCBB0-E85A-488E-A5AE-7683650A60AB}] => (Allow) C:\Program Files\Intuit\QuickBooks 2022\CefSharp.BrowserSubprocess.exe (The CefSharp Authors) [File not signed]

FirewallRules: [{F7DD5539-4D4E-4F60-87EA-6D7503C0D851}] => (Allow) C:\Program Files\Intuit\QuickBooks 2023\CefSharp.BrowserSubprocess.exe (The CefSharp Authors) [File not signed]

FirewallRules: [{982F8AF2-2C81-4C00-AB06-E0117B5BC8EE}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\108.0.1462.46\msedgewebview2.exe => No File

FirewallRules: [{F40FD09B-2DA9-4AB3-A3D4-CE738AB00963}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3204.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{C7CEA418-93BB-4E28-B30E-F2DFDFAFBA67}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3204.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{554174AB-D730-4FD4-B458-2AD13248F766}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3204.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{87A45F36-2111-4C45-80A0-D51577AAC7E1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3204.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [TCP Query User{9524BB9E-4F42-4C9C-B737-D27F2115ED93}C:\users\sue\appdata\local\logmein rescue applet\lmir099f3001.tmp\lmi_rescue_srv.exe] => (Allow) C:\users\sue\appdata\local\logmein rescue applet\lmir099f3001.tmp\lmi_rescue_srv.exe => No File

FirewallRules: [UDP Query User{2CF7B6A6-F56A-4519-A9BC-8A88C6007279}C:\users\sue\appdata\local\logmein rescue applet\lmir099f3001.tmp\lmi_rescue_srv.exe] => (Allow) C:\users\sue\appdata\local\logmein rescue applet\lmir099f3001.tmp\lmi_rescue_srv.exe => No File

FirewallRules: [{6C683A2E-759E-4388-BBDB-33639BC666D4}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:

==================

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine RegSetValueExW(0x0000038c,SYSTEM\CurrentControlSet\Services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5},0,REG_BINARY,0000008F9FB7E080.72). hr = 0x80070005, Access is denied.

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine RegSetValueExW(0x0000038c,SYSTEM\CurrentControlSet\Services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5},0,REG_BINARY,00000278DF1203B0.72). hr = 0x80070005, Access is denied.

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

Error: (12/19/2022 05:55:25 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine RegSetValueExW(0x00000370,SYSTEM\CurrentControlSet\Services\VSS\Diag\Lovelace,0,REG_BINARY,0000008F9FB7DC10.72). hr = 0x80070005, Access is denied.

Operation:

Executing Asynchronous Operation

Context:

Current State: DoSnapshotSet

System errors:

=============

Error: (12/19/2022 05:54:52 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Start with the following error:

Access is denied.

Error: (12/19/2022 04:34:44 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Start with the following error:

Access is denied.

Error: (12/19/2022 04:09:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for FailureActions with the following error:

Access is denied.

Error: (12/19/2022 04:09:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Security with the following error:

Access is denied.

Error: (12/19/2022 04:08:34 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: The ScRegSetValueExW call failed for Security with the following error:

Access is denied.

Error: (12/19/2022 03:22:08 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-E2I7FB8)

Description: Unable to start a DCOM Server: {628ACE20-B77A-456F-A88D-547DB6CEEDD5}. The error:

"2147942402"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\notification_helper.exe" -Embedding

Error: (12/19/2022 03:21:48 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-E2I7FB8)

Description: Unable to start a DCOM Server: {628ACE20-B77A-456F-A88D-547DB6CEEDD5}. The error:

"2147942402"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Edge\Application\108.0.1462.54\notification_helper.exe" -Embedding

Error: (12/19/2022 02:52:07 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-E2I7FB8)

Description: Unable to start a DCOM Server: Microsoft.WindowsAlarms_11.2210.7.0_x64__8wekyb3d8bbwe!App.AppXwzrz54cs8gbnfgve6ctx6ht4bjw97w0y.mca as Unavailable/Unavailable. The error:

"2147942402"

Happened while starting this command:

