Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

"There is Recommended Update for this PC" prompt/ can't cl

Started by s0nginmyheart , Apr 09 2018 09:54 AM

Please log in to reply

#1
s0nginmyheart

Posted 09 April 2018 - 09:54 AM

Member

Member
151 posts

Hi,

I began receiving this prompt a couple times - saying it was part of Yahoo - at first I thought it was legit and clicked OK. Not long after my Windows Defender came up with some infections. I used WD to clean my computer but am still getting this prompt. Please help to remove.

Will post FRST scan shortly.

Attached Thumbnails

#2
s0nginmyheart

Posted 09 April 2018 - 10:22 AM

Member

Topic Starter
Member
151 posts

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018

Ran by Ren (administrator) on VAIO (09-04-2018 10:51:24)

Running from C:\Users\Ren\Desktop

Loaded Profiles: Ren (Available Profiles: Ren)

Platform: Windows 10 Home Version 1709 16299.309 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(ArcSoft, Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\MsMpEng.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOTM\VTSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\NisSrv.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Sony Corporation) C:\Program Files\Sony\Store App Support Utility\StoreAppSupportUtility.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOTM\VTUsr.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(HP Inc.) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\ScanToPCActivationApp.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\Music.UI.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Video.UI.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

() C:\Program Files\WindowsApps\Microsoft.BingFinance_4.23.10923.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google) C:\Users\Ren\AppData\Local\Google\Chrome\User Data\SwReporter\27.147.200\software_reporter_tool.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-01-11] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-01-22] (Apple Inc.)

HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)

HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67896 2018-01-05] (Apple Inc.)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: igfxdev.dll [X]

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Run: [Google Update] => C:\Users\Ren\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-14] (Google Inc.)

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Run: [HP OfficeJet 3830 series (NET)] => C:\Program Files\HP\HP OfficeJet 3830 series\Bin\ScanToPCActivationApp.exe [3770504 2017-03-27] (HP Inc.)

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Run: [GoogleDriveSync] => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Run: [Spotify Web Helper] => C:\Users\Ren\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2018-02-14] (Spotify Ltd)

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Run: [Chromium] => c:\users\ren\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [503424 2014-11-17] (Sony Corporation)

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\RunOnce: [Uninstall 18.025.0204.0009\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ren\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64"

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\RunOnce: [Uninstall 18.025.0204.0009] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ren\AppData\Local\Microsoft\OneDrive\18.025.0204.0009"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.7.254

Tcpip\..\Interfaces\{077817d9-5e1e-42ea-ac24-d0fbc6f9a3ca}: [DhcpNameServer] 192.168.7.254

Tcpip\..\Interfaces\{72ddacbd-8c68-45fa-b6f2-a63da36d2f17}: [DhcpNameServer] 192.168.7.254

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://us.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=NGR6MGV7NWV6NJ%3D%3D

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://us.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=NGR6MGV7NWV6NJ%3D%3D

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://us.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=NGR6MGV7NWV6NJ%3D%3D

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKLM -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL =

SearchScopes: HKLM -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-0e3ab8bc&q={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKLM-x32 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-0e3ab8bc&q={searchTerms}

SearchScopes: HKU\S-1-5-21-2989242067-128489364-3901103956-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKU\S-1-5-21-2989242067-128489364-3901103956-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_06525beaedccd3886c&param1=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%3D%3D&param2=Mqt7MGJ8NGRc&p={searchTerms}

SearchScopes: HKU\S-1-5-21-2989242067-128489364-3901103956-1001 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-0e3ab8bc&q={searchTerms}

BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2018-02-23] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2018-02-23] (Microsoft Corporation)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-05] (Oracle Corporation)

BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-05] (Oracle Corporation)

BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated)

Toolbar: HKU\S-1-5-21-2989242067-128489364-3901103956-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:

========

FF DefaultProfile: ggr6rarr.default-1497194218125

FF ProfilePath: C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125 [2018-03-27]

FF Homepage: Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125 -> hxxp://www.bing.com/search?FORM=INCOH1&PC=IC04&PTAG=ICO-0e3ab8bc

FF Extension: (FlashGot) - C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2017-06-11] [Legacy]

FF Extension: (TLS 1.3 gradual roll-out) - C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125\features\{00675781-7081-4e09-9f13-1b573f2257ef}\[email protected] [2018-03-22] [Legacy]

FF SearchPlugin: C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125\searchplugins\search provided by bing.xml [2018-02-22]

FF SearchPlugin: C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125\searchplugins\search.yahoo.com.xml [2018-03-13]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-10-09] [Legacy] [not signed]

FF HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Firefox\Extensions: [{31C8B8A4-6712-4A47-B378-2BE78B8EE9E1}] - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.10.9.5856\BVDFirefoxExt

FF Extension: (Bigasoft Video Downloader Firefox Extension) - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.10.9.5856\BVDFirefoxExt [2016-01-19] [Legacy] [not signed]

FF HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-01-27] [Legacy]

FF HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\Ren\AppData\Roaming\IDM\idmmzcc5

FF Extension: (IDM CC) - C:\Users\Ren\AppData\Roaming\IDM\idmmzcc5 [2018-03-28] [Legacy] [not signed]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll [2018-03-13] ()

FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2013-04-19] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll [2018-03-13] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-05] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-05] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-04-13] (Microsoft Corporation)

FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll [2012-07-12] (Sony Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

FF Plugin-x32: Adobe Reader -> c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2989242067-128489364-3901103956-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

FF Plugin HKU\S-1-5-21-2989242067-128489364-3901103956-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:\Users\Ren\AppData\Roaming\mozilla\plugins\npatgpc.dll [2014-01-06] (Cisco WebEx LLC)

StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.yahoo.com/

CHR StartupUrls: Default -> "hxxp://www.yahoo.com/","hxxp://binkiland.com/?f=7&a=bnk_ir_15_13&cd=2XzuyEtN2Y1L1Qzu0BzzyByCtA0F0Ezy0FtAyCyCyC0BtBtDtN0D0Tzu0StCtCyByBtN1L2XzutAtFzztFtAtFtCtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyCtCtC0B0EyE0BtBtGtCtBtByBtGyBzzzyyDtG0BzztA0DtGyD0Czz0C0D0EzzzzyCtAzyyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtCyC0A0A0EtD0AtG0FzytA0DtGyE0CyCyEtGzzzzzyyCtGyBtByE0F0C0D0Azy0CyB0AyE2Q&cr=1249596410&ir=","hxxps://www.google.com/"

CHR Profile: C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default [2018-04-09]

CHR Extension: (Flash Video Downloader) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2018-02-26]

CHR Extension: (Docs) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]

CHR Extension: (Google Drive) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]

CHR Extension: (YouTube) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Google Search) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Google Play Music) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2018-03-13]

CHR Extension: (Chrome Remote Desktop) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-11-06]

CHR Extension: (Google Docs Offline) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]

CHR Extension: (Cently (Coupons at Checkout)) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\kegphgaihkjoophpabchkmpaknehfamb [2018-03-19]

CHR Extension: (SoundCloud Downloader Free) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\libedajeiljdoodmokbppgapcfbignci [2017-01-04]

CHR Extension: (IDM Integration Module) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2018-03-01]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-19]

CHR Extension: (Search Manager) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\olojcnagmcbplpdddabmpfehhlleobpb [2018-02-22]

CHR Extension: (Gmail) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-26]

CHR Profile: C:\Users\Ren\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-01-13]

CHR HKLM\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-01-28]

CHR HKLM\...\Chrome\Extension: [olojcnagmcbplpdddabmpfehhlleobpb] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-2989242067-128489364-3901103956-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-2989242067-128489364-3901103956-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-2989242067-128489364-3901103956-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olojcnagmcbplpdddabmpfehhlleobpb] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [jpnkpjikgipojkofgjjkfgdhfanggcdm] - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.10.9.5856\BVDChromeExt.crx [2016-01-19]

CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-01-28]

CHR HKLM-x32\...\Chrome\Extension: [olojcnagmcbplpdddabmpfehhlleobpb] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [44064 2013-07-08] (ArcSoft, Inc.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-01-05] (Apple Inc.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058392 2017-12-12] (Microsoft Corporation)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]

R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)

R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [625240 2013-09-28] (Sony Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)

S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2012-09-19] (Sony Corporation) [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [964608 2012-09-28] (Sony Corporation) [File not signed]

R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1656600 2016-03-31] (Sony Corporation)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe [356152 2018-03-01] (Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe [106280 2018-03-01] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-11-28] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-03-29] (Malwarebytes)

R1 MpKsl18806b14; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{857F7F6A-E3A1-429C-9E3A-C6A1BCD44804}\MpKsl18806b14.sys [58120 2018-03-28] (Microsoft Corporation)

R1 MpKsldceb46e5; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6EEE8583-F049-42DF-A8B3-11B385C5670B}\MpKsldceb46e5.sys [58120 2018-04-09] (Microsoft Corporation)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)

R3 SOWS; C:\WINDOWS\System32\drivers\sows.sys [24280 2012-06-10] (Sony Corporation)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-03-01] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288296 2018-03-01] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129568 2018-03-01] (Microsoft Corporation)

S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-09 10:51 - 2018-04-09 10:57 - 000036529 _____ C:\Users\Ren\Desktop\FRST.txt

2018-04-09 10:50 - 2018-04-09 10:50 - 002403328 _____ (Farbar) C:\Users\Ren\Desktop\FRST64.exe

2018-04-09 09:45 - 2018-04-09 09:45 - 000000000 ____D C:\Users\Ren\AppData\Local\{9528A374-B180-CFCC-DC18-EA24F87016BC}

2018-04-09 09:25 - 2018-04-09 09:25 - 000000000 ___HD C:\OneDriveTemp

2018-03-29 11:47 - 2018-03-29 15:20 - 000000000 ____D C:\WINDOWS\System32\Tasks\UpdTask

