Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2016 01
Ran by XxF00L2UxX (administrator) on BUBBA-PC (20-11-2016 17:54:36)
Running from C:\Users\XxF00L2UxX\Desktop
Loaded Profiles: XxF00L2UxX (Available Profiles: Bubba & XxF00L2UxX & Administrator)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfwsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Netherlands B.V) C:\Program Files (x86)\AVG Driver Updater\AVG Driver Updater.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\40.3.6\ScriptHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\XxF00L2UxX\Desktop\FRST64 (1).exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2180680 2016-11-17] ()
HKLM-x32\...\Run: [USB Renumeration Utility] => C:\Windows\SysWOW64\RenumNNT.exe [69632 2005-05-20] (NEXIQ Technologies, Inc.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
Startup: C:\Users\Bubba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-08-28]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (No File)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BB05F8AA-D901-47F0-9ACD-6EA65E7B6BDE}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKLM-x32 -> DefaultScope {0B4A10D1-FBD6-451d-BFDA-F03252B05984} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&query={searchTerms}&invocationType=tb50-ie-aim-chromesbox-en-us&tb_uuid=20110122073055588&tb_oid=22-01-2011&tb_mrud=22-01-2011
SearchScopes: HKLM-x32 -> {0B4A10D1-FBD6-451d-BFDA-F03252B05984} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&query={searchTerms}&invocationType=tb50-ie-aim-chromesbox-en-us&tb_uuid=20110122073055588&tb_oid=22-01-2011&tb_mrud=22-01-2011
SearchScopes: HKU\S-1-5-21-1650318354-1133879312-1467673443-1180 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={393C23D9-F0A6-431E-B3A3-BF19BBC66A31}&mid=7c8a3bcde25e47cd8ba075f39d4797ce-e4c496ffd115e881f3c2f5ff9e1f8447ea24ea80&lang=en&ds=AVG&coid=avgtbavg&cmpid=ZenTest_B_0&pr=fr&d=2016-11-18 00:21:07&v=4.3.6.255&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll [2016-11-17] (AVG)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} hxxp://terminalops3.gaports.com/forms/jinitiator/jinit.exe

FireFox:
========
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.6\\npsitesafety.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-04-05] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-19] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2013-02-09] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2013-02-09] (Apple Inc.)

Chrome: 
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default [2016-11-20]
CHR Extension: (Google Slides) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-19]
CHR Extension: (Google Docs) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-19]
CHR Extension: (Google Drive) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-19]
CHR Extension: (YouTube) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-19]
CHR Extension: (AVG Secure Search) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-11-19]
CHR Extension: (Google Sheets) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-19]
CHR Extension: (Google Docs Offline) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-19]
CHR Extension: (Gmail) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-19]
CHR Extension: (Chrome Media Router) - C:\Users\XxF00L2UxX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-19]
CHR HKU\S-1-5-21-1650318354-1133879312-1467673443-1180\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [647864 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1828472 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5337696 2016-11-02] (AVG Technologies CZ, s.r.o.)
S2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1149712 2016-09-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [727512 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [42096 2016-11-07] (Dropbox, Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4788496 2016-11-02] (AVG Technologies CZ, s.r.o.)
R2 vToolbarUpdater40.3.6; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe [1349704 2016-11-17] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980552 2016-11-17] ()

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [73992 2016-10-23] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312576 2016-10-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [267008 2016-10-05] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [267520 2016-10-19] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S2 PAR1284; C:\Windows\SysWOW64\PAR1284.sys [53216 2005-05-20] (Warp Nine Engineering) [File not signed]
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [25608 2016-11-20] (SlimWare Utilities, Inc.)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-11-02] (AVG Netherlands B.V.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [File not signed]
S3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2015-07-21] (ShiningMorning Inc.)
