EXTREMELY slow computer with terrible startup

View previous topic View next topic Go down

In Progress EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 23rd November 2016, 11:10 pm

Hi Hi, I hope I posted in the right section for this.
For about a month now I've been dealing with a sluggish computer and just recently it stopped loading up on me. It takes too long to click on my account, type the password, and log in. Once it actually does it just stays on black.
I'm currently running on Safe Mode with Networking, seems to be working fine after loading up. My only worry is that it's not a virus causing this, but possibly hardware issues?

Any help is appreciated!

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 23rd November 2016, 11:51 pm

Hello there,

Please read this topic and post logs in your next reply: [You must be registered and logged in to see this link.]


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 26th November 2016, 9:39 pm

[You must be registered and logged in to see this link.] - Do you still need help with this? You have not replied for 3 days, so we want to ensure you still need help.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 29th November 2016, 3:50 am

Yes sorry, holiday madness. I've been running FarBar since the first day I posted but the program has been running slow and has frozen up on many twice. It seems to be running fine right now.
I don't actually see the progress bar moving. And it'll say (Not Responding) whenever I try to click the window. I've spent the whole day trying to upload a screen shot and upload it here.

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 29th November 2016, 5:41 am

Okay, let's try something easier...

Malwarebytes' Anti-Malware
If this program is already installed: Skip the installation and run only the scan!
Download and install: Please download [You must be registered and logged in to see this link.] to your desktop.

  • Double-click mbam-setup-2.0.0.****.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:

    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.


  • Click Finish.
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.

How to get logs: (Export log to save as txt)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Export'.
  • Click 'Text file (*.txt)'
  • In the Save File dialog box which appears, click on Desktop.
  • In the File name: box type a name for your scan log.
  • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
  • Click Ok
  • Attach that saved log to your next reply.

(Copy to clipboard for pasting into forum replies or tickets)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.





Please download [You must be registered and logged in to see this link.] onto your Desktop.

  • Double click on AdwCleaner_xxxx.exe to run the tool.
  • Click on Scan.
  • After done scanning, please hit Logfile. Locate the logfile in the Scan tab, double-click on it, copy the information inside of it, and paste it into your next reply.
  • You can find the logfile at C:\AdwCleaner[Sx].txt as well.





Fix with Junkware Removal Tool

Please download [You must be registered and logged in to see this link.] and save the file to your desktop.

  • Right-click on the JRT.exe or Junkware Removal Tool icon and select Run as Administrator to start the tool.
  • Follow the prompts and let this process run uninterrupted.
  • This scan can take a while, depending on your System specs.
  • Upon completion, a log (JRT.txt) will open on your desktop.


Please include the contents of that file in your reply.

Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.




In your next reply, please post the following logs:
  • Malwarebytes' Anti-Malware Log
  • AdwCleaner log
  • Junkware Removal Tool log


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 1st December 2016, 9:47 pm

Haven't had access to a better running device to post this, FarBar actually finished after we last interacted, here's the log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
Ran by user (administrator) on USER-HP (27-11-2016 21:51:29)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & Danilo & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [You must be registered and logged in to see this link.]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
( ) C:\Windows\System32\lxblcoms.exe
( ) C:\Windows\System32\lxeecoms.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\user\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Chicony) C:\Program Files (x86)\Camera Assistant Software for ViewSonic\traybar.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXSTM.exe
() C:\Program Files (x86)\Camera Assistant Software for ViewSonic\CEC_MAIN.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2010-10-21] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-06-24] (IDT, Inc.)
HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-05] (PDF Complete Inc)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-09-01] (Apple Inc.)
HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files (x86)\Camera Assistant Software for ViewSonic\traybar.exe [774144 2007-08-20] (Chicony)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-02-29] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-02-29] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [LTCM Client] => C:\Program Files (x86)\LTCM Client\ltcmClient.exe [1596096 2009-08-05] (Leader Technologies Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7408312 2016-06-27] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [Google Update] => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [Spotify Web Helper] => C:\Users\user\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-10-28] (Spotify Ltd)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [AceStream] => C:\Users\user\AppData\Roaming\ACEStream\engine\ace_engine.exe
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-06-03] (AVAST Software)
Startup: C:\Users\Danilo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2012-07-12]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2013-07-03]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8D5C3D27-403F-45C6-A3FF-D29F3ACBE4C2}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A8D08E84-D6B4-4B9B-8D1E-C8A47B5D033C}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
[You must be registered and logged in to see this link.]
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
[You must be registered and logged in to see this link.]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Software\Microsoft\Internet Explorer\Main,Search Page = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {866B19C7-65C3-4340-A244-92A88B9FBFC3} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = [You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-04-18] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-06-04] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-04-18] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-04] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - No Name - {06C7AD57-B655-418D-9AB8-9526A6D2E052} -  No File
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

