Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Computer Crashes whenever I check email online (Chrome)
Message
<blockquote data-quote="Brad Koch" data-source="post: 412803" data-attributes="member: 38298"><p>Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015</p><p>Ran by Susan (administrator) on SUSAN-PC on 20-07-2015 12:09:46</p><p>Running from C:\Users\Susan\Downloads</p><p>Loaded Profiles: Susan (Available Profiles: Susan & Brad)</p><p>Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)</p><p>Internet Explorer Version 11 (Default browser: Chrome)</p><p>Boot Mode: Normal</p><p>Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a></p><p></p><p>==================== Processes (Whitelisted) =================</p><p></p><p>(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)</p><p></p><p>(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe</p><p>(Microsoft Corporation) C:\Windows\System32\wlanext.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe</p><p>(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe</p><p>(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe</p><p>(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe</p><p>() C:\Windows\System32\spool\drivers\x64\3\dleeserv.exe</p><p>( ) C:\Windows\System32\dleecoms.exe</p><p>(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe</p><p>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe</p><p>(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe</p><p>(McAfee, Inc.) C:\Windows\System32\mfevtps.exe</p><p>(McAfee, Inc.) C:\Windows\System32\mfevtps.exe</p><p>(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe</p><p>(Microsoft Corporation) C:\Windows\System32\rundll32.exe</p><p>(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe</p><p>(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe</p><p>(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe</p><p>(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE</p><p>(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe</p><p>(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE</p><p>(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe</p><p>(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe</p><p>(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.5.495.0\McCSPServiceHost.exe</p><p>(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe</p><p>(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe</p><p>(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe</p><p>(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe</p><p>(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe</p><p>(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe</p><p>(Microsoft Corporation) C:\Windows\System32\rundll32.exe</p><p>(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe</p><p>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe</p><p>(Microsoft Corporation) C:\Windows\System32\rundll32.exe</p><p>(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe</p><p>(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe</p><p>() C:\Program Files (x86)\Dell V715w\dleemon.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe</p><p>(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe</p><p>(Apple Inc.) C:\Program Files (x86)\AirPort\APAgent.exe</p><p>(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe</p><p>(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe</p><p>(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe</p><p>(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe</p><p>() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe</p><p>(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe</p><p>(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe</p><p>(Microsoft Corporation) C:\Windows\System32\dllhost.exe</p><p>(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe</p><p>(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe</p><p>(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Microsoft Corporation) C:\Windows\System32\dllhost.exe</p><p>(Microsoft Corporation) C:\Windows\System32\dllhost.exe</p><p></p><p></p><p>==================== Registry (Whitelisted) ==================</p><p></p><p>(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)</p><p></p><p>HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)</p><p>HKLM\...\Run: [dleemon.exe] => C:\Program Files (x86)\Dell V715w\dleemon.exe [770728 2011-01-23] ()</p><p>HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()</p><p>HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)</p><p>HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)</p><p>HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)</p><p>HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [616272 2015-05-13] (McAfee, Inc.)</p><p>HKLM-x32\...\Run: [AirPort Base Station Agent] => C:\Program Files (x86)\AirPort\APAgent.exe [771360 2009-11-11] (Apple Inc.)</p><p>HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)</p><p>HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"</p><p>HKLM-x32\...\runonceex: [Flags] =></p><p>Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\822\G2AWinLogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.)</p><p>HKLM\...\Policies\Explorer: [NoControlPanel] 0</p><p>HKLM\...\Policies\Explorer: [NoFolderOptions] 0</p><p>HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\tray.exe [1010008 2015-04-08] (Garmin Ltd. or its subsidiaries)</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-003D-0000-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p>HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H</p><p></p><p>==================== Internet (Whitelisted) ====================</p><p></p><p>(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)</p><p></p><p>HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION</p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank</p><p>HKU\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://g.msn.com/USCON/1" target="_blank">http://g.msn.com/USCON/1</a></p><p>URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.)</p><p>URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.)</p><p>SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = <a href="http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}" target="_blank">http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}</a></p><p>SearchScopes: HKLM -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = <a href="http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}" target="_blank">http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}</a></p><p>SearchScopes: HKLM-x32 -> DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = </p><p>SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a></p><p>SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a></p><p>BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)</p><p>BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)</p><p>BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)</p><p>BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-08] (Sun Microsystems, Inc.)</p><p>BHO-x32: Dell Toolbar -> {09B71986-2AC5-482d-B6CB-42EA34F4F85B} -> C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()</p><p>BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)</p><p>BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)</p><p>BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)</p><p>BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12] (Sun Microsystems, Inc.)</p><p>BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)</p><p>BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)</p><p>BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12] (Sun Microsystems, Inc.)</p><p>Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)</p><p>Toolbar: HKLM-x32 - Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] ()</p><p>Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)</p><p>Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File</p><p>Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File</p><p>DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <a href="http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab" target="_blank">http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab</a></p><p>DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} <a href="http://support.dell.com/systemprofiler/DellSystemLite.CAB" target="_blank">http://support.dell.com/systemprofiler/DellSystemLite.CAB</a></p><p>Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group, Inc.)</p><p>Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)</p><p>Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)</p><p>Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.)</p><p>Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.)</p><p>Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.7.0\ViProtocol.dll No File</p><p>Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-05-13] (McAfee, Inc.)</p><p>Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-05-13] (McAfee, Inc.)</p><p>Tcpip\Parameters: [DhcpNameServer] 10.0.1.1</p><p>Tcpip\..\Interfaces\{328F6F43-F816-42D3-BAA6-2E836359615A}: [DhcpNameServer] 10.0.1.1</p><p>Tcpip\..\Interfaces\{F73A8E74-E14D-46C1-9C39-59A51F440F27}: [DhcpNameServer] 10.0.1.1</p><p></p><p>FireFox:</p><p>========</p><p>FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2012-02-08] (Sun Microsystems, Inc.)</p><p>FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()</p><p>FF Plugin: @microsoft.com/GENUINE -> disabled No File</p><p>FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)</p><p>FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)</p><p>FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()</p><p>FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll No File</p><p>FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)</p><p>FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2012-01-05] (GARMIN Corp.)