S3 WinDriver; C:\Windows\SysWOW64\drivers\WINDRVR.SYS [215640 2005-05-20] (Jungo) [File not signed]
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 dbx; system32\DRIVERS\dbx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-20 17:54 - 2016-11-20 17:57 - 00014519 _____ C:\Users\XxF00L2UxX\Desktop\FRST.txt
2016-11-20 17:52 - 2016-11-20 17:54 - 00000000 ____D C:\FRST
2016-11-20 17:50 - 2016-11-20 17:52 - 02412544 _____ (Farbar) C:\Users\XxF00L2UxX\Desktop\FRST64 (1).exe
2016-11-20 17:49 - 2016-11-20 17:50 - 02412544 _____ (Farbar) C:\Users\XxF00L2UxX\Downloads\FRST64.exe
2016-11-20 17:43 - 2016-11-20 17:43 - 417995747 _____ C:\Windows\MEMORY.DMP
2016-11-20 17:43 - 2016-11-20 17:43 - 00285824 _____ C:\Windows\Minidump\112016-62977-01.dmp
2016-11-20 17:35 - 2016-11-20 17:35 - 00000000 ____D C:\Qoobox
2016-11-20 17:31 - 2016-11-20 17:31 - 00000000 ____D C:\Windows\erdnt
2016-11-20 17:30 - 2016-11-20 17:41 - 00000000 ___SD C:\32788R22FWJFW
2016-11-20 17:26 - 2016-11-20 17:28 - 05659276 ____R (Swearware) C:\Users\XxF00L2UxX\Downloads\ComboFix.exe
2016-11-20 16:43 - 2016-11-20 16:46 - 00634708 _____ C:\TDSSKiller.3.1.0.12_20.11.2016_16.43.16_log.txt
2016-11-20 16:32 - 2016-11-20 16:37 - 00004654 _____ C:\TDSSKiller.3.1.0.12_20.11.2016_16.32.30_log.txt
2016-11-20 16:19 - 2016-11-20 16:11 - 04747704 _____ (AO Kaspersky Lab) C:\Users\XxF00L2UxX\Desktop\tdsskiller.exe
2016-11-20 16:17 - 2016-11-20 16:19 - 00004488 _____ C:\TDSSKiller.3.1.0.12_20.11.2016_16.17.55_log.txt
2016-11-20 16:12 - 2016-11-20 16:15 - 00098398 _____ C:\TDSSKiller.3.1.0.12_20.11.2016_16.12.33_log.txt
2016-11-20 16:11 - 2016-11-20 16:11 - 04747704 _____ (AO Kaspersky Lab) C:\Users\XxF00L2UxX\Downloads\tdsskiller.exe
2016-11-19 23:03 - 2016-11-20 02:03 - 00077890 _____ C:\Windows\ntbtlog.txt
2016-11-19 22:48 - 2016-11-19 22:55 - 00000000 ____D C:\Users\XxF00L2UxX\Downloads\Autoruns
2016-11-19 22:47 - 2016-11-19 22:47 - 01304400 _____ C:\Users\XxF00L2UxX\Downloads\Autoruns.zip
2016-11-19 22:28 - 2016-11-19 22:29 - 00000000 ____D C:\Windows\pss
2016-11-19 21:44 - 2016-11-19 23:07 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\ElevatedDiagnostics
2016-11-19 21:02 - 2016-11-19 21:02 - 00003544 ____N C:\bootsqm.dat
2016-11-19 03:27 - 2016-11-19 03:27 - 00000000 ____D C:\Program Files (x86)\Citrix
2016-11-19 03:26 - 2016-11-19 03:26 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Citrix
2016-11-19 01:39 - 2016-11-19 01:41 - 00002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-19 01:39 - 2016-11-19 01:41 - 00002221 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-19 01:37 - 2016-11-20 17:45 - 00000902 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-19 01:37 - 2016-11-20 16:42 - 00000906 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-19 01:37 - 2016-11-19 01:37 - 00003902 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-19 01:37 - 2016-11-19 01:37 - 00003650 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-19 01:35 - 2016-11-20 17:55 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Google
2016-11-19 01:34 - 2016-11-19 01:37 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Deployment
2016-11-19 01:34 - 2016-11-19 01:34 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Apps\2.0
2016-11-19 01:18 - 2016-11-19 01:19 - 00000000 ____D C:\Users\XxF00L2UxX\New folder
2016-11-19 00:46 - 2016-11-19 04:32 - 00000000 ____D C:\Users\XxF00L2UxX\Desktop\AVGSS
2016-11-17 20:07 - 2016-11-17 20:07 - 00378120 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-17 19:23 - 2016-11-17 19:23 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\AVG Web TuneUp
