[Win7SP1Pro x64] itunes 12.7 cannot connect to apple servers

[lionheart44]

results from farbar recovery scan tool:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-09-2017
Ran by Adam (administrator) on ADAM-PC (21-09-2017 18:18:39)
Running from C:\Users\Adam\Desktop
Loaded Profiles: Adam (Available Profiles: Adam)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials


==================== Processes (Whitelisted) =================


(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)


(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Backblaze\bzserv.exe
(New Softwares.net) C:\Windows\SysWOW64\WinFLService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\HP\HP Wireless Deluxe Desktop Combo\TSR\xDaemon.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
(New Softwares.net) C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe
() C:\Program Files (x86)\Backblaze\bzbui.exe
( New Softwares.net) C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServ.exe
( New Softwares.net) C:\Windows\SysWOW64\WinFLTray.exe
() C:\Program Files (x86)\No-IP\DUC40.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Binary Fortress Software) C:\Program Files (x86)\TrayStatus\TrayStatus.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\BATINDICATOR.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\BATINDICATOR_HIDList.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Sling Media Inc.) C:\Program Files (x86)\Sling Media\SlingplayerForWeb\SlingplayerForWeb.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Sling Media Inc.) C:\Program Files (x86)\Sling Media\SlingplayerForWeb\SlingplayerForWeb.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\KBD\kbd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
() C:\Program Files (x86)\Backblaze\bzfilelist.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
() C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files (x86)\No-IP\ducservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Dropbox, Inc.) C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Backblaze\x64\bztransmit64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================


(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)


HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [HP Input Device Main Program] => C:\Program Files\HP\HP Wireless Deluxe Desktop Combo\TSR\xDaemon.exe [530432 2008-10-17] ()
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [866224 2017-03-16] ()
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc.)
HKLM-x32\...\Run: [Sound Blaster X-Fi MB 3] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe [2109440 2013-04-23] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [KBD] => C:\Program Files (x86)\Hewlett-Packard\KBD\KbdStub.EXE [12288 2008-07-21] (Microsoft)
HKLM-x32\...\Run: [BATINDICATOR] => C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\BATINDICATOR.exe [2068992 2011-12-14] (Hewlett-Packard)
HKLM-x32\...\Run: [BATINDICATORHL] => C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\BATINDICATOR_HIDList.exe [557056 2010-07-23] (Hewlett-Packard)
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [FLBackup] => C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.ex
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [597672 2017-02-06] ()
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [Dropbox Update] => C:\Users\Adam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.)
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [WinFLTray] => C:\Windows\SysWow64\WinFLTray.ex
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [NoIPDUCv4] => C:\Program Files (x86)\No-IP\DUC40.exe [347648 2014-12-08] ()
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-05-09] (Apple Inc.)
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Run: [TrayStatus] => C:\Program Files (x86)\TrayStatus\TrayStatus.exe [2824176 2016-09-16] (Binary Fortress Software)
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\avastSS.scr [53208 2016-08-30] (AVAST Software)
HKU\S-1-5-18\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [597672 2017-02-06] ()
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [67384 2017-05-09] (Apple Inc.)
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-09-21]
ShortcutTarget: Dropbox.lnk -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-11-26]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SlingplayerForWebShortcut.lnk [2016-11-26]
ShortcutTarget: SlingplayerForWebShortcut.lnk -> C:\Program Files (x86)\Sling Media\SlingplayerForWeb\SlingplayerForWeb.exe (Sling Media Inc.)
GroupPolicy\User: Restriction <==== ATTENTION


==================== Internet (Whitelisted) ====================


(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)


Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4A9B803D-41E7-49AB-86CE-03F7B8435E6E}: [DhcpNameServer] 192.168.1.1


Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22] (IObit)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab


FireFox:
========
FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073 [2017-09-21]
FF user.js: detected! => C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073\user.js [2017-09-20]
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073 -> Google
FF Homepage: Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073 -> hxxp://www.barstoolsports.com/category/boston/
FF Extension: (Flash Video Downloader - YouTube HD Download [4K]) - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073\Extensions\artur.dubovoy@gmail.com [2017-08-15]
FF Extension: (YouTube Video and Audio Downloader) - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2017-05-20]
FF Extension: (WebSlingPlayer) - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nxm77bn0.default-1427215856073\Extensions\{9EB34849-81D3-4841-939D-666D522B889A} [2016-07-31]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1417691967-3038979484-1004723776-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Adam\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-03-26] (Citrix Online)


Chrome:
=======
CHR StartupUrls: Default -> "hxxp://my.xfinity.com/","hxxp://www.barstoolsports.com/boston/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default [2017-09-21]
CHR Extension: (Google Slides) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-23]
CHR Extension: (Google Docs) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-23]
CHR Extension: (Google Drive) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-23]
CHR Extension: (YouTube) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-23]
CHR Extension: (Google Sheets) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-23]
CHR Extension: (Google Docs Offline) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-23]
CHR Extension: (Distill Web Monitor) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\inlikjemeeknofckkjolnjbpehgadgge [2017-09-13]
CHR Extension: (Autofill) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmmgnhgdeffjkdckmikfpnddkbbfkkk [2017-08-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
CHR Extension: (Page Monitor) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogeebjpdeabhncjpfhgdibjajcajepgg [2017-08-23]
CHR Extension: (Auto Logout) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlcnddhihadnalofegeookbpglgadhe [2017-08-23]
CHR Extension: (Gmail) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-23]
CHR Extension: (Chrome Media Router) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-23]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx


==================== Services (Whitelisted) ====================


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [444584 2017-02-06] ()
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-03-20] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-03-20] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [406016 2011-09-14] (Creative Technology Ltd) [File not signed]
R2 FLService; C:\Windows\SysWow64\WinFLService.exe [92360 2015-03-22] (New Softwares.net)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2017-03-16] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206112 2017-06-14] (IObit)
S3 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-04-15] (Rivet Networks)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-13] (Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [12288 2014-12-08] () [File not signed]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [50600 2016-03-03] (Microsoft)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-08-29] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)


===================== Drivers (Whitelisted) ======================


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [138872 2016-03-23] (Rivet Networks, LLC.)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-19] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2015-03-19] (Symantec Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-04-10] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [21928 2017-06-06] (IObit.com)
R3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [27048 2017-06-13] (IObit.com)
R3 KillerEth; C:\Windows\System32\DRIVERS\e2xw7x64.sys [134296 2016-02-12] (Qualcomm Atheros, Inc.)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253888 2017-09-21] (Malwarebytes)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R1 WinFLAdrv; C:\Windows\SysWow64\WinFLAdrv.sys [34816 2015-03-22] ()
R2 WinVDEDrv; C:\Windows\SysWow64\WinVDEdrv.sys [225680 2015-03-22] (NewSoftwares.net, Inc.)
R3 XtuAcpiDriver; C:\Windows\System32\DRIVERS\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]


==================== NetSvcs (Whitelisted) ===================


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)




==================== One Month Created files and folders ========


(If an entry is included in the fixlist, the file/folder will be moved.)