</p><p>FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-03-12] (Sun Microsystems, Inc.)</p><p>FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-05-13] ()</p><p>FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File</p><p>FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)</p><p>FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)</p><p>FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)</p><p>FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)</p><p>FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)</p><p>FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)</p><p>FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor</p><p>FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-05-17]</p><p>FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor</p><p>FF HKLM-x32\...\Thunderbird\Extensions: [<a href="mailto:msktbird@mcafee.com">msktbird@mcafee.com</a>] - C:\Program Files\McAfee\MSK</p><p>FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-05-17]</p><p></p><p>Chrome: </p><p>=======</p><p>CHR Profile: C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default</p><p>CHR Extension: (YouTube) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-13]</p><p>CHR Extension: (Google Search) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06]</p><p>CHR Extension: (SiteAdvisor) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-28]</p><p>CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]</p><p>CHR Extension: (Google Wallet) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-15]</p><p>CHR Extension: (Gmail) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-05]</p><p>CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]</p><p>CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - <a href="http://clients2.google.com/service/update2/crx" target="_blank">http://clients2.google.com/service/update2/crx</a></p><p>CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10]</p><p></p><p>==================== Services (Whitelisted) =================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink)</p><p>R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.)</p><p>R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.)</p><p>R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [232152 2015-05-20] (Dell Inc.)</p><p>R2 dleeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dleeserv.exe [45224 2010-05-21] ()</p><p>R2 dlee_device; C:\Windows\system32\dleecoms.exe [1052328 2010-05-21] ( )</p><p>R2 dlee_device; C:\Windows\SysWOW64\dleecoms.exe [598696 2010-05-21] ( )</p><p>R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [708616 2015-04-08] (Garmin Ltd. or its subsidiaries)</p><p>R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)</p><p>S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)</p><p>R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-07-03] (McAfee, Inc.)</p><p>R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [754280 2015-05-13] (McAfee, Inc.)</p><p>S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)</p><p>R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.495.0\McCSPServiceHost.exe [207344 2015-06-04] (McAfee, Inc.)</p><p>R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [609592 2015-05-05] (McAfee, Inc.)</p><p>R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-04-08] (McAfee, Inc.)</p><p>R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-05-14] (McAfee, Inc.)</p><p>R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2015-04-08] (McAfee, Inc.)</p><p>R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.)</p><p>R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)</p><p>R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)</p><p>R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)</p><p></p><p>==================== Drivers (Whitelisted) ====================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [68784 2015-04-08] (McAfee, Inc.)</p><p>R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation)</p><p>R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation)</p><p>S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [198448 2015-04-27] (McAfee, Inc.)</p><p>S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)</p><p>R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-20] (Malwarebytes Corporation)</p><p>S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)</p><p>R2 McPvDrv; C:\Windows\System32\drivers\McPvDrv.sys [76064 2015-05-08] (McAfee, Inc.)</p><p>R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [402888 2015-04-08] (McAfee, Inc.)</p><p>S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)</p><p>R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [338272 2015-04-08] (McAfee, Inc.)</p><p>R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [101872 2015-04-08] (McAfee, Inc.)</p><p>R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [488000 2015-04-08] (McAfee, Inc.)</p><p>R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864200 2015-04-08] (McAfee, Inc.)</p><p>R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [483240 2015-03-26] (McAfee, Inc.)</p><p>S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2015-03-26] (McAfee, Inc.)</p><p>R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [335944 2015-04-08] (McAfee, Inc.)</p><p>S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]</p><p>S3 VGPU; System32\drivers\rdvgkmd.sys [X]</p><p></p><p>==================== NetSvcs (Whitelisted) ===================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p></p><p>==================== One Month Created files and folders ========</p><p></p><p>(If an entry is included in the fixlist, the file/folder will be moved.)</p><p></p><p>2015-07-19 18:08 - 2015-07-19 18:09 - 00292648 _____ C:\Windows\Minidump\071915-41121-01.dmp</p><p>2015-07-19 18:04 - 2015-07-19 18:04 - 00284392 _____ C:\Windows\Minidump\071915-40887-01.dmp</p><p>2015-07-19 17:58 - 2015-07-19 17:58 - 00284392 _____ C:\Windows\Minidump\071915-17612-02.dmp</p><p>2015-07-19 17:52 - 2015-07-19 17:52 - 00284392 _____ C:\Windows\Minidump\071915-18564-01.dmp</p><p>2015-07-19 17:47 - 2015-07-19 17:47 - 00284392 _____ C:\Windows\Minidump\071915-17378-01.dmp</p><p>2015-07-19 17:42 - 2015-07-19 17:42 - 00284392 _____ C:\Windows\Minidump\071915-17596-01.dmp</p><p>2015-07-19 17:36 - 2015-07-19 17:36 - 00286488 _____ C:\Windows\Minidump\071915-18423-01.dmp</p><p>2015-07-19 14:44 - 2015-07-19 14:45 - 00284392 _____ C:\Windows\Minidump\071915-34913-01.dmp</p><p>2015-07-19 14:40 - 2015-07-19 14:40 - 00286488 _____ C:\Windows\Minidump\071915-34086-01.dmp</p><p>2015-07-19 14:32 - 2015-07-19 14:32 - 00286448 _____ C:\Windows\Minidump\071915-14648-01.dmp</p><p>2015-07-19 14:28 - 2015-07-19 14:28 - 00286856 _____ C:\Windows\Minidump\071915-15693-01.dmp</p><p>2015-07-19 14:23 - 2015-07-19 14:23 - 00284392 _____ C:\Windows\Minidump\071915-14383-01.dmp</p><p>2015-07-19 14:18 - 2015-07-19 14:18 - 00284392 _____ C:\Windows\Minidump\071915-15303-01.dmp</p><p>2015-07-19 13:56 - 2015-07-19 13:43 - 00024064 _____ C:\Windows\zoek-delete.exe</p><p>2015-07-19 13:44 - 2015-07-19 14:26 - 00037501 _____ C:\zoek-results.log</p><p>2015-07-19 13:43 - 2015-07-19 13:54 - 00000000 ____D C:\zoek_backup</p><p>2015-07-19 13:39 - 2015-07-19 13:39 - 01308672 _____ C:\Users\Susan\Desktop\zoek.exe</p><p>2015-07-18 20:01 - 2015-07-18 20:01 - 00286696 _____ C:\Windows\Minidump\071815-14539-01.dmp</p><p>2015-07-18 19:53 - 2015-07-18 19:53 - 00293352 _____ C:\Windows\Minidump\071815-16723-01.dmp</p><p>2015-07-18 13:18 - 2015-07-20 12:10 - 00024689 _____ C:\Users\Susan\Downloads\FRST.txt</p><p>2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\royal_blood_digital_album</p><p>2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\Hush Or Howl - MP3</p><p>2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\7 Cities</p><p>2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\12_25133_JohnnyWinter</p><p>2015-07-18 13:17 - 2014-02-04 13:45 - 00000000 ____D C:\Users\Susan\Downloads\Lost In The Dream</p><p>2015-07-18 13:15 - 2015-07-18 13:15 - 76796180 _____ C:\Users\Susan\Downloads\royal_blood_digital_album.zip</p><p>2015-07-18 13:13 - 2015-07-18 13:14 - 171346407 _____ C:\Users\Susan\Downloads\SC310.zip</p><p>2015-07-18 13:12 - 2015-07-18 13:13 - 71940031 _____ C:\Users\Susan\Downloads\blackpistolfire_hushorhowl_mp3.zip</p><p>2015-07-18 13:11 - 2015-07-18 13:11 - 93077687 _____ C:\Users\Susan\Downloads\7 Cities.zip</p><p>2015-07-18 13:08 - 2015-07-18 13:09 - 83367713 _____ C:\Users\Susan\Downloads\12_25133_JohnnyWinter.zip</p><p>2015-07-18 08:53 - 2015-07-18 08:53 - 00284392 _____ C:\Windows\Minidump\071815-17300-01.dmp</p><p>2015-07-18 08:48 - 2015-07-18 08:48 - 00284392 _____ C:\Windows\Minidump\071815-18018-01.dmp</p><p>2015-07-18 08:41 - 2015-07-18 08:41 - 00284392 _____ C:\Windows\Minidump\071815-18033-01.dmp</p><p>2015-07-18 08:36 - 2015-07-18 08:36 - 00293336 _____ C:\Windows\Minidump\071815-18657-01.dmp</p><p>2015-07-18 03:42 - 2015-07-18 03:42 - 00284392 _____ C:\Windows\Minidump\071815-68328-01.dmp</p><p>2015-07-18 03:36 - 2015-07-18 03:36 - 00284392 _____ C:\Windows\Minidump\071815-68500-01.dmp</p><p>2015-07-18 03:30 - 2015-07-18 03:30 - 00284392 _____ C:\Windows\Minidump\071815-68968-01.dmp</p><p>2015-07-17 18:35 - 2015-07-09 12:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll</p><p>2015-07-17 18:35 - 2015-07-09 12:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe</p><p>2015-07-17 18:35 - 2015-07-09 12:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe</p><p>2015-07-17 18:35 - 2015-07-09 12:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll</p><p>2015-07-17 18:35 - 2015-07-09 12:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll</p><p>2015-07-17 18:35 - 2015-07-09 12:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll</p><p>2015-07-17 18:35 - 2015-07-09 12:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll</p><p>2015-07-17 18:35 - 2015-07-09 12:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe</p><p>2015-07-17 18:35 - 2015-06-26 21:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll</p><p>2015-07-17 18:35 - 2015-06-26 21:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll</p><p>2015-07-17 18:35 - 2015-06-26 20:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll</p><p>2015-07-17 18:35 - 2015-06-26 20:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll</p><p>2015-07-17 18:35 - 2015-06-25 03:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys</p><p>2015-07-17 18:34 - 2015-07-09 12:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll</p><p>2015-07-17 18:34 - 2015-07-09 12:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll</p><p>2015-07-17 18:34 - 2015-07-02 16:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll</p><p>2015-07-17 18:34 - 2015-07-02 16:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb</p><p>2015-07-17 18:34 - 2015-07-02 15:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll</p><p>2015-07-17 18:34 - 2015-07-02 15:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll</p><p>2015-07-17 18:34 - 2015-07-02 15:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll</p><p>2015-07-17 18:34 - 2015-07-02 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb</p><p>2015-07-17 18:34 - 2015-07-02 15:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll</p><p>2015-07-17 18:34 - 2015-07-02 15:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll</p><p>2015-07-17 18:34 - 2015-07-02 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll</p><p>2015-07-17 18:34 - 2015-07-02 14:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll</p><p>2015-07-17 18:34 - 2015-07-02 14:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll</p><p>2015-07-17 18:34 - 2015-07-02 13:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll</p><p>2015-07-17 18:34 - 2015-06-25 13:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll</p><p>2015-07-17 18:34 - 2015-06-25 12:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll</p><p>2015-07-17 18:34 - 2015-06-20 15:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec</p><p>2015-07-17 18:34 - 2015-06-20 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe</p><p>2015-07-17 18:34 - 2015-06-20 14:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe</p><p>2015-07-17 18:34 - 2015-06-20 14:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe</p><p>2015-07-17 18:34 - 2015-06-20 14:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll</p><p>2015-07-17 18:34 - 2015-06-20 14:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll</p><p>2015-07-17 18:34 - 2015-06-20 13:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll</p><p>2015-07-17 18:34 - 2015-06-20 13:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe</p><p>2015-07-17 18:34 - 2015-06-20 13:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl</p><p>2015-07-17 18:34 - 2015-06-20 13:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll</p><p>2015-07-17 18:34 - 2015-06-20 13:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll</p><p>2015-07-17 18:34 - 2015-06-20 13:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec</p><p>2015-07-17 18:34 - 2015-06-19 13:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll</p><p>2015-07-17 18:34 - 2015-06-19 13:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe</p><p>2015-07-17 18:34 - 2015-06-19 13:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl</p><p>2015-07-17 18:34 - 2015-06-19 12:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll</p><p>2015-07-17 18:34 - 2015-06-19 12:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll</p><p>2015-07-17 18:34 - 2015-06-17 12:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll</p><p>2015-07-17 18:34 - 2015-06-17 12:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll</p><p>2015-07-17 18:34 - 2015-06-01 19:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll</p><p>2015-07-17 18:34 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll</p><p>2015-07-17 18:34 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll</p><p>2015-07-17 18:31 - 2015-07-20 12:09 - 00000000 ____D C:\Users\Susan\Downloads\FRST-OlderVersion</p><p>2015-07-17 18:28 - 2015-07-17 18:28 - 00286872 _____ C:\Windows\Minidump\071715-40825-01.dmp</p><p>2015-07-17 12:22 - 2015-07-17 12:23 - 00287112 _____ C:\Windows\Minidump\071715-41090-01.dmp</p><p>2015-07-17 12:16 - 2015-07-17 12:16 - 00293328 _____ C:\Windows\Minidump\071715-20061-01.dmp</p><p>2015-07-17 11:04 - 2015-07-17 11:04 - 00293328 _____ C:\Windows\Minidump\071715-28501-01.dmp</p><p>2015-07-16 20:23 - 2015-07-16 20:23 - 00286208 _____ C:\Windows\Minidump\071615-25740-01.dmp</p><p>2015-07-16 20:21 - 2015-07-01 15:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys</p><p>2015-07-16 20:21 - 2015-07-01 15:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe</p><p>2015-07-16 20:21 - 2015-07-01 15:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe</p><p>2015-07-16 20:21 - 2015-07-01 15:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe</p><p>2015-07-16 20:21 - 2015-07-01 15:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll</p><p>2015-07-16 20:21 - 2015-07-01 15:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll</p><p>2015-07-16 20:21 - 2015-07-01 14:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys</p><p>2015-07-16 20:21 - 2015-07-01 14:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys</p><p>2015-07-16 20:21 - 2015-07-01 14:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys</p><p>2015-07-16 20:20 - 2015-07-04 13:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll</p><p>2015-07-16 20:20 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe</p><p>2015-07-16 20:20 - 2015-06-15 16:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe</p><p>2015-07-16 20:20 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe</p><p>2015-07-16 20:20 - 2015-06-15 16:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll</p><p>2015-07-16 20:20 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll</p><p>2015-07-16 20:20 - 2015-06-11 12:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll</p><p>2015-07-16 20:20 - 2015-06-11 12:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll</p><p>2015-07-16 20:20 - 2015-06-11 12:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys</p><p>2015-07-16 20:19 - 2015-07-03 13:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll</p><p>2015-07-16 20:19 - 2015-07-03 13:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll</p><p>2015-07-16 20:19 - 2015-07-03 13:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll</p><p>2015-07-16 20:19 - 2015-07-03 13:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll</p><p>2015-07-16 20:19 - 2015-07-03 12:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll</p><p>2015-07-16 20:19 - 2015-07-03 12:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll</p><p>2015-07-16 20:19 - 2015-07-03 12:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll</p><p>2015-07-16 20:19 - 2015-07-03 12:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll</p><p>2015-07-16 20:19 - 2015-07-03 11:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll</p><p>2015-07-16 20:19 - 2015-07-03 11:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll</p><p>2015-07-16 20:11 - 2015-07-16 20:12 - 00284136 _____ C:\Windows\Minidump\071615-21387-01.dmp</p><p>2015-07-16 19:56 - 2015-07-16 19:56 - 00285600 _____ C:\Windows\Minidump\071615-36254-01.dmp</p><p>2015-07-16 19:14 - 2015-07-16 19:14 - 00286856 _____ C:\Windows\Minidump\071615-37830-01.dmp</p><p>2015-07-16 19:08 - 2015-07-16 19:08 - 00286872 _____ C:\Windows\Minidump\071615-38953-01.dmp</p><p>2015-07-16 19:04 - 2015-07-16 19:04 - 00301592 _____ C:\Windows\Minidump\071615-19110-01.dmp</p><p>2015-07-16 18:52 - 2015-07-16 18:53 - 00301640 _____ C:\Windows\Minidump\071615-20763-01.dmp</p><p>2015-07-15 18:02 - 2015-07-15 18:02 - 00295320 _____ C:\Windows\Minidump\071515-18798-01.dmp</p><p>2015-07-15 16:36 - 2015-07-19 18:08 - 557027137 _____ C:\Windows\MEMORY.DMP</p><p>2015-07-15 16:36 - 2015-07-19 18:08 - 00000000 ____D C:\Windows\Minidump</p><p>2015-07-15 16:36 - 2015-07-15 16:36 - 00293368 _____ C:\Windows\Minidump\071515-25022-01.dmp</p><p>2015-07-15 16:35 - 2015-05-08 01:42 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys</p><p>2015-07-15 16:34 - 2015-04-27 08:02 - 00198448 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys</p><p>2015-07-15 16:32 - 2015-07-15 16:32 - 00003064 _____ C:\Windows\System32\Tasks\McAfeeLogon</p><p>2015-07-10 19:12 - 2015-07-20 12:08 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys</p><p>2015-07-10 19:12 - 2015-07-10 19:12 - 00001108 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk</p><p>2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware</p><p>2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Malwarebytes</p><p>2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware</p><p>2015-07-10 19:12 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys</p><p>2015-07-10 19:12 