FireFox:
========
FF DefaultProfile: fcpzgi7g.default-1395282151623
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 [2016-11-27]
FF NewTab: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> about:home
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF Homepage: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> about:home
FF Extension: (Quick Translator) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi [2015-05-31]
FF Extension: (Adblock Plus) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Greasemonkey) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\searchplugins\google-lavasoft.xml [2016-03-12]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2016-11-17] [not signed]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2016-11-17] [not signed]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2016-11-17] [not signed]
FF HKLM\...\Firefox\Extensions: [
[You must be registered and logged in to see this link.]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-06-03]
FF HKLM\...\Firefox\Extensions: [[You must be registered and logged in to see this link.]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-06-03]
FF HKLM-x32\...\Firefox\Extensions: [[You must be registered and logged in to see this link.]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [[You must be registered and logged in to see this link.]] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2016-01-14] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[You must be registered and logged in to see this link.]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @[You must be registered and logged in to see this link.] -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @[You must be registered and logged in to see this link.] -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @[You must be registered and logged in to see this link.] -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-04] (Oracle Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-04] (Oracle Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @[You must be registered and logged in to see this link.] Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2012-04-29] ()
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000: @[You must be registered and logged in to see this link.] -> C:\Users\user\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000: @[You must be registered and logged in to see this link.] -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000: @[You must be registered and logged in to see this link.] -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000: @[You must be registered and logged in to see this link.] Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000: @[You must be registered and logged in to see this link.] Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2016-11-16]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-09]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-16]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-29]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-11]
CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-13]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-05]
CHR Extension: (Avast Online Security) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-11-05]
CHR Extension: (Ace Stream Web Extension) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2016-10-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-26]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-26]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-05]
CHR HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - [You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-04-18]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2015-10-29] (Microsoft Corporation) [File not signed]
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-13] (Microsoft Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [204288 2011-07-04] (AMD) [File not signed]
S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [34816 2016-10-07] (Microsoft Corporation) [File not signed]
R3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2016-05-04] (Microsoft Corporation) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680448 2016-06-14] (Microsoft Corporation) [File not signed]
R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680448 2016-06-14] (Microsoft Corporation) [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-06-03] (AVAST Software)
S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-20] (Microsoft Corporation) [File not signed]
S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-13] (Microsoft Corporation) [File not signed]
R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-20] (Microsoft Corporation) [File not signed]
R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-20] (Microsoft Corporation) [File not signed]
R3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04] (Microsoft Corporation) [File not signed]
S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-13] (Microsoft Corporation) [File not signed]
S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [190976 2016-06-14] (Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [145920 2016-06-14] (Microsoft Corporation) [File not signed]
R2 DcomLaunch; C:\Windows\system32\rpcss.dll [511488 2016-02-02] (Microsoft Corporation) [File not signed]
S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-13] (Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-20] (Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-20] (Microsoft Corporation) [File not signed]
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1386496 2016-08-22] (Microsoft Corporation) [File not signed]
R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-08-15] (Microsoft Corporation) [File not signed]
S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-20] (Microsoft Corporation) [File not signed]
R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-20] (Microsoft Corporation) [File not signed]
