Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-06-2017
Ran by Rose (administrator) on ROSE-PC (13-06-2017 14:38:41)
Running from C:\Users\Rose\Downloads
Loaded Profiles: Rose (Available Profiles: Rose)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\AMT\atchksrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\AMT\atchk.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Intel) C:\Program Files (x86)\Intel\AMT\LMS.exe
(Intel) C:\Program Files (x86)\Intel\AMT\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIFCA.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe
(© 2015 Microsoft Corporation) C:\Users\Rose\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(NETGEAR) C:\Program Files (x86)\NETGEAR\WNDA3100v3\WNDA3100v3.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [atchk] => C:\Program Files (x86)\Intel\AMT\atchk.exe [401408 2009-12-01] (Intel Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-05-31] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [263232 2017-05-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1314816 2010-06-14] (Analog Devices, Inc.)
HKLM-x32\...\Run: [jswtrayutil] => "C:\Program Files (x86)\NETGEAR\WNA1100\jswtrayutil.exe"
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-05-31] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1687921294-1965150460-3559065622-1000\...\Run: [EPSON NX410 Series (Copy 1)] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFCA.EXE [223232 2008-10-01] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1687921294-1965150460-3559065622-1000\...\Run: [BingSvc] => C:\Users\Rose\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA1100 Genie.lnk [2015-11-07]
ShortcutTarget: NETGEAR WNA1100 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNDA3100v3 Genie.lnk [2016-04-11]
ShortcutTarget: NETGEAR WNDA3100v3 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNDA3100v3\WNDA3100v3.EXE (NETGEAR)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 172.85.30.3 172.85.30.5
Tcpip\..\Interfaces\{2007EEF5-2412-42DC-8FDA-E5F04BAFD448}: [DhcpNameServer] 173.44.120.40 173.44.120.41
Tcpip\..\Interfaces\{5A365DA6-A0B7-4593-A2D8-97906C55A9CE}: [DhcpNameServer] 172.85.30.3 172.85.30.5
Internet Explorer:
==================
FireFox:
========
FF ProfilePath: C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\czz45gaq.default-1483506533445 [2017-06-13]
FF Homepage: Mozilla\Firefox\Profiles\czz45gaq.default-1483506533445 -> hxxp://www.msn.com/?pfr=1
FF Extension: (QCLean - Remove Facebook Ads Suggested Pages and Posts) - C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\czz45gaq.default-1483506533445\Extensions\[email protected] [2017-03-22]
FF Extension: (New Tab Homepage) - C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\czz45gaq.default-1483506533445\Extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}.xpi [2017-01-13]
FF Extension: (Adblock Plus) - C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\czz45gaq.default-1483506533445\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-09]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_126.dll [2017-06-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1228198.dll [2017-02-27] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/
CHR NewTab: Default -> Not-active:"chrome-extension://dbcjmigpjccmgflkhihmjllndonbecaa/newtab/newtab.html"
CHR Profile: C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default [2017-06-13]
CHR Extension: (Google Slides) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-24]
CHR Extension: (Google Docs) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-24]
CHR Extension: (Google Drive) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-24]
CHR Extension: (YouTube) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-24]
CHR Extension: (Adblock Plus) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-31]
CHR Extension: (Email Access Online Version 2.0) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbcjmigpjccmgflkhihmjllndonbecaa [2017-06-11]
CHR Extension: (Google Sheets) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-24]
CHR Extension: (Google Docs Offline) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-24]
CHR Extension: (Gmail) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-24]
CHR Extension: (Chrome Media Router) - C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-06]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 atchksrv; C:\Program Files (x86)\Intel\AMT\atchksrv.exe [176128 2009-12-01] (Intel Corporation) [File not signed]
R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [264432 2017-05-15] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [7396872 2017-05-15] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-05-31] (AVG Technologies CZ, s.r.o.)
R2 LMS; C:\Program Files (x86)\Intel\AMT\LMS.exe [102400 2009-12-01] (Intel) [File not signed]
R2 UNS; C:\Program Files (x86)\Intel\AMT\UNS.exe [2519040 2009-12-01] (Intel) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 avgbdisk; C:\Windows\system32\drivers\avgbdiska.sys [166624 2017-05-15] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdrivera.sys [314128 2017-05-15] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\system32\drivers\avgbidsha.sys [192584 2017-05-15] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\system32\drivers\avgbloga.sys [336896 2017-05-15] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\system32\drivers\avgbuniva.sys [51336 2017-05-15] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [39424 2017-05-15] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [129776 2017-05-15] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [102280 2017-05-15] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [76832 2017-05-15] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [1008288 2017-05-15] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [570320 2017-05-15] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\Windows\system32\drivers\avgStm.sys [160008 2017-05-15] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [340824 2017-05-15] (AVG Technologies CZ, s.r.o.)
