[Solved] Ran Malwarebytes...

After posting on Win8 forum, I was directed to post here. I did all the steps to prepare for MBAM run.
I copied the logs to my clipboard. Now I can't find it. I used search pane, run command. No luck.
The logs showed 67 instances of PUP. Driver update, user, my hubby's name. Please advise.

 

Hello and Welcome to CHF.

------------------------------------------------------

**Note - Please do NOT upgrade your OS to Windows 10 until your machine is clean, and we have uninstalled all our removal tools. Thanks.

------------------------------------------------------

Don't worry about finding your clipboard. Just open the MBAM log, and select (Ctrl-A) then copy(Ctlr-C) then paste(Ctrl-V) the entire log in your reply.

------------------------------------------------------

Please download AdwCleaner from here and save it to your desktop.

• Run AdwCleaner and select Scan
• Once the Scan is done, select Cleaning
• Once done it will ask to reboot, please allow the reboot.
• On reboot, a log will be produced. It can also be found at C:\AdwCleaner\AdwCleaner[C#].txt
• Please copy/paste the contents of the log in your next reply.

------------------------------------------------------

Please download Farbar Recovery Scan Tool and save it to your desktop.

• Double-click FRST64 to run it. When the tool opens click Yes to the disclaimer.
• Make sure the Addition.txt button is ticked.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply.

------------------------------------------------------

 

3 tries, Protection is all that shows on this screen.

 

Link for adwclr does not work. My cursor changes to I bar.
am unable to post logs from scans.

 

Hello again, CarolsSis. Sorry you are having trouble. Forget MBAM for now.

Download AdwCleaner and FRST64 to USB drive on another computer and transfer the tools to your desktop. Then follow the previous instructions. If you have trouble running the tools from your desktop, just run them from the USB drive. Let me know if you still have trouble.

 

I don't have either a second computer or USB drive.

 

will work on MBAM

 

logs

 

Ran AdwCleaner, log file on desktop. Unused to doing copy paste. Cannot get this file uploaded. It's saved in Notepad. Have typed name on header exactly, message cannot find file. Please advise.

 

Hello again, CarolsSis. It appears you didn't attach the second FRST log, Addition.txt, to your last reply.

I need to see it before we can proceed. It can be found on your desktop.

------------------------------------------------------

AdwCleaner saves its logs automatically. The log can be found at C:\AdwCleaner\AdwCleaner[C#].txt, where # is the order(number) of the logs. You want the highest number C# log.

------------------------------------------------------

 

Thanks. Good instructions

# AdwCleaner v5.105 - Logfile created 26/03/2016 at 18:47:51
# Updated 21/03/2016 by Xplode
# Database : 2016-03-26.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Jan15_001 - GRAPECRATE
# Running from : C:\Users\Jan15_001\Downloads\AdwCleaner.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : swdumon

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Driver Detective
[-] Folder Deleted : C:\Program Files (x86)\driverupdate
[-] Folder Deleted : C:\Users\Public\Documents\Downloaded Installers\{2B353DA2-A8FD-4238-B207-62A1921158D7}
[-] Folder Deleted : C:\WINDOWS\Installer\{2B353DA2-A8FD-4238-B207-62A1921158D7}
[#] Folder Deleted : C:\WINDOWS\SysNative\Tasks\Driver Detective

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysNative\drivers\swdumon.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Driver Detective-RTMRules
[-] Task Deleted : Driver Detective-RTMScan
[-] Task Deleted : Driver Detective-RTMScanRunOnce
[-] Task Deleted : Driver Detective-RTMUpdater

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2B353DA2-A8FD-4238-B207-62A1921158D7}
[-] Key Deleted : HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\SlimWare Utilities Inc

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1744 bytes] - [26/03/2016 18:47:51]
C:\AdwCleaner\AdwCleaner[R0].txt - [1452 bytes] - [24/02/2015 12:56:59]
C:\AdwCleaner\AdwCleaner[S0].txt - [1532 bytes] - [24/02/2015 12:57:59]
C:\AdwCleaner\AdwCleaner[S1].txt - [1863 bytes] - [26/03/2016 18:45:37]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2036 bytes] ##########