2018-03-29 11:46 - 2018-03-29 12:02 - 000000000 ____D C:\Users\Ren\AppData\Local\Hasot

2018-03-29 11:45 - 2018-03-29 11:52 - 000000000 ___HD C:\Users\Ren\AppData\Local\6b7f883449653f0b

2018-03-27 14:08 - 2018-03-27 14:09 - 000000000 ____D C:\Users\Ren\Desktop\2018 usa nationals

2018-03-27 11:59 - 2018-03-27 12:43 - 000000000 ____D C:\Users\Ren\Desktop\vball

2018-03-22 16:10 - 2018-03-27 15:38 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2018-03-20 13:56 - 2018-03-20 13:56 - 000025005 _____ C:\Users\Ren\Desktop\2017+1098-MORT+MORTGAGE+8202+WellsFargo.pdf

2018-03-16 14:12 - 2018-03-23 10:03 - 001327379 _____ C:\Users\Ren\Desktop\BEDonationForm10914.pdf

2018-03-14 09:25 - 2018-03-02 16:09 - 000834552 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2018-03-14 09:25 - 2018-03-02 16:09 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2018-03-13 15:43 - 2018-03-01 22:36 - 017085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2018-03-13 15:43 - 2018-03-01 21:59 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe

2018-03-13 15:43 - 2018-03-01 02:50 - 000270744 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2018-03-13 15:43 - 2018-03-01 02:49 - 000389536 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2018-03-13 15:43 - 2018-03-01 02:48 - 000664472 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2018-03-13 15:43 - 2018-03-01 02:47 - 000749464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2018-03-13 15:43 - 2018-03-01 02:47 - 000035224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2018-03-13 15:43 - 2018-03-01 02:46 - 002003352 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2018-03-13 15:43 - 2018-03-01 02:46 - 001568664 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2018-03-13 15:43 - 2018-03-01 02:46 - 000609176 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2018-03-13 15:43 - 2018-03-01 02:46 - 000138144 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2018-03-13 15:43 - 2018-03-01 02:45 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2018-03-13 15:43 - 2018-03-01 02:40 - 002514936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2018-03-13 15:43 - 2018-03-01 02:40 - 000461720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2018-03-13 15:43 - 2018-03-01 02:40 - 000273304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2018-03-13 15:43 - 2018-03-01 02:37 - 007831760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2018-03-13 15:43 - 2018-03-01 02:31 - 008602520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2018-03-13 15:43 - 2018-03-01 02:30 - 000540064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2018-03-13 15:43 - 2018-03-01 02:30 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe

2018-03-13 15:43 - 2018-03-01 02:29 - 000733592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys

2018-03-13 15:43 - 2018-03-01 02:27 - 001173576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2018-03-13 15:43 - 2018-03-01 02:23 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2018-03-13 15:43 - 2018-03-01 02:17 - 002710736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2018-03-13 15:43 - 2018-03-01 02:17 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe

2018-03-13 15:43 - 2018-03-01 02:17 - 000408984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2018-03-13 15:43 - 2018-03-01 02:15 - 002574232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2018-03-13 15:43 - 2018-03-01 02:14 - 007675784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2018-03-13 15:43 - 2018-03-01 02:14 - 007384576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2018-03-13 15:43 - 2018-03-01 02:14 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2018-03-13 15:43 - 2018-03-01 02:14 - 000356952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2018-03-13 15:43 - 2018-03-01 02:14 - 000147872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2018-03-13 15:43 - 2018-03-01 02:12 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2018-03-13 15:43 - 2018-03-01 02:12 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll

2018-03-13 15:43 - 2018-03-01 02:11 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2018-03-13 15:43 - 2018-03-01 02:10 - 001779936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2018-03-13 15:43 - 2018-03-01 02:10 - 000075168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll

2018-03-13 15:43 - 2018-03-01 02:09 - 001054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2018-03-13 15:43 - 2018-03-01 01:51 - 000777904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2018-03-13 15:43 - 2018-03-01 01:48 - 001930736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2018-03-13 15:43 - 2018-03-01 01:39 - 000213400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2018-03-13 15:43 - 2018-03-01 01:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2018-03-13 15:43 - 2018-03-01 01:29 - 006092152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2018-03-13 15:43 - 2018-03-01 01:28 - 006480616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2018-03-13 15:43 - 2018-03-01 01:28 - 002193168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2018-03-13 15:43 - 2018-03-01 01:27 - 000284112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2018-03-13 15:43 - 2018-03-01 01:26 - 001524776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2018-03-13 15:43 - 2018-03-01 01:26 - 001057816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2018-03-13 15:43 - 2018-03-01 01:21 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2018-03-13 15:43 - 2018-03-01 01:09 - 025251840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2018-03-13 15:43 - 2018-03-01 01:03 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2018-03-13 15:43 - 2018-03-01 01:03 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll

2018-03-13 15:43 - 2018-03-01 01:03 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll

2018-03-13 15:43 - 2018-03-01 01:03 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll

2018-03-13 15:43 - 2018-03-01 01:03 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2018-03-13 15:43 - 2018-03-01 01:01 - 019354624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2018-03-13 15:43 - 2018-03-01 01:01 - 006575616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2018-03-13 15:43 - 2018-03-01 01:01 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2018-03-13 15:43 - 2018-03-01 00:58 - 004839424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2018-03-13 15:43 - 2018-03-01 00:58 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2018-03-13 15:43 - 2018-03-01 00:58 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll

2018-03-13 15:43 - 2018-03-01 00:58 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2018-03-13 15:43 - 2018-03-01 00:57 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2018-03-13 15:43 - 2018-03-01 00:56 - 018922496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2018-03-13 15:43 - 2018-03-01 00:56 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2018-03-13 15:43 - 2018-03-01 00:55 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll

2018-03-13 15:43 - 2018-03-01 00:54 - 003664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2018-03-13 15:43 - 2018-03-01 00:54 - 003181568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2018-03-13 15:43 - 2018-03-01 00:54 - 001296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2018-03-13 15:43 - 2018-03-01 00:54 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2018-03-13 15:43 - 2018-03-01 00:54 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2018-03-13 15:43 - 2018-03-01 00:54 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2018-03-13 15:43 - 2018-03-01 00:53 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2018-03-13 15:43 - 2018-03-01 00:53 - 000536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll

2018-03-13 15:43 - 2018-03-01 00:53 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2018-03-13 15:43 - 2018-03-01 00:53 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2018-03-13 15:43 - 2018-03-01 00:53 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2018-03-13 15:43 - 2018-03-01 00:53 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll

2018-03-13 15:43 - 2018-03-01 00:53 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll

2018-03-13 15:43 - 2018-03-01 00:52 - 011923968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2018-03-13 15:43 - 2018-03-01 00:52 - 006030336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2018-03-13 15:43 - 2018-03-01 00:51 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2018-03-13 15:43 - 2018-03-01 00:51 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys

2018-03-13 15:43 - 2018-03-01 00:50 - 003677184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2018-03-13 15:43 - 2018-03-01 00:50 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2018-03-13 15:43 - 2018-03-01 00:50 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2018-03-13 15:43 - 2018-03-01 00:49 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2018-03-13 15:43 - 2018-03-01 00:49 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2018-03-13 15:43 - 2018-03-01 00:49 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2018-03-13 15:43 - 2018-03-01 00:48 - 000543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll

2018-03-13 15:43 - 2018-03-01 00:48 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2018-03-13 15:43 - 2018-03-01 00:47 - 023674368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2018-03-13 15:43 - 2018-03-01 00:47 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll

2018-03-13 15:43 - 2018-03-01 00:46 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2018-03-13 15:43 - 2018-03-01 00:45 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2018-03-13 15:43 - 2018-03-01 00:45 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2018-03-13 15:43 - 2018-03-01 00:45 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll

2018-03-13 15:43 - 2018-03-01 00:44 - 008030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2018-03-13 15:43 - 2018-03-01 00:44 - 005195776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2018-03-13 15:43 - 2018-03-01 00:43 - 012830208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2018-03-13 15:43 - 2018-03-01 00:42 - 003505664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll

2018-03-13 15:43 - 2018-03-01 00:42 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2018-03-13 15:43 - 2018-03-01 00:41 - 008103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2018-03-13 15:43 - 2018-03-01 00:41 - 004745728 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2018-03-13 15:43 - 2018-03-01 00:41 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2018-03-13 15:43 - 2018-03-01 00:41 - 001548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2018-03-13 15:43 - 2018-03-01 00:41 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2018-03-13 15:43 - 2018-03-01 00:40 - 005833216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2018-03-13 15:43 - 2018-03-01 00:39 - 002222592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2018-03-13 15:43 - 2018-03-01 00:39 - 002035712 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2018-03-13 15:43 - 2018-03-01 00:39 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll

2018-03-13 15:43 - 2018-03-01 00:39 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll

2018-03-13 15:43 - 2018-03-01 00:38 - 000963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2018-03-13 15:43 - 2018-03-01 00:38 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2018-03-13 15:43 - 2018-03-01 00:35 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe

2018-03-13 15:43 - 2018-02-21 21:23 - 001092016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2018-03-13 15:43 - 2018-02-21 21:23 - 000924648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2018-03-13 15:43 - 2018-02-21 21:13 - 000279456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys

2018-03-13 15:43 - 2018-02-21 21:13 - 000077216 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2018-03-13 15:43 - 2018-02-21 21:11 - 000109984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys

2018-03-13 15:43 - 2018-02-21 21:10 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2018-03-13 15:43 - 2018-02-21 21:08 - 001206688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2018-03-13 15:43 - 2018-02-21 21:08 - 001055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2018-03-13 15:43 - 2018-02-21 21:08 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys

2018-03-13 15:43 - 2018-02-21 21:07 - 001415296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2018-03-13 15:43 - 2018-02-21 21:07 - 001209248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2018-03-13 15:43 - 2018-02-21 21:03 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys

2018-03-13 15:43 - 2018-02-21 21:03 - 000082848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys

2018-03-13 15:43 - 2018-02-21 21:02 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys

2018-03-13 15:43 - 2018-02-21 21:00 - 000187296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2018-03-13 15:43 - 2018-02-21 20:59 - 021351624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2018-03-13 15:43 - 2018-02-21 20:54 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2018-03-13 15:43 - 2018-02-21 20:51 - 000555424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2018-03-13 15:43 - 2018-02-21 20:51 - 000045472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys

2018-03-13 15:43 - 2018-02-21 20:50 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2018-03-13 15:43 - 2018-02-21 19:41 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2018-03-13 15:43 - 2018-02-21 19:31 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys

2018-03-13 15:43 - 2018-02-21 19:30 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys

2018-03-13 15:43 - 2018-02-21 19:30 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2018-03-13 15:43 - 2018-02-21 19:26 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2018-03-13 15:43 - 2018-02-21 19:25 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2018-03-13 15:43 - 2018-02-21 19:12 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2018-03-13 15:42 - 2018-03-01 22:02 - 000037888 _____ C:\WINDOWS\system32\SpectrumSyncClient.dll

2018-03-13 15:42 - 2018-03-01 22:01 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll

2018-03-13 15:42 - 2018-03-01 22:00 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll

2018-03-13 15:42 - 2018-03-01 22:00 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\svf.dll

2018-03-13 15:42 - 2018-03-01 22:00 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll

2018-03-13 15:42 - 2018-03-01 15:28 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll

2018-03-13 15:42 - 2018-03-01 02:26 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2018-03-13 15:42 - 2018-03-01 02:25 - 000377752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys

2018-03-13 15:42 - 2018-03-01 02:19 - 000710768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll

2018-03-13 15:42 - 2018-03-01 02:14 - 005105664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll

2018-03-13 15:42 - 2018-03-01 02:14 - 000128928 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll

2018-03-13 15:42 - 2018-03-01 02:12 - 000250264 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll

2018-03-13 15:42 - 2018-03-01 02:10 - 000022936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys

2018-03-13 15:42 - 2018-03-01 01:29 - 000574960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll

2018-03-13 15:42 - 2018-03-01 01:28 - 000115096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll

2018-03-13 15:42 - 2018-03-01 01:27 - 000221592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll

2018-03-13 15:42 - 2018-03-01 01:23 - 005105664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll

2018-03-13 15:42 - 2018-03-01 01:01 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll

2018-03-13 15:42 - 2018-03-01 01:00 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll

2018-03-13 15:42 - 2018-03-01 00:59 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll

2018-03-13 15:42 - 2018-03-01 00:53 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll

2018-03-13 15:42 - 2018-03-01 00:53 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll

2018-03-13 15:42 - 2018-03-01 00:53 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe

2018-03-13 15:42 - 2018-03-01 00:51 - 002329088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll

2018-03-13 15:42 - 2018-03-01 00:51 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll

2018-03-13 15:42 - 2018-03-01 00:50 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll

2018-03-13 15:42 - 2018-03-01 00:50 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys

2018-03-13 15:42 - 2018-03-01 00:49 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll

2018-03-13 15:42 - 2018-03-01 00:47 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2018-03-13 15:42 - 2018-03-01 00:46 - 004051968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2018-03-13 15:42 - 2018-03-01 00:46 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll

2018-03-13 15:42 - 2018-03-01 00:36 - 004050432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2018-03-13 15:42 - 2018-03-01 00:36 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll

2018-03-13 15:42 - 2018-03-01 00:35 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe

2018-03-13 15:42 - 2018-03-01 00:35 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll

2018-03-13 15:42 - 2018-02-21 21:07 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys

2018-03-13 15:42 - 2018-02-21 20:52 - 000103328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2018-03-13 15:42 - 2018-02-21 20:51 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys

2018-03-13 15:42 - 2018-02-21 20:50 - 000229272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2018-03-13 15:42 - 2018-02-21 19:30 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys

2018-03-13 15:42 - 2018-02-21 19:27 - 001282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2018-03-13 15:42 - 2018-02-21 19:16 - 001286144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2018-03-13 09:14 - 2018-03-13 09:14 - 000004552 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier

2018-03-13 09:13 - 2018-03-13 09:13 - 006210560 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-09 10:51 - 2015-03-23 21:10 - 000000000 ____D C:\FRST

2018-04-09 10:33 - 2017-12-08 10:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2018-04-09 09:52 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization

2018-04-09 09:51 - 2017-09-29 08:46 - 000000000 ___HD C:\Program Files\WindowsApps

2018-04-09 09:51 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\AppReadiness

2018-04-09 09:45 - 2015-03-23 16:03 - 000000303 _____ C:\Users\Ren\AppData\Roaming\WB.CFG

2018-04-09 09:37 - 2013-10-07 22:38 - 000000000 ____D C:\Users\Ren\AppData\Local\Adobe

2018-04-09 09:34 - 2017-12-08 11:16 - 000004140 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6F97CA80-96E5-4BFF-9AAA-6CB07FB67062}

2018-04-09 09:29 - 2017-12-08 11:16 - 000003350 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2989242067-128489364-3901103956-1001

2018-04-09 09:29 - 2013-10-26 09:41 - 000000000 __RDO C:\Users\Ren\SkyDrive

2018-04-09 09:28 - 2015-08-06 10:26 - 000002391 _____ C:\Users\Ren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2018-04-09 09:20 - 2014-07-14 10:09 - 000000000 __SHD C:\Users\Ren\IntelGraphicsProfiles

2018-03-29 16:43 - 2014-03-02 20:01 - 000000000 ____D C:\Users\Ren\Desktop\Muzack

2018-03-29 11:25 - 2017-12-08 10:59 - 001119930 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2018-03-29 11:18 - 2017-12-08 11:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2018-03-29 11:18 - 2017-11-13 15:41 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2018-03-29 11:18 - 2016-12-01 15:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2018-03-29 11:18 - 2014-04-12 19:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2018-03-29 11:17 - 2017-09-29 03:45 - 001048576 _____ C:\WINDOWS\system32\config\BBI

2018-03-29 10:49 - 2017-05-23 14:39 - 000000000 ____D C:\Users\Ren\Desktop\dopples

2018-03-28 13:17 - 2015-09-11 10:52 - 000000000 ____D C:\Users\Ren\AppData\Roaming\DMCache

2018-03-27 15:41 - 2016-12-02 11:36 - 000000000 ____D C:\Users\Ren\AppData\LocalLow\Mozilla

2018-03-27 15:33 - 2014-04-12 22:23 - 000000000 ____D C:\Users\Ren\dwhelper

2018-03-23 15:25 - 2018-01-20 20:09 - 000000000 ____D C:\Users\Ren\Desktop\Hawaii 2018

2018-03-23 11:48 - 2013-10-07 19:51 - 000000000 ____D C:\Users\Ren\Desktop\File Transfer

2018-03-23 09:32 - 2014-02-04 16:00 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2018-03-21 14:53 - 2017-01-04 15:19 - 000000000 ___RD C:\Users\Ren\Downloads\Sound Cloud

2018-03-20 14:26 - 2013-04-19 20:35 - 000000000 ____D C:\ProgramData\Temp

2018-03-19 10:58 - 2018-02-03 20:24 - 000000000 ____D C:\Users\Ren\Desktop\kpop dls

2018-03-19 10:26 - 2015-05-30 16:44 - 000000000 ____D C:\Users\Ren\Desktop\ebay1

2018-03-15 11:29 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\rescache

2018-03-15 09:27 - 2017-09-29 08:44 - 000000000 ____D C:\WINDOWS\INF

2018-03-14 09:26 - 2017-12-08 11:21 - 000000000 ___RD C:\Users\Ren\3D Objects

2018-03-14 09:26 - 2013-10-07 18:20 - 000000000 __RHD C:\Users\Public\AccountPictures

2018-03-14 09:25 - 2017-12-08 10:30 - 005307136 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2018-03-14 09:21 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\TextInput

2018-03-14 09:20 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\appraiser

2018-03-14 09:20 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\ShellExperiences

2018-03-13 16:48 - 2017-05-30 10:08 - 000000000 ____D C:\Users\Ren\Desktop\lightroom

2018-03-13 16:15 - 2017-09-29 08:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2018-03-13 16:14 - 2013-10-08 23:18 - 000000000 ____D C:\WINDOWS\system32\MRT

2018-03-13 16:04 - 2017-10-11 12:39 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe

2018-03-13 16:02 - 2013-10-08 23:18 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2018-03-13 15:47 - 2017-09-29 08:41 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2018-03-13 15:47 - 2017-09-29 08:41 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2018-03-13 15:45 - 2017-09-29 08:40 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys

2018-03-13 10:45 - 2018-02-22 13:45 - 000000000 ____D C:\ProgramData\{6BCCAEAF-E18E-2469-6748-BA2BFD0A31E5}

2018-03-13 09:14 - 2017-12-08 11:16 - 000004386 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2018-03-13 09:13 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2018-03-13 09:13 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\Macromed

==================== Files in the root of some directories =======

2014-04-13 15:59 - 2014-04-13 15:59 - 000000132 _____ () C:\Users\Ren\AppData\Roaming\Adobe GIF Format CS5 Prefs

2016-06-20 17:13 - 2017-08-25 14:25 - 000000132 _____ () C:\Users\Ren\AppData\Roaming\Adobe PNG Format CS5 Prefs