R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-13] (Microsoft Corporation) [File not signed]
R2 EFS; C:\Windows\System32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-20] (Microsoft Corporation) [File not signed]
S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-13] (Microsoft Corporation) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-20] (Microsoft Corporation) [File not signed]
R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-13] (Microsoft Corporation) [File not signed]
R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-13] (Microsoft Corporation) [File not signed]
S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-20] (Microsoft Corporation) [File not signed]
R3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-13] (Microsoft Corporation) [File not signed]
R3 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-13] (Microsoft Corporation) [File not signed]
R2 FontCache; C:\Windows\system32\FntCache.dll [1180160 2016-09-12] (Microsoft Corporation) [File not signed]
R2 gpsvc; C:\Windows\System32\gpsvc.dll [794624 2016-05-12] (Microsoft Corporation) [File not signed]
R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-13] (Microsoft Corporation) [File not signed]
R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-13] (Microsoft Corporation) [File not signed]
S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-20] (Microsoft Corporation) [File not signed]
S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-20] (Microsoft Corporation) [File not signed]
R3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-20] (Microsoft Corporation) [File not signed]
R3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-20] (Microsoft Corporation) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2016-10-27] (Microsoft Corporation) [File not signed]
R2 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-11] (Microsoft Corporation) [File not signed]
S2 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-13] (Microsoft Corporation) [File not signed]
R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation) [File not signed]
R3 KeyIso; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-13] (Microsoft Corporation) [File not signed]
R2 LanmanServer; C:\Windows\system32\srvsvc.dll [236032 2010-11-20] (Microsoft Corporation) [File not signed]
R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-20] (Microsoft Corporation) [File not signed]
S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-13] (Microsoft Corporation) [File not signed]
R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-13] (Microsoft Corporation) [File not signed]
R2 lxbl_device; C:\Windows\system32\lxblcoms.exe [566704 2007-04-20] ( )
R2 lxbl_device; C:\Windows\SysWOW64\lxblcoms.exe [537520 2007-04-20] ( )
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-04-14] ( )
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-20] (Microsoft Corporation) [File not signed]
S2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-13] (Microsoft Corporation) [File not signed]
R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-20] (Microsoft Corporation) [File not signed]
S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-13] (Microsoft Corporation) [File not signed]
S3 msiserver; C:\Windows\System32\msiexec.exe [128512 2016-05-04] (Microsoft Corporation) [File not signed]
S3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2016-05-04] (Microsoft Corporation) [File not signed]
S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-20] (Microsoft Corporation) [File not signed]
S3 Netlogon; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-13] (Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-13] (Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-13] (Microsoft Corporation) [File not signed]
R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303616 2014-12-05] (Microsoft Corporation) [File not signed]
R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-13] (Microsoft Corporation) [File not signed]
S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13] (Microsoft Corporation) [File not signed]
S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-13] (Microsoft Corporation) [File not signed]
R2 PcaSvc; C:\Windows\System32\pcasvc.dll [187904 2016-06-14] (Microsoft Corporation) [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-05] (PDF Complete Inc)
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-13] (Microsoft Corporation) [File not signed]
S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft Corporation) [File not signed]
S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-20] (Microsoft Corporation) [File not signed]
R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation) [File not signed]
S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-13] (Microsoft Corporation) [File not signed]
S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13] (Microsoft Corporation) [File not signed]
R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [502272 2016-05-12] (Microsoft Corporation) [File not signed]
R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-13] (Microsoft Corporation) [File not signed]
R2 ProfSvc; C:\Windows\system32\profsvc.dll [210432 2014-12-18] (Microsoft Corporation) [File not signed]
S3 ProtectedStorage; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-13] (Microsoft Corporation) [File not signed]
S3 QWAVE; C:\Windows\SysWOW64\qwave.dll [210944 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-20] (Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-13] (Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-13] (Microsoft Corporation) [File not signed]
R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-13] (Microsoft Corporation) [File not signed]
R2 RpcSs; C:\Windows\system32\rpcss.dll [511488 2016-02-02] (Microsoft Corporation) [File not signed]