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys</p><p>2015-07-10 19:12 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys</p><p>2015-07-10 19:11 - 2015-07-20 12:09 - 00000000 ____D C:\FRST</p><p>2015-07-10 19:10 - 2015-07-20 12:09 - 02135552 _____ (Farbar) C:\Users\Susan\Downloads\FRST64.exe</p><p>2015-07-10 19:10 - 2015-07-10 19:11 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Susan\Downloads\mbam-setup-2.1.8.1057.exe</p><p>2015-06-25 13:37 - 2015-07-10 18:59 - 00000000 __RSD C:\Users\Brad\Documents\McAfee Vaults</p><p>2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\McAfee File Lock</p><p>2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\GWX</p><p>2015-06-25 13:36 - 2015-06-25 13:36 - 00000000 ____D C:\Users\Brad\AppData\Local\Google</p><p>2015-06-25 10:51 - 2015-07-19 14:00 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask</p><p>2015-06-25 10:51 - 2015-06-25 10:51 - 00004030 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask</p><p>2015-06-25 10:51 - 2015-06-25 10:51 - 00003218 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest</p><p>2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows</p><p>2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\Program Files\Dell Support Center</p><p>2015-06-24 01:29 - 2015-06-24 01:29 - 01217192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL</p><p>2015-06-20 13:03 - 2015-06-20 13:03 - 00013018 _____ C:\Users\Susan\Downloads\tickets_676208.html</p><p></p><p>==================== One Month Modified files and folders ========</p><p></p><p>(If an entry is included in the fixlist, the file/folder will be moved.)</p><p></p><p>2015-07-20 12:10 - 2013-05-17 16:35 - 00000000 __RSD C:\Users\Susan\Documents\McAfee Vaults</p><p>2015-07-20 12:09 - 2014-02-19 16:34 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce.job</p><p>2015-07-20 12:09 - 2012-09-06 16:13 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job</p><p>2015-07-20 12:09 - 2012-04-12 16:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job</p><p>2015-07-20 12:08 - 2012-02-11 14:15 - 00081384 _____ C:\ProgramData\dleescan.log</p><p>2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks</p><p>2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks</p><p>2015-07-20 12:08 - 2012-02-08 15:43 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup</p><p>2015-07-20 12:08 - 2012-02-08 15:24 - 01419010 _____ C:\Windows\WindowsUpdate.log</p><p>2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0</p><p>2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0</p><p>2015-07-19 18:12 - 2013-11-17 13:31 - 00000000 ____D C:\ProgramData\boost_interprocess</p><p>2015-07-19 18:08 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT</p><p>2015-07-19 18:08 - 2009-07-13 23:51 - 00063946 _____ C:\Windows\setupact.log</p><p>2015-07-19 17:24 - 2014-10-23 19:00 - 00000000 ____D C:\Windows\system32\appmgmt</p><p>2015-07-19 17:24 - 2012-02-11 13:43 - 00000000 ____D C:\Users\Susan</p><p>2015-07-19 17:23 - 2013-05-17 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee</p><p>2015-07-19 14:09 - 2010-11-20 22:47 - 00598520 _____ C:\Windows\PFRO.log</p><p>2015-07-18 17:12 - 2013-01-03 17:30 - 00953344 ___SH C:\Users\Susan\Downloads\Thumbs.db</p><p>2015-07-18 17:12 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF</p><p>2015-07-18 14:07 - 2012-03-09 16:24 - 00000000 ____D C:\Users\Susan\Documents\Outlook Files</p><p>2015-07-18 04:08 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache</p><p>2015-07-18 03:23 - 2009-07-13 23:45 - 00416368 _____ C:\Windows\system32\FNTCACHE.DAT</p><p>2015-07-18 03:21 - 2014-12-14 04:22 - 00000000 ____D C:\Windows\system32\appraiser</p><p>2015-07-18 03:21 - 2014-05-06 18:48 - 00000000 ___SD C:\Windows\system32\CompatTel</p><p>2015-07-18 03:21 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions</p><p>2015-07-18 03:01 - 2012-03-08 17:23 - 00000000 ____D C:\ProgramData\Microsoft Help</p><p>2015-07-17 19:29 - 2012-09-06 16:14 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk</p><p>2015-07-17 18:42 - 2013-08-14 03:01 - 00000000 ____D C:\Windows\system32\MRT</p><p>2015-07-17 18:42 - 2013-04-15 12:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk</p><p>2015-07-17 12:19 - 2013-04-15 12:24 - 00000000 ____D C:\Users\Susan\AppData\Local\CrashDumps</p><p>2015-07-16 20:22 - 2014-02-19 16:34 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce</p><p>2015-07-16 20:22 - 2012-09-06 16:13 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore</p><p>2015-07-15 18:03 - 2009-07-14 00:08 - 00032574 _____ C:\Windows\Tasks\SCHEDLGU.TXT</p><p>2015-07-15 16:34 - 2012-02-08 16:02 - 00000000 ____D C:\Program Files\Common Files\mcafee</p><p>2015-07-15 16:27 - 2012-04-12 16:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe</p><p>2015-07-15 16:27 - 2012-04-12 16:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater</p><p>2015-07-15 16:27 - 2012-02-08 15:27 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl</p><p>2015-07-14 07:08 - 2015-01-14 17:18 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task</p><p>2015-07-10 19:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PLA</p><p>2015-07-10 19:32 - 2005-01-01 16:51 - 00000000 ____D C:\Users\Susan\Desktop\MP3S</p><p>2015-07-10 19:02 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD</p><p>2015-07-10 19:01 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad</p><p>2015-07-10 19:00 - 2014-12-02 14:40 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader</p><p>2015-07-10 18:59 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX</p><p>2015-07-10 18:59 - 2015-03-16 19:31 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR</p><p>2015-07-10 18:59 - 2014-12-02 14:36 - 00000000 ____D C:\Users\Susan\Downloads\JDownloader1 Setup</p><p>2015-07-10 18:59 - 2014-08-13 10:48 - 00000000 ____D C:\Users\Susan\AppData\Local\JDownloader v2.0</p><p>2015-07-10 18:59 - 2014-06-01 16:12 - 00000000 ____D C:\Users\Susan\AppData\Local\Garmin</p><p>2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files\McAfee</p><p>2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files (x86)\McAfee.com</p><p>2015-07-10 18:59 - 2013-04-14 15:54 - 00000000 ____D C:\Users\Susan\AppData\Roaming\uTorrent</p><p>2015-07-10 18:59 - 2013-04-12 17:36 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Orbit</p><p>2015-07-10 18:59 - 2013-04-12 12:56 - 00000000 ____D C:\Users\Susan\AppData\Local\Applian</p><p>2015-07-10 18:59 - 2013-04-12 12:55 - 00000000 ____D C:\Users\Susan\AppData\Local\Jaksta_Technologies_Pty_L</p><p>2015-07-10 18:59 - 2012-11-12 16:27 - 00000000 ____D C:\ProgramData\McAfee Security Scan</p><p>2015-07-10 18:59 - 2012-09-07 03:01 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Skype</p><p>2015-07-10 18:59 - 2012-09-06 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome</p><p>2015-07-10 18:59 - 2012-03-08 17:23 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Help</p><p>2015-07-10 18:59 - 2012-02-22 20:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy</p><p>2015-07-10 18:59 - 2012-02-13 12:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\V715w</p><p>2015-07-10 18:59 - 2012-02-11 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Nero_AG</p><p>2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ___RD C:\Users\Susan\Desktop\MySyncUPFiles</p><p>2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macrovision</p><p>2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ___RD C:\Users\Susan\Virtual Machines</p><p>2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ____D C:\Users\Susan\AppData\Local\VirtualStore</p><p>2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance</p><p>2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories</p><p>2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed</p><p>2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\system32\Macromed</p><p>2015-07-10 18:59 - 2010-11-21 02:16 - 00000000 ___RD C:\Users\Public\Recorded TV</p><p>2015-07-10 18:58 - 2013-04-13 17:34 - 00000000 ____D C:\Users\Susan\AppData\Local\TechSmith</p><p>2015-07-10 18:58 - 2012-03-05 17:54 - 00000000 ____D C:\Users\Susan\Documents\Fax</p><p>2015-07-10 18:58 - 2012-02-21 07:50 - 00000000 ____D C:\Users\Susan\AppData\Roaming\SoftGrid Client</p><p>2015-07-10 18:58 - 2012-02-13 13:00 - 00000000 ____D C:\Users\Susan\AppData\Roaming\PCDr</p><p>2015-07-10 18:58 - 2012-02-11 16:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Intuit</p><p>2015-07-10 18:58 - 2012-02-11 14:02 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Adobe</p><p>2015-07-10 18:58 - 2012-02-11 13:44 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macromedia</p><p>2015-07-10 18:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration</p><p>2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\wdfp506</p><p>2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\DVDFab</p><p>2015-07-10 18:58 - 2007-07-07 12:09 - 00000000 ____D C:\Users\Susan\Documents\New CDs</p><p>2015-07-10 18:57 - 2013-04-16 15:10 - 00000000 ____D C:\Users\Susan\AppData\Local\Cyberlink</p><p>2015-07-10 18:57 - 2012-09-06 16:13 - 00000000 ____D C:\Users\Susan\AppData\Local\Google</p><p>2015-07-10 18:57 - 2012-04-13 16:27 - 00000000 ____D C:\Users\Susan\AppData\Local\Citrix</p><p>2015-07-10 18:57 - 2012-02-11 16:30 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Games</p><p>2015-07-10 18:57 - 2012-02-11 13:57 - 00000000 ____D C:\Users\Susan\AppData\Local\Dell</p><p>2015-07-10 18:49 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad\AppData\Local\SoftThinks</p><p>2015-07-03 08:43 - 2012-02-12 20:30 