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Jan15_001 (administrator) on GRAPECRATE (26-03-2016 08:27:06)
Running from C:\Users\Jan15_001\Downloads
Loaded Profiles: Jan15_001 & (Available Profiles: William & Jan15_001)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\WINDOWS\System32\GWX\GWX.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Adobe Systems Incorporated) C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-08-22] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-03-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [807392 2016-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [14952 2016-03-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-4047220225-3207747796-807001164-1010\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-4047220225-3207747796-807001164-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
Tcpip\..\Interfaces\{7ACDE149-1AE8-4BCE-B925-BD20FCCFDF01}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
Tcpip\..\Interfaces\{7F8CF737-AD4E-40F4-80D0-5024F57F40CC}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPDSK13/1
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.cox.com/myconnection/home.cox
HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-4047220225-3207747796-807001164-1010\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.huffingtonpost.com/
HKU\S-1-5-21-4047220225-3207747796-807001164-1010\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-4047220225-3207747796-807001164-1010\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.tucsonnewsnow.com/
hxxp://www.google.com/
HKU\S-1-5-21-4047220225-3207747796-807001164-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.huffingtonpost.com/
HKU\S-1-5-21-4047220225-3207747796-807001164-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK13/1
HKU\S-1-5-21-4047220225-3207747796-807001164-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.tucsonnewsnow.com/
hxxp://www.google.com/
SearchScopes: HKLM -> {35D244C0-467D-43B9-BFD7-985AC1FE0520} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {35D244C0-467D-43B9-BFD7-985AC1FE0520} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {35D244C0-467D-43B9-BFD7-985AC1FE0520} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-4047220225-3207747796-807001164-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-4047220225-3207747796-807001164-1010 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
SearchScopes: HKU\S-1-5-21-4047220225-3207747796-807001164-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-10-19] (Hewlett-Packard Company)
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {55A2C0CD-3DE8-4264-9637-A0B40B05714E} hxxps://col430-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=937479953