2016-11-17 14:45 - 2016-11-17 15:05 - 000000132 _____ () C:\Users\Ren\AppData\Roaming\Adobe PNG Format CS6 Prefs

2015-03-23 15:06 - 2015-03-23 15:08 - 000000096 _____ () C:\Users\Ren\AppData\Roaming\Camdata.ini

2015-03-23 15:06 - 2015-03-23 15:08 - 000000408 _____ () C:\Users\Ren\AppData\Roaming\CamLayout.ini

2015-03-23 15:06 - 2015-03-23 15:08 - 000000408 _____ () C:\Users\Ren\AppData\Roaming\CamShapes.ini

2015-03-23 15:06 - 2015-03-23 15:08 - 000004535 _____ () C:\Users\Ren\AppData\Roaming\CamStudio.cfg

2015-03-23 15:04 - 2015-03-23 15:07 - 000000096 _____ () C:\Users\Ren\AppData\Roaming\version2.xml

2015-03-23 16:03 - 2018-04-09 09:45 - 000000303 _____ () C:\Users\Ren\AppData\Roaming\WB.CFG

2016-04-07 12:14 - 2017-03-14 16:07 - 000001456 _____ () C:\Users\Ren\AppData\Local\Adobe Save for Web 12.0 Prefs

2018-01-11 11:42 - 2018-01-11 11:44 - 000001456 _____ () C:\Users\Ren\AppData\Local\Adobe Save for Web 13.0 Prefs

2015-08-07 21:32 - 2015-08-07 21:32 - 000000017 _____ () C:\Users\Ren\AppData\Local\resmon.resmoncfg

2017-02-16 15:54 - 2017-02-16 15:54 - 000000000 _____ () C:\Users\Ren\AppData\Local\zenmap.exe.log

Files to move or delete:

====================

C:\Windows\Tasks\{41567E7F-AFDC-77D9-F24E-6C61EC055FA1}.job

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-03-26 10:43

==================== End of FRST.txt ============================

#3
s0nginmyheart

Posted 09 April 2018 - 10:23 AM

Member

Topic Starter
Member
151 posts

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018

Ran by Ren (09-04-2018 11:00:59)

Running from C:\Users\Ren\Desktop

Windows 10 Home Version 1709 16299.309 (X64) (2017-12-08 16:18:57)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2989242067-128489364-3901103956-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2989242067-128489364-3901103956-503 - Limited - Disabled)

Guest (S-1-5-21-2989242067-128489364-3901103956-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2989242067-128489364-3901103956-1005 - Limited - Enabled)

Ren (S-1-5-21-2989242067-128489364-3901103956-1001 - Administrator - Enabled) => C:\Users\Ren

WDAGUtilityAccount (S-1-5-21-2989242067-128489364-3901103956-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\uTorrent) (Version: 3.5.3.44358 - BitTorrent Inc.)

ACID Music Studio 9.0 (HKLM-x32\...\{78EB80B0-18A0-11E2-9761-F04DA23A5C58}) (Version: 9.0.35 - Sony)

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.0.0 - Adobe Systems)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.113 - Adobe Systems Incorporated)

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.2 (HKLM-x32\...\{12A54F16-7F2E-4D42-BBCA-E0CC3CBF0457}) (Version: 5.2.1 - Adobe)

Adobe Reader XI MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)

Advanced WMA Workshop version 2.7.4 (HKLM-x32\...\Advanced WMA Workshop_is1) (Version: 2.7.4 - LitexMedia, Inc.)

Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)

ArcSoft PhotoStudio 6 (HKLM-x32\...\{B4BD4DFB-0A22-43EC-A2D4-BF515E9A546F}) (Version: 6.0.0.172 - ArcSoft)

ArtRage Studio (HKLM-x32\...\{5A9FE63F-F201-4D55-9F5F-06DDB239AC4F}) (Version: 3.5.5 - Ambient Design)

AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)

AVS Video Converter 8 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: - Online Media Technologies Ltd.)

AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)

Bigasoft Video Downloader Pro 3.10.9.5856 (HKLM-x32\...\{C7056BA6-D954-42A2-ABBA-AB2E8E777730}_is1) (Version: - Bigasoft Corporation)

BingProvidedSearch (HKLM-x32\...\{9C977457-CC17-A5D7-7D97-D557AD1706D7}) (Version: - )

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

ChromecastApp (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1693.0 - Google Inc.)

Cisco WebEx Meetings (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2126 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.6426.52 - CyberLink Corp.)

DVD Architect Studio 5.0 (HKLM-x32\...\{42C509F1-C451-11E1-AEC9-F04DA23A5C58}) (Version: 5.0.161 - Sony)

ExpressCache (HKLM\...\{3EA6AB5D-D434-4ACA-9609-48F1319518EF}) (Version: 1.0.94 - Condusiv Technologies)

FDUx86 (HKLM-x32\...\{3490653F-2789-46A1-B1BF-6BD4CF4131AB}) (Version: 1.0.0 - Sony Corporation) Hidden

FileZilla Client 3.30.0 (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\FileZilla Client) (Version: 3.30.0 - Tim Kosse)

FLV to MP3 Converter 2.2.2.0 (HKLM-x32\...\FLV to MP3 Converter_is1) (Version: 2.2.2.0 - AbyssMedia.com)

GEAR driver installer for AMD64 and Intel EM64T (HKLM\...\{50CBBEC7-1010-41C5-8718-A1A6FEDD9C3A}) (Version: 2.003.1 - GEAR Software, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 65.0.3325.181 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

HP Dropbox Plugin (HKLM-x32\...\{D12BC084-97D6-438A-AA7C-5962608D17A0}) (Version: 36.0.41.58587 - HP)

HP Google Drive Plugin (HKLM-x32\...\{BFA42100-DB54-467A-BB87-CF70732B4065}) (Version: 36.0.41.58587 - HP)

HP OfficeJet 3830 series Basic Device Software (HKLM\...\{165CDB14-4CD3-4D4D-A38A-3FF93FAAFD5C}) (Version: 40.11.1119.1786 - HP Inc.)

HP OfficeJet 3830 series Help (HKLM-x32\...\{1FCCD112-2F27-463D-8C36-1D5C29A3BB3E}) (Version: 35.0.0 - Hewlett Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)

IDM Crack 6.25 build 10 (HKLM-x32\...\IDM Crack 6.25 build 10) (Version: build 11 - SandySeedings Team)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)

iTunes (HKLM\...\{1D7D1271-5258-4F5A-B8C1-7176BF398782}) (Version: 12.7.3.46 - Apple Inc.)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

K-Lite Codec Pack 9.9.5 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.9.5 - )

KUx86 (HKLM-x32\...\{857087BB-A988-4462-A5C6-CF6739143B56}) (Version: 1.0.0 - Sony Corporation) Hidden

Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.5.166.0 - Microsoft Corporation)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.5007.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\OneDriveSetup.exe) (Version: 18.044.0301.0006 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

MixMeister Fusion Demo 7.4.4 (HKLM-x32\...\mmfsetup_is1) (Version: - MixMeister Technology LLC)

Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{A743F12E-0A86-11E3-8F1A-F04DA23A5C58}) (Version: 12.0.1184 - Sony)

Movie Studio Platinum 12.0 (HKLM-x32\...\{24906A70-0A81-11E3-99B6-F04DA23A5C58}) (Version: 12.0.1183 - Sony)

Mozilla Firefox 59.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.2 (x64 en-US)) (Version: 59.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0.1 - Mozilla)

Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5007.1000 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5007.1000 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version: 15.0.5007.1000 - Microsoft Corporation) Hidden

PDF Settings CS5 (HKLM-x32\...\{A78FE97A-C0C8-49CE-89D0-EDD524A17392}) (Version: 10.0 - Adobe Systems Incorporated) Hidden

PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden

PlayMemories Home (HKLM-x32\...\{10DD6128-A810-4A90-9523-475D573FBB37}) (Version: 6.3.02.07270 - Sony Corporation)

Product Improvement Study for HP OfficeJet 3830 series (HKLM\...\{F1E13468-92EB-4AB7-8F1C-CC09A286C9B9}) (Version: 40.11.1119.1786 - HP Inc.)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.312 - Qualcomm Atheros Communications)

QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)

Reader for PC (HKLM-x32\...\{25340F94-F74E-4CCF-ABDF-ECBCF03911BE}) (Version: 2.0.00.07121 - Sony Corporation)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28146 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)

Restore (HKLM-x32\...\{ECCEB4D0-7080-4F8A-B498-E40A32A4FBED}) (Version: 1.0.0 - Sony Corporation) Hidden

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.103 - Skype Technologies S.A.)

SmartDraw 2013 (HKLM-x32\...\SmartDraw 2013) (Version: - SmartDraw.com)

Sony Vocal Eraser (HKLM-x32\...\Sony Vocal Eraser_is1) (Version: 1.00 - iZotope, Inc.)