2017-09-21 18:18 - 2017-09-21 18:21 - 000025800 _____ C:\Users\Adam\Desktop\FRST.txt
2017-09-21 18:18 - 2017-09-21 18:18 - 000000000 ____D C:\FRST
2017-09-21 18:16 - 2017-09-21 18:16 - 002399744 _____ (Farbar) C:\Users\Adam\Desktop\FRST64.exe
2017-09-21 18:10 - 2017-09-21 18:10 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-21 00:25 - 2017-09-21 00:25 - 000000302 _____ C:\Windows\Tasks\Driver Booster Scheduler.job
2017-09-21 00:16 - 2017-09-21 18:04 - 000253888 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-09-21 00:16 - 2017-09-21 00:16 - 000001827 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-21 00:16 - 2017-09-21 00:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-21 00:16 - 2017-09-21 00:16 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-21 00:16 - 2017-09-21 00:16 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-21 00:16 - 2017-08-24 11:27 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-09-21 00:06 - 2017-09-21 00:06 - 068408664 _____ (Malwarebytes ) C:\Users\Adam\Downloads\mb3-setup-35891.35891-3.2.2.2029.exe
2017-09-20 23:54 - 2017-09-20 23:54 - 000450200 _____ C:\Windows\Minidump\092017-495677-01.dmp
2017-09-20 23:30 - 2017-09-20 23:30 - 000001358 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2017-09-20 23:28 - 2017-09-20 23:28 - 014582384 _____ (IObit ) C:\Users\Adam\Downloads\iobituninstaller.exe
2017-09-20 22:54 - 2017-09-21 18:08 - 000002882 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Adam)
2017-09-20 22:54 - 2017-09-20 22:55 - 000002280 _____ C:\Users\Public\Desktop\Driver Booster 4.lnk
2017-09-20 22:54 - 2017-09-20 22:54 - 000003250 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2017-09-20 22:54 - 2017-09-20 22:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 4
2017-09-20 22:52 - 2017-09-20 22:54 - 015770512 _____ (IObit ) C:\Users\Adam\Downloads\driver_booster_setup.exe
2017-09-20 22:15 - 2017-09-20 22:15 - 000069968 _____ (AVAST Software s. r. o.) C:\Users\Adam\Downloads\avast_setup_free_antivirus.exe
2017-09-20 22:11 - 2017-09-20 22:11 - 008464042 _____ C:\Users\Adam\Documents\ADAM-PC.arn
2017-09-20 22:08 - 2017-09-10 18:34 - 000845488 _____ (Sysinternals - Windows Sysinternals - Windows Sysinternals | Microsoft Docs) C:\Users\Adam\Desktop\Autoruns64.exe
2017-09-20 22:07 - 2017-09-20 22:07 - 001306150 _____ C:\Users\Adam\Downloads\Autoruns.zip
2017-09-20 19:20 - 2017-09-20 19:20 - 000041931 _____ C:\ComboFix.txt
2017-09-20 18:58 - 2017-09-20 18:59 - 000220696 _____ C:\TDSSKiller.3.1.0.15_20.09.2017_18.58.20_log.txt
2017-09-20 18:22 - 2017-09-20 18:22 - 000003160 _____ C:\Windows\System32\Tasks\SidebarExecute
2017-09-20 17:24 - 2017-09-20 17:25 - 037956936 _____ (Tweaking.com) C:\Users\Adam\Desktop\86714433-cb02-44f9-90e8-c366301e1478.tmp
2017-09-20 14:51 - 2017-09-20 14:51 - 000000207 _____ C:\Windows\tweaking.com-regbackup-ADAM-PC-Windows-7-Professional-(64-bit).dat
2017-09-20 14:51 - 2017-09-20 14:51 - 000000000 ____D C:\RegBackup
2017-09-20 14:28 - 2017-09-20 14:28 - 000002163 _____ C:\Users\Adam\Desktop\Tweaking.com - Windows Repair.lnk
2017-09-20 14:27 - 2017-09-20 14:27 - 000003650 _____ C:\Windows\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2017-09-20 14:27 - 2017-09-20 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2017-09-20 14:27 - 2017-09-20 14:27 - 000000000 ____D C:\Program Files (x86)\Tweaking.com
2017-09-20 14:25 - 2017-09-20 14:28 - 000194321 _____ C:\Windows\Tweaking.com - Windows Repair Setup Log.txt
2017-09-20 14:21 - 2017-09-20 14:21 - 037956936 _____ (Tweaking.com) C:\Users\Adam\Desktop\tweaking.com_windows_repair_aio_setup.exe
2017-09-20 11:46 - 2017-09-20 11:46 - 000000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-09-20 11:39 - 2017-09-20 11:41 - 000000000 ____D C:\AdwCleaner
2017-09-20 11:39 - 2017-09-20 11:39 - 008182736 _____ (Malwarebytes) C:\Users\Adam\Desktop\AdwCleaner.exe
2017-09-20 11:36 - 2017-09-20 11:37 - 000221550 _____ C:\TDSSKiller.3.1.0.15_20.09.2017_11.36.16_log.txt
2017-09-20 11:34 - 2017-09-20 11:34 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Adam\Desktop\tdsskiller.exe
2017-09-20 11:28 - 2017-09-20 11:28 - 000041382 _____ C:\Users\Adam\Desktop\ComboFix.txt
2017-09-20 11:10 - 2017-09-20 11:10 - 005660248 ____R (Swearware) C:\Users\Adam\Desktop\ComboFix.exe
2017-09-20 10:29 - 2017-09-20 10:29 - 000000129 _____ C:\Users\Adam\Desktop\HostsContent - netsh-reset.txt
2017-09-18 23:38 - 2017-09-18 23:48 - 000000000 ____D C:\Program Files (x86)\TunesCare
2017-09-18 23:31 - 2017-09-19 09:14 - 000002196 _____ C:\Users\Adam\Desktop\Rkill.txt
2017-09-18 23:23 - 2017-09-18 23:23 - 000000000 ____D C:\Windows\System32\Tasks\Event Viewer Tasks
2017-09-18 21:09 - 2017-09-18 21:09 - 006164462 _____ C:\Users\Adam\Desktop\msinfo32 9-18-17.txt
2017-09-17 23:59 - 2017-09-17 23:59 - 000000000 ____D C:\Users\Adam\Desktop\iTunes Crash Logs
2017-09-17 23:52 - 2017-09-20 00:28 - 000000000 ____D C:\Users\Adam\Desktop\itunes 12.7
2017-09-17 23:26 - 2017-09-18 14:55 - 000000000 ____D C:\Users\Adam\AppData\Local\A51A6600-6B6B-4411-B79C-E823A3B12A08.aplzod
2017-09-17 23:26 - 2017-09-17 23:26 - 000000000 ____D C:\Users\Adam\Documents\Outlook Files
2017-09-17 23:26 - 2017-09-17 23:26 - 000000000 ____D C:\Users\Adam\AppData\Local\Apple Inc
2017-09-17 17:31 - 2017-09-17 17:31 - 000000000 ____H C:\asc_rdflag
2017-09-17 16:25 - 2017-09-17 16:26 - 000000000 ____D C:\Users\Adam\Desktop\whiskey priest 9-1-17
2017-09-13 09:49 - 2017-08-19 11:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-13 09:49 - 2017-08-19 11:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-13 09:49 - 2017-08-16 11:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-13 09:49 - 2017-08-16 11:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-13 09:49 - 2017-08-16 10:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-13 09:49 - 2017-08-15 21:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-13 09:49 - 2017-08-15 20:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-13 09:49 - 2017-08-15 11:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-13 09:49 - 2017-08-15 11:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-13 09:49 - 2017-08-15 11:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-13 09:49 - 2017-08-15 11:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-13 09:49 - 2017-08-15 10:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-13 09:49 - 2017-08-15 10:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-13 09:49 - 2017-08-15 10:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-13 09:49 - 2017-08-15 10:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-13 09:49 - 2017-08-15 09:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-13 09:49 - 2017-08-14 13:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-13 09:49 - 2017-08-14 13:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-13 09:49 - 2017-08-13 17:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-13 09:49 - 2017-08-13 17:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-13 09:49 - 2017-08-13 14:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-13 09:49 - 2017-08-13 13:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-13 09:49 - 2017-08-13 13:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-13 09:49 - 2017-08-13 13:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-13 09:49 - 2017-08-13 13:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-13 09:49 - 2017-08-13 13:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-13 09:49 - 2017-08-13 13:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-13 09:49 - 2017-08-13 13:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-13 09:49 - 2017-08-13 13:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-13 09:49 - 2017-08-13 12:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-13 09:49 - 2017-08-13 12:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-13 09:49 - 2017-08-13 12:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-13 09:49 - 2017-08-13 12:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-13 09:49 - 2017-08-13 12:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-13 09:49 - 2017-08-13 12:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-13 09:49 - 2017-08-13 12:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-13 09:49 - 2017-08-13 12:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-13 09:49 - 2017-08-13 12:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-13 09:49 - 2017-08-13 12:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-13 09:49 - 2017-08-13 12:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-13 09:49 - 2017-08-13 12:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-13 09:49 - 2017-08-13 12:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-13 09:49 - 2017-08-13 12:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-13 