R2 SamSs; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-13] (Microsoft Corporation) [File not signed]
R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2015-08-05] (Microsoft Corporation) [File not signed]
S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) [File not signed]
S3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-20] (Microsoft Corporation) [File not signed]
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2016-02-09] (Microsoft Corporation) [File not signed]
R2 SENS; C:\Windows\System32\sens.dll [64512 2009-07-13] (Microsoft Corporation) [File not signed]
R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-13] (Microsoft Corporation) [File not signed]
S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-13] (Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-20] (Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-20] (Microsoft Corporation) [File not signed]
S3 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-13] (Microsoft Corporation) [File not signed]
R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-20] (Microsoft Corporation) [File not signed]
R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation) [File not signed]
S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-13] (Microsoft Corporation) [File not signed]
R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-10] (Microsoft Corporation) [File not signed]
S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-20] (Microsoft Corporation) [File not signed]
S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-13] (Microsoft Corporation) [File not signed]
R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-13] (Microsoft Corporation) [File not signed]
S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-13] (Microsoft Corporation) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [302592 2011-06-24] (IDT, Inc.) [File not signed]
R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-20] (Microsoft Corporation) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-13] (Microsoft Corporation) [File not signed]
R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2015-07-15] (Microsoft Corporation) [File not signed]
S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-20] (Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-20] (Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation) [File not signed]
S3 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-13] (Microsoft Corporation) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-13] (Microsoft Corporation) [File not signed]
S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-13] (Microsoft Corporation) [File not signed]
R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-13] (Microsoft Corporation) [File not signed]
S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-20] (Microsoft Corporation) [File not signed]
S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-13] (Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-13] (Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-13] (Microsoft Corporation) [File not signed]
R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-13] (Microsoft Corporation) [File not signed]
S3 VaultSvc; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft Corporation) [File not signed]
S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-20] (Microsoft Corporation) [File not signed]
S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-20] (Microsoft Corporation) [File not signed]
S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-13] (Microsoft Corporation) [File not signed]
S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-13] (Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-20] (Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-13] (Microsoft Corporation) [File not signed]
R3 WdiServiceHost; C:\Windows\system32\wdi.dll [91136 2015-01-08] (Microsoft Corporation) [File not signed]
R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-08] (Microsoft Corporation) [File not signed]
S3 WdiSystemHost; C:\Windows\system32\wdi.dll [91136 2015-01-08] (Microsoft Corporation) [File not signed]
S3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-08] (Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\System32\webclnt.dll [263680 2016-09-08] (Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [208896 2016-09-08] (Microsoft Corporation) [File not signed]
S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-13] (Microsoft Corporation) [File not signed]
S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-13] (Microsoft Corporation) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation) [File not signed]
R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444928 2016-05-11] (Microsoft Corporation) [File not signed]
R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\system32\WsmSvc.dll [2023424 2016-08-06] (Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1178112 2016-08-06] (Microsoft Corporation) [File not signed]
R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-13] (Microsoft Corporation) [File not signed]
S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-13] (Microsoft Corporation) [File not signed]
R2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-13] (Microsoft Corporation) [File not signed]
R3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-20] (Microsoft Corporation) [File not signed]
R2 wscsvc; C:\Windows\System32\wscsvc.dll [97280 2009-07-13] (Microsoft Corporation) [File not signed]
R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-03] (Microsoft Corporation) [File not signed]
R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-03] (Microsoft Corporation) [File not signed]
R2 wuauserv; C:\Windows\system32\wuaueng.dll [2607104 2016-05-13] (Microsoft Corporation) [File not signed]
R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-25] (Microsoft Corporation) [File not signed]
S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-27] (Microsoft Corporation) [File not signed]


omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 1st December 2016, 9:48 pm

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-20] (Microsoft Corporation) [File not signed]
S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20] (Microsoft Corporation) [File not signed]
R1 AFD; C:\Windows\system32\drivers\afd.sys [497664 2015-10-13] (Microsoft Corporation) [File not signed]
S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-13] (Microsoft Corporation) [File not signed]
R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [9359872 2011-07-04] (ATI Technologies Inc.) [File not signed]
R3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [309760 2011-07-04] (Advanced Micro Devices, Inc.) [File not signed]
R3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-13] (Microsoft Corporation) [File not signed]
S3 AppID; C:\Windows\system32\drivers\appid.sys [62464 2016-10-07] (Microsoft Corporation) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-06-03] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-06-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-06-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-06-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-06-03] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-06-03] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-06-03] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-06-03] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software)
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-13] (Microsoft Corporation) [File not signed]
S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [File not signed]
S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [File not signed]
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-13] (Microsoft Corporation) [File not signed]
R1 blbdrive; C:\Windows\system32\drivers\blbdrive.sys [45056 2009-07-13] (Microsoft Corporation) [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90112 2016-10-05] (Microsoft Corporation) [File not signed]
S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-13] (Brother Industries Ltd.) [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-13] (Microsoft Corporation) [File not signed]
R4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-13] (Microsoft Corporation) [File not signed]
R1 cdrom; C:\Windows\system32\drivers\cdrom.sys [147456 2010-11-20] (Microsoft Corporation) [File not signed]
S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-13] (Microsoft Corporation) [File not signed]
S3 CmBatt; C:\Windows\system32\drivers\CmBatt.sys [17664 2009-07-13] (Microsoft Corporation) [File not signed]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] (Microsoft Corporation) [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [106496 2016-09-08] (Microsoft Corporation) [File not signed]
R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-13] (Microsoft Corporation) [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2015-12-08] (Microsoft Corporation) [File not signed]
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-13] (Microsoft Corporation) [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-13] (Microsoft Corporation) [File not signed]
S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-13] (Microsoft Corporation) [File not signed]
S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-13] (Microsoft Corporation) [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-13] (Microsoft Corporation) [File not signed]
S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576 2009-07-13] (Microsoft Corporation) [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed]
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-20] (Microsoft Corporation) [File not signed]
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] (Microsoft Corporation) [File not signed]
S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-13] (Microsoft Corporation) [File not signed]
S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-13] (Microsoft Corporation) [File not signed]
S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-13] (Microsoft Corporation) [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20] (Microsoft Corporation) [File not signed]
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-24] (Microsoft Corporation) [File not signed]
S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-13] (Microsoft Corporation) [File not signed]
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6108416 2009-06-10] (Intel Corporation) [File not signed]
S3 intelppm; C:\Windows\system32\drivers\intelppm.sys [62464 2009-07-13] (Microsoft Corporation) [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] (Microsoft Corporation) [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] (Microsoft Corporation) [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-13] (Microsoft Corporation) [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-13] (Microsoft Corporation) [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] (Microsoft Corporation) [File not signed]
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-13] (Microsoft Corporation) [File not signed]
R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-13] (Microsoft Corporation) [File not signed]
R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-13] (Microsoft Corporation) [File not signed]
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [109272 2016-11-17] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-17] (Malwarebytes)
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-13] (Microsoft Corporation) [File not signed]
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-13] (Microsoft Corporation) [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-13] (Microsoft Corporation) [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [142336 2016-09-08] (Microsoft Corporation) [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [159744 2016-10-10] (Microsoft Corporation) [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [291328 2016-10-10] (Microsoft Corporation) [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [129536 2016-10-10] (Microsoft Corporation) [File not signed]
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-13] (Microsoft Corporation) [File not signed]
S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-13] (Microsoft Corporation) [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-13] (Microsoft Corporation) [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-13] (Microsoft Corporation) [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-13] (Microsoft Corporation) [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] (Microsoft Corporation) [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] (Microsoft Corporation) [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] (Microsoft Corporation) [File not signed]