Sound Forge Audio Studio 10.0 (HKLM-x32\...\{7A263871-BEEC-11E1-AC53-F04DA23A5C58}) (Version: 10.0.178 - Sony)

Spotify (HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\Spotify) (Version: 1.0.66.478.g1296534d - Spotify AB)

SSLx64 (HKLM\...\{312395BC-7CC2-434C-A660-30250276A926}) (Version: 1.0.0 - Sony Corporation ) Hidden

SSLx86 (HKLM-x32\...\{63C43435-F428-42BA-8E7B-5848749D9262}) (Version: 1.0.0 - Sony Corporation ) Hidden

Store App Support Utility (HKLM\...\{B93C07D4-49FF-440D-8A6A-054A42AEA960}) (Version: 1.0.0.02240 - Sony Corporation)

swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.5.0 - Synaptics Incorporated)

VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.3.2.07020 - Sony Corporation)

VAIO Care (HKLM\...\{9C4E9490-3862-4EE0-90E6-C2457B67CD5F}) (Version: 8.4.6.05116 - Sony Corporation)

VAIO Care Hardware Diagnostics Plugin (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.11.1.11210 - Sony Corporation)

VAIO Care Recovery (HKLM\...\{15B9204E-BA09-485E-8F2C-094AC0077664}) (Version: 1.1.2.13230 - Sony Corporation)

VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.1.0.10300 - Sony Corporation)

VAIO CPU Fan Diagnostic (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.1.0.09200 - Sony Corporation)

VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.10.0.07270 - Sony Corporation)

VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 3.1.0.10240 - Sony Corporation)

VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.1.0.10220 - Sony Corporation)

VAIO Gesture Control (HKLM-x32\...\{A31E4DB3-B774-45C8-BE70-DB8BE53D2A5B}) (Version: 2.1.0.10220 - Sony Corporation) Hidden

VAIO Health Report (HKLM-x32\...\VAIO Health Report1.0) (Version: 1.0 - Sony Electronics)

VAIO Image Optimizer (HKLM-x32\...\{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.0.00.08170 - Sony Corporation) Hidden

VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.3.00.10220 - Sony Corporation)

VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.1.0.10220 - Sony Corporation)

VAIO Manual (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 3.0.0.08100 - Sony Corporation)

VAIO Media Server Settings (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.0.1.10170 - Sony Corporation)

VAIO Movie Creator (HKLM-x32\...\{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}) (Version: 4.0.00.10170 - Sony Corporation) Hidden

VAIO Movie Creator (HKLM-x32\...\InstallShield_{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}) (Version: 4.3.01.11140 - Sony Corporation)

VAIO Movie Creator Template Data (HKLM-x32\...\{00A663F1-6C03-48CA-8E85-55806AAE2615}) (Version: 4.0.00.08170 - Sony Corporation) Hidden

VAIO Movie Creator Template Data (HKLM-x32\...\InstallShield_{00A663F1-6C03-48CA-8E85-55806AAE2615}) (Version: 4.0.00.08170 - Sony Corporation) Hidden

VAIO Transfer Support (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.9.0.11060 - Sony Corporation)

VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)

VCCMMx64 (HKLM\...\{B812401D-BAB2-4E33-9AC7-9862BC8CAF64}) (Version: 1.0.0 - Sony Corporation) Hidden

VCCMMx86 (HKLM-x32\...\{CC87BAAD-AA25-4727-9B7C-E0876722B784}) (Version: 1.0.0 - Sony Corporation) Hidden

VCCx64 (HKLM\...\{25ECAFCB-DCFB-4FCE-A5B2-772A57F59860}) (Version: 1.0.0 - Sony Corporation) Hidden

VCCx64 (HKLM\...\{AB447E3B-7A95-4CA6-8ECD-B25C96314B67}) (Version: 1.0.0 - Sony Corporation) Hidden

VCCx86 (HKLM-x32\...\{AFDC0CC0-39E8-42C0-9823-2C1C182676DC}) (Version: 1.0.0 - Sony Corporation) Hidden

VCCx86 (HKLM-x32\...\{B31938C7-7E97-49EE-8F88-951E156268A3}) (Version: 1.0.0 - Sony Corporation) Hidden

VHD (HKLM-x32\...\{9D8112DB-3490-4BF1-AAFA-1D224FFB5D3C}) (Version: 1.0.0 - Sony Corporation) Hidden

VIx64 (HKLM\...\{D55EAC07-7207-44BD-B524-0F063F327743}) (Version: 1.0.0 - Sony Corporation) Hidden

VIx86 (HKLM-x32\...\{D17C2A58-E0EA-4DD7-A2D6-C448FD25B6F6}) (Version: 1.0.0 - Sony Corporation) Hidden

VMLx86 (HKLM-x32\...\{7E5A5CA6-B7D0-406E-A75E-157CAB47EB94}) (Version: 1.0.0 - Sony Corporation) Hidden

VPMx64 (HKLM\...\{DBEAA361-F8A4-4298-B41C-9E9DCB9AAB84}) (Version: 1.0.0 - Sony Corporation ) Hidden

VSSTx64 (HKLM\...\{4F31AC31-0A28-4F5A-8416-513972DA1F79}) (Version: 1.0.0 - Sony Corporation ) Hidden

VSSTx86 (HKLM-x32\...\{B24BB74E-8359-43AA-985A-8E80C9219C70}) (Version: 1.0.0 - Sony Corporation) Hidden

VU5x64 (HKLM\...\{46261E1C-5E0D-484E-8CCC-7F770375FBA2}) (Version: 1.0.0 - Sony Corporation ) Hidden

VU5x86 (HKLM-x32\...\{D2D23D08-D10E-43D6-883C-78E0B2AC9CC6}) (Version: 1.0.0 - Sony Corporation ) Hidden

VUx64 (HKLM\...\{4B432082-B58C-4035-91FB-F28D504D3148}) (Version: 1.0.0 - Sony Corporation ) Hidden

VUx64 (HKLM\...\{A0A2BE14-D3FF-41C8-9545-4B130E3FE9A4}) (Version: 1.2.0 - Sony Corporation) Hidden

VUx86 (HKLM-x32\...\{10181264-340D-4BE7-B879-3A49604A6FD1}) (Version: 1.0.0 - Sony Corporation ) Hidden

VUx86 (HKLM-x32\...\{D04F1D22-4A47-42C6-A2B9-094A7B844D9B}) (Version: 1.2.0 - Sony Corporation) Hidden

VWSTx86 (HKLM-x32\...\{B8991D99-88FD-41F2-8C32-DB70278D5C30}) (Version: 1.0.0 - Sony Corporation) Hidden

Windows Driver Package - Qualcomm Atheros Communications Inc. (athr) Net (07/15/2013 10.0.0.260) (HKLM\...\FF9ECD00DD25FDB7D3208607214790302878ACBE) (Version: 07/15/2013 10.0.0.260 - Qualcomm Atheros Communications Inc.)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - )

XperiaLinkx86 (HKLM-x32\...\{EE402ACB-8269-4E44-9CA1-D81FDC4B4545}) (Version: 1.0.0 - Sony Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.32.8\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2989242067-128489364-3901103956-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Ren\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File

ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)

ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat Elements\ContextMenu64.dll [2010-10-25] (Adobe Systems Inc.)

ContextMenuHandlers1: [AWMAWShlExt] -> {165C5F53-C785-435D-A7A0-4F3E50A6CA1F} => C:\Program Files (x86)\LitexMedia\Advanced WMA Workshop\awmaw_shellext.dll [2010-11-01] (LitexMedia, Inc.)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2012-10-23] (Cyberlink)

ContextMenuHandlers1-x32: [flvtomp3] -> {9851930A-411E-4D40-94DD-23FA3A84E57D} => C:\Program Files (x86)\FLV to MP3 Converter\flvtomp3.dll [2011-10-28] ()

ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()

ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2012-10-23] (Cyberlink)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

ContextMenuHandlers4: [AWMAWShlExt] -> {165C5F53-C785-435D-A7A0-4F3E50A6CA1F} => C:\Program Files (x86)\LitexMedia\Advanced WMA Workshop\awmaw_shellext.dll [2010-11-01] (LitexMedia, Inc.)

ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()

ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Intel Corporation)

ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\WINDOWS\system32\igfxOSP.dll [2016-05-03] (Intel Corporation)

ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat Elements\ContextMenu64.dll [2010-10-25] (Adobe Systems Inc.)

ContextMenuHandlers6-x32: [flvtomp3] -> {9851930A-411E-4D40-94DD-23FA3A84E57D} => C:\Program Files (x86)\FLV to MP3 Converter\flvtomp3.dll [2011-10-28] ()

ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

ContextMenuHandlers6-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2010-03-15] ()

ContextMenuHandlers6-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2010-03-15] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {009284E7-991D-4B5A-9265-464235ECEC2C} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\SONY\VAIO Update\ShellExeProxy.exe [2016-03-31] (Sony Corporation)

Task: {00ABCEF5-926D-4642-83CF-D6694F2D7446} - System32\Tasks\VAIO Health Report => C:\Program Files (x86)\Sony\VAIO Health Report\VAIOHealthReport.exe [2013-06-20] (Sony Electronics)

Task: {02043104-EC81-484F-9599-818661318556} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {0408F0C6-1D07-42F4-869E-DC2E457331E4} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2014-11-17] (Sony Corporation)

Task: {0720E344-7A83-4336-B256-83BF4AC3972E} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2017-05-15] (Sony Corporation)

Task: {08885AED-B062-4FD7-92BD-ECBD4FC3572E} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {0940ED18-0DE5-408A-AE3B-2FE423B54C4B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation)

Task: {0A6F4A01-DEF7-4D80-9984-604E7E1BD28D} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)

Task: {0AE643D3-D846-4C68-ADCB-CD553412EC1C} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-30] (Sony Corporation)

Task: {0CAF5BFC-1D27-4C65-B6B2-8C6B6DD49AAB} - System32\Tasks\SDMsgUpdate (TE) => C:\Program Files (x86)\SmartDraw 2013\Messages\SDNotify.exe [2012-08-13] ()

Task: {0E9185A2-BCF9-4BAA-AB6D-4B39C37FB3C4} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)

Task: {11E50B6A-E362-4879-971F-B5FE1A39C059} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001UA1d259703d6cfeac => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {161EEFDA-9C7A-4180-9C78-E6B0B9F65EB6} - System32\Tasks\HPCustParticipation HP OfficeJet 3830 series => C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPCustPartic.exe [2017-03-27] (HP Inc.)