09:49 - 2017-08-13 12:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-13 09:49 - 2017-08-13 12:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-13 09:49 - 2017-08-13 12:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-13 09:49 - 2017-08-13 12:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-13 09:49 - 2017-08-13 12:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-13 09:49 - 2017-08-13 12:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-13 09:49 - 2017-08-13 12:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-13 09:49 - 2017-08-13 12:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-13 09:49 - 2017-08-13 12:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-13 09:49 - 2017-08-13 12:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-13 09:49 - 2017-08-13 12:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-13 09:49 - 2017-08-13 12:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-13 09:49 - 2017-08-13 12:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-13 09:49 - 2017-08-13 12:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-13 09:49 - 2017-08-13 12:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-13 09:49 - 2017-08-13 12:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-13 09:49 - 2017-08-13 12:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-13 09:49 - 2017-08-13 12:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-13 09:49 - 2017-08-13 12:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-13 09:49 - 2017-08-13 12:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-13 09:49 - 2017-08-13 12:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-13 09:49 - 2017-08-13 12:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-13 09:49 - 2017-08-13 12:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-13 09:49 - 2017-08-13 12:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-13 09:49 - 2017-08-13 12:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-13 09:49 - 2017-08-13 11:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-13 09:49 - 2017-08-13 11:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-13 09:49 - 2017-08-13 11:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-13 09:49 - 2017-08-13 11:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-13 09:49 - 2017-08-13 11:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-13 09:49 - 2017-08-13 11:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-13 09:49 - 2017-08-13 11:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-13 09:49 - 2017-08-13 11:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-13 09:49 - 2017-08-13 11:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-13 09:49 - 2017-08-13 11:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-13 09:49 - 2017-08-13 11:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-13 09:49 - 2017-08-13 11:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-13 09:49 - 2017-08-13 11:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-13 09:49 - 2017-08-11 02:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-09-13 09:49 - 2017-08-11 02:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-13 09:49 - 2017-08-11 02:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-09-13 09:49 - 2017-08-11 02:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-13 09:49 - 2017-08-11 02:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-13 09:49 - 2017-08-11 02:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-09-13 09:49 - 2017-08-11 02:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-13 09:49 - 2017-08-11 02:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-13 09:49 - 2017-08-11 02:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-13 09:49 - 2017-08-11 02:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-13 09:49 - 2017-08-11 02:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-13 09:49 - 2017-08-11 02:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-13 09:49 - 2017-08-11 02:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 02:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-13 09:49 - 2017-08-11 02:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-13 09:49 - 2017-08-11 02:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-13 09:49 - 2017-08-11 02:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-13 09:49 - 2017-08-11 02:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-13 09:49 - 2017-08-11 02:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-13 09:49 - 2017-08-11 02:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-13 09:49 - 2017-08-11 02:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-13 09:49 - 2017-08-11 02:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-13 09:49 - 2017-08-11 02:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-13 09:49 - 2017-08-11 02:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-13 09:49 - 2017-08-11 02:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-13 09:49 - 2017-08-11 02:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-13 09:49 - 2017-08-11 01:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-13 09:49 - 2017-08-11 01:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-13 09:49 - 2017-08-11 01:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-13 09:49 - 2017-08-11 01:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-13 09:49 - 2017-08-11 01:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-13 09:49 - 2017-08-11 01:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-13 09:49 - 2017-08-11 01:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-13 09:49 - 2017-08-11 01:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-13 09:49 - 2017-08-11 01:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-13 09:49 - 2017-08-11 01:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-13 09:49 - 2017-08-11 01:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-13 09:49 - 2017-08-11 01:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-13 09:49 - 2017-08-11 01:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-13 09:49 - 2017-08-11 01:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 01:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 01:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 09:49 - 2017-08-11 01:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-13 09:39 - 2017-09-20 10:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-09-13 09:39 - 2017-09-20 10:02 - 000000000 ____D C:\Program Files\iTunes
2017-09-13 09:39 - 2017-09-20 09:54 - 000000000 ____D C:\Program Files\iPod
2017-09-13 09:35 - 2017-09-13 09:35 - 000000000 ____D C:\Windows\System32\Tasks\Apple
2017-09-13 09:35 - 2017-09-13 09:35 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2017-08-30 00:05 - 2017-08-30 00:27 - 000000000 ____D C:\Users\Adam\Documents\NoteBurner iTunes DRM Audio Converter
2017-08-30 00:05 - 2017-08-30 00:26 - 000000000 ____D C:\Users\Adam\AppData\Roaming\NoteBurner iTunes DRM Audio Converter
2017-08-30 00:05 - 2017-08-30 00:05 - 000000000 ____D C:\Users\Adam\AppData\Local\CrashRpt
2017-08-30 00:04 - 2017-08-30 00:04 - 009098984 _____ C:\Users\Adam\Downloads\noteburner-itunes-drm-audio-converter.exe
2017-08-30 00:04 - 2017-08-30 00:04 - 000001276 _____ C:\Users\Adam\Desktop\NoteBurner iTunes DRM Audio Converter.lnk
2017-08-30 00:04 - 2017-08-30 00:04 - 000000000 ____D C:\Program Files (x86)\NoteBurner
2017-08-23 22:45 - 2017-01-16 15:11 - 000000320 _____ C:\Users\Adam\Desktop\MyHarmony.appref-ms
2017-08-22 23:54 - 2017-08-28 17:54 - 000002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-22 23:54 - 2017-08-28 17:54 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-22 23:54 - 2017-08-22 23:56 - 007649280 _____ C:\Program Files (x86)\GUT1B6D.tmp
2017-08-22 23:54 - 2017-08-22 23:54 - 000000000 ____D C:\Program Files (x86)\GUM1B6C.tmp
2017-08-22 23:47 - 2017-08-22 23:47 - 001758040 _____ (Google Inc.) C:\Users\Adam\Downloads\setup.exe
2017-08-22 23:33 - 2017-09-21 17:46 - 000458808 _____ C:\Windows\ntbtlog.txt
2017-08-22 23:11 - 2017-08-23 00:04 - 000000000 ____D C:\Users\Adam\Desktop\backup google user data
2017-08-22 22:23 - 2017-08-22 22:47 - 000000000 ____D C:\Users\Adam\Desktop\fap 2017
2017-08-22 22:12 - 2017-08-22 22:12 - 000002980 _____ C:\Windows\System32\Tasks\{FFA5423A-95AF-4950-8A1A-ED28F6E01A93}
2017-08-22 22:12 - 2017-08-22 22:12 - 000002980 _____ C:\Windows\System32\Tasks\{0E8A7E95-659B-4F6F-ACF4-9614332C6E9E}
2017-08-22 21:57 - 2017-06-25 19:51 - 031093004 _____ C:\Users\Adam\Downloads\DYB2xxx.exe
2017-08-22 10:10 - 2017-08-22 10:10 - 000000000 ____D C:\$SysReset
2017-08-22 10:03 - 2017-08-22 21:56 - 001130328 _____ (Google Inc.) C:\Users\Adam\Downloads\ChromeSetup.exe
2017-08-22 02:35 - 2017-08-22 02:35 - 000008192 _____ C:\Windows\system32\config\userdiff