FireFox:
========
FF ProfilePath: C:\Users\Jan15_001\AppData\Roaming\Mozilla\Firefox\Profiles\iuqi1irq.default
FF Homepage: hxxp://www.huffingtonpost.com/
hxxp://www.tucsonnewsnow.com/
hxxp://www.google.com/
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-12] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [No File]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Jan15_001\AppData\Roaming\Mozilla\Firefox\Profiles\iuqi1irq.default\Extensions\abs@avira.com.xpi [2016-03-25]
FF Extension: AdBlock Ultimate - C:\Users\Jan15_001\AppData\Roaming\Mozilla\Firefox\Profiles\iuqi1irq.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-03-25]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-15] [not signed]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [eblihieomkjeiobglmnbmidkajdcfkpa] - <no Path/update_url>
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eblihieomkjeiobglmnbmidkajdcfkpa] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [955736 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466504 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466504 2016-02-22] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1424880 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [272304 2016-03-04] (Avira Operations GmbH & Co. KG)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26680 2016-02-18] (Hewlett-Packard Company)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-12] (Intel Corporation)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [48128 2015-04-01] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [24224 2016-03-23] (Avira Operations GmbH & Co. KG)
R2 STacSV; C:\Program Files\IDT\WDM\stacsv64.exe [337920 2013-07-05] (IDT, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 BrYNSvc; "C:\Program Files (x86)\Browny02\BrYNSvc.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4265984 2014-12-22] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [137952 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-02-22] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [68936 2016-02-22] (Avira Operations GmbH & Co. KG)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 CpqDfw; C:\Windows\System32\drivers\CpqDfw.sys [27456 2012-05-29] (Windows (R) Codename Longhorn DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-26] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-12] (Intel Corporation)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2016-02-16] ()
R3 tilfilter; C:\Windows\System32\drivers\TIxHCIlfilter.sys [17672 2015-03-02] (Texas Instruments, Inc.)
R3 tiufilter; C:\Windows\System32\drivers\TIxHCIufilter.sys [23304 2015-03-02] (Texas Instruments, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-26 08:27 - 2016-03-26 08:27 - 00019258 _____ C:\Users\Jan15_001\Downloads\FRST.txt
2016-03-26 08:26 - 2016-03-26 08:27 - 00000000 ____D C:\FRST
2016-03-26 08:26 - 2016-03-26 08:26 - 02374144 _____ (Farbar) C:\Users\Jan15_001\Downloads\FRST64.exe
2016-03-25 16:43 - 2016-03-25 16:43 - 00000000 ____D C:\Users\William\AppData\Roaming\Avira
2016-03-25 16:39 - 2016-03-25 16:39 - 00000000 ____D C:\Users\William\AppData\Local\Avira
2016-03-25 13:11 - 2016-03-25 13:11 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\AviraSpeedup
2016-03-25 13:11 - 2016-03-25 13:11 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\Avira
2016-03-25 12:22 - 2016-03-26 08:19 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-03-25 12:22 - 2016-03-25 12:22 - 00003364 _____ C:\WINDOWS\System32\Tasks\Avira System Speedup Tray
2016-03-25 12:22 - 2016-03-25 12:22 - 00000000 ____D C:\Users\Jan15_001\AppData\Roaming\Avira
2016-03-25 12:20 - 2016-02-22 16:44 - 00137952 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-03-25 12:20 - 2016-02-22 16:44 - 00128664 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-03-25 12:20 - 2016-02-22 16:44 - 00068936 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-03-25 12:20 - 2016-02-22 16:44 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-03-25 12:18 - 2016-03-25 12:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-25 12:18 - 2016-03-25 12:22 - 00000000 ____D C:\ProgramData\Avira
2016-03-25 12:18 - 2016-03-25 12:22 - 00000000 ____D C:\Program Files (x86)\Avira
2016-03-25 12:18 - 2016-03-25 12:18 - 00001229 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-03-25 12:07 - 2016-03-25 12:11 - 04733568 _____ (Avira Operations GmbH & Co. KG) C:\Users\Jan15_001\Downloads\avira_en_av_56f58c7eaf8f0__ws1.exe
2016-03-25 11:43 - 2016-03-25 13:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-25 11:43 - 2016-03-25 11:49 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\Mozilla
2016-03-25 11:43 - 2016-03-25 11:43 - 00001178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-25 11:43 - 2016-03-25 11:43 - 00000000 ____D C:\Users\Jan15_001\AppData\Roaming\Mozilla
2016-03-25 11:43 - 2016-03-25 11:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-25 11:42 - 2016-03-25 11:42 - 00242128 _____ C:\Users\Jan15_001\Downloads\Firefox Setup Stub 45.0.1.exe
2016-03-25 09:47 - 2016-03-26 08:19 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-25 09:46 - 2016-03-25 09:46 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-25 09:46 - 2016-03-25 09:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-25 09:46 - 2016-03-25 09:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-25 09:46 - 2016-03-25 09:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-25 09:46 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-03-25 09:46 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-03-25 09:46 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-25 09:41 - 2016-03-25 09:41 - 22851472 _____ (Malwarebytes ) C:\Users\Jan15_001\Downloads\mbam-setup-2.2.1.1043.exe
2016-03-25 08:42 - 2016-03-25 08:42 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\Google
2016-03-24 09:07 - 2016-02-08 18:31 - 22365472 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-24 09:07 - 2016-02-08 18:31 - 19794896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-24 09:07 - 2016-02-08 18:31 - 02757616 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-03-24 09:07 - 2016-02-08 18:31 - 02412576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-03-24 09:07 - 2016-02-08 18:31 - 00273264 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-03-24 09:07 - 2016-02-08 13:55 - 02712576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-24 09:07 - 2016-02-08 13:15 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-03-24 09:07 - 2016-02-08 13:02 - 01197056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-03-24 09:07 - 2016-02-08 12:48 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-24 09:07 - 2016-02-08 12:43 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-03-24 09:07 - 2016-02-08 12:40 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-03-24 09:07 - 2016-02-08 12:39 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-03-24 09:07 - 2016-02-08 12:37 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingMonitor.dll