R3 WNDA3100v3; C:\Windows\System32\DRIVERS\WNDA3100v3.sys [2225808 2014-12-08] (MediaTek Inc.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-05-31 16:02 - 2017-05-15 12:42 - 00401584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-13 14:40 - 2016-06-23 14:17 - 00011187 _____ C:\Users\Rose\Downloads\FRST.txt
2017-06-13 14:38 - 2017-01-10 14:45 - 00000000 ____D C:\Users\Rose\Downloads\FRST-OlderVersion
2017-06-13 14:38 - 2016-06-23 14:16 - 00000000 ____D C:\FRST
2017-06-13 14:38 - 2016-06-23 14:15 - 02438656 _____ (Farbar) C:\Users\Rose\Downloads\FRST64.exe
2017-06-13 14:25 - 2016-11-18 22:01 - 00000000 ____D C:\Users\Rose\AppData\LocalLow\Mozilla
2017-06-13 12:26 - 2016-09-20 18:13 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2017-06-13 11:30 - 2017-03-18 15:29 - 00004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-13 11:30 - 2015-07-07 14:15 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-13 11:30 - 2015-07-07 14:15 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-13 11:30 - 2015-07-07 14:15 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-13 11:30 - 2015-07-07 14:15 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-13 09:22 - 2009-07-14 00:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-13 09:22 - 2009-07-14 00:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-13 09:13 - 2016-04-11 19:52 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2017-06-13 09:12 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-05 19:28 - 2017-03-24 16:33 - 00002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-05 19:28 - 2017-03-24 16:33 - 00002190 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-06-04 10:26 - 2017-03-26 19:14 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-04 10:26 - 2015-11-07 11:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-31 16:21 - 2015-07-07 11:06 - 00000000 ____D C:\Windows\system32\MRT
2017-05-31 16:20 - 2017-04-24 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-05-31 16:20 - 2015-11-18 11:00 - 00001008 _____ C:\Users\Public\Desktop\AVG.lnk
2017-05-31 16:12 - 2015-07-07 11:06 - 132223576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-31 16:02 - 2017-04-04 12:33 - 00003920 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update
2017-05-31 15:56 - 2015-11-07 14:19 - 00000000 ____D C:\Users\Rose
2017-05-31 15:56 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\registration
2017-05-31 15:56 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf
2017-05-31 15:07 - 2015-11-07 11:59 - 00000000 ____D C:\Users\Rose\AppData\Local\AvgSetupLog
2017-05-31 14:11 - 2017-01-13 15:07 - 00000423 _____ C:\Users\Rose\Downloads\Fixlog.txt
2017-05-15 12:43 - 2017-04-04 12:33 - 00160008 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 01008288 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00570320 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00340824 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00159496 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgstm.sys.149486658865701
2017-05-15 12:42 - 2017-04-04 12:33 - 00129776 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00102280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00076832 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2017-05-15 12:42 - 2017-04-04 12:33 - 00039424 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2017-05-15 12:41 - 2017-04-04 12:33 - 00336896 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys
2017-05-15 12:41 - 2017-04-04 12:33 - 00314128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys
2017-05-15 12:41 - 2017-04-04 12:33 - 00192584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys
2017-05-15 12:41 - 2017-04-04 12:33 - 00166624 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiska.sys
2017-05-15 12:41 - 2017-04-04 12:33 - 00051336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys
Some files in TEMP:
====================
2016-06-23 10:53 - 2016-05-18 13:03 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_081247668940.exe
2016-07-27 13:48 - 2016-06-21 18:49 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_081486885703.exe
2016-04-07 19:49 - 2016-02-18 16:09 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_081635537688.exe
2015-11-18 10:59 - 2015-10-16 17:30 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_082013740879.exe
2016-05-13 15:29 - 2016-04-14 20:29 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_082084462725.exe
2016-01-16 13:12 - 2015-12-08 11:23 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_08238857032.exe
2016-04-19 02:20 - 2016-03-23 19:57 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_08276474042.exe
2016-08-22 18:44 - 2016-07-20 14:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_0828183126.exe
2016-01-09 18:54 - 2015-11-12 20:54 - 0091048 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_08454881608.exe
2016-02-23 14:39 - 2016-01-12 20:23 - 0179624 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_08574558967.exe
2016-05-31 15:17 - 2016-04-22 13:01 - 0186640 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Rose\AppData\Local\Temp\avguirn_0880885172.exe
2017-01-04 12:24 - 2017-01-04 12:24 - 1118360 _____ (© 2015 Microsoft Corporation) C:\Users\Rose\AppData\Local\Temp\BSvcProcessor.exe
2017-01-04 12:24 - 2017-01-04 12:24 - 0170128 _____ (© 2015 Microsoft Corporation) C:\Users\Rose\AppData\Local\Temp\BSvcUpdater.exe
2016-03-21 19:00 - 1999-06-25 13:55 - 0149504 _____ () C:\Users\Rose\AppData\Local\Temp\GLB1A2B.EXE
2016-08-08 13:58 - 2016-08-08 13:58 - 26370009 _____ (Acresso Software Inc. ) C:\Users\Rose\AppData\Local\Temp\Setup.exe
2016-01-04 18:49 - 2015-12-17 11:04 - 3000208 _____ (AVG Technologies) C:\Users\Rose\AppData\Local\Temp\UNINSTALL.EXE
2006-10-30 20:10 - 2006-10-30 20:10 - 0455600 ____R (Macrovision Corporation) C:\Users\Rose\AppData\Local\Temp\_is3180.exe
2007-08-31 08:12 - 2007-08-31 08:12 - 0460248 ____R (Macrovision Corporation) C:\Users\Rose\AppData\Local\Temp\_isCF0.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-06-12 11:53
==================== End of FRST.txt ============================