==================== One Month Modified files and folders ========


(If an entry is included in the fixlist, the file/folder will be moved.)


2017-09-21 18:22 - 2015-06-29 07:52 - 000000914 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000UA.job
2017-09-21 18:17 - 2009-07-14 00:45 - 000022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-21 18:17 - 2009-07-14 00:45 - 000022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-21 18:11 - 2015-03-21 09:59 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Dropbox
2017-09-21 18:08 - 2009-07-14 01:13 - 000784000 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-21 18:08 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
2017-09-21 18:05 - 2015-03-22 13:49 - 000000000 ____D C:\Users\Adam\AppData\Local\CrashDumps
2017-09-21 18:05 - 2015-03-20 17:42 - 000000000 __SHD C:\Users\Adam\IntelGraphicsProfiles
2017-09-21 18:02 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-21 18:01 - 2015-03-20 12:19 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-20 23:54 - 2015-09-25 11:59 - 000000000 ____D C:\Windows\Minidump
2017-09-20 23:53 - 2016-02-17 17:06 - 1425865222 _____ C:\Windows\MEMORY.DMP
2017-09-20 23:53 - 2015-03-21 09:34 - 000000000 ____D C:\Program Files\AVAST Software
2017-09-20 23:53 - 2015-03-21 09:28 - 000000000 ____D C:\ProgramData\AVAST Software
2017-09-20 23:30 - 2017-02-08 19:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2017-09-20 23:30 - 2016-04-10 17:51 - 000001370 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2017-09-20 23:30 - 2015-03-21 13:33 - 000000000 ____D C:\ProgramData\ProductData
2017-09-20 23:29 - 2015-03-21 13:31 - 000000000 ____D C:\ProgramData\IObit
2017-09-20 23:29 - 2015-03-21 13:30 - 000000000 ____D C:\Users\Adam\AppData\Roaming\IObit
2017-09-20 23:02 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\system32\NDF
2017-09-20 22:54 - 2015-03-21 13:30 - 000000000 ____D C:\Program Files (x86)\IObit
2017-09-20 21:31 - 2011-04-12 04:28 - 000000000 ____D C:\Windows\CSC
2017-09-20 21:31 - 2009-07-14 00:45 - 000653552 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-20 21:21 - 2015-03-20 11:56 - 000200912 _____ C:\Users\Adam\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-20 20:43 - 2009-07-13 22:34 - 000000563 _____ C:\Windows\win.ini
2017-09-20 20:40 - 2015-03-20 11:39 - 000784000 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-20 19:20 - 2017-08-21 01:08 - 000000000 ____D C:\Qoobox
2017-09-20 19:20 - 2015-04-02 15:04 - 000000000 ____D C:\Users\Adam\AppData\Local\Apps\2.0
2017-09-20 19:17 - 2009-07-13 22:34 - 000000241 _____ C:\Windows\system.ini
2017-09-20 18:21 - 2017-06-23 10:37 - 000000000 ____D C:\Users\Adam\Documents\pics for tape art
2017-09-20 18:21 - 2017-06-23 10:37 - 000000000 ____D C:\Users\Adam\Documents\bleach tees
2017-09-20 18:21 - 2015-07-08 18:29 - 000000000 ____D C:\Users\Adam\Documents\wedding stuff
2017-09-20 18:21 - 2015-04-02 19:07 - 000000000 ____D C:\Users\Adam\Documents\Elegant Elliott clips
2017-09-20 18:21 - 2015-04-02 19:06 - 000000000 ____D C:\Users\Adam\Documents\dogs
2017-09-20 18:21 - 2015-04-02 19:05 - 000000000 ____D C:\Users\Adam\Documents\desktop mp3's
2017-09-20 18:21 - 2015-04-02 19:05 - 000000000 ____D C:\Users\Adam\Documents\cool vids
2017-09-20 18:21 - 2015-04-02 18:58 - 000000000 ____D C:\Users\Adam\Documents\Converted Videos
2017-09-20 18:21 - 2015-04-02 18:55 - 000000000 ____D C:\Users\Adam\Documents\bike pics 12-08
2017-09-20 18:21 - 2015-04-02 18:55 - 000000000 ____D C:\Users\Adam\Documents\bike pics
2017-09-20 18:21 - 2015-04-02 18:40 - 000000000 ____D C:\Users\Adam\Documents\Range Rover
2017-09-20 18:21 - 2015-04-02 18:40 - 000000000 ____D C:\Users\Adam\Documents\iphone 6 photo backup
2017-09-20 18:21 - 2015-03-22 01:06 - 000000000 ____D C:\Users\Adam\Desktop\7 day weekend
2017-09-20 18:21 - 2015-03-20 11:30 - 000000000 ____D C:\Users\Adam
2017-09-20 18:10 - 2016-04-27 14:03 - 000000000 ____D C:\Users\Adam\Desktop\mixes
2017-09-20 15:22 - 2017-04-29 12:45 - 000000855 _____ C:\Windows\system32\Drivers\etc\hosts_bak_879
2017-09-20 11:41 - 2015-03-21 13:31 - 000000000 ____D C:\Users\Adam\AppData\LocalLow\IObit
2017-09-20 11:21 - 2015-03-22 01:11 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-20 10:20 - 2015-03-20 11:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-09-20 10:06 - 2017-06-13 23:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Rename Utility
2017-09-20 10:06 - 2017-05-16 22:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-09-20 10:06 - 2016-04-24 13:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 8
2017-09-20 10:06 - 2015-03-22 09:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cool Edit Pro 2.0
2017-09-20 10:06 - 2015-03-21 13:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-09-20 10:06 - 2015-03-21 10:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-09-20 10:02 - 2017-08-20 03:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-09-20 10:02 - 2017-07-28 10:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrayStatus
2017-09-20 10:02 - 2017-07-18 23:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beats by Dr. Dre
2017-09-20 10:02 - 2017-06-25 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DYB2xxx
2017-09-20 10:02 - 2017-03-26 22:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-09-20 10:02 - 2017-03-08 23:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixMeister
2017-09-20 10:02 - 2016-11-25 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirMyPC
2017-09-20 10:02 - 2016-11-19 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Airfoil
2017-09-20 10:02 - 2016-08-02 13:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
2017-09-20 10:02 - 2016-08-02 13:58 - 000000000 ____D C:\Program Files\Killer Networking
2017-09-20 10:02 - 2016-04-26 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2017-09-20 10:02 - 2016-02-13 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2017-09-20 10:02 - 2016-01-13 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2017-09-20 10:02 - 2015-11-07 12:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashIntegro
2017-09-20 10:02 - 2015-04-22 17:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-09-20 10:02 - 2015-04-12 19:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-20 10:02 - 2015-04-12 19:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast
2017-09-20 10:02 - 2015-04-03 10:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-09-20 10:02 - 2015-04-03 09:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backblaze
2017-09-20 10:02 - 2015-03-26 17:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2017-09-20 10:02 - 2015-03-23 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-09-20 10:02 - 2015-03-22 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-09-20 10:02 - 2015-03-22 10:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake
2017-09-20 10:02 - 2015-03-22 09:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape 0.91
2017-09-20 10:02 - 2015-03-22 01:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-09-20 10:02 - 2015-03-21 21:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SPD-SX Wave Manager
2017-09-20 10:02 - 2015-03-21 21:30 - 000000000 ____D C:\Users\Adam\AppData\Roaming\vlc
2017-09-20 10:02 - 2015-03-21 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2017-09-20 10:02 - 2015-03-20 11:53 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-09-20 10:02 - 2015-03-20 11:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2017-09-20 10:02 - 2009-07-14 01:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-09-20 10:01 - 2015-03-21 23:01 - 000000000 ____D C:\Program Files (x86)\Backblaze
2017-09-20 09:59 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\registration
2017-09-18 22:21 - 2009-07-13 23:20 - 000000000 ____D C:\PerfLogs
2017-09-17 23:26 - 2015-03-21 10:08 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Apple Computer
2017-09-17 21:15 - 2015-03-21 13:45 - 000000000 ____D C:\Users\Adam\AppData\Local\ElevatedDiagnostics
2017-09-17 17:31 - 2015-04-23 17:57 - 118464512 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2017-09-17 17:31 - 2015-04-23 17:57 - 000299008 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2017-09-17 17:31 - 2015-04-23 17:57 - 000065536 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2017-09-17 17:31 - 2015-04-23 17:57 - 000028672 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2017-09-16 14:52 - 2015-03-22 13:44 - 000002568 ___SH C:\ProgramData\win_mpwd_sys.dat
2017-09-16 14:52 - 2015-03-22 13:42 - 000000700 ___SH C:\Users\Adam\AppData\Local\systemFL7.dat
2017-09-16 14:52 - 2015-03-22 13:41 - 000003465 ___SH C:\Users\Adam\AppData\Local\win_stlthdb_sys.dat
2017-09-13 13:13 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\rescache
2017-09-13 10:16 - 2016-07-08 16:38 - 000003890 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458683044
2017-09-13 10:13 - 2015-03-21 18:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-13 10:06 - 2015-03-21 21:43 - 000000000 ____D C:\Windows\system32\MRT
2017-09-13 10:00 - 2015-03-21 21:43 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-09-13 09:35 - 2015-03-21 10:06 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-09-12 19:22 - 2015-06-29 07:52 - 000000862 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000Core.job
2017-09-12 07:04 - 2015-03-20 12:12 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-12 07:04 - 2015-03-20 12:12 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-12 07:04 - 2015-03-20 12:12 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-12 07:04 - 2015-03-20 12:12 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-12 07:04 - 2015-03-20 12:12 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-09 11:49 - 2015-04-02 15:18 - 000000000 ____D C:\Users\Adam\Desktop\user manuals
2017-09-05 21:32 - 2017-06-23 18:22 - 000000000 ____D C:\Users\Adam\Desktop\ebay stuff
2017-09-05 04:59 - 2016-12-23 11:53 - 000000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-08-30 22:39 - 2015-03-22 13:44 - 000000000 ____D C:\Users\Adam\Downloads\win 8
2017-08-30 22:39 - 2015-03-22 13:41 - 000003465 ___SH C:\Windows\SysWOW64\win_stlthdb_sys.dat
2017-08-30 22:32 - 2017-01-16 14:10 - 000000000 ____D C:\Users\Adam\AppData\Local\Deployment
2017-08-30 15:43 - 2016-11-19 15:03 - 000000000 ____D C:\Users\Adam\AppData\LocalLow\Mozilla
2017-08-30 14:10 - 2015-11-09 18:33 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-29 17:32 - 2016-05-01 15:27 - 000000000 ____D C:\Users\Adam\Desktop\after convert
2017-08-28 23:49 - 2016-11-17 21:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-23 22:45 - 2017-01-16 15:11 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Logitech
2017-08-22 23:54 - 2015-03-20 11:37 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-22 23:40 - 2015-03-20 11:37 - 000000000 ____D C:\Users\Adam\AppData\Local\Google
2017-08-22 14:14 - 2016-02-11 01:28 - 000000000 ____D C:\Windows\system32\appmgmt
2017-08-22 14:14 - 2015-04-22 17:50 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-22 14:14 - 2015-04-04 03:01 - 000000000 ___SD C:\Windows\system32\GWX.old
2017-08-22 14:14 - 2015-03-29 11:28 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
2017-08-22 14:14 - 2015-03-25 23:45 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screencast-O-Matic
2017-08-22 14:14 - 2015-03-22 13:39 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Folder Lock
2017-08-22 14:14 - 2015-03-21 09:53 - 000000000 ____D C:\Windows\SysWOW64\vbox
2017-08-22 14:14 - 2015-03-21 09:53 - 000000000 ____D C:\Windows\system32\vbox
2017-08-22 14:14 - 2015-03-20 12:18 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-22 14:14 - 2015-03-20 12:18 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-22 14:14 - 2015-03-20 12:18 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-22 14:14 - 2015-03-20 11:45 - 000000000 ____D C:\Program Files (x86)\Intel
2017-08-22 14:14 - 2015-03-20 11:41 - 000000000 ____D C:\Program Files\Intel
2017-08-22 14:14 - 2011-04-12 04:28 - 000000000 ___RD C:\Users\Public\Recorded TV
2017-08-22 14:14 - 2011-04-12 04:28 - 000000000 ____D C:\Windows\ShellNew
2017-08-22 14:14 - 2009-07-14 01:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 __RSD C:\Windows\Media
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\LiveKernelReports
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\IME
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\Help
2017-08-22 14:14 - 2009-07-13 23:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-08-22 10:25 - 2017-08-21 21:22 - 000000000 ____D C:\$WINDOWS.~BT
2017-08-22 10:25 - 2017-08-21 21:17 - 000000066 _____ C:\Windows\progress.ini
2017-08-22 09:24 - 2015-07-21 13:39 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Skype
2017-08-22 00:10 - 2017-08-21 21:10 - 000000000 ____D C:\Windows10Upgrade
2017-08-22 00:10 - 2017-08-21 21:10 - 000000000 ____D C:\$GetCurrent