2016-03-24 09:07 - 2016-02-08 12:35 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-03-24 09:07 - 2016-02-08 12:34 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-24 09:07 - 2016-02-08 12:33 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-24 09:07 - 2016-02-08 11:50 - 03120640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-24 09:07 - 2016-02-08 10:55 - 02592256 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-03-24 09:07 - 2016-02-08 10:33 - 01278464 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-03-24 09:07 - 2016-02-08 10:12 - 14466560 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-24 09:07 - 2016-02-08 10:02 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-03-24 09:07 - 2016-02-08 10:00 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-03-24 09:07 - 2016-02-08 09:58 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-03-24 09:07 - 2016-02-08 09:55 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2016-03-24 09:07 - 2016-02-08 09:53 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2016-03-24 09:07 - 2016-02-08 09:53 - 01348096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-24 09:07 - 2016-02-08 09:50 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-03-24 09:07 - 2016-02-08 09:50 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-24 09:07 - 2016-02-08 09:48 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-24 09:07 - 2016-02-08 09:47 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2016-03-24 09:07 - 2016-02-08 09:44 - 00955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-24 09:07 - 2016-02-06 16:05 - 00551256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-03-24 09:07 - 2016-02-06 15:41 - 00316760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2016-03-24 09:07 - 2016-02-05 12:07 - 00378712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-03-24 09:07 - 2016-02-05 08:11 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2016-03-24 09:07 - 2016-02-05 08:11 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2016-03-24 09:07 - 2016-02-05 08:07 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2016-03-24 09:07 - 2016-02-05 08:02 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-03-24 09:07 - 2016-02-05 07:46 - 01455104 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2016-03-24 09:07 - 2016-02-04 09:23 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-03-24 09:07 - 2016-02-04 09:22 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-03-24 09:07 - 2016-02-03 08:14 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2016-03-24 09:07 - 2016-02-03 08:11 - 01673728 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2016-03-24 09:07 - 2016-02-02 11:16 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-24 09:07 - 2016-02-02 10:18 - 01574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2016-03-24 09:07 - 2016-02-02 10:15 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2016-03-24 09:07 - 2016-01-31 12:17 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2016-03-24 09:07 - 2016-01-31 11:07 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-03-24 09:07 - 2016-01-31 10:42 - 03320832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-03-24 09:07 - 2016-01-31 10:17 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsAnytimeUpgradeui.exe
2016-03-24 09:07 - 2016-01-31 10:14 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-03-24 09:07 - 2016-01-31 09:24 - 02778624 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-03-24 09:07 - 2016-01-31 09:20 - 02464256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-03-24 09:07 - 2016-01-21 22:22 - 02487296 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-03-24 09:07 - 2016-01-21 22:11 - 01482240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-03-24 09:07 - 2016-01-20 15:40 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2016-03-24 08:58 - 2016-02-11 13:17 - 07452504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-24 08:58 - 2016-02-11 13:17 - 01737088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-24 08:58 - 2016-02-11 13:17 - 01663184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-24 08:58 - 2016-02-11 13:17 - 01523208 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-24 08:58 - 2016-02-11 13:17 - 01490120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-03-24 08:58 - 2016-02-11 13:17 - 01358952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-24 08:58 - 2016-02-11 13:16 - 01501488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-24 08:58 - 2016-02-09 11:07 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-03-24 08:58 - 2016-02-04 11:07 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpsapi.dll
2016-03-24 08:58 - 2016-02-04 10:35 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpsapi.dll
2016-03-24 08:58 - 2016-02-02 10:51 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll
2016-03-24 08:58 - 2016-02-02 10:19 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll
2016-03-24 08:58 - 2016-02-02 10:01 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll
2016-03-24 08:58 - 2016-02-02 09:51 - 02609152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-03-24 08:58 - 2016-02-02 09:48 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2016-03-24 08:58 - 2016-02-02 09:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll
2016-03-24 08:58 - 2016-02-02 09:41 - 02170880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-03-24 08:58 - 2016-02-02 09:39 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2016-03-24 08:58 - 2016-01-27 08:18 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2016-03-24 08:58 - 2016-01-26 12:15 - 00072024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-03-24 08:58 - 2016-01-21 12:35 - 00952928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-24 08:58 - 2016-01-21 11:42 - 00786152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-13 09:21 - 2016-02-11 07:21 - 00869576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-13 09:21 - 2016-02-11 07:21 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-13 09:21 - 2016-02-11 07:20 - 00875720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2016-03-13 09:21 - 2016-02-11 07:20 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2016-03-13 09:21 - 2016-02-08 14:05 - 20352512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-13 09:21 - 2016-02-08 13:39 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-03-13 09:21 - 2016-02-08 13:34 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-13 09:21 - 2016-02-08 13:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-03-13 09:21 - 2016-02-08 13:28 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-03-13 09:21 - 2016-02-08 13:10 - 04611072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-13 09:21 - 2016-02-08 13:07 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-03-13 09:21 - 2016-02-08 13:05 - 25816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-13 09:21 - 2016-02-08 13:03 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-03-13 09:21 - 2016-02-08 13:02 - 13012480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-13 09:21 - 2016-02-08 13:02 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-03-13 09:21 - 2016-02-08 13:01 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-03-13 