2016-11-17 19:23 - 2016-11-17 19:23 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2016-11-17 19:22 - 2016-11-17 19:23 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-11-17 19:21 - 2016-11-17 19:22 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-11-17 19:16 - 2016-11-17 19:16 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Roaming\AVG
2016-11-17 19:14 - 2016-11-17 19:14 - 00000000 ____D C:\Program Files\Common Files\AV
2016-11-17 19:11 - 2016-11-17 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-11-17 19:03 - 2016-11-17 19:03 - 00000000 ___HD C:\$AVG
2016-11-17 18:52 - 2016-11-17 18:53 - 03312896 _____ (AVG Technologies CZ, s.r.o.) C:\Users\XxF00L2UxX\Downloads\AVG_Protection_Free_1606.exe
2016-11-17 17:58 - 2016-11-20 17:58 - 00000530 _____ C:\Windows\Tasks\AVG Driver Updater Scan.job
2016-11-17 17:58 - 2016-11-17 17:58 - 00003268 _____ C:\Windows\System32\Tasks\AVG Driver Updater Scan
2016-11-17 17:57 - 2016-11-20 17:44 - 00025608 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2016-11-17 17:57 - 2016-11-20 17:44 - 00002912 _____ C:\Windows\System32\Tasks\AVG Driver Updater Startup
2016-11-17 17:57 - 2016-11-20 17:44 - 00000476 _____ C:\Windows\Tasks\AVG Driver Updater Startup.job
2016-11-17 17:56 - 2016-11-17 17:56 - 00002497 _____ C:\Users\Public\Desktop\AVG Driver Updater.lnk
2016-11-17 17:56 - 2016-11-17 17:56 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\AVG Netherlands BV
2016-11-17 17:56 - 2016-11-17 17:56 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2016-11-17 17:56 - 2016-11-17 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Driver Updater
2016-11-17 17:56 - 2016-11-17 17:56 - 00000000 ____D C:\Program Files (x86)\AVG Driver Updater
2016-11-17 17:55 - 2016-11-17 17:55 - 01205376 _____ (Slimware Utilities Holdings, Inc.) C:\Users\XxF00L2UxX\Downloads\AVG_Driver_Updater_Setup_11_3.exe
2016-11-17 16:42 - 2016-11-17 16:42 - 00002546 _____ C:\Users\Public\Desktop\AVG PC TuneUp.lnk
2016-11-17 15:58 - 2016-11-02 13:19 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe
2016-11-17 15:58 - 2016-11-02 13:14 - 00044304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\authuitu.dll
2016-11-17 15:57 - 2016-11-17 15:57 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-11-17 15:57 - 2016-11-17 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
2016-11-17 15:57 - 2016-11-02 13:14 - 00042256 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\SysWOW64\authuitu.dll
2016-11-17 15:50 - 2016-11-17 15:50 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2016-11-17 15:50 - 2016-11-17 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-11-17 15:46 - 2016-11-19 16:48 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2016-11-17 12:50 - 2016-11-17 12:50 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\MFAData
2016-11-17 12:46 - 2016-11-17 18:59 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\AvgSetupLog
2016-11-17 08:46 - 2016-11-17 08:46 - 00090592 _____ C:\Users\XxF00L2UxX\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-17 08:44 - 2016-11-17 08:44 - 00001379 _____ C:\Users\XxF00L2UxX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-11-17 08:44 - 2016-11-17 08:44 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Roaming\Adobe
2016-11-17 08:42 - 2016-11-17 08:42 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\VirtualStore
2016-11-17 08:41 - 2016-11-19 01:18 - 00000000 ____D C:\Users\XxF00L2UxX
2016-11-17 08:41 - 2016-11-17 19:16 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\AVG
2016-11-17 08:41 - 2016-11-17 08:41 - 00000020 ___SH C:\Users\XxF00L2UxX\ntuser.ini
2016-11-17 08:41 - 2016-11-17 08:41 - 00000000 _SHDL C:\Users\XxF00L2UxX\My Documents
2016-11-17 08:41 - 2016-11-17 08:41 - 00000000 _SHDL C:\Users\XxF00L2UxX\Documents\My Videos
2016-11-17 08:41 - 2016-11-17 08:41 - 00000000 _SHDL C:\Users\XxF00L2UxX\Documents\My Pictures