==================== Files in the root of some directories =======


2017-08-22 23:54 - 2017-08-22 23:56 - 007649280 _____ () C:\Program Files (x86)\GUT1B6D.tmp
2015-03-26 17:43 - 2017-05-16 22:05 - 000000096 _____ () C:\Users\Adam\AppData\Roaming\Camdata.ini
2015-03-26 17:43 - 2017-05-16 22:05 - 000000408 _____ () C:\Users\Adam\AppData\Roaming\CamLayout.ini
2015-03-26 17:43 - 2017-05-16 22:05 - 000000408 _____ () C:\Users\Adam\AppData\Roaming\CamShapes.ini
2015-03-26 17:43 - 2017-05-16 22:05 - 000004535 _____ () C:\Users\Adam\AppData\Roaming\CamStudio.cfg
2015-03-26 17:42 - 2017-05-16 22:04 - 000000096 _____ () C:\Users\Adam\AppData\Roaming\version2.xml
2016-07-31 13:09 - 2016-08-02 13:57 - 000000000 _____ () C:\Users\Adam\AppData\Local\Driver_LOM_8161Present.flag
2015-03-27 10:46 - 2017-08-11 12:05 - 000000712 _____ () C:\Users\Adam\AppData\Local\HackLogs.dat
2017-07-17 12:32 - 2017-07-17 12:32 - 000000749 _____ () C:\Users\Adam\AppData\Local\recently-used.xbel
2017-08-21 01:00 - 2017-08-21 01:00 - 000007610 _____ () C:\Users\Adam\AppData\Local\Resmon.ResmonCfg
2015-03-27 18:40 - 2015-03-27 18:40 - 000000620 ___SH () C:\Users\Adam\AppData\Local\settingsFL.dat
2015-03-22 13:42 - 2017-09-16 14:52 - 000000700 ___SH () C:\Users\Adam\AppData\Local\systemFL7.dat
2015-03-22 13:46 - 2015-08-24 19:05 - 000001213 ___SH () C:\Users\Adam\AppData\Local\win_fldb_sys.dat
2015-03-22 13:41 - 2017-09-16 14:52 - 000003465 ___SH () C:\Users\Adam\AppData\Local\win_stlthdb_sys.dat
2015-03-22 13:44 - 2017-09-16 14:52 - 000002568 ___SH () C:\ProgramData\win_mpwd_sys.dat


Files to move or delete:
====================
C:\ProgramData\win_mpwd_sys.dat




Some files in TEMP:
====================
2017-09-21 00:07 - 2017-09-21 00:06 - 068408664 _____ (Malwarebytes ) C:\Users\Adam\AppData\Local\Temp\mb3-setup-35891.35891-3.2.2.2029.exe


==================== Bamital & volsnap ======================


(There is no automatic fix for files that do not pass verification.)


C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2017-09-20 01:38


==================== End of FRST.txt ============================



results from addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-09-2017
Ran by Adam (21-09-2017 18:22:51)
Running from C:\Users\Adam\Desktop
Windows 7 Professional Service Pack 1 (X64) (2015-03-20 15:30:47)
Boot Mode: Normal
==========================================================




==================== Accounts: =============================


Adam (S-1-5-21-1417691967-3038979484-1004723776-1000 - Administrator - Enabled) => C:\Users\Adam
Administrator (S-1-5-21-1417691967-3038979484-1004723776-500 - Administrator - Disabled)
caleighforgue (S-1-5-21-1417691967-3038979484-1004723776-1004 - Limited - Enabled)
Guest (S-1-5-21-1417691967-3038979484-1004723776-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1417691967-3038979484-1004723776-1002 - Limited - Enabled)


==================== Security Center ========================


(If an entry is included in the fixlist, it will be removed.)


AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


==================== Installed Programs ======================


(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)


µTorrent (HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\uTorrent) (Version: 3.5.0.43804 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
adbLink version 2.05 (HKLM-x32\...\{05CF1DD3-4A94-4219-B176-BB1796680A6C}_is1) (Version: 2.05 - jocala.com)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Airfoil (HKLM-x32\...\Airfoil) (Version: 3.3.2 - Rogue Amoeba)
AirMyPC (HKLM-x32\...\AirMyPC_is1) (Version: 1.9.2 - AirMyPC)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Apple Application Support (32-bit) (HKLM-x32\...\{3D1290E6-1F77-46D5-A715-A56679C8D4E3}) (Version: 6.0.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D0E45DEC-F4B9-4370-A9DF-66837789C2EF}) (Version: 6.0.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E3C4B99B-BE71-4C27-8E3C-4FAE3C46E1D5}) (Version: 11.0.0.30 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Backblaze (HKLM-x32\...\Backblaze) (Version: - Backblaze, Inc)
Beats Updater (HKLM-x32\...\{321BEA75-4A58-4A42-911F-24933AE3E077}) (Version: 3.1.9.0 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Bulk Rename Utility 3.0.0.1 (64-bit) (HKLM\...\Bulk Rename Utility Installation_is1) (Version: - TGRMN Software)
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
Citrix Online Launcher (HKLM-x32\...\{1EFF9E6C-76E1-43F9-81FB-BC8C037B0902}) (Version: 1.0.258 - Citrix)
Cool Edit Pro 2.0 (HKLM-x32\...\Cool Edit Pro 2.0) (Version: - )
doPDF (HKLM\...\{B271A7AA-588F-418F-8F65-37E38CBEABB2}) (Version: 8.5.940 - Softland) Hidden
doPDF 8 (HKLM-x32\...\{fb478b24-519a-43d4-aeea-9a6712d28811}) (Version: 8.5.940 - Softland)
Driver Booster 4.5 (HKLM-x32\...\Driver Booster_is1) (Version: 4.5.0 - IObit)
Dropbox (HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Dropbox) (Version: 35.4.20 - Dropbox, Inc.)
DYB2xxx (HKLM-x32\...\DYB2xxx) (Version: - )
Enhanced Multimedia Keyboard Solution (HKLM-x32\...\KBD) (Version: 1.0.9.2 - Hewlett-Packard)
FastStone Image Viewer 5.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.5 - FastStone Soft)
Folder Lock (HKLM-x32\...\Folder Lock) (Version: - New Softwares.net)
Freemake Video Converter version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Drive (HKLM-x32\...\{F9A2761E-C1E4-4384-92A3-5732C9738327}) (Version: 2.34.6717.9565 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.115 - Google Inc.) Hidden
GoPro Studio (HKLM-x32\...\{BE06FF1A-83A0-42F2-913E-6E405393145C}) (Version: 5.12.5383 - GoPro, Inc.) Hidden
GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.)
HandBrake 0.10.1 (HKLM-x32\...\HandBrake) (Version: 0.10.1 - )
HP Keyboard (HKLM-x32\...\{B40D7926-AE5F-41EA-8AC6-56C0E2F00E9D}) (Version: 1.5.0.6 - Hewlett-Packard)
HP Wireless Deluxe Desktop Combo (HKLM-x32\...\{B6264E4A-3233-46BB-A0D3-B2968AEF11F2}) (Version: 1.0.0.0 - HP)
iCloud (HKLM\...\{5B1A59DA-D1EC-4C3A-A996-DF011A0A9668}) (Version: 6.2.2.39 - Apple Inc.)
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
Intel(R) Chipset Device Software (HKLM-x32\...\{e48a2f61-851a-4155-82f9-af1b04db8c3b}) (Version: 10.0.13 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 7.0.2.49 - IObit)
iTunes (HKLM\...\{94E81D4F-FB5A-4B29-B385-33896CC9BE7E}) (Version: 12.7.0.166 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Killer Bandwidth Control Filter Driver (HKLM\...\{CF54C187-E49A-4D74-BBC6-345A29C6ADEC}) (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer E220x Drivers (HKLM\...\{22D42F37-8523-48DB-B00F-49A187DD8F5F}) (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer Network Manager (HKLM\...\{AF427A50-7D39-4FF3-BD0B-28D08E2873F4}) (Version: 1.1.59.1701 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{75FC89A3-8B23-4609-BF5C-090E58D6B390}) (Version: 1.1.59.1701 - Rivet Networks)
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Standard 2010 (HKLM-x32\...\Office14.STANDARD) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version: - MixMeister Technology LLC)
Mozilla Firefox 55.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 55.0.3 (x86 en-US)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 55.0.3.6445 - Mozilla)
Mp3tag v2.74 (HKLM-x32\...\Mp3tag) (Version: v2.74 - Florian Heidenreich)
MyHarmony - 1 (HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech)
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.1 - Vitalwerks Internet Solutions LLC)
NoteBurner iTunes DRM Audio Converter 2.2.2 (HKLM-x32\...\NoteBurner iTunes DRM Audio Converter) (Version: 2.2.2 - NoteBurner)
novaPDF 8 Printer Driver (HKLM\...\{F9F62525-05B6-4AD7-8D30-0D872CC1FB3C}) (Version: 8.5.940 - Softland)
novaPDF 8 SDK COM (x64) (HKLM\...\{2A16E811-1C7B-4483-96F7-226C8D738F34}) (Version: 8.5.940 - Softland)
novaPDF 8 SDK COM (x86) (HKLM-x32\...\{A6DF899D-5518-4DAB-A4F9-F7D0CDD43224}) (Version: 8.5.940 - Softland)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5936 - NVIDIA Corporation)
NVIDIA Graphics Driver 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Quik (HKLM\...\{DF7EE9CB-0369-44F3-9B91-BF05A2D4891D}) (Version: 0.1.5383 - GoPro, Inc.) Hidden
Quik (HKLM-x32\...\{b15a4fb5-7637-45ca-b230-33d94af786a7}) (Version: 2.3.0.5383 - GoPro, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Screencast-O-Matic (HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\Screencast-O-Matic) (Version: - Screencast-O-Matic)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0012-0000-0000-0000000FF1CE}_Office14.STANDARD_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Slingplayer for Web Installer (HKLM-x32\...\{C9BDAEB1-0EA4-4B0B-9317-72E8712370BB}) (Version: 1.2.7.358 - Sling Media) Hidden
SlingplayerForWeb (HKLM-x32\...\{62a74667-8e59-4fbc-9417-ad041a630066}) (Version: 1.2.7.358 - Sling Media)
Sound Blaster X-Fi MB3 (HKLM-x32\...\{3689CE39-3173-4952-B7AF-F1A9D6F9A288}) (Version: 1.00.03 - Creative Technology Limited)
SPD-SX Wave Manager (HKLM-x32\...\{3F966873-BD1C-414A-A50F-AD9F2AD89949}) (Version: 1.0.1.0 - Roland Corporation)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
TrayStatus 3.1 (HKLM-x32\...\d6b74f60-2e9d-4c60-a8b7-b7d737c44ad4_is1) (Version: 3.1.0.0 - Binary Fortress Software)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.0.6 - Tweaking.com)
VFW_Codec32 (HKLM-x32\...\{ECDB3455-70F4-4EE6-B89E-3B4C5E9FF592}) (Version: 0.1.160.0 - GoPro, Inc.) Hidden
VFW_Codec64 (HKLM\...\{AE4073DE-7596-4E3B-9DE3-18BE2C3EFAA6}) (Version: 0.1.160.0 - GoPro, Inc.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
VSDC Free Video Editor version 3.3.0.394 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 3.3.0.394 - Flash-Integro LLC)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
Windows Driver Package - Apple, Inc. (KernelModeUSB) USBDevice (03/30/2017 11.40.49.146) (HKLM\...\183E383A1862B0622EB93E70D34D830E28AFFBAA) (Version: 03/30/2017 11.40.49.146 - Apple, Inc.)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)