Task: {1A4861BF-1602-4BA5-928F-3ED98226C4F2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION

Task: {1E97AF42-98B0-4D34-9C6F-02BE407890B8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

Task: {227A1831-3D33-4B37-B693-55D6D036CB9A} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2012-10-23] (Sony Corporation)

Task: {294C9B2B-5ED1-4FAE-89AE-E3AB377940C6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001UA => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {29BCCC3A-47F3-46EF-877A-27B1A8256456} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {2DAC2D19-9C00-4753-88BD-2DCA1245D29A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {30EAC75C-339C-44DB-B1A5-7F58EC63F342} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-13] (Adobe Systems Incorporated)

Task: {314A1D4B-226A-4C7A-A28D-9CEAFA1D785F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {31C6932D-0A1E-4835-9049-4E8A152B0D90} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2012-10-22] (Sony Corporation)

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {3888184C-36E5-44C9-96A4-9950BBF6FF1B} - System32\Tasks\{41567E7F-AFDC-77D9-F24E-6C61EC055FA1} => C:\Program Files (x86)\Common Files\41567e7fafdc77d9f24e6c61ec055fa1\updane.exe [2013-04-22] ()

Task: {3BBAD331-9701-44FC-9651-0A91ECEF9BE3} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {3BF6055E-A35B-4A77-BE0F-1DD41D58CC66} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)

Task: {3D2BB51A-3A5A-428D-B300-966AAC6DFFB5} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2018-02-23] (Microsoft Corporation)

Task: {406FEE5A-5365-477F-8E8C-2DBC08FB1F72} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-03-13] (Microsoft Corporation)

Task: {40EFE555-4B00-47B7-96BF-87A579842A0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)

Task: {432A00B7-B9AB-405A-B73B-0F08A4B562DA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION

Task: {4398B04E-F8A9-4BF6-A5C9-FE3A45148D67} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)

Task: {5072C64E-DDA8-42FD-BEEB-8C8F244563E4} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)

Task: {50B0CA89-D0F0-4743-AF42-C1E7FB8CA9D8} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)

Task: {56A9F026-4CAD-4F27-AC78-79CCC608BF9B} - System32\Tasks\Sony Corporation\VAIO Care\VKSvcWeekly => C:\Program Files\Sony\VAIO Care\VAIOTM\VKSvc.exe [2017-04-19] (Sony Corporation)

Task: {5967F7D6-CE46-4959-A437-5AC515DD2AD0} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-09-06] (Sony Corporation)

Task: {5BDF4B86-B72C-4372-A373-9CB6AB25549D} - System32\Tasks\IEError => C:\Program Files (x86)\Tuneup computer A1PCCleaner\Popialert.exe

Task: {6FA0CC29-01E5-4382-AA2F-33139A4C147B} - System32\Tasks\Sony Corporation\VAIO Care\UpdateContacts => C:\ProgramData\Sony Corporation\VAIO Care\UpdateContacts.exe

Task: {73995478-BBF8-44BB-9F0B-930F3FBD524B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

Task: {739F9F20-B65A-4018-90E6-0518CAC239DB} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

Task: {74EE86F6-05A8-4370-AD67-BBECE04B59D9} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)

Task: {814335B4-6187-41B0-9E50-D8854603E41B} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-05-27] (Synaptics Incorporated)

Task: {8BCE4E1E-BFED-46F1-AEA7-1CA2BBEF2DFA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-10-12] (Apple Inc.)

Task: {8CC511C6-0DA6-47A9-8DCD-C9D7EDB27B72} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {8EDD64C2-D820-4C35-8070-BD6F79D182C5} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2015-07-08] (Microsoft)

Task: {90EFDB5B-2816-4C31-86CE-31F09F736DB8} - System32\Tasks\Sony Corporation\VAIO Care\VTSvc => C:\Program Files\Sony\VAIO Care\VAIOTM\VTSvc.exe [2017-04-19] (Sony Corporation)

Task: {943E4A9D-B2B9-4875-9789-E88279530447} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

Task: {94A23A74-8401-4D0E-B9F1-B5FDF0A6C262} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2017-05-15] (Sony Corporation)

Task: {97132113-0246-45A2-BC54-76E2145EC998} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation)

Task: {9BE09F75-95CD-44B3-B917-4F790098E9F9} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2014-07-03] (Sony Corporation)

Task: {9D46FCC3-86B0-4D26-AD99-3BA47829FF0A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)

Task: {9FCDE153-9F4B-4ACD-A9FF-D5E10D020F91} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION

Task: {A0A12BD9-FCAC-426A-A770-BDA127660F55} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {A66859FE-0EB5-4DEF-B57E-083D26889AC3} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {A88979C1-D88E-4640-B430-DB4E2C0F1F4D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001Core => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {AFB5F63E-BFBC-4319-A3CA-8FA153551DC8} - System32\Tasks\Sony Corporation\VAIO Care\VTUsr => C:\Program Files\Sony\VAIO Care\VAIOTM\VTUsr.exe [2017-04-19] (Sony Corporation)

Task: {B45B77BC-3127-4C15-B3CE-A8DC13E35D4D} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION

Task: {BFF7ACED-CB5A-48B2-B5DE-A0244FA18187} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION

Task: {C052348C-F571-43CE-8080-653DE627CD2E} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {C487A71F-8BFD-4A6B-8B0C-49D9D4361961} - System32\Tasks\AI_Updater => C:\Program Files (x86)\Tuneup computer A1PCCleaner\updater.exe

Task: {C85F3692-290B-4C0A-8960-56A812A74982} - System32\Tasks\Sony Corporation\Store App Support Utility\Store App Support Utility Logon Start => C:\Program Files\Sony\Store App Support Utility\StoreAppSupportUtility.exe [2014-02-25] (Sony Corporation)

Task: {CBF5A422-30DA-419B-923C-7F41DA15C674} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2014-11-17] (Sony Corporation)

Task: {D2E9E2A3-1188-4FEC-AC02-C4FDBA491B06} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)

Task: {D7249016-AFA3-4936-8E6A-72F084529BD7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001Core1d259703cf87e24 => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {D913F5B4-C9A3-426C-B2AA-B12222B0D9EB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION

Task: {DD0B14D6-22CA-45C1-A531-E5D2287654CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)

Task: {E2CF599C-32FC-449F-88D0-01A382E92DF2} - System32\Tasks\Search Provided by Bing derad => C:\WINDOWS\system32\wscript.exe "C:\ProgramData\{6BCCAEAF-E18E-2469-6748-BA2BFD0A31E5}\lefi.txt" "68747470733a2f2f686f6475716f712e636f6d" "//B" "//E:jscript" "--IsErIk" <==== ATTENTION

Task: {E318301A-0A5B-443B-B65C-A1827884DB74} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe [2013-09-28] (Sony Corporation)

Task: {EAF31B8F-A5DE-468C-9C4C-CCC7191FDDCE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION

Task: {F1959AFD-1D18-44E8-B3E1-DC36C7D15EBE} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-09-06] (Sony Corporation)

Task: {F3311558-E967-4513-B6EC-1ECDE2DA9427} - System32\Tasks\Sony Corporation\VAIO Care\VKSvcDaily => C:\Program Files\Sony\VAIO Care\VAIOTM\VKSvc.exe [2017-04-19] (Sony Corporation)

Task: {F41066D0-7EA3-48A1-A6F8-222BA9CBA11E} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2017-05-15] (Sony Corporation)

Task: {F8CD0B1B-6BE5-4AC1-8063-D6AB92968812} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

Task: {FAE8920B-9E21-4D35-8079-CBDE65C0DC8C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_Plugin.exe [2018-03-13] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001Core.job => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2989242067-128489364-3901103956-1001UA.job => C:\Users\Ren\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\SDMsgUpdate (TE).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe\-PTE -V20000102 -SSDU.ini -A -Mhxxp:/www.smartdraw.com/msgs/messagecheck.asp

Task: C:\WINDOWS\Tasks\Search Provided by Bing derad.job => C:\WINDOWS\system32\wscript.ex C:\ProgramData\{6BCCAEAF-E18E-2469-6748-BA2BFD0A31E5}\lefi.txt <==== ATTENTION

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

Task: C:\WINDOWS\Tasks\{41567E7F-AFDC-77D9-F24E-6C61EC055FA1}.job => C:\PROGRA~2\COMMON~1\41567E~1\updane.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Ren\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi

==================== Loaded Modules (Whitelisted) ==============

2014-04-11 19:10 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2018-01-05 01:14 - 2018-01-05 01:14 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2018-01-05 01:13 - 2018-01-05 01:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2017-10-16 16:19 - 2017-12-08 14:05 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2017-09-29 08:41 - 2017-09-29 08:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-22 09:29 - 2017-01-31 07:34 - 008909512 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2013-10-07 20:21 - 2010-03-15 13:28 - 000166400 _____ () C:\Program Files\WinRAR\rarext.dll

2018-03-13 15:43 - 2018-02-21 19:26 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2018-03-13 15:43 - 2018-02-21 19:21 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2018-03-23 09:32 - 2018-03-23 09:33 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2018-03-23 09:32 - 2018-03-23 09:33 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2018-03-23 09:32 - 2018-03-23 09:33 - 022050304 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2018-03-23 09:32 - 2018-03-23 09:33 - 002584576 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\skypert.dll

2018-03-23 09:32 - 2018-03-23 09:32 - 000657408 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1811.248.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll

2018-04-09 09:49 - 2018-04-09 09:49 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

2018-04-09 09:49 - 2018-04-09 09:49 - 067038720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.Photos.dll

2018-02-16 10:28 - 2018-02-16 10:31 - 000010240 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\RenderingPlugin.dll

2017-10-03 12:16 - 2017-10-03 12:16 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\ImagePipelineNative.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 004123648 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll

2018-04-09 09:49 - 2018-04-09 09:49 - 015329792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 003962368 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\MediaEngine.dll