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe</p><p>2015-07-01 14:25 - 2009-07-14 00:13 - 00783424 _____ C:\Windows\system32\PerfStringBackup.INI</p><p>2015-07-01 14:24 - 2012-03-09 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Windows Live</p><p>2015-07-01 14:10 - 2015-02-13 04:03 - 00003820 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate</p><p>2015-07-01 14:09 - 2015-02-13 04:03 - 00000000 ____D C:\ProgramData\SupportAssistAgent</p><p>2015-06-25 13:41 - 2013-04-01 16:07 - 00000000 ____D C:\Users\Brad\AppData\Roaming\Apple Computer</p><p>2015-06-25 13:37 - 2013-04-01 16:07 - 00111840 _____ C:\Users\Brad\AppData\Local\GDIPFONTCACHEV1.DAT</p><p>2015-06-25 13:37 - 2013-04-01 16:07 - 00000000 ___RD C:\Users\Brad\Virtual Machines</p><p>2015-06-25 13:36 - 2013-04-01 16:07 - 00001379 _____ C:\Users\Brad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk</p><p>2015-06-25 10:51 - 2012-02-08 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell</p><p>2015-06-25 10:50 - 2012-02-13 13:00 - 00000000 ____D C:\ProgramData\PCDr</p><p>2015-06-23 13:30 - 2010-11-20 22:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe</p><p></p><p>==================== Files in the root of some directories =======</p><p></p><p>2013-04-13 18:34 - 2013-04-15 19:29 - 0003584 _____ () C:\Users\Susan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini</p><p>2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\cmn_upld.log</p><p>2012-02-12 20:04 - 2013-04-12 03:00 - 0014932 _____ () C:\ProgramData\dlee.log</p><p>2012-03-04 19:20 - 2014-05-15 13:09 - 0001102 _____ () C:\ProgramData\dleeDiagnostics.log</p><p>2012-02-11 14:53 - 2014-05-12 13:06 - 0334944 _____ () C:\ProgramData\dleeJSW.log</p><p>2012-02-11 14:15 - 2015-07-20 12:08 - 0081384 _____ () C:\ProgramData\dleescan.log</p><p>2012-02-11 15:05 - 2012-02-11 15:05 - 0000252 _____ () C:\ProgramData\FastPics.log</p><p>2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log</p><p>2012-02-11 16:25 - 2015-02-22 18:41 - 0001095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc</p><p></p><p>==================== Bamital & volsnap Check =================</p><p></p><p>(There is no automatic fix for files that do not pass verification.)</p><p></p><p>C:\Windows\System32\winlogon.exe => File is digitally signed</p><p>C:\Windows\System32\wininit.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\wininit.exe => File is digitally signed</p><p>C:\Windows\explorer.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\explorer.exe => File is digitally signed</p><p>C:\Windows\System32\svchost.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\svchost.exe => File is digitally signed</p><p>C:\Windows\System32\services.exe => File is digitally signed</p><p>C:\Windows\System32\User32.dll => File is digitally signed</p><p>C:\Windows\SysWOW64\User32.dll => File is digitally signed</p><p>C:\Windows\System32\userinit.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\userinit.exe => File is digitally signed</p><p>C:\Windows\System32\rpcss.dll => File is digitally signed</p><p>C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed</p><p></p><p></p><p>LastRegBack: 2015-07-18 04:01</p><p></p><p>==================== End of log ============================</p></blockquote><p></p>
[QUOTE="Brad Koch, post: 412803, member: 38298"] Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015 Ran by Susan (administrator) on SUSAN-PC on 20-07-2015 12:09:46 Running from C:\Users\Susan\Downloads Loaded Profiles: Susan (Available Profiles: Susan & Brad) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: [URL]http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/[/URL] ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Windows\System32\spool\drivers\x64\3\dleeserv.exe ( ) C:\Windows\System32\dleecoms.exe (Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.5.495.0\McCSPServiceHost.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe (Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files (x86)\Dell V715w\dleemon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe (Apple Inc.) C:\Program Files (x86)\AirPort\APAgent.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor) HKLM\...\Run: [dleemon.exe] => C:\Program Files (x86)\Dell V715w\dleemon.exe [770728 2011-01-23] () HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] () HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation) HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.) HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd) HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [616272 2015-05-13] (McAfee, Inc.) HKLM-x32\...\Run: [AirPort Base Station Agent] => C:\Program Files (x86)\AirPort\APAgent.exe [771360 2009-11-11] (Apple Inc.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.) HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe" HKLM-x32\...\runonceex: [Flags] => Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\822\G2AWinLogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\tray.exe [1010008 2015-04-08] (Garmin Ltd. or its subsidiaries) HKU\S-1-5-18\...\RunOnce: [{90140000-003D-0000-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0409-0000-0000000FF1CE}] => C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2651812893-2032532347-2012303543-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL]http://g.msn.com/USCON/1[/URL] URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll (McAfee, Inc.) URLSearchHook: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll (McAfee, Inc.) SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = [URL]http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}[/URL] SearchScopes: HKLM -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = [URL]http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}[/URL] SearchScopes: HKLM-x32 -> DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = [URL]http://www.google.com/search?q={searchTerms}[/URL] SearchScopes: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = [URL]http://www.google.com/search?q={searchTerms}[/URL] BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-08] (Sun Microsystems, Inc.) BHO-x32: Dell Toolbar -> {09B71986-2AC5-482d-B6CB-42EA34F4F85B} -> C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] () BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.) BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12] (Sun Microsystems, Inc.) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12] (Sun Microsystems, Inc.) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.) Toolbar: HKLM-x32 - Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Printable Web\toolband.dll [2008-12-10] () Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.) Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File Toolbar: HKU\S-1-5-21-2651812893-2032532347-2012303543-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [URL]http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab[/URL] DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} [URL]http://support.dell.com/systemprofiler/DellSystemLite.CAB[/URL] Handler-x32: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll [2011-05-05] (Cozi Group, Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-07-03] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-07-03] (McAfee, Inc.) Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.7.0\ViProtocol.dll No File Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-05-13] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-05-13] (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 10.0.1.1 Tcpip\..\Interfaces\{328F6F43-F816-42D3-BAA6-2E836359615A}: [DhcpNameServer] 10.0.1.1 Tcpip\..\Interfaces\{F73A8E74-E14D-46C1-9C39-59A51F440F27}: [DhcpNameServer] 10.0.1.1 FireFox: ======== FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2012-02-08] (Sun Microsystems, Inc.) FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-05-13] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.7.0\\npsitesafety.dll No File FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2012-01-05] (GARMIN Corp.) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-03-12] (Sun Microsystems, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-05-13] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-05-17] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Thunderbird\Extensions: [[email]msktbird@mcafee.com[/email]] - C:\Program Files\McAfee\MSK FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-05-17] Chrome: ======= CHR Profile: C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-13] CHR Extension: (Google Search) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06] CHR Extension: (SiteAdvisor) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-28] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12] CHR Extension: (Google Wallet) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-15] CHR Extension: (Gmail) - C:\Users\Susan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-05] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10] CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - [URL]http://clients2.google.com/service/update2/crx[/URL] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-07-10] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-08-11] (CyberLink) R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.) R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.) R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [232152 2015-05-20] (Dell Inc.) R2 dleeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dleeserv.exe [45224 2010-05-21] () R2 dlee_device; C:\Windows\system32\dleecoms.exe [1052328 2010-05-21] ( ) R2 dlee_device; C:\Windows\SysWOW64\dleecoms.exe [598696 2010-05-21] ( ) R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [708616 2015-04-08] (Garmin Ltd. or its subsidiaries) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-07-03] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [754280 2015-05-13] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.5.495.0\McCSPServiceHost.exe [207344 2015-06-04] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [609592 2015-05-05] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-04-08] (McAfee, Inc.) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-05-14] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2015-04-08] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [340744 2015-05-06] (McAfee, Inc.) R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [68784 2015-04-08] (McAfee, Inc.) R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-30] (Dell Computer Corporation) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-01-30] (Dell Computer Corporation) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [198448 2015-04-27] (McAfee, Inc.) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-20] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation) R2 McPvDrv; C:\Windows\System32\drivers\McPvDrv.sys [76064 2015-05-08] (McAfee, Inc.) R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [402888 2015-04-08] (McAfee, Inc.) S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [338272 2015-04-08] (McAfee, Inc.) R0 mfedisk; C:\Windows\System32\DRIVERS\mfedisk.sys [101872 2015-04-08] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [488000 2015-04-08] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864200 2015-04-08] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [483240 2015-03-26] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100720 2015-03-26] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [335944 2015-04-08] (McAfee, Inc.) S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-19 18:08 - 2015-07-19 18:09 - 00292648 _____ C:\Windows\Minidump\071915-41121-01.dmp 2015-07-19 18:04 - 2015-07-19 18:04 - 00284392 _____ C:\Windows\Minidump\071915-40887-01.dmp 2015-07-19 17:58 - 2015-07-19 17:58 - 00284392 _____ C:\Windows\Minidump\071915-17612-02.dmp 2015-07-19 17:52 - 2015-07-19 17:52 - 00284392 _____ C:\Windows\Minidump\071915-18564-01.dmp 2015-07-19 17:47 - 2015-07-19 17:47 - 00284392 _____ C:\Windows\Minidump\071915-17378-01.dmp 2015-07-19 17:42 - 2015-07-19 17:42 - 00284392 _____ C:\Windows\Minidump\071915-17596-01.dmp 2015-07-19 17:36 - 2015-07-19 17:36 - 00286488 _____ C:\Windows\Minidump\071915-18423-01.dmp 2015-07-19 14:44 - 2015-07-19 14:45 - 00284392 _____ C:\Windows\Minidump\071915-34913-01.dmp 2015-07-19 14:40 - 2015-07-19 14:40 - 00286488 _____ C:\Windows\Minidump\071915-34086-01.dmp 2015-07-19 14:32 - 2015-07-19 14:32 - 00286448 _____ C:\Windows\Minidump\071915-14648-01.dmp 2015-07-19 14:28 - 2015-07-19 14:28 - 00286856 _____ C:\Windows\Minidump\071915-15693-01.dmp 2015-07-19 14:23 - 2015-07-19 14:23 - 00284392 _____ C:\Windows\Minidump\071915-14383-01.dmp 2015-07-19 14:18 - 2015-07-19 14:18 - 00284392 _____ C:\Windows\Minidump\071915-15303-01.dmp 2015-07-19 13:56 - 2015-07-19 13:43 - 00024064 _____ C:\Windows\zoek-delete.exe 2015-07-19 13:44 - 2015-07-19 14:26 - 00037501 _____ C:\zoek-results.log 2015-07-19 13:43 - 2015-07-19 13:54 - 00000000 ____D C:\zoek_backup 2015-07-19 13:39 - 2015-07-19 13:39 - 01308672 _____ C:\Users\Susan\Desktop\zoek.exe 2015-07-18 20:01 - 2015-07-18 20:01 - 00286696 _____ C:\Windows\Minidump\071815-14539-01.dmp 2015-07-18 19:53 - 2015-07-18 19:53 - 00293352 _____ C:\Windows\Minidump\071815-16723-01.dmp 2015-07-18 13:18 - 2015-07-20 12:10 - 00024689 _____ C:\Users\Susan\Downloads\FRST.txt 2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\royal_blood_digital_album 2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\Hush Or Howl - MP3 2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\7 Cities 2015-07-18 13:17 - 2015-07-18 13:17 - 00000000 ____D C:\Users\Susan\Downloads\12_25133_JohnnyWinter 2015-07-18 13:17 - 2014-02-04 13:45 - 00000000 ____D C:\Users\Susan\Downloads\Lost In The Dream 2015-07-18 13:15 - 2015-07-18 13:15 - 76796180 _____ C:\Users\Susan\Downloads\royal_blood_digital_album.zip 2015-07-18 13:13 - 2015-07-18 13:14 - 171346407 _____ C:\Users\Susan\Downloads\SC310.zip 2015-07-18 13:12 - 2015-07-18 13:13 - 71940031 _____ C:\Users\Susan\Downloads\blackpistolfire_hushorhowl_mp3.zip 2015-07-18 13:11 - 2015-07-18 13:11 - 93077687 _____ C:\Users\Susan\Downloads\7 Cities.zip 2015-07-18 13:08 - 2015-07-18 13:09 - 83367713 _____ C:\Users\Susan\Downloads\12_25133_JohnnyWinter.zip 2015-07-18 08:53 - 2015-07-18 08:53 - 00284392 _____ C:\Windows\Minidump\071815-17300-01.dmp 2015-07-18 08:48 - 2015-07-18 08:48 - 00284392 _____ C:\Windows\Minidump\071815-18018-01.dmp 2015-07-18 08:41 - 2015-07-18 08:41 - 00284392 _____ C:\Windows\Minidump\071815-18033-01.dmp 2015-07-18 08:36 - 2015-07-18 08:36 - 00293336 _____ C:\Windows\Minidump\071815-18657-01.dmp 2015-07-18 03:42 - 2015-07-18 03:42 - 00284392 _____ C:\Windows\Minidump\071815-68328-01.dmp 2015-07-18 03:36 - 2015-07-18 03:36 - 00284392 _____ C:\Windows\Minidump\071815-68500-01.dmp 2015-07-18 03:30 - 2015-07-18 03:30 - 00284392 _____ C:\Windows\Minidump\071815-68968-01.dmp 2015-07-17 18:35 - 2015-07-09 12:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-17 18:35 - 2015-07-09 12:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-17 18:35 - 2015-07-09 12:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-17 18:35 - 2015-07-09 12:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-17 18:35 - 2015-07-09 12:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-17 18:35 - 2015-07-09 12:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-17 18:35 - 2015-07-09 12:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-17 18:35 - 2015-07-09 12:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-17 18:35 - 2015-06-26 21:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-07-17 18:35 - 2015-06-26 21:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-17 18:35 - 2015-06-26 20:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-07-17 18:35 - 2015-06-26 20:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-17 18:35 - 2015-06-25 03:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-17 18:34 - 2015-07-09 12:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-17 18:34 - 2015-07-09 12:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-17 18:34 - 2015-07-09 12:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-07-17 18:34 - 2015-07-09 12:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-17 18:34 - 2015-07-02 16:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-17 18:34 - 2015-07-02 16:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-07-17 18:34 - 2015-07-02 15:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-17 18:34 - 2015-07-02 15:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-17 18:34 - 2015-07-02 15:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-17 18:34 - 2015-07-02 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-07-17 18:34 - 2015-07-02 15:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-17 18:34 - 2015-07-02 15:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-17 18:34 - 2015-07-02 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-17 18:34 - 2015-07-02 14:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-17 18:34 - 2015-07-02 14:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-17 18:34 - 2015-07-02 13:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-17 18:34 - 2015-06-25 13:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-07-17 18:34 - 2015-06-25 12:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-17 18:34 - 2015-06-20 15:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-07-17 18:34 - 2015-06-20 14:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-07-17 18:34 - 2015-06-20 14:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-17 18:34 - 2015-06-20 14:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-07-17 18:34 - 2015-06-20 14:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-07-17 18:34 - 2015-06-20 14:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-17 18:34 - 2015-06-20 14:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-07-17 18:34 - 2015-06-20 14:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-07-17 18:34 - 2015-06-20 14:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-17 18:34 - 2015-06-20 14:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-07-17 18:34 - 2015-06-20 14:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-07-17 18:34 - 2015-06-20 14:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-07-17 18:34 - 2015-06-20 14:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-07-17 18:34 - 2015-06-20 14:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-07-17 18:34 - 2015-06-20 14:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-17 18:34 - 2015-06-20 14:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-17 18:34 - 2015-06-20 14:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-17 18:34 - 2015-06-20 13:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-17 18:34 - 2015-06-20 13:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-07-17 18:34 - 2015-06-20 13:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-17 18:34 - 2015-06-20 13:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-07-17 18:34 - 2015-06-20 13:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-17 18:34 - 2015-06-20 13:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-17 18:34 - 2015-06-19 13:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-17 18:34 - 2015-06-19 13:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-07-17 18:34 - 2015-06-19 13:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-07-17 18:34 - 2015-06-19 13:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-07-17 18:34 - 2015-06-19 13:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-17 18:34 - 2015-06-19 13:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-07-17 18:34 - 2015-06-19 13:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-07-17 18:34 - 2015-06-19 13:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-17 18:34 - 2015-06-19 13:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-07-17 18:34 - 2015-06-19 13:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-07-17 18:34 - 2015-06-19 12:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-07-17 18:34 - 2015-06-19 12:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-17 18:34 - 2015-06-19 12:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-17 18:34 - 2015-06-19 12:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-17 18:34 - 2015-06-19 12:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-17 18:34 - 2015-06-19 12:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-17 18:34 - 2015-06-19 12:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-07-17 18:34 - 2015-06-19 12:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-17 18:34 - 2015-06-19 12:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-17 18:34 - 2015-06-17 12:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-17 18:34 - 2015-06-17 12:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-17 18:34 - 2015-06-01 19:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll 2015-07-17 18:34 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll 2015-07-17 18:34 - 2015-04-27 14:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-07-17 18:34 - 2015-04-27 14:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-07-17 18:34 - 2015-04-27 14:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-07-17 18:34 - 2015-04-27 14:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-07-17 18:34 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-07-17 18:34 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-07-17 18:34 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-07-17 18:34 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-07-17 18:31 - 2015-07-20 12:09 - 00000000 ____D C:\Users\Susan\Downloads\FRST-OlderVersion 2015-07-17 18:28 - 2015-07-17 18:28 - 00286872 _____ C:\Windows\Minidump\071715-40825-01.dmp 2015-07-17 12:22 - 2015-07-17 12:23 - 00287112 _____ C:\Windows\Minidump\071715-41090-01.dmp 2015-07-17 12:16 - 2015-07-17 12:16 - 00293328 _____ C:\Windows\Minidump\071715-20061-01.dmp 2015-07-17 11:04 - 2015-07-17 11:04 - 00293328 _____ C:\Windows\Minidump\071715-28501-01.dmp 2015-07-16 20:23 - 2015-07-16 20:23 - 00286208 _____ C:\Windows\Minidump\071615-25740-01.dmp 2015-07-16 20:21 - 2015-07-01 15:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-16 20:21 - 2015-07-01 15:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-07-16 20:21 - 2015-07-01 15:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-07-16 20:21 - 2015-07-01 15:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-07-16 20:21 - 2015-07-01 15:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-07-16 20:21 - 2015-07-01 15:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-07-16 20:21 - 2015-07-01 15:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-07-16 20:21 - 2015-07-01 15:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-07-16 20:21 - 2015-07-01 15:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-07-16 20:21 - 2015-07-01 15:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-07-16 20:21 - 2015-07-01 15:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-07-16 20:21 - 2015-07-01 15:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-07-16 20:21 - 2015-07-01 15:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-16 20:21 - 2015-07-01 15:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-07-16 20:21 - 2015-07-01 15:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-07-16 20:21 - 2015-07-01 15:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-07-16 20:21 - 2015-07-01 15:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-07-16 20:21 - 2015-07-01 15:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-07-16 20:21 - 2015-07-01 14:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-16 20:21 - 2015-07-01 14:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-16 20:21 - 2015-07-01 14:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-16 20:20 - 2015-07-04 13:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-16 20:20 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-16 20:20 - 2015-06-15 16:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-07-16 20:20 - 2015-06-15 16:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-16 20:20 - 2015-06-15 16:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-16 20:20 - 2015-06-15 16:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-07-16 20:20 - 2015-06-15 16:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-07-16 20:20 - 2015-06-15 16:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-16 20:20 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-16 20:20 - 2015-06-15 16:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-16 20:20 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2015-07-16 20:20 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-16 20:20 - 2015-06-15 16:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2015-07-16 20:20 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2015-07-16 20:20 - 2015-06-11 12:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-07-16 20:20 - 2015-06-11 12:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-07-16 20:20 - 2015-06-11 12:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-07-16 20:19 - 2015-07-03 13:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-07-16 20:19 - 2015-07-03 13:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-16 20:19 - 2015-07-03 13:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-07-16 20:19 - 2015-07-03 13:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-07-16 20:19 - 2015-07-03 12:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-07-16 20:19 - 2015-07-03 12:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-16 20:19 - 2015-07-03 12:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-07-16 20:19 - 2015-07-03 12:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-07-16 20:19 - 2015-07-03 11:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-16 20:19 - 2015-07-03 11:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-16 20:11 - 2015-07-16 20:12 - 00284136 _____ C:\Windows\Minidump\071615-21387-01.dmp 2015-07-16 19:56 - 2015-07-16 19:56 - 00285600 _____ C:\Windows\Minidump\071615-36254-01.dmp 2015-07-16 19:14 - 2015-07-16 19:14 - 00286856 _____ C:\Windows\Minidump\071615-37830-01.dmp 2015-07-16 19:08 - 2015-07-16 19:08 - 00286872 _____ C:\Windows\Minidump\071615-38953-01.dmp 2015-07-16 19:04 - 2015-07-16 19:04 - 00301592 _____ C:\Windows\Minidump\071615-19110-01.dmp 2015-07-16 18:52 - 2015-07-16 18:53 - 00301640 _____ C:\Windows\Minidump\071615-20763-01.dmp 2015-07-15 18:02 - 2015-07-15 18:02 - 00295320 _____ C:\Windows\Minidump\071515-18798-01.dmp 2015-07-15 16:36 - 2015-07-19 18:08 - 557027137 _____ C:\Windows\MEMORY.DMP 2015-07-15 16:36 - 2015-07-19 18:08 - 00000000 ____D C:\Windows\Minidump 2015-07-15 16:36 - 2015-07-15 16:36 - 00293368 _____ C:\Windows\Minidump\071515-25022-01.dmp 2015-07-15 16:35 - 2015-05-08 01:42 - 00076064 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\McPvDrv.sys 2015-07-15 16:34 - 2015-04-27 08:02 - 00198448 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys 2015-07-15 16:32 - 2015-07-15 16:32 - 00003064 _____ C:\Windows\System32\Tasks\McAfeeLogon 2015-07-10 19:12 - 2015-07-20 12:08 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-07-10 19:12 - 2015-07-10 19:12 - 00001108 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-07-10 19:12 - 2015-07-10 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-07-10 19:12 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-07-10 19:12 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-07-10 19:12 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-07-10 19:11 - 2015-07-20 12:09 - 00000000 ____D C:\FRST 2015-07-10 19:10 - 2015-07-20 12:09 - 02135552 _____ (Farbar) C:\Users\Susan\Downloads\FRST64.exe 2015-07-10 19:10 - 2015-07-10 19:11 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Susan\Downloads\mbam-setup-2.1.8.1057.exe 2015-06-25 13:37 - 2015-07-10 18:59 - 00000000 __RSD C:\Users\Brad\Documents\McAfee Vaults 2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\McAfee File Lock 2015-06-25 13:37 - 2015-06-25 13:37 - 00000000 ____D C:\Users\Brad\AppData\Local\GWX 2015-06-25 13:36 - 2015-06-25 13:36 - 00000000 ____D C:\Users\Brad\AppData\Local\Google 2015-06-25 10:51 - 2015-07-19 14:00 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask 2015-06-25 10:51 - 2015-06-25 10:51 - 00004030 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask 2015-06-25 10:51 - 2015-06-25 10:51 - 00003218 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest 2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows 2015-06-25 10:51 - 2015-06-25 10:51 - 00000000 ____D C:\Program Files\Dell Support Center 