==================== Custom CLSID (Whitelisted): ==========================


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-05-09] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers2: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2016-02-13] (Florian Heidenreich)
ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2015-08-09] (Intel Corporation)
ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\Windows\system32\igfxOSP.dll [2015-08-09] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-18] (NVIDIA Corporation)
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-1417691967-3038979484-1004723776-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-1417691967-3038979484-1004723776-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-1417691967-3038979484-1004723776-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Adam\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)


==================== Scheduled Tasks (Whitelisted) =============


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


Task: {1BC4267D-835D-4DD3-ABBE-75677EF1A1BB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {36F4C7D5-AAE3-4186-BCF8-02E757E2E2F8} - System32\Tasks\{CC0124BC-523E-4915-881A-375289F6CA0F} => C:\Windows\system32\pcalua.exe -a C:\Users\Adam\Downloads\sp46377.exe -d C:\Users\Adam\Downloads
Task: {5AC60B4B-78D8-4F48-B4EA-2797FA94325F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000Core => C:\Users\Adam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04] (Dropbox, Inc.)
Task: {5EE8ED2F-4BFB-4D22-8AC6-A2DF3CE287E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {6D8D5DEB-C107-4D1C-A9DD-61E8AF69AEDD} - System32\Tasks\SafeZone scheduled Autoupdate 1458683044 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {6F80B907-2993-44ED-8860-21F2A17E65DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {8FB590E4-CD8F-4FA1-A129-B4FFE3529C02} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\Scheduler.exe [2017-07-26] (IObit)
Task: {94DF01D6-F379-4B53-8D5D-0B02B34C93F1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {ADC6C2E0-82E4-4A0D-9CB2-54B161025895} - System32\Tasks\doPDF Update => C:\Program Files\Softland\novaPDF 8\Driver\UpdateApplication.exe [2016-03-03] ()
Task: {AE64FEAB-5BD4-444C-8C6B-DC0C72885652} - System32\Tasks\{0E8A7E95-659B-4F6F-ACF4-9614332C6E9E} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {C66E0751-A707-4616-B0C3-118EB3538AA7} - System32\Tasks\Driver Booster SkipUAC (Adam) => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe [2017-07-28] (IObit)
Task: {D0C33172-D937-45CD-BEDD-607195D2B201} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2017-05-02] (Tweaking.com)
Task: {D6EFD01A-13AA-4990-9B05-EE9ECA85C4FC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000UA => C:\Users\Adam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-04] (Dropbox, Inc.)
Task: {DADD3B74-548D-4F49-AC81-C10E7B58FA23} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {E43FCEDE-A2BD-466F-AA70-3DEC1EF81DDC} - System32\Tasks\Uninstaller_SkipUac_Adam => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2017-09-15] (IObit)
Task: {E5323F91-1A17-4321-89A5-55412075978B} - System32\Tasks\{B147FF07-B1B4-4A03-8DE0-0AB32CA68417} => C:\Windows\system32\pcalua.exe -a "C:\Users\Adam\Downloads\Cool Edit Pro 2.0 With Add Ons\Cool Edit Pro 2.0 Registration.exe" -d "C:\Users\Adam\Downloads\Cool Edit Pro 2.0 With Add Ons"
Task: {EA722AC9-B19C-40A4-AD13-FDC64688DBDC} - System32\Tasks\{EFE64E4E-E9C3-4BDC-8260-FE1A6861D820} => C:\Program Files (x86)\AirMyPC\AirMyPC.exe [2016-12-13] (AirMyPC)
Task: {EC214E44-5E9E-451A-A0BA-ECBBF00E3C67} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-12] (Adobe Systems Incorporated)
Task: {F1FE7DA3-8F4C-4556-A011-4E99F5002F74} - System32\Tasks\{8744F1A7-8808-4014-80C8-F86F412D6B1A} => C:\Program Files (x86)\AirMyPC\AirMyPC.exe [2016-12-13] (AirMyPC)
Task: {F217352D-55B4-4E69-A707-B7299B06AC2B} - System32\Tasks\{FFA5423A-95AF-4950-8A1A-ED28F6E01A93} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


Task: C:\Windows\Tasks\Driver Booster Scheduler.job => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\Scheduler.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000Core.job => C:\Users\Adam\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1417691967-3038979484-1004723776-1000UA.job => C:\Users\Adam\AppData\Local\Dropbox\Update\DropboxUpdate.exe


==================== Shortcuts & WMI ========================


(The entries could be listed to be restored or removed.)