09:21 - 2016-02-08 12:43 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-13 09:21 - 2016-02-08 12:39 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-13 09:21 - 2016-02-08 12:38 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-03-13 09:21 - 2016-02-08 11:27 - 02887680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-13 09:21 - 2016-02-08 11:26 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-03-13 09:21 - 2016-02-08 11:16 - 06052352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-13 09:21 - 2016-02-08 11:14 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-03-13 09:21 - 2016-02-08 11:13 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-03-13 09:21 - 2016-02-08 10:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-03-13 09:21 - 2016-02-08 10:42 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-03-13 09:21 - 2016-02-08 10:37 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-03-13 09:21 - 2016-02-08 10:34 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-03-13 09:21 - 2016-02-08 10:33 - 14613504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-13 09:21 - 2016-02-08 10:33 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-03-13 09:21 - 2016-02-08 10:19 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-13 09:21 - 2016-02-08 10:15 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-03-13 09:21 - 2016-02-08 10:07 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-13 09:21 - 2016-02-08 09:55 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-03-13 09:21 - 2016-02-05 12:07 - 00292696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2016-03-13 09:21 - 2016-02-05 12:07 - 00243032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2016-03-13 09:21 - 2016-02-05 08:03 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-13 09:21 - 2016-02-05 08:00 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-13 09:21 - 2016-02-05 07:59 - 07784960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-13 09:21 - 2016-02-05 07:55 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-13 09:21 - 2016-02-05 07:48 - 07075840 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2016-03-13 09:21 - 2016-02-05 07:47 - 05268480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-03-13 09:21 - 2016-02-04 10:24 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-13 09:21 - 2016-02-04 10:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-13 09:10 - 2016-02-06 11:08 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-13 09:10 - 2016-02-06 09:58 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-03-13 09:10 - 2016-02-06 09:32 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-13 09:10 - 2016-02-04 11:18 - 04174336 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-03-13 09:10 - 2016-02-04 11:18 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-13 09:10 - 2016-02-04 11:12 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-13 09:10 - 2016-02-04 10:44 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-13 09:10 - 2016-02-04 10:39 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-13 09:10 - 2016-02-03 13:37 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-13 09:10 - 2016-02-03 13:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-13 09:10 - 2016-02-03 08:09 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-13 09:10 - 2016-02-03 08:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-13 09:10 - 2016-02-03 08:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-13 09:10 - 2016-01-31 12:16 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-01 19:33 - 2016-02-20 08:45 - 01373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-01 19:33 - 2016-02-20 08:45 - 01168896 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-01 19:33 - 2016-02-20 08:45 - 00696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-01 19:33 - 2016-02-20 08:45 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-01 19:33 - 2016-02-20 08:45 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-01 19:33 - 2016-02-20 08:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-03-01 19:33 - 2016-02-12 12:14 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-03-01 19:33 - 2016-02-12 08:14 - 03708416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-01 19:33 - 2016-02-12 07:55 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2016-03-01 19:33 - 2016-02-12 07:54 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2016-03-01 19:33 - 2016-02-12 07:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2016-03-01 19:33 - 2016-02-12 07:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2016-03-01 19:33 - 2016-02-12 07:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2016-03-01 19:33 - 2016-02-12 07:51 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2016-03-01 19:33 - 2016-02-12 07:51 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2016-03-01 19:33 - 2016-02-12 07:48 - 02244096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2016-03-01 19:33 - 2016-02-12 07:47 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-03-01 19:33 - 2016-02-12 07:46 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-03-01 19:33 - 2016-02-05 12:06 - 00046768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-02-26 21:00 - 2016-01-08 18:38 - 00091992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2016-02-26 21:00 - 2016-01-06 11:25 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-02-26 20:59 - 2016-01-10 09:41 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-02-26 20:59 - 2016-01-10 09:31 - 01344512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-02-26 20:59 - 2016-01-08 18:49 - 00218448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-02-26 20:59 - 2016-01-08 18:49 - 00192120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-02-26 20:59 - 2016-01-06 16:46 - 00148752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2016-02-26 20:59 - 2016-01-06 16:45 - 00177712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-02-26 20:59 - 2016-01-06 09:47 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-02-26 20:59 - 2016-01-05 08:00 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-02-26 20:59 - 2015-12-20 07:57 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-02-26 20:59 - 2015-12-20 07:43 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-02-26 20:50 - 2016-01-24 11:19 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-02-26 20:50 - 2016-01-24 11:19 - 00331608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-02-26 20:50 - 2016-01-24 04:57 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-02-26 20:50 - 2016-01-24 04:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-02-26 20:50 - 2015-12-30 14:53 - 02017624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-02-26 20:50 - 2015-12-30 13:49 - 00470360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2016-02-26 20:50 - 2015-12-20 07:56 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2016-02-26 20:50 - 2015-12-16 10:11 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-02-26 20:50 - 2015-12-16 09:51 - 00868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-02-26 20:50 - 2015-11-19 07:33 - 