"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppX4325622ft6437f3xfywcfxgbedfvpn0x.mca

Windows Defender:

================

Date: 2022-12-19 16:09:07

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2022-12-18 17:40:37

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2022-12-17 17:02:55

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2022-12-16 16:43:37

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2022-12-15 16:04:27

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Full Scan

CodeIntegrity:

===============

Date: 2022-12-15 16:35:23

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2022-12-15 15:54:37

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2022-12-14 19:18:50

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Immunet\scriptid\damsicom64.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: LENOVO M47KT21A 06/29/2022

Motherboard: LENOVO 32E4

Processor: AMD Ryzen 7 PRO 5750GE with Radeon Graphics

Percentage of memory in use: 40%

Total physical RAM: 15751.31 MB

Available physical RAM: 9402.95 MB

Total Virtual: 18183.31 MB

Available Virtual: 10388.86 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:474.72 GB) (Free:390.25 GB) (Model: SAMSUNG MZVLB512HBJQ-000L7) NTFS

Drive s: () (Network) (Total:699.46 GB) (Free:655.23 GB) (Model: SAMSUNG MZVLB512HBJQ-000L7) NTFS

\\?\Volume{4574aa8f-2317-4bcf-9c02-c733a72f1cac}\ (WinRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.31 GB) NTFS

\\?\Volume{d874ff2f-a813-487a-ae1a-1cc02c2d1c6b}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Size: 476.9 GB) (Disk ID: 4B8FB9AB)

Partition: GPT.

==================== End of Addition.txt =======================

#2
RKinner

Posted 20 December 2022 - 08:36 AM

Malware Expert

Expert
24,624 posts

I'm pretty sure your pop ups are coming from:

(svchost.exe ->) (Solanki Piyushkumar -> ) C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe

As you can see it claims to be an Intuit process but is owned by somebody with a strange name. Also it is running from the Documents folder which no legit program would do.

We can remove it and some dead wood with a fixlist. The fixlist will also check that none of your system files have been tampered with so will probably take about 25 minutes to complete. Be patient. It will reboot your PC when done.

Download the attached fixlist.txt to the same location as FRST

fixlist.txt 18.17KB 98 downloads

Run FRST and press Fix

A fixlog.txt (located in the same folder as FRST) will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again but this time make sure Addition.txt is checked and hit Scan. Post both logs.

Did that get rid of the popups?

I see both TeamViewer and Mesh Agent were installed at about the same time and Logmein was installed the day before.

2022-12-14 15:41 - 2022-11-10 16:03 - 000000000 ____D C:\Program Files\Mesh Agent

2022-12-14 15:40 - 2022-11-10 15:57 - 000000000 ____D C:\Program Files\TeamViewer

2022-12-13 10:57 - 2022-12-14 15:40 - 000000000 ____D C:\Program Files (x86)\LogMeIn Rescue Applet

These are remote control apps that allow access from another computer which are often installed by phony support services. Did you install them? If not they should be uninstalled and you should change all of your passwords immediately! If you did install them do you really need all three? They will slow your PC down and are possible infection vectors.

You have also run HitmanPro. This program is not recommended as it is very difficult to uninstall completely and sometimes leaves a system unbootable. I thought about removing it with the fixlist but decided not to risk it.

#3
CCWTech

Posted 20 December 2022 - 08:57 AM

Member

Topic Starter
Member
191 posts

Hi, yes, I did install the remote access apps.

I can uninstall HitMan Pro if you suggest. I don't want to make any changes however without checking with you first.

Here are all three logs requested. Thank you very much. I will monitor to see if the pop-ups are gone.

Fix result of Farbar Recovery Scan Tool (x64) Version: 16-12-2022

Ran by Sue (20-12-2022 08:43:49) Run:1

Running from C:\Users\Sue\Desktop

Loaded Profiles: Sue

Boot Mode: Normal

==============================================

fixlist content:

*****************

(svchost.exe ->) (Solanki Piyushkumar -> ) C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe

Unlock: C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe

C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe

CreateDummy: C:\Users\Public\Documents\Windows\IntuitDownloadManager.exe