2015-06-24 01:29 - 2015-06-24 01:29 - 01217192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL 2015-06-20 13:03 - 2015-06-20 13:03 - 00013018 _____ C:\Users\Susan\Downloads\tickets_676208.html ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-20 12:10 - 2013-05-17 16:35 - 00000000 __RSD C:\Users\Susan\Documents\McAfee Vaults 2015-07-20 12:09 - 2014-02-19 16:34 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce.job 2015-07-20 12:09 - 2012-09-06 16:13 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-20 12:09 - 2012-04-12 16:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-07-20 12:08 - 2012-02-11 14:15 - 00081384 _____ C:\ProgramData\dleescan.log 2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks 2015-07-20 12:08 - 2012-02-08 16:08 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks 2015-07-20 12:08 - 2012-02-08 15:43 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup 2015-07-20 12:08 - 2012-02-08 15:24 - 01419010 _____ C:\Windows\WindowsUpdate.log 2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-19 18:18 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-19 18:12 - 2013-11-17 13:31 - 00000000 ____D C:\ProgramData\boost_interprocess 2015-07-19 18:08 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-19 18:08 - 2009-07-13 23:51 - 00063946 _____ C:\Windows\setupact.log 2015-07-19 17:24 - 2014-10-23 19:00 - 00000000 ____D C:\Windows\system32\appmgmt 2015-07-19 17:24 - 2012-02-11 13:43 - 00000000 ____D C:\Users\Susan 2015-07-19 17:23 - 2013-05-17 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2015-07-19 14:09 - 2010-11-20 22:47 - 00598520 _____ C:\Windows\PFRO.log 2015-07-18 17:12 - 2013-01-03 17:30 - 00953344 ___SH C:\Users\Susan\Downloads\Thumbs.db 2015-07-18 17:12 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF 2015-07-18 14:07 - 2012-03-09 16:24 - 00000000 ____D C:\Users\Susan\Documents\Outlook Files 2015-07-18 04:08 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache 2015-07-18 03:23 - 2009-07-13 23:45 - 00416368 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-18 03:21 - 2014-12-14 04:22 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-18 03:21 - 2014-05-06 18:48 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-18 03:21 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-07-18 03:01 - 2012-03-08 17:23 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-07-17 19:29 - 2012-09-06 16:14 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-07-17 18:42 - 2013-08-14 03:01 - 00000000 ____D C:\Windows\system32\MRT 2015-07-17 18:42 - 2013-04-15 12:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-17 12:19 - 2013-04-15 12:24 - 00000000 ____D C:\Users\Susan\AppData\Local\CrashDumps 2015-07-16 20:22 - 2014-02-19 16:34 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf2dba4ed3b6ce 2015-07-16 20:22 - 2012-09-06 16:13 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 18:03 - 2009-07-14 00:08 - 00032574 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-07-15 16:34 - 2012-02-08 16:02 - 00000000 ____D C:\Program Files\Common Files\mcafee 2015-07-15 16:27 - 2012-04-12 16:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-15 16:27 - 2012-04-12 16:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 16:27 - 2012-02-08 15:27 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-14 07:08 - 2015-01-14 17:18 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-10 19:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PLA 2015-07-10 19:32 - 2005-01-01 16:51 - 00000000 ____D C:\Users\Susan\Desktop\MP3S 2015-07-10 19:02 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-07-10 19:01 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad 2015-07-10 19:00 - 2014-12-02 14:40 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader 2015-07-10 18:59 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-10 18:59 - 2015-03-16 19:31 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-07-10 18:59 - 2014-12-02 14:36 - 00000000 ____D C:\Users\Susan\Downloads\JDownloader1 Setup 2015-07-10 18:59 - 2014-08-13 10:48 - 00000000 ____D C:\Users\Susan\AppData\Local\JDownloader v2.0 2015-07-10 18:59 - 2014-06-01 16:12 - 00000000 ____D C:\Users\Susan\AppData\Local\Garmin 2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files\McAfee 2015-07-10 18:59 - 2013-05-17 16:35 - 00000000 ____D C:\Program Files (x86)\McAfee.com 2015-07-10 18:59 - 2013-04-14 15:54 - 00000000 ____D C:\Users\Susan\AppData\Roaming\uTorrent 2015-07-10 18:59 - 2013-04-12 17:36 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Orbit 2015-07-10 18:59 - 2013-04-12 12:56 - 00000000 ____D C:\Users\Susan\AppData\Local\Applian 2015-07-10 18:59 - 2013-04-12 12:55 - 00000000 ____D C:\Users\Susan\AppData\Local\Jaksta_Technologies_Pty_L 2015-07-10 18:59 - 2012-11-12 16:27 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2015-07-10 18:59 - 2012-09-07 03:01 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Skype 2015-07-10 18:59 - 2012-09-06 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-07-10 18:59 - 2012-03-08 17:23 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Help 2015-07-10 18:59 - 2012-02-22 20:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-07-10 18:59 - 2012-02-13 12:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\V715w 2015-07-10 18:59 - 2012-02-11 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Nero_AG 2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ___RD C:\Users\Susan\Desktop\MySyncUPFiles 2015-07-10 18:59 - 2012-02-11 14:11 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macrovision 2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ___RD C:\Users\Susan\Virtual Machines 2015-07-10 18:59 - 2012-02-11 13:56 - 00000000 ____D C:\Users\Susan\AppData\Local\VirtualStore 2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-07-10 18:59 - 2012-02-11 13:44 - 00000000 ___RD C:\Users\Susan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-07-10 18:59 - 2012-02-08 15:27 - 00000000 ____D C:\Windows\system32\Macromed 2015-07-10 18:59 - 2010-11-21 02:16 - 00000000 ___RD C:\Users\Public\Recorded TV 2015-07-10 18:58 - 2013-04-13 17:34 - 00000000 ____D C:\Users\Susan\AppData\Local\TechSmith 2015-07-10 18:58 - 2012-03-05 17:54 - 00000000 ____D C:\Users\Susan\Documents\Fax 2015-07-10 18:58 - 2012-02-21 07:50 - 00000000 ____D C:\Users\Susan\AppData\Roaming\SoftGrid Client 2015-07-10 18:58 - 2012-02-13 13:00 - 00000000 ____D C:\Users\Susan\AppData\Roaming\PCDr 2015-07-10 18:58 - 2012-02-11 16:25 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Intuit 2015-07-10 18:58 - 2012-02-11 14:02 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Adobe 2015-07-10 18:58 - 2012-02-11 13:44 - 00000000 ____D C:\Users\Susan\AppData\Roaming\Macromedia 2015-07-10 18:58 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration 2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\wdfp506 2015-07-10 18:58 - 2009-07-03 18:52 - 00000000 ____D C:\Users\Susan\Documents\DVDFab 2015-07-10 18:58 - 2007-07-07 12:09 - 00000000 ____D C:\Users\Susan\Documents\New CDs 2015-07-10 18:57 - 2013-04-16 15:10 - 00000000 ____D C:\Users\Susan\AppData\Local\Cyberlink 2015-07-10 18:57 - 2012-09-06 16:13 - 00000000 ____D C:\Users\Susan\AppData\Local\Google 2015-07-10 18:57 - 2012-04-13 16:27 - 00000000 ____D C:\Users\Susan\AppData\Local\Citrix 2015-07-10 18:57 - 2012-02-11 16:30 - 00000000 ____D C:\Users\Susan\AppData\Local\Microsoft Games 2015-07-10 18:57 - 2012-02-11 13:57 - 00000000 ____D C:\Users\Susan\AppData\Local\Dell 2015-07-10 18:49 - 2012-02-21 18:06 - 00000000 ____D C:\Users\Brad\AppData\Local\SoftThinks 2015-07-03 08:43 - 2012-02-12 20:30 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-07-01 14:25 - 2009-07-14 00:13 - 00783424 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-01 14:24 - 2012-03-09 15:07 - 00000000 ____D C:\Users\Susan\AppData\Local\Windows Live 2015-07-01 14:10 - 2015-02-13 04:03 - 00003820 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate 2015-07-01 14:09 - 2015-02-13 04:03 - 00000000 ____D C:\ProgramData\SupportAssistAgent 2015-06-25 13:41 - 2013-04-01 16:07 - 00000000 ____D C:\Users\Brad\AppData\Roaming\Apple Computer 2015-06-25 13:37 - 2013-04-01 16:07 - 00111840 _____ C:\Users\Brad\AppData\Local\GDIPFONTCACHEV1.DAT 2015-06-25 13:37 - 2013-04-01 16:07 - 00000000 ___RD C:\Users\Brad\Virtual Machines 2015-06-25 13:36 - 2013-04-01 16:07 - 00001379 _____ C:\Users\Brad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-06-25 10:51 - 2012-02-08 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell 2015-06-25 10:50 - 2012-02-13 13:00 - 00000000 ____D C:\ProgramData\PCDr 2015-06-23 13:30 - 2010-11-20 22:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Files in the root of some directories ======= 2013-04-13 18:34 - 2013-04-15 19:29 - 0003584 _____ () C:\Users\Susan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\cmn_upld.log 2012-02-12 20:04 - 2013-04-12 03:00 - 0014932 _____ () C:\ProgramData\dlee.log 2012-03-04 19:20 - 2014-05-15 13:09 - 0001102 _____ () C:\ProgramData\dleeDiagnostics.log 2012-02-11 14:53 - 2014-05-12 13:06 - 0334944 _____ () C:\ProgramData\dleeJSW.log 2012-02-11 14:15 - 2015-07-20 12:08 - 0081384 _____ () C:\ProgramData\dleescan.log 2012-02-11 15:05 - 2012-02-11 15:05 - 0000252 _____ () C:\ProgramData\FastPics.log 2012-02-15 18:39 - 2012-02-15 18:39 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log 2012-02-11 16:25 - 2015-02-22 18:41 - 0001095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-18 04:01 ==================== End of log ============================ [/QUOTE]
Insert quotes…
Verification
Post reply
Top