00994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2016-02-26 20:50 - 2015-11-19 07:26 - 00922432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2016-02-26 20:41 - 2016-01-10 10:50 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-26 20:41 - 2016-01-10 10:31 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-26 20:41 - 2016-01-10 10:16 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-02-26 20:41 - 2016-01-10 10:14 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-26 20:41 - 2016-01-10 10:12 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-02-26 20:41 - 2016-01-10 09:58 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-26 20:41 - 2016-01-10 09:51 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-02-26 20:41 - 2016-01-10 09:49 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2016-02-26 20:41 - 2016-01-10 09:40 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-26 20:40 - 2016-01-19 12:13 - 02175008 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-26 20:40 - 2016-01-19 12:13 - 01063464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-26 20:40 - 2016-01-19 12:12 - 01133744 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-26 20:40 - 2016-01-19 11:23 - 01564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-26 20:40 - 2016-01-19 11:23 - 00548024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-26 20:40 - 2016-01-19 10:30 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-26 20:40 - 2016-01-19 09:37 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-02-26 20:40 - 2016-01-06 11:25 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-26 20:40 - 2015-12-28 14:42 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll
2016-02-26 20:40 - 2015-12-28 13:31 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll
2016-02-26 20:40 - 2015-12-17 11:29 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-02-26 20:40 - 2015-12-17 09:17 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-02-26 20:40 - 2015-12-07 03:56 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-02-26 20:40 - 2015-12-04 08:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 02745184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 02528784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 02450240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 02447136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 02334104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 02324744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01798480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01484888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01288128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01210200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 01150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 01115640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 01037680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00914672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00850680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00735496 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00700360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00629600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00557856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00498472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00492736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00463776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00299080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00275312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00274280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00248432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00246856 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00244296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00229272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00203016 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00184912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00183856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00110544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00099136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-02-26 20:33 - 2015-12-04 22:58 - 00090904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00090392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00081032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-02-26 20:33 - 2015-12-04 22:58 - 00076936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll
2016-02-26 20:33 - 2015-12-03 12:42 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-02-26 20:33 - 2015-12-03 12:42 - 00137968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2016-02-26 20:33 - 2015-12-03 12:42 - 00106960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-02-26 20:33 - 2015-12-03 11:52 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-02-26 20:33 - 2015-12-03 11:52 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2016-02-26 20:33 - 2015-12-03 11:52 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-02-26 20:33 - 2015-12-03 11:07 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-02-26 20:33 - 2015-12-03 11:07 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-02-26 20:33 - 2015-12-03 11:05 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2016-02-26 20:33 - 2015-12-03 11:02 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-26 20:33 - 2015-12-03 11:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2016-02-26 20:33 - 2015-12-03 10:58 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2016-02-26 20:33 - 2015-12-03 10:36 - 01697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-02-26 20:33 - 2015-12-03 10:30 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL
2016-02-26 20:33 - 2015-12-03 10:28 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-02-26 20:33 - 2015-12-03 10:28 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-02-26 20:33 - 2015-12-03 10:27 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2016-02-26 20:33 - 2015-12-03 10:24 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-02-26 20:33 - 2015-12-03 10:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2016-02-26 20:33 - 2015-12-03 10:07 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-02-26 20:33 - 2015-12-03 10:06 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-02-26 20:33 - 2015-12-03 10:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL
2016-02-26 20:33 - 2015-12-03 09:45 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-02-26 20:33 - 2015-12-03 09:40 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-26 20:33 - 2015-12-03 09:29 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-02-26 20:32 - 2015-12-08 12:08 - 00685432 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-02-26 20:32 - 2015-12-08 12:07 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-02-26 20:23 - 2015-12-02 08:04 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-02-26 20:23 - 2015-12-02 08:01 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-02-26 20:12 - 2016-02-26 20:12 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\ElevatedDiagnostics