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-13] (Microsoft Corporation) [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [262144 2016-05-11] (Microsoft Corporation) [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-13] (Microsoft Corporation) [File not signed]
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-13] (Microsoft Corporation) [File not signed]
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-13] (Microsoft Corporation) [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-13] (Microsoft Corporation) [File not signed]
S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-13] (Microsoft Corporation) [File not signed]
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2016-06-14] (Microsoft Corporation) [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] (Microsoft Corporation) [File not signed]
S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-13] (Microsoft Corporation) [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] (Microsoft Corporation) [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-13] (Microsoft Corporation) [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-13] (Microsoft Corporation) [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation) [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-13] (Microsoft Corporation) [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-13] (Microsoft Corporation) [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] (Microsoft Corporation) [File not signed]
S3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-13] (Microsoft Corporation) [File not signed]
R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-13] (Microsoft Corporation) [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-13] (Microsoft Corporation) [File not signed]
R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-13] (Microsoft Corporation) [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] (Microsoft Corporation) [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-16] (Microsoft Corporation) [File not signed]
R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-13] (Microsoft Corporation) [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] (Microsoft Corporation) [File not signed]
R3 sdbus; C:\Windows\System32\DRIVERS\sdbus.sys [109056 2010-11-20] (Microsoft Corporation) [File not signed]
S4 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-13] (Microsoft Corporation) [File not signed]
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Microsoft Corporation) [File not signed]
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-13] (Microsoft Corporation) [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-13] (Microsoft Corporation) [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-13] (Microsoft Corporation) [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] (Microsoft Corporation) [File not signed]
S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-13] (Microsoft Corporation) [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-13] (Microsoft Corporation) [File not signed]
R3 srv; C:\Windows\System32\DRIVERS\srv.sys [464896 2016-08-12] (Microsoft Corporation) [File not signed]
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [405504 2016-08-12] (Microsoft Corporation) [File not signed]
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168960 2016-08-12] (Microsoft Corporation) [File not signed]
R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [528384 2011-06-10] (IDT, Inc.) [File not signed]
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [46080 2016-07-07] (Microsoft Corporation) [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-13] (Microsoft Corporation) [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-16] (Microsoft Corporation) [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [118272 2015-10-13] (Microsoft Corporation) [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-16] (Microsoft Corporation) [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [56832 2013-10-01] (Microsoft Corporation) [File not signed]
S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [30208 2012-08-23] (Microsoft Corporation) [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] (Microsoft Corporation) [File not signed]
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] (Microsoft Corporation) [File not signed]
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-20] (Microsoft Corporation) [File not signed]
S3 UmPass; C:\Windows\system32\drivers\umpass.sys [9728 2009-07-13] (Microsoft Corporation) [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [File not signed]
S3 usbaudio; C:\Windows\System32\drivers\usbaudio.sys [109824 2013-07-12] (Microsoft Corporation) [File not signed]
R3 usbccgp; C:\Windows\system32\drivers\usbccgp.sys [99840 2016-08-16] (Microsoft Corporation) [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [56320 2016-08-16] (Microsoft Corporation) [File not signed]
R3 usbhub; C:\Windows\system32\drivers\usbhub.sys [343552 2016-08-16] (Microsoft Corporation) [File not signed]
R3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2016-08-16] (Microsoft Corporation) [File not signed]
S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-13] (Microsoft Corporation) [File not signed]
S3 usbscan; C:\Windows\System32\DRIVERS\usbscan.sys [42496 2013-07-02] (Microsoft Corporation) [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2016-02-03] (Microsoft Corporation) [File not signed]
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2016-08-16] (Microsoft Corporation) [File not signed]
S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation) [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-13] (Microsoft Corporation) [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-13] (Microsoft Corporation) [File not signed]
R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-13] (Microsoft Corporation) [File not signed]
R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-13] (Microsoft Corporation) [File not signed]
R3 vwifimp; C:\Windows\System32\DRIVERS\vwifimp.sys [17920 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) [File not signed]
R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-13] (Microsoft Corporation) [File not signed]
S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WSDPrintDevice; C:\Windows\System32\DRIVERS\WSDPrint.sys [23040 2009-07-13] (Microsoft Corporation) [File not signed]
S3 WSDScan; C:\Windows\System32\DRIVERS\WSDScan.sys [25088 2009-07-13] (Microsoft Corporation) [File not signed]
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-25] (Microsoft Corporation) [File not signed]
R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-25] (Microsoft Corporation) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 1st December 2016, 9:49 pm