2016-11-17 08:41 - 2016-11-17 08:41 - 00000000 _SHDL C:\Users\XxF00L2UxX\Documents\My Music
2016-11-17 08:41 - 2015-10-17 14:12 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Roaming\TuneUp Software
2016-11-17 08:41 - 2012-07-24 06:29 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Symantec
2016-11-17 08:41 - 2011-01-22 01:42 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Local\Microsoft Help
2016-11-17 08:41 - 2009-07-14 02:44 - 00000000 ____D C:\Users\XxF00L2UxX\AppData\Roaming\Media Center Programs
2016-11-17 06:03 - 2016-11-17 06:03 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVG
2016-11-17 05:44 - 2016-11-17 05:44 - 00000000 ____D C:\Users\Administrator\AppData\Local\ElevatedDiagnostics
2016-11-17 05:37 - 2016-11-17 05:58 - 00000000 ____D C:\Users\Administrator\AppData\Local\Deployment
2016-11-17 05:37 - 2016-11-17 05:37 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apps\2.0
2016-11-17 05:03 - 2016-11-17 05:03 - 00090592 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-17 05:01 - 2016-11-17 05:01 - 00001375 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-11-17 05:01 - 2016-11-17 05:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2016-11-17 04:59 - 2016-11-17 05:01 - 00000000 ____D C:\Users\Administrator
2016-11-17 04:59 - 2016-11-17 04:59 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2016-11-17 04:59 - 2016-11-17 04:59 - 00000000 _SHDL C:\Users\Administrator\My Documents
2016-11-17 04:59 - 2016-11-17 04:59 - 00000000 _SHDL C:\Users\Administrator\Documents\My Videos
2016-11-17 04:59 - 2016-11-17 04:59 - 00000000 _SHDL C:\Users\Administrator\Documents\My Pictures
2016-11-17 04:59 - 2016-11-17 04:59 - 00000000 _SHDL C:\Users\Administrator\Documents\My Music
2016-11-17 04:59 - 2016-11-03 16:03 - 00000000 ____D C:\Users\Administrator\AppData\Local\AVG
2016-11-17 04:59 - 2015-10-17 14:12 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TuneUp Software
2016-11-17 04:59 - 2012-07-24 06:29 - 00000000 ____D C:\Users\Administrator\AppData\Local\Symantec
2016-11-17 04:59 - 2011-01-22 01:42 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help
2016-11-17 04:59 - 2009-07-14 02:44 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Media Center Programs
2016-11-17 04:42 - 2016-11-17 06:01 - 00000000 ____D C:\ProgramData\SecTaskMan
2016-11-17 04:42 - 2016-11-17 04:42 - 00001124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2016-11-17 04:42 - 2016-11-17 04:42 - 00001113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2016-11-17 04:42 - 2016-11-17 04:42 - 00001101 _____ C:\Users\Public\Desktop\Security Task Manager.lnk
2016-11-17 04:42 - 2016-11-17 04:42 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2016-11-17 04:39 - 2016-11-17 04:41 - 02832424 _____ C:\Users\Bubba\Downloads\SecurityTaskManager_Setup.exe
2016-11-17 04:07 - 2016-11-17 04:10 - 00000000 ____D C:\Users\Bubba\Desktop\Windows Repair
2016-11-17 03:57 - 2016-11-17 03:59 - 01270466 _____ C:\Users\Bubba\Downloads\ProcessExplorer.zip
2016-11-16 01:36 - 2016-11-16 20:38 - 00000337 _____ C:\Users\Bubba\Desktop\avgrep.txt
2016-11-15 23:16 - 2016-08-12 11:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-11-15 23:16 - 2016-08-12 11:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-11-15 23:16 - 2016-08-12 11:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-11-15 21:47 - 2016-09-02 10:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-11-15 21:47 - 2016-09-02 10:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-11-15 21:47 - 2016-09-02 10:35 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-11-15 21:47 - 2016-09-02 10:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-11-15 21:47 - 2016-09-02 10:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-11-15 21:47 - 2016-09-02 10:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-11-15 21:47 - 2016-09-02 10:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-11-15 21:47 - 2016-09-02 10:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-11-15 21:47 - 2016-09-02 10:18 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-11-15 21:47 - 2016-09-02 10:02 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-11-15 21:47 - 2016-09-02 10:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-11-15 21:47 - 2016-09-02 10:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-11-15 21:47 - 2016-09-02 09:58 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-11-15 21:47 - 2016-09-02 09:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-11-15 21:47 - 2016-09-02 09:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-11-15 21:47 - 2016-09-02 09:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-11-15 21:47 - 2016-09-02 09:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-11-15 21:47 - 2016-09-02 09:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-11-15 21:46 - 2016-09-02 10:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-11-15 21:46 - 2016-09-02 10:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-11-15 21:46 - 2016-09-02 10:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-11-15 21:46 - 2016-09-02 10:31 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 10:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-11-15 21:46 - 2016-09-02 09:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-11-15 21:46 - 2016-09-02 09:54 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-11-15 21:46 - 2016-09-02 09:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-11-15 21:46 - 2016-09-02 09:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-11-15 21:46 - 2016-09-02 09:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-11-15 21:46 - 2016-09-02 09:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-11-15 21:46 - 2016-09-02 09:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-11-15 21:46 - 2016-09-02 09:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 09:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 09:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-11-15 21:46 - 2016-09-02 09:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-11-15 21:44 - 2016-08-16 12:36 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-11-15 21:44 - 2016-08-15 21:48 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-11-15 21:44 - 2016-08-15 21:35 - 03218432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-11-15 21:44 - 2016-08-06 10:31 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-11-15 21:44 - 2016-08-06 10:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-11-15 20:46 - 2016-11-15 20:46 - 00000000 _____ C:\Users\Bubba\AppData\Local\{3261FC93-C346-43E7-B21A-77522056D3F0}
2016-11-07 17:49 - 2016-11-07 17:49 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2016-11-07 17:49 - 2016-11-07 17:49 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2016-11-07 17:49 - 2016-11-07 17:49 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2016-11-07 17:49 - 2016-11-07 17:49 - 00042096 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2016-11-03 16:02 - 2016-11-03 16:03 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2016-11-03 16:02 - 2016-11-03 16:03 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2016-11-02 15:44 - 2016-11-03 04:28 - 00000000 ____D C:\Users\Bubba\AppData\Local\AvgSetupLog
2016-10-23 05:21 - 2016-10-23 05:21 - 00073992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgfwd6a.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-20 18:06 - 2015-08-04 20:32 - 00000000 ____D C:\ProgramData\MFAData