2018-04-09 09:49 - 2018-04-09 09:49 - 003250176 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\AppCore.Windows.dll

2018-03-01 10:33 - 2018-03-01 10:35 - 001369088 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll

2018-04-09 09:49 - 2018-04-09 09:49 - 004601048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 000094208 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\BendRealityNode.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 000043008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll

2018-03-29 09:21 - 2018-03-29 09:22 - 000631296 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll

2018-04-09 09:49 - 2018-04-09 09:49 - 000152064 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18022.15810.1000_x64__8wekyb3d8bbwe\SKU.dll

2018-02-08 23:06 - 2018-02-08 23:06 - 025843200 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\Music.UI.exe

2018-02-08 23:06 - 2018-02-08 23:06 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\SharedUI.dll

2018-02-08 23:06 - 2018-02-08 23:06 - 006748672 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\EntCommon.dll

2017-12-01 10:53 - 2017-12-01 10:54 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll

2017-09-26 14:42 - 2017-09-26 14:42 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2018-02-08 23:06 - 2018-02-08 23:06 - 005527040 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18011.13411.1000_x64__8wekyb3d8bbwe\Music.Visuals.dll

2018-02-21 07:20 - 2018-02-21 07:20 - 027139072 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Video.UI.exe

2018-02-21 07:20 - 2018-02-21 07:20 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\SharedUI.dll

2018-02-21 07:20 - 2018-02-21 07:20 - 006687744 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\EntCommon.dll

2017-09-26 14:42 - 2017-09-26 14:42 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2018-04-09 09:37 - 2018-04-09 09:39 - 000017408 _____ () C:\Program Files\WindowsApps\Microsoft.BingFinance_4.23.10923.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe

2018-04-09 09:37 - 2018-04-09 09:39 - 018263040 _____ () C:\Program Files\WindowsApps\Microsoft.BingFinance_4.23.10923.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.dll

2018-04-09 09:41 - 2018-04-09 09:42 - 005347208 _____ () C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1804.2.0_x64__8wekyb3d8bbwe\Microsoft.Advertising.dll

2016-03-04 11:46 - 2016-03-04 11:46 - 000291328 _____ () C:\Program Files\WindowsApps\Microsoft.BingFinance_4.23.10923.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll

2018-03-23 09:32 - 2018-03-20 01:00 - 004435288 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libglesv2.dll

2018-03-23 09:32 - 2018-03-20 01:00 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libegl.dll

2018-02-05 15:26 - 2018-02-05 15:26 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll

2013-04-19 19:07 - 2012-07-18 08:55 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll

2018-02-05 15:26 - 2018-02-05 15:26 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:DB9F45AE [147]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 08:25 - 2016-09-29 14:18 - 000001374 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Sony\VAIO 11 img1 Wallpaper 1920x1080.jpg

DNS Servers: 192.168.7.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"

HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"

HKLM\...\StartupApproved\Run32: => "AdobeCS5ServiceManager"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "Fitbit Connect"

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\StartupApproved\Run: => "Google Update"

HKU\S-1-5-21-2989242067-128489364-3901103956-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{BE7F1192-073E-4076-ABA7-1C583575AF29}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{360E920A-7BC6-4CFD-9D25-C48C6E7E7F4F}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [{1B0BA775-0D30-4FBB-8EB3-A788900FB385}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{48EB85B2-F524-4FF1-8904-0BAFCAC7314A}] => (Allow) LPort=5357

FirewallRules: [{E1EE5797-6A1D-4381-A072-E899DF8C2843}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\DeviceSetup.exe

FirewallRules: [{F9D41A03-10E6-4FC3-B8C8-92124C3BC50A}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxPrinterUtility.exe

FirewallRules: [{12C2DC23-FCFA-4905-9DFA-F5738A12BF4B}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\SendAFax.exe

FirewallRules: [{C1137E11-F005-418A-A087-6BD7F8E75E23}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\DigitalWizards.exe

FirewallRules: [{202C08D3-B356-48B5-AAB4-EB80CBA75719}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxApplications.exe

FirewallRules: [{09B3B247-4E71-4BBE-B08D-F5641A4D8C3F}] => (Allow) C:\Users\Ren\AppData\Local\Temp\7zS4E7F\HP.EasyStart.exe

FirewallRules: [{3FC7F60F-D595-44F5-9608-8038B3EC3AD9}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{0D6314DD-6CC9-41F6-B681-68DB8669212E}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{43644CC5-5DA5-4F6E-B23B-5A3F7B10207F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{28492F9C-EED2-4D35-97B1-8BD8E4BE8167}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{1B358B5C-78DF-4A17-A8C2-E04A7E405788}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{EDE5F29C-6BFB-49A9-8D1F-48A30C50D8A3}C:\program files (x86)\google\chrome\application\new_chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\new_chrome.exe

FirewallRules: [TCP Query User{C54A1F17-BC3E-497C-9FAD-4B863E379B3C}C:\program files (x86)\google\chrome\application\new_chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\new_chrome.exe

FirewallRules: [{8A9797AD-8321-40FA-9E44-339D42A895EC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{3825FF6A-E2E6-410A-BDF2-5076E7E41CEB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{C82A3B65-5B1B-490A-99F5-B3AB3121B58A}C:\users\ren\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ren\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{90397E17-5002-4C8B-BA58-333A7247DECF}C:\users\ren\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ren\appdata\roaming\spotify\spotify.exe

FirewallRules: [{46EFC698-CCC7-4462-88B4-B2506E3CC325}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE

FirewallRules: [{B2C64ADC-3BDD-4060-8E8B-2A8489F0D1C5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{487B0C25-1742-4DCF-85D3-34525DF52377}] => (Allow) C:\Users\Ren\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [{66C19A3E-78B7-4A8D-BB8D-DFC15F9B18C4}] => (Allow) LPort=1688

FirewallRules: [{44DE75F5-CFF4-4CF4-B24F-2E2C20AE1FEE}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe

FirewallRules: [{A938FB5F-5239-4520-BD39-8096C886282C}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe

FirewallRules: [{5035B5C4-4EFE-4CFE-8284-5F42953DBECC}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe

FirewallRules: [{2F9CA469-1E1F-41F9-8994-6A4E5AE8DCC7}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe

FirewallRules: [UDP Query User{1D249B5E-1CED-49DC-B430-297406DDCC19}C:\users\ren\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ren\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{512064DD-D35D-4519-965D-ED3DF453907F}C:\users\ren\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ren\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{EA306BE4-C982-4DC6-BCED-A4B82F2CA6CF}C:\program files (x86)\arcsoft\totalmedia theatre 6\totalmedia server\tm server.exe] => (Allow) C:\program files (x86)\arcsoft\totalmedia theatre 6\totalmedia server\tm server.exe

FirewallRules: [TCP Query User{9EAD3C89-56BF-4ED6-9C02-E6F5C5E5647A}C:\program files (x86)\arcsoft\totalmedia theatre 6\totalmedia server\tm server.exe] => (Allow) C:\program files (x86)\arcsoft\totalmedia theatre 6\totalmedia server\tm server.exe

FirewallRules: [{BF12D8EE-0FC6-4EA1-A071-4F97B78772FC}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE

FirewallRules: [{F048B561-1DA4-4770-92D5-F84B1DC65798}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{A8C30500-D656-4E50-9762-A0F98572BE41}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

FirewallRules: [{AEE7DFFA-459A-4250-9997-0F2AEF2842A1}] => (Allow) C:\Users\Ren\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{509C1A04-2170-41CE-A9F7-9EE3664D0920}] => (Allow) C:\Users\Ren\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{6586B71B-EC7F-4332-9E11-A01D8890F4A2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{71075B46-C9C5-4D4A-BA74-5B93528228EE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E7E4D272-AA44-4B79-8A25-198065204ED1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{4E60749C-4970-4FA8-B166-514DE51FA4CC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{72F4010F-54EC-479F-A109-818FC14D6BC5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1DA149A4-1944-4B03-A163-3D166777A3DB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{4A417C1A-F9C1-491D-90F7-59D2A1CFB866}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{FB6D29BE-78EE-4D26-83AE-070AD5DF2562}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{B2F25EF7-BD83-46C6-8A60-1EA00EAABBC2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BB750437-DF79-4EC6-B8C3-22E58517C9A6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B41C44F4-4991-4D5F-8115-46D4F3978F0F}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe

FirewallRules: [{4B42D14D-48FA-40F4-ABF4-55F093325D15}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe

FirewallRules: [{3CA156A3-6E3F-4D2E-9E19-ADFD88A9A2A0}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

FirewallRules: [{EBA1C298-56B3-48F5-9AEE-7E06B50C9488}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe

FirewallRules: [{943C8DB0-C4B9-4A1D-8C8F-D18BF19CE992}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

FirewallRules: [{B7E5F217-BC9F-413E-AFC6-FD42FEB5B88C}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{15309809-5C92-461E-965D-1E9F61690645}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

12-03-2018 12:52:58 Scheduled Checkpoint

22-03-2018 12:13:30 Scheduled Checkpoint

29-03-2018 12:33:05 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (04/09/2018 10:33:45 AM) (Source: COM) (EventID: 10031) (User: )

Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {41FD88F7-F295-4D39-91AC-A85F3149A05B} was rejected

Error: (04/09/2018 10:33:45 AM) (Source: COM) (EventID: 10031) (User: )

Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {41FD88F7-F295-4D39-91AC-A85F3149A05B} was rejected

Error: (04/09/2018 09:29:05 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Event-ID 0

Error: (04/09/2018 09:21:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ResolveSimultaneousProbe: 0000000004043EB0 Our Record 3 won: 888FDB9E 16 VAIO-2.local. AAAA FE80:0000:0000:0000:7846:80F3:0FD7:B3DC

Error: (04/09/2018 09:21:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ResolveSimultaneousProbe: 0000000004043EB0 Pkt Record: 00306898 4 VAIO-2.local. Addr 192.168.7.211

Error: (04/09/2018 09:21:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ResolveSimultaneousProbe: 0000000004043EB0 Our Record 3 won: 99A3DAC8 16 VAIO-2.local. AAAA 2602:0306:8B59:01E0:7846:80F3:0FD7:B3DC

Error: (04/09/2018 09:21:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ResolveSimultaneousProbe: 0000000004043EB0 Pkt Record: 00306898 4 VAIO-2.local. Addr 192.168.7.211

Error: (04/09/2018 09:21:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ResolveSimultaneousProbe: 0000000004043EB0 Our Record 3 won: 91140250 16 VAIO-2.local. AAAA 2602:0306:8B59:01E0:0000:0000:0000:0045

System errors:

=============

Error: (04/09/2018 10:49:04 AM) (Source: Disk) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Error: (04/09/2018 10:36:43 AM) (Source: DCOM) (EventID: 10016) (User: VAIO)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

to the user VAIO\Ren SID (S-1-5-21-2989242067-128489364-3901103956-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/09/2018 10:33:43 AM) (Source: NetBT) (EventID: 4321) (User: )

Description: The name "VAIO :0" could not be registered on the interface with IP address 192.168.7.64.