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-26 08:19 - 2015-09-10 15:01 - 00000000 ___RD C:\Users\Jan15_001\OneDrive
2016-03-26 08:18 - 2015-02-01 16:22 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-25 22:54 - 2015-02-01 16:22 - 00000928 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-25 22:10 - 2015-09-10 15:04 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4047220225-3207747796-807001164-1010
2016-03-25 16:49 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-25 16:43 - 2014-04-21 08:54 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4047220225-3207747796-807001164-1001
2016-03-25 16:38 - 2014-04-23 10:05 - 00000000 ___DO C:\Users\William\OneDrive
2016-03-25 16:38 - 2014-04-21 22:07 - 00038912 ___SH C:\Users\William\Desktop\Thumbs.db
2016-03-25 13:54 - 2016-02-22 20:50 - 00000000 ___DC C:\Users\Jan15_001\AppData\Local\MigWiz
2016-03-25 13:54 - 2015-10-05 20:10 - 00000000 ____D C:\WINDOWS\Hewlett-Packard
2016-03-25 13:54 - 2015-09-12 22:04 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\CrashDumps
2016-03-25 13:54 - 2014-07-03 12:20 - 00000000 ____D C:\Users\William\AppData\Roaming\hpqLog
2016-03-25 13:54 - 2014-04-23 10:40 - 00000000 ___DC C:\WINDOWS\Panther
2016-03-25 13:54 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2016-03-25 12:18 - 2013-08-14 18:46 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-25 12:03 - 2013-08-22 07:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-25 12:02 - 2015-06-06 07:51 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-25 12:02 - 2013-08-22 06:25 - 01310720 ___SH C:\WINDOWS\system32\config\BBI
2016-03-25 11:43 - 2015-09-10 17:57 - 00003950 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0FDCB2F0-9605-4205-AA4D-7FC1F599F1CA}
2016-03-25 11:36 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-03-25 11:11 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\rescache
2016-03-25 09:58 - 2015-02-01 16:22 - 00000000 ____D C:\Program Files\Google
2016-03-25 09:58 - 2015-02-01 16:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-25 09:58 - 2012-07-26 00:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-24 09:14 - 2013-08-22 06:36 - 00000000 ____D C:\WINDOWS\Inf
2016-03-24 09:11 - 2013-08-22 08:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-03-24 09:01 - 2015-08-21 11:10 - 00000362 _____ C:\WINDOWS\Tasks\HPCeeScheduleForWilliam.job
2016-03-23 08:31 - 2014-04-23 09:42 - 00039404 _____ C:\WINDOWS\BRRBCOM.INI
2016-03-22 13:54 - 2015-08-21 11:10 - 00003180 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForWilliam
2016-03-22 09:20 - 2015-09-12 22:42 - 00003188 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJan15_001
2016-03-22 09:20 - 2015-09-12 22:42 - 00000370 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJan15_001.job
2016-03-17 12:31 - 2015-03-29 12:02 - 00000000 ____D C:\Users\William\AppData\Local\CrashDumps
2016-03-17 12:22 - 2014-04-21 08:47 - 00003798 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{409BF67E-7B48-407A-A4E6-46B9CE8C5CD6}
2016-03-13 09:16 - 2013-08-22 07:44 - 00351048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-13 09:13 - 2014-04-22 19:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-13 09:11 - 2014-04-22 19:43 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-09 14:55 - 2015-11-21 09:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-09 14:54 - 2013-08-22 08:36 - 00000000 ____D C:\Program Files\WindowsApps
2016-03-08 00:00 - 2015-10-17 00:22 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 00:00 - 2015-10-17 00:22 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-01 19:33 - 2014-12-10 09:14 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-01 12:28 - 2014-04-23 09:45 - 00000000 ____D C:\Users\William
2016-02-29 20:04 - 2015-12-14 16:02 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\Adobe
2016-02-29 20:04 - 2015-09-10 14:57 - 00000000 ____D C:\Users\Jan15_001\AppData\Roaming\Adobe
2016-02-27 09:05 - 2016-02-19 19:03 - 00000000 ____D C:\Users\Jan15_001\AppData\Local\Windows Live
2016-02-26 20:43 - 2014-03-18 03:03 - 00956476 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-26 20:33 - 2014-03-18 02:45 - 00000000 ____D C:\Program Files\Windows Journal