==================== Loaded Modules (Whitelisted) ==============


2017-09-01 02:49 - 2017-09-01 02:49 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-01 18:12 - 2016-09-01 18:12 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-04-03 09:18 - 2017-02-06 16:02 - 000444584 _____ () C:\Program Files (x86)\Backblaze\bzserv.exe
2015-03-20 11:50 - 2013-01-25 11:08 - 000089600 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL
2015-03-20 11:50 - 2013-01-25 11:06 - 000328704 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2015-04-03 10:16 - 2008-10-17 00:22 - 000530432 _____ () C:\Program Files\HP\HP Wireless Deluxe Desktop Combo\TSR\xDaemon.exe
2015-04-03 10:16 - 2008-10-31 22:51 - 000453632 _____ () C:\Program Files\HP\HP Wireless Deluxe Desktop Combo\UI\xManager\xTools.dll
2017-03-16 17:15 - 2017-03-16 17:15 - 000866224 _____ () C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe
2015-04-03 09:18 - 2017-02-06 16:02 - 000597672 _____ () C:\Program Files (x86)\Backblaze\bzbui.exe
2014-12-08 19:56 - 2014-12-08 19:56 - 000347648 _____ () C:\Program Files (x86)\No-IP\DUC40.exe
2016-03-03 16:22 - 2016-03-03 16:22 - 000145696 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 000367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 003611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-11 15:57 - 2016-06-14 16:03 - 000288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 002665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 001988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 001840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-11 15:57 - 2016-06-14 16:03 - 000207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 000034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-07-13 12:09 - 2016-06-14 16:03 - 000920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-04-03 09:18 - 2017-02-06 16:02 - 000522920 _____ () C:\Program Files (x86)\Backblaze\bzfilelist.exe
2017-03-16 17:15 - 2017-03-16 17:15 - 000037808 _____ () C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
2014-12-08 19:59 - 2014-12-08 19:59 - 000012288 _____ () C:\Program Files (x86)\No-IP\ducservice.exe
2017-08-28 17:54 - 2017-08-23 04:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll
2017-08-28 17:54 - 2017-08-23 04:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll
2015-04-03 09:18 - 2017-02-06 16:02 - 004452520 _____ () C:\Program Files (x86)\Backblaze\x64\bztransmit64.exe
2015-04-01 21:16 - 2016-06-14 16:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-08 19:56 - 2014-12-08 19:56 - 000073728 _____ () C:\Program Files (x86)\No-IP\ducapi.dll
2017-09-01 02:49 - 2017-09-01 02:49 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 000080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-09-01 02:49 - 2017-09-01 02:49 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2015-12-03 11:21 - 2015-12-03 11:21 - 040578048 _____ () C:\Program Files (x86)\Sling Media\SlingplayerForWeb\libcef.dll
2015-12-03 11:21 - 2015-12-03 11:21 - 001920000 _____ () C:\Program Files (x86)\Sling Media\SlingplayerForWeb\ffmpegsumo.dll
2017-09-20 23:29 - 2017-05-22 11:16 - 000442144 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2017-09-20 23:29 - 2017-05-22 11:16 - 000210720 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2017-09-20 23:29 - 2017-05-22 11:16 - 000059680 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2017-02-08 19:22 - 2017-05-22 11:17 - 000899872 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\webres.dll
2017-02-08 19:22 - 2017-05-23 18:57 - 000631584 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\ProductStatistics.dll
2017-02-08 19:22 - 2017-05-22 11:16 - 000524064 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\sqlite3.dll
2017-09-21 18:09 - 2017-09-20 12:48 - 000771904 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-09-21 18:09 - 2017-09-20 12:48 - 001804608 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-09-21 18:09 - 2017-09-20 12:49 - 000023872 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\dropbox_bootstrap.dll
2017-09-21 18:09 - 2017-09-20 12:48 - 000100296 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000018888 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\select.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000020800 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000035792 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000021848 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000125904 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000694224 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 001862992 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000022864 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000145864 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000116688 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-09-21 18:09 - 2017-09-20 12:48 - 000105928 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000022864 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000062784 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000024528 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000040248 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000020936 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000124880 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000116176 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000392656 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-09-21 18:09 - 2017-09-20 12:50 - 000392512 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000026456 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000024016 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000175560 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000030160 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000043472 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000026056 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000048592 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000057808 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000022336 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000023368 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000023368 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000082264 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000025432 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000028616 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000024016 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 001796920 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000084424 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\sip.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 001956152 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 003859264 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000154440 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000521024 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000045888 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000042304 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000131384 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000218944 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000204096 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000060880 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000054608 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000022864 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000022872 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000021848 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000022872 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000027488 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000349128 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000023896 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000025936 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-09-21 18:09 - 2017-09-20 12:48 - 000036296 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\librsync.dll
2017-09-21 18:09 - 2017-09-20 12:49 - 000181056 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-09-21 18:09 - 2017-09-20 12:50 - 000030536 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-09-21 18:09 - 2017-09-20 12:49 - 000024368 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-09-21 18:09 - 2017-09-20 12:49 - 001638200 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-09-21 18:09 - 2017-09-20 12:50 - 000026456 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000545080 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000359224 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-09-21 18:09 - 2017-09-20 12:50 - 000038208 _____ () C:\Users\Adam\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd


==================== Alternate Data Streams (Whitelisted) =========


(If an entry is included in the fixlist, only the ADS will be removed.)


AlternateDataStreams: C:\Users\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Adam\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Adam\rr.png:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Adam\rr2017-006.jpg:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Adam\Desktop\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Adam\Desktop\sneakers.xls:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Adam\Downloads\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Adam\Documents\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Adam\Documents\wedding stuff:com.dropbox.attributes [168]
AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312]
AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo [122]


==================== Safe Mode (Whitelisted) ===================


(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"


==================== Association (Whitelisted) ===============


(If an entry is included in the fixlist, the registry item will be restored to default or removed.)




==================== Internet Explorer trusted/restricted ===============


(If an entry is included in the fixlist, it will be removed from the registry.)


IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\...\100sexlinks.com -> 100sexlinks.com


There are 4788 more sites.




==================== Hosts content: ===============================


(If needed Hosts: directive could be included in the fixlist to reset Hosts.)


2017-04-29 12:45 - 2017-09-20 20:43 - 000000855 _____ C:\Windows\system32\Drivers\etc\hosts


127.0.0.1 localhost


==================== Other Areas ============================


(Currently there is no automatic fix for this section.)


HKU\S-1-5-21-1417691967-3038979484-1004723776-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.


==================== MSCONFIG/TASK MANAGER disabled items ==


MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Killer Network Manager.lnk => C:\Windows\pss\Killer Network Manager.lnk.CommonStartup
MSCONFIG\startupreg: Advanced SystemCare 10 => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
MSCONFIG\startupreg: iCloudServices => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"


==================== FirewallRules (Whitelisted) ===============


(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{B3AC8A6E-37F4-4E0E-BF8B-117E2CCEF322}] => (Allow) C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{6AF48768-C06C-4E5B-A1A5-D9879E9FB416}] => (Allow) C:\Users\Adam\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{348355E3-863F-48EA-8693-2355A1E04BC3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7E8CDBB1-186D-46AB-AD50-ABE9CF72A27A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{60D784BA-CB04-4D59-945A-CEE9378F16E6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{DDCFE40D-1524-411E-B961-EAA3B60B63D4}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{DFDCA54F-3581-4670-93D5-594BD0D024CF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5F4D246D-B0FF-49D6-B432-A1056330DCE4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{39E21F58-F6C9-44B4-A832-6035E810A7AB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{1A29CD4A-BC74-48BF-B25C-390C8C84F2D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AACC72F7-DC33-46D5-8876-35E87FB2E5AB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5ADF7FF5-8961-45A7-9688-5D7D05D009F7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3536EF43-5112-40FA-B6C0-4DA1F519CD34}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{71E43F34-ED8A-4CF2-B0E2-691D7631379D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0E06EF20-8724-48B4-A0FE-6D5561AF7C01}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C0AB1708-4161-4957-9A9A-15A1752B6D6F}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{0C6DB23A-6100-4E45-80AA-4DC7891FAA13}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{3133C3B4-85AB-468C-800E-E0583EACBDCE}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{9C5D4733-1E63-46B8-AC0B-F9FFC1FA74D3}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{D7B85925-B695-4519-92ED-D4E86D63280E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{98FA15F0-0CD0-44B2-AC44-A281828C5169}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{6F17B865-4A68-4830-B705-F2A1B75D2C4C}C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe] => (Allow) C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe
FirewallRules: [UDP Query User{663462B0-B1D7-435F-94BE-052DC1966F81}C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe] => (Allow) C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe
FirewallRules: [TCP Query User{63448816-9D7D-4F8E-B0E4-8346F9588F93}C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe] => (Block) C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe
FirewallRules: [UDP Query User{D97A235F-ECC9-4049-8BF0-92EF6895A939}C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe] => (Block) C:\program files (x86)\sling media\slingplayerforweb\slingplayerforweb.exe
FirewallRules: [{E6925D46-F70B-44C3-80EB-E56A21F8EF32}] => (Allow) C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58F9F1A5-C6C8-4A3D-8FA4-554B783AB960}] => (Allow) C:\Users\Adam\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3F889589-B33D-46B8-8246-D21942E0394B}] => (Allow) LPort=8501
FirewallRules: [{70867984-8017-4C91-A4C5-6B83FE10D021}] => (Allow) LPort=8501
FirewallRules: [TCP Query User{A9FF9AA0-7398-4C7C-8112-22C1715BB86B}C:\users\adam\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\adam\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{7A6241A6-2C1E-4830-9027-CC31EA69651C}C:\users\adam\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\adam\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{C154B158-2879-4B19-9DD7-865C5C4EEC51}] => (Allow) LPort=8544
FirewallRules: [TCP Query User{BE681712-DA68-4CF7-B53E-1FF9FB48E948}C:\program files (x86)\airfoil\airfoil.exe] => (Allow) C:\program files (x86)\airfoil\airfoil.exe
FirewallRules: [UDP Query User{B8B5F91C-4C64-410F-8CAD-097176BE0DAA}C:\program files (x86)\airfoil\airfoil.exe] => (Allow) C:\program files (x86)\airfoil\airfoil.exe
FirewallRules: [TCP Query User{D2DBDE2D-EACC-45FD-A006-7AFB6837E8A8}C:\program files (x86)\airfoil\airfoilspeakers.exe] => (Allow) C:\program files (x86)\airfoil\airfoilspeakers.exe
FirewallRules: [UDP Query User{19AC396B-18E0-4F91-8E03-17C896AD5313}C:\program files (x86)\airfoil\airfoilspeakers.exe] => (Allow) C:\program files (x86)\airfoil\airfoilspeakers.exe
FirewallRules: [{10D06E9F-981C-406C-B942-6867E4F6E54D}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe
FirewallRules: [{5DF2A265-2CBD-4846-BCEA-5B727404E9A7}] => (Block) LPort=445
FirewallRules: [{191D3DA6-F674-4B97-9EEB-D45C1AB504DB}] => (Block) LPort=445
FirewallRules: [{1D55911A-3E8A-4B9A-983D-1F7FE368C0CC}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoPro Quik.exe
FirewallRules: [{C5248BD3-9C3E-46CB-A374-063AB0E3E592}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProMsgBus.exe
FirewallRules: [{FF46570E-D39C-4AE1-996B-07E4CBA34409}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProIDService.exe
FirewallRules: [{AA767ED2-4F5E-48D5-AF18-7F81B72C50ED}] => (Allow) C:\Program Files\GoPro\GoPro Desktop App\GoProLauncher.exe
FirewallRules: [{E436C0C5-012F-4129-9319-21EB1E871325}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [TCP Query User{CA9F36F7-B2AC-4205-8D96-421DDCCC18CE}C:\program files (x86)\google\chrome\application\chromes.exe] => (Allow) C:\program files (x86)\google\chrome\application\chromes.exe
FirewallRules: [UDP Query User{D1EBD4D5-DE6B-4CBA-ABAE-388D073FE26C}C:\program files (x86)\google\chrome\application\chromes.exe] => (Allow) C:\program files (x86)\google\chrome\application\chromes.exe
FirewallRules: [{604BAE0E-B2B5-4599-AEC7-78391BF41EBB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D075F684-D00F-4F57-88B0-C6CC4B33D495}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AF7D1F8D-1B3D-428B-B9F0-A9BDE564A537}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E1D98892-5CE0-4A02-91F2-CEA3C67AB5C6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0F334A6C-2348-4BC7-A4F4-8ED01EAE64B4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{669F3FA7-EC6A-49A6-A66C-2DD246653D65}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{B3F83C41-9429-4DAD-AC47-8457C7CDAA7E}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{B8472C29-FAD0-4E94-AA73-468CB5379947}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe
FirewallRules: [{2F2A376F-C586-4620-B697-BA9CB668F59C}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe
FirewallRules: [{00FA32C3-91A6-428A-9BDB-83149FA6163C}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DBDownloader.exe
FirewallRules: [{B06370A2-D407-4C8D-B3CC-7957FEBAA66D}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DBDownloader.exe
FirewallRules: [{ABFEABBB-B5DE-405A-AC5A-FD0D537FC502}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\AutoUpdate.exe
FirewallRules: [{3EF43891-CE42-4C11-BD1D-DCD4F632940F}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.5.0\AutoUpdate.exe