The computer with the IP address 192.168.7.211 did not allow the name to be claimed by

this computer.

Error: (04/09/2018 09:56:21 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (04/09/2018 09:42:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80246007: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml.

Error: (04/09/2018 09:35:44 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

Error: (04/09/2018 09:33:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

Error: (04/09/2018 09:25:56 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Interactive Services Detection service terminated with the following error:

Incorrect function.

Windows Defender:

===================================

Date: 2018-03-29 15:23:18.275

Description:

Windows Defender Antivirus scan has been stopped before completion.

Scan ID: {92CFD09F-317C-444D-A2CC-D0362C0C8643}

Scan Type: Antimalware

Scan Parameters: Full Scan

Date: 2018-03-29 11:56:22.306

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

https://go.microsoft...74&enterprise=0

Name: Trojan:VBS/Mutuodo.A

ID: 2147724374

Severity: Severe

Category: Trojan

Path: file:_C:\Users\Ren\AppData\Roaming\Godod\Foneconesite.dat

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: Real-Time Protection

Process Name: C:\Windows\SysWOW64\wscript.exe

Signature Version: AV: 1.263.1709.0, AS: 1.263.1709.0, NIS: 119.0.0.0

Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-29 11:48:45.442

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

https://go.microsoft...74&enterprise=0

Name: Trojan:VBS/Mutuodo.A

ID: 2147724374

Severity: Severe

Category: Trojan

Path: file:_C:\Users\Ren\AppData\Roaming\Godod\Foneconesite.dat

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: Real-Time Protection

Process Name: C:\Users\Ren\AppData\Local\{4B497~1\lecanati.exe

Signature Version: AV: 1.263.1709.0, AS: 1.263.1709.0, NIS: 119.0.0.0

Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-29 11:45:26.903

Description:

Windows Defender Antivirus has detected a suspicious behavior.

Name: Behavior:Win32/DroppedKnownMalware

ID: 98608133

Severity: Low

Category: Suspicious Behavior

Path Found: file:_C:\Program Files (x86)\Common Files\41567e7fafdc77d9f24e6c61ec055fa1\updane.exe;process:_5708

Detection Origin: Local machine

Detection Type: Suspicious

Detection Source: Real-Time Protection

Status: Executing

Process Name: C:\Program Files (x86)\Common Files\41567e7fafdc77d9f24e6c61ec055fa1\updane.exe

Signature ID: 41453017067075

Signature Version: AV: 1.263.1709.0, AS: 1.263.1709.0

Engine Version: 1.1.14600.4

Fidelity Label: Low

Target File Name: C:\Users\Ren\AppData\Local\6b7f883449653f0b\Keromica.dat

Date: 2018-03-29 11:45:24.102

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

https://go.microsoft...74&enterprise=0

Name: BrowserModifier:Win32/Prifou

ID: 224074

Severity: High

Category: Browser Modifier

Path: file:_C:\Users\Ren\AppData\Local\6b7f883449653f0b\Keromica.dat

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: Real-Time Protection

Process Name: C:\PROGRA~2\COMMON~1\41567E~1\updane.exe

Signature Version: AV: 1.263.1709.0, AS: 1.263.1709.0, NIS: 119.0.0.0

Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-26 09:27:11.475

Description:

Windows Defender Antivirus has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.263.1163.0

Update Source: Microsoft Update Server

Signature Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.14600.4

Error code: 0x80240016

Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2018-03-09 14:00:38.271

Description:

Windows Defender Antivirus has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.263.393.0

Update Source: Microsoft Update Server

Signature Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.14600.4

Error code: 0x80240016

Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

CodeIntegrity:

===================================

Date: 2018-04-09 11:20:47.531

Description:

Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-04-09 11:20:47.530

Description:

Date: 2018-04-09 11:10:43.633

Description:

Date: 2018-04-09 11:10:43.631

Description:

Date: 2018-04-09 11:03:50.516

Description:

Date: 2018-04-09 11:03:50.515

Description:

Date: 2018-04-09 10:53:37.660

Description:

Date: 2018-04-09 10:53:37.656

Description:

==================== Memory info ===========================

Processor: Intel® Core™ i5-3337U CPU @ 1.80GHz

Percentage of memory in use: 54%

Total physical RAM: 8071.27 MB

Available physical RAM: 3657.78 MB

Total Virtual: 9351.27 MB

Available Virtual: 4104.41 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:666.13 GB) (Free:319.61 GB) NTFS

Drive e: () (Removable) (Total:115.66 GB) (Free:30.38 GB) FAT32

\\?\Volume{e5b2880a-665d-4f07-9600-b28325a45988}\ (Windows RE tools) (Fixed) (Total:1.44 GB) (Free:0.76 GB) NTFS

\\?\Volume{5d32ef48-be3d-4c46-b5c3-e7ac88e6984a}\ () (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32

\\?\Volume{2133585c-14f7-4329-8c5a-03ed86953d3f}\ () (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS

\\?\Volume{b8aacac7-7f0f-4d1f-b040-d16993f6d1d9}\ (Recovery) (Fixed) (Total:30.09 GB) (Free:5.44 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 698.6 GB) (Disk ID: A7670998)

Partition: GPT.

========================================================

Disk: 1 (Size: 29.8 GB) (Disk ID: 41773A4D)

Partition: GPT.

========================================================

Disk: 2 (Size: 115.7 GB) (Disk ID: D0A330DC)

Partition 1: (Not Active) - (Size=115.7 GB) - (Type=0C)

==================== End of Addition.txt ============================

#4
s0nginmyheart

Posted 09 April 2018 - 01:24 PM

Member

Topic Starter
Member
151 posts

Subsequently I ran MalwareBytes AdwCleaner which found a few things. This is the report after cleaning:

# AdwCleaner 7.0.8.0 - Logfile created on Mon Apr 09 19:17:05 2018

# Updated on 2018/08/02 by Malwarebytes

# Running on Windows 10 Home (X64)

# Mode: clean

# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Program Files (x86)\41567e7fafdc77d9f24e6c61ec055fa1

***** [ Files ] *****

Deleted: C:\Users\Ren\AppData\Roaming\Mozilla\Firefox\Profiles\ggr6rarr.default-1497194218125\searchplugins\Search Provided by Bing.xml

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted: AI_Updater

Deleted: ieerror

Deleted: IEError

Deleted: ai_updater

Deleted: Search Provided by Bing derad

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}

Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application

Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application

Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3FC7F60F-D595-44F5-9608-8038B3EC3AD9}

Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{0D6314DD-6CC9-41F6-B681-68DB8669212E}

Deleted: [Key] - HKU\S-1-5-21-2989242067-128489364-3901103956-1001\Software\csastats

Deleted: [Key] - HKCU\Software\csastats

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

Plugin deleted: SoundCloud Downloader Free -

*************************

::Tracing keys deleted

::Winsock settings cleared

::Additional Actions: 0

*************************

C:/AdwCleaner/AdwCleaner[C1].txt - [4715 B] - [2015/10/16 1:55:37]

C:/AdwCleaner/AdwCleaner[S1].txt - [2377 B] - [2015/10/16 1:50:30]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########

Back to Virus, Spyware, Malware Removal · Next Unread Topic →

As Featured On:

Geeks to Go Forum 343,461 topics
Quick Links FAQ Malware Cleaning Guide How it Works
Downloads 2+ million

View New Content

"There is Recommended Update for this PC" prompt/ can't cl

#1
s0nginmyheart

Posted 09 April 2018 - 09:54 AM

Attached Thumbnails

Advertisements

#2
s0nginmyheart

Posted 09 April 2018 - 10:22 AM

#3
s0nginmyheart

Posted 09 April 2018 - 10:23 AM

#4
s0nginmyheart

Posted 09 April 2018 - 01:24 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

"There is Recommended Update for this PC" prompt/ can't cl

#1 s0nginmyheart Posted 09 April 2018 - 09:54 AM

Attached Thumbnails

Advertisements

#2 s0nginmyheart Posted 09 April 2018 - 10:22 AM

#3 s0nginmyheart Posted 09 April 2018 - 10:23 AM

#4 s0nginmyheart Posted 09 April 2018 - 01:24 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Sign In

#1
s0nginmyheart

Posted 09 April 2018 - 09:54 AM

#2
s0nginmyheart

Posted 09 April 2018 - 10:22 AM

#3
s0nginmyheart

Posted 09 April 2018 - 10:23 AM

#4
s0nginmyheart

Posted 09 April 2018 - 01:24 PM