2016-11-20 17:51 - 2009-07-13 23:45 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-20 17:51 - 2009-07-13 23:45 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-20 17:49 - 2009-07-14 00:13 - 00782510 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-20 17:49 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf
2016-11-20 17:43 - 2012-07-10 23:03 - 00000000 ____D C:\Windows\Minidump
2016-11-20 17:43 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-20 12:14 - 2011-02-25 23:23 - 00000000 ____D C:\Program Files\Dell
2016-11-19 01:38 - 2011-02-06 13:28 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-17 19:00 - 2015-02-04 03:05 - 00000000 ____D C:\Program Files (x86)\AVG
2016-11-17 18:09 - 2015-02-04 03:37 - 00003696 _____ C:\Windows\System32\Tasks\Adobe Reader and Acrobat Manager
2016-11-17 18:09 - 2015-02-03 19:08 - 00003198 _____ C:\Windows\System32\Tasks\IHSelfDeleteTASK
2016-11-17 18:08 - 2015-02-03 19:08 - 00003198 _____ C:\Windows\System32\Tasks\IHUninstallTrackingTASK
2016-11-17 17:33 - 2015-11-13 22:34 - 00000000 ____D C:\1980iMix
2016-11-17 16:38 - 2016-03-26 18:21 - 00000000 ____D C:\ProgramData\Native Instruments
2016-11-17 15:49 - 2015-02-04 03:01 - 00000000 ____D C:\ProgramData\AVG
2016-11-17 13:21 - 2015-02-04 03:03 - 00000000 ____D C:\Users\Bubba\AppData\Local\Avg
2016-11-17 06:02 - 2009-07-13 23:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-11-16 00:17 - 2014-06-21 21:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-11-16 00:17 - 2014-06-21 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-11-15 22:00 - 2016-06-25 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-11-15 21:55 - 2016-05-07 20:14 - 00002079 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-11-15 21:55 - 2016-05-07 20:14 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-11-15 21:55 - 2016-05-07 19:55 - 00001945 _____ C:\Windows\epplauncher.mif
2016-11-15 21:53 - 2016-05-07 20:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-11-15 21:14 - 2016-03-26 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2016-11-15 21:14 - 2016-03-26 18:21 - 00000000 ____D C:\Program Files\Native Instruments
2016-11-15 21:14 - 2016-03-07 15:34 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2016-11-15 21:06 - 2016-03-26 15:17 - 00000000 ____D C:\Program Files (x86)\AkaiPro
2016-11-15 20:55 - 2016-06-19 14:49 - 00000000 ___RD C:\Users\Bubba\Dropbox
2016-11-15 20:52 - 2011-01-22 13:50 - 00000000 ____D C:\ProgramData\Adobe
2016-11-15 20:47 - 2012-07-05 10:24 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-15 20:47 - 2011-01-22 01:03 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-15 20:44 - 2016-03-05 12:32 - 00000000 ____D C:\Program Files\Acoustica Mixcraft 7
2016-11-10 03:20 - 2013-08-15 06:32 - 00000000 ____D C:\Windows\system32\MRT
2016-11-10 03:04 - 2011-01-22 00:08 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-02 15:59 - 2015-02-04 03:05 - 00000000 ____D C:\Users\Bubba\AppData\Roaming\AVG
2016-10-27 20:22 - 2011-01-21 23:20 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Files in the root of some directories =======

2016-06-30 21:32 - 2016-06-30 21:32 - 0000016 _____ () C:\ProgramData\mntemp
2016-06-30 21:32 - 2016-06-30 21:32 - 0004864 _____ () C:\ProgramData\oqztiqep.adk
2013-02-26 15:53 - 2013-02-26 15:53 - 0004999 _____ () C:\ProgramData\xgsomrik.nnq

Some files in TEMP:
====================
C:\Users\Bubba\AppData\Local\Temp\acufutls.dll
C:\Users\Bubba\AppData\Local\Temp\patch-Mix7-64-to-7.0.7.310.exe
C:\Users\Bubba\AppData\Local\Temp\procexp64.exe
C:\Users\Bubba\AppData\Local\Temp\VirtualDJ New Version.exe
C:\Users\Bubba\AppData\Local\Temp\{05B4D423-88B9-46A0-AED6-7E9B993FB390}-DropboxClient_10.4.25.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-26 03:47

==================== End of FRST.txt ============================