==================== Restore Points =========================


13-09-2017 13:13:19 Scheduled Checkpoint
17-09-2017 14:41:24 Restore Operation
18-09-2017 23:41:29 Removed iTunes
19-09-2017 00:04:20 Installed iTunes
19-09-2017 23:24:03 Installed Killer Performance Driver Suite.
19-09-2017 23:47:05 Restore Operation
20-09-2017 08:57:29 Installed Killer Performance Driver Suite.
20-09-2017 09:22:14 Restore Operation
20-09-2017 23:32:11 Avast Free Antivirus restore point
20-09-2017 23:42:22 Driver Booster : HID Keyboard Device


==================== Faulty Device Manager Devices =============




==================== Event log errors: =========================


Application errors:
==================
Error: (09/21/2017 06:18:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iTunes.exe version 12.7.0.166 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.


Process ID: 1b7c


Start Time: 01d33325dc7f2e85


Termination Time: 5


Application Path: C:\Program Files\iTunes\iTunes.exe


Report Id:


Error: (09/21/2017 06:03:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SBXFIMB3.exe, version: 1.0.7.0, time stamp: 0x51761b5e
Faulting module name: SBXFIMB3.exe, version: 1.0.7.0, time stamp: 0x51761b5e
Exception code: 0xc0000417
Fault offset: 0x00133f8c
Faulting process id: 0x4cc
Faulting application start time: 0x01d3332556bdcad8
Faulting application path: C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe
Faulting module path: C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe
Report Id: c37ebbe3-9f18-11e7-805e-fcaa149b6993


Error: (09/21/2017 06:00:37 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )
Description: The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.


Details:
Could not query the status of the EventSystem service.


System Error:
A system shutdown is in progress.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddWin32ServiceFiles: Unable to back up image of service AvastVBox COM Service since QueryServiceConfig API failed


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddWin32ServiceFiles: Unable to back up image of service Avast Antivirus since QueryServiceConfig API failed


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddWin32ServiceFiles: Unable to back up image of service aswbIDSAgent since QueryServiceConfig API failed


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswVmm.


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswStm.


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.


System Error:
The system cannot find the file specified.
.


Error: (09/20/2017 11:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSnx.


System Error:
The system cannot find the file specified.
.




System errors:
=============
Error: (09/21/2017 06:09:49 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.


Error: (09/21/2017 06:04:59 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.


Error: (09/21/2017 12:26:11 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.


Error: (09/21/2017 12:15:22 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service NVDisplay.ContainerLocalSystem with arguments "" in order to run the server:
{DCAB0989-1301-4319-BE5F-ADE89F88581C}


Error: (09/21/2017 12:14:04 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.


Error: (09/21/2017 12:14:04 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server:
{D3DCB472-7261-43CE-924B-0704BD730D5F}


Error: (09/21/2017 12:14:04 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server:
{145B4335-FE2A-4927-A040-7C35AD3180EF}


Error: (09/21/2017 12:12:09 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service MDM with arguments "" in order to run the server:
{0C0A3666-30C9-11D0-8F20-00805F2CD064}


Error: (09/21/2017 12:12:06 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.


Error: (09/21/2017 12:12:06 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.




CodeIntegrity:
===================================
Date: 2017-08-21 09:24:56.923
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


Date: 2017-08-21 09:24:56.814
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


Date: 2016-08-30 08:57:13.316
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-30 08:49:14.396
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-30 08:49:14.131
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-30 08:48:21.143
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-30 08:48:20.894
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-20 17:01:58.793
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-20 16:58:03.073
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.


Date: 2016-08-20 16:58:02.746
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.




==================== Memory info ===========================


Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 32%
Total physical RAM: 16245.32 MB
Available physical RAM: 10936.49 MB
Total Virtual: 32488.82 MB
Available Virtual: 26530.76 MB


==================== Drives ================================


Drive c: () (Fixed) (Total:3724.95 GB) (Free:1658.88 GB) NTFS


==================== MBR & Partition Table ==================


========================================================
Disk: 0 (Size: 3726 GB) (Disk ID: 987E5BC6)


Partition: GPT.


==================== End of Addition.txt ============================

 

[lionheart44]

Re: itunes 12.7 cannot connect to apple servers

Result of Security Analysis by Rocket Grannie (x86) Updated: 14th September, 2017
Running from:C:\Users\Adam\Desktop (18:27:45 - 09/21/2017)
***---------------------------------------------------------***
Microsoft Windows 7 Professional X64 Service Pack 1
UAC is Enabled
Internet Explorer 11
Default Browser: Google Chrome
***------------Antivirus - Antispyware - Firewall-----------***
Windows Defender (Disabled - up to Date)
Windows Firewall (Enabled)
No other Firewall Installed
***-------Security Programs - Browsers - Miscellaneous------***
Adobe Flash Player NPAPI (27.0.0.130)
Google Chrome (60.0.3112.113)
Java (8.0.450)
Malwarebytes (3.2.2.2029)
Microsoft Silverlight (5.1.50907.0)
Mozilla Firefox (55.0.3)


***----------------Analysis Complete-------------------------***

 

[Corrine]

Re: itunes 12.7 cannot connect to apple servers

Hi, lionheart44. It appears that you are not alone having issues with iTunes 12.7. This thread has 19 others reporting the same issue: iTunes 12.7 fails connection to Store AGAIN! | Official Apple Support Communities.

That said, you still have an open thread Tweaking.com. Please follow the instructions there, follow up with any further instructions and see if that solves the iTunes issue. PC (specifically itunes 12.7) thinks i have no internet connection when i do

Please take care of number 1 below and reinstall your antivirus software. Next, follow up at Tweaking.com. When that is complete, continue with the remaining instructions:

1. First and foremost, the recommendation by Apple support to uninstall your security software, well, let's just say your first step is to immediately reinstall your anti-virus software!

2. The version of Java on your computer is severely out of date. There are very few reasons why Java is needed on a personal computer. My personal advice would be to uninstall Java 8 Update 45. If a program you use does require Java, you will be prompted to install it. If, however, you opt to keep it, please install the latest update, Java SE 8u144. UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional. Preferably, see the instructions below on how to handle "Unwanted Extras".

3. Please uninstall uTorrent. P2P programs form a direct conduit on to your computer. They have always been a target of malware writers and are increasingly so of late. P2P security measures are easily circumvented and if your P2P program is not configured correctly, you may be sharing more files than you realize. There have been cases where people's passwords, address books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured program.

With P2P file sharing, a file can be distributed among many hosts, and peers will provide for download the sections that they have already downloaded. This results in the distinct possibility of a distribution method in which malicious bits are mixed with with good files.

4. adbLink, which apparently is a companion program for Kodi is listed as installed on your computer. However, not only is it out of date, I note that Kodi is not shown as installed. If no longer needed, I suggest that you uninstall it.

5. If you wish to proceed with cleaning your computer, please do the following to provide fresh FRST logs:

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
• Note: After FRST completes updating and the tool appears, check the box next to Addition.txt under the "Optional Scan" section
• Press Scan button.
• Please copy/paste both logs in your reply.

 

[lionheart44]

Re: itunes 12.7 cannot connect to apple servers

i think everything is good, now again thank you very much for all your patience and help!

 

[Corrine]

Re: itunes 12.7 cannot connect to apple servers

Thanks for following up.