Some files in TEMP:
====================
C:\Users\Jan15_001\AppData\Local\Temp\avgnt.exe
C:\Users\William\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-17 12:49

==================== End of FRST.txt ============================

 

Command Prompt tells me "access denied" I am logged in as Administrator under User Accts. Please advise.

 

Hello again, CarolsSis. Thanks for attaching the AdwCleaner log. Good job!

But, it appears you attached the same FRST.txt log you attached earlier, named FRST.txt.

I need to see the other FRST log, named Addition.txt. It should be on your desktop.

FRST produces 2 logs on its first run. If you ran FRST more than once, it will only produce the FRST.txt log, and you will have to run it again, and make sure the Addition.txt box is ticked before you click 'Scan'.

As far as the Command Prompt errors, please follow only the instructions in my last post, and disregard any other helpers instructions

------------------------------------------------------

 

I have no Addition.txt on desktop. will run again. Did you ask for file with SN from AdwCleaner? My list doesn't have it. C1>RO>SO>S1>S2 are the text docs listed.

 

I found it. Pardon my mistakes.

 

Before I forget. A few days ago I was looking in Control Panel, Systems and Security. At the bottom of page was Flash Player 32 bit. I though it was odd to be listed in that location. I looked in Programs, it is not there. I looked in IE Tools, add on, it is not there. Not sure it this is anything to be concerned about.

 

Hello again, CarolsSis. No need for another AdwCleaner log, you already attached the correct AdwCleaner[C#].txt log.

You have Firefox installed. Have you tried it? How does it behave?

------------------------------------------------------

That is the default location for Flash Player, and you need the 32-bit version for your 32-bit browser. Flash is not the cause of any problems you are experiencing.

------------------------------------------------------

If there are any personal files, pics, etc. on your computer you cannot live without, back them up now just as a precaution.

http://windows.microsoft.com/en-us/windows-8/what-happened-to-backup-restore

------------------------------------------------------

Please download the attached fixlist.txt and save it to same location where the FRST64 tool is located.

NOTE: Both FRST64.exe and the fixlist.txt must be in the same location or the fix will not work.

Double-click FRST64 to run the tool. If the tool warns you the version is outdated, please download and run the updated version.

• Click the Fix button just once, and wait.
• If you receive a message that a reboot is required, please make sure you allow it to restart normally.
• The tool will complete its run after the restart.
• When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please post the Fixlog.txt log in your reply.

------------------------------------------------------

 

Firefox performs slower and as badly as IE, can't display page, etc. Several issues I question.
Hubby left computer on for me to look at Control Panel when he's signed in. It looks completely different than mine. ODD.
File History is off, turn on button greyed out.
Photos from my phone I want to keep. Buy a flash drive?
I read those reports, want to understand what I read. How can I find out? shared them so hubby can print. I can't.
Will run Frst64 and fixlog.txt after I have a reply. I checked to make sure it is saved in same location. Thanks so much.

 

Frustrated to the max with this machine. Ran it anyway. Can you tell me what all these reports mean? Thanks so much.

 

Hello again, CarolsSis. You're welcome. It would be nearly impossible to explain those reports, it's just too complex.

The difference between both your Control Panels is probably one is in icon view, and the other is in category view.

Open your Control Panel and at the upper right in the 'View by:' dropdown box, you can switch between Category and Large/Small icons.

------------------------------------------------------

Yes, you will have to insert an external or removable flash drive before the 'Turn on' button will become available.

http://answers.microsoft.com/en-us/...ayed-out/773a3b33-d452-4340-bf4c-c8aaeb981459

------------------------------------------------------

Have you tried resetting IE and/or FF to defaults?

http://windows.microsoft.com/en-us/internet-explorer/reset-ie-settings#ie=ie-11

https://support.mozilla.org/en-US/kb/reset-preferences-fix-problems

Let me know if that helped.

------------------------------------------------------