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-25 22:19 - 2016-11-27 21:51 - 00061326 _____ C:\Users\user\Downloads\FRST.txt
2016-11-25 22:07 - 2016-11-25 22:19 - 00000000 ____D C:\FRST
2016-11-25 21:48 - 2016-11-25 21:53 - 02412032 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2016-11-25 21:11 - 2016-11-25 21:17 - 06253640 _____ (AVAST Software) C:\Users\user\Downloads\avast_free_antivirus_setup_online_cnet_2.exe
2016-11-25 21:11 - 2016-11-25 21:17 - 06253640 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online_cnet_2.exe
2016-11-23 13:32 - 2016-11-24 13:44 - 00000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2016-11-17 16:36 - 2016-11-23 13:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-17 15:13 - 2016-11-17 15:18 - 16563352 _____ (Malwarebytes Corp.) C:\Users\user\Downloads\mbar-1.09.3.1001.exe
2016-11-17 14:46 - 2016-11-17 15:25 - 00000000 ____D C:\Users\user\Desktop\mbar
2016-11-16 14:31 - 2016-11-16 14:31 - 03910208 _____ C:\Users\user\Downloads\adwcleaner_6.030.exe
2016-11-15 14:57 - 2016-11-23 13:25 - 00538312 _____ C:\Windows\ntbtlog.txt
2016-11-08 13:20 - 2016-11-02 07:36 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-11-08 13:20 - 2016-11-02 07:22 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-11-08 13:20 - 2016-11-02 06:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-11-08 13:20 - 2016-10-27 19:59 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-11-08 13:20 - 2016-10-27 19:14 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-11-08 13:20 - 2016-10-27 11:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-11-08 13:20 - 2016-10-27 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-11-08 13:20 - 2016-10-27 10:55 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-11-08 13:20 - 2016-10-27 10:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-11-08 13:20 - 2016-10-27 10:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-11-08 13:20 - 2016-10-27 10:53 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-11-08 13:20 - 2016-10-27 10:53 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-11-08 13:20 - 2016-10-27 10:51 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-11-08 13:20 - 2016-10-27 10:44 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-11-08 13:20 - 2016-10-27 10:43 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-11-08 13:20 - 2016-10-27 10:38 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-11-08 13:20 - 2016-10-27 10:37 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-11-08 13:20 - 2016-10-27 10:28 - 25763328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-11-08 13:20 - 2016-10-27 10:28 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-11-08 13:20 - 2016-10-27 10:24 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-11-08 13:20 - 2016-10-27 10:19 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-11-08 13:20 - 2016-10-27 10:15 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-11-08 13:20 - 2016-10-27 10:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-11-08 13:20 - 2016-10-27 10:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-11-08 13:20 - 2016-10-27 10:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-11-08 13:20 - 2016-10-27 10:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-11-08 13:20 - 2016-10-27 10:02 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-11-08 13:20 - 2016-10-27 09:49 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-11-08 13:20 - 2016-10-27 09:46 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-11-08 13:20 - 2016-10-27 09:46 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-11-08 13:20 - 2016-10-27 09:44 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-11-08 13:20 - 2016-10-27 09:44 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-11-08 13:20 - 2016-10-27 09:17 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-11-08 13:20 - 2016-10-27 09:16 - 02920448 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-11-08 13:20 - 2016-10-27 09:03 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-11-08 13:20 - 2016-10-27 08:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-11-08 13:20 - 2016-10-27 07:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-08 13:20 - 2016-10-25 07:02 - 03219456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-11-08 13:20 - 2016-10-22 09:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-11-08 13:20 - 2016-10-22 09:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-11-08 13:20 - 2016-10-22 09:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-11-08 13:20 - 2016-10-22 09:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-11-08 13:20 - 2016-10-22 09:35 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-11-08 13:20 - 2016-10-22 09:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-11-08 13:20 - 2016-10-22 09:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-08 13:20 - 2016-10-22 09:27 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-11-08 13:20 - 2016-10-22 09:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-11-08 13:20 - 2016-10-22 09:22 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-11-08 13:20 - 2016-10-22 09:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-11-08 13:20 - 2016-10-22 09:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-11-08 13:20 - 2016-10-22 09:20 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-11-08 13:20 - 2016-10-22 09:09 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-11-08 13:20 - 2016-10-22 09:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-11-08 13:20 - 2016-10-22 09:03 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-11-08 13:20 - 2016-10-22 08:59 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-11-08 13:20 - 2016-10-22 08:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-08 13:20 - 2016-10-22 08:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-08 13:20 - 2016-10-22 08:54 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-11-08 13:20 - 2016-10-22 08:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-11-08 13:20 - 2016-10-22 08:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-11-08 13:20 - 2016-10-22 08:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-08 13:20 - 2016-10-22 08:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-11-08 13:20 - 2016-10-22 08:43 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-11-08 13:20 - 2016-10-22 08:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-08 13:20 - 2016-10-22 08:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-08 13:20 - 2016-10-22 08:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-08 13:20 - 2016-10-22 08:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-11-08 13:20 - 2016-10-15 07:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-11-08 13:20 - 2016-10-15 07:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-11-08 13:20 - 2016-10-15 07:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-08 13:20 - 2016-10-15 07:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-11-08 13:20 - 2016-10-11 07:37 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-11-08 13:20 - 2016-10-11 07:31 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2016-11-08 13:20 - 2016-10-11 07:31 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-11-08 13:20 - 2016-10-11 07:31 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-11-08 13:20 - 2016-10-11 07:31 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-11-08 13:20 - 2016-10-11 07:31 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 01027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
2016-11-08 13:20 - 2016-10-11 07:18 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-11-08 13:20 - 2016-10-11 07:18 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-11-08 13:20 - 2016-10-11 07:18 - 00430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2016-11-08 13:20 - 2016-10-11 07:18 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime
2016-11-08 13:20 - 2016-10-11 05:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-11-08 13:20 - 2016-10-11 05:06 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-11-08 13:20 - 2016-10-10 07:38 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-11-08 13:20 - 2016-10-10 07:38 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-11-08 13:20 - 2016-10-10 07:34 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-11-08 13:20 - 2016-10-10 07:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-11-08 13:20 - 2016-10-10 06:56 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-11-08 13:20 - 2016-10-10 06:54 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-11-08 13:20 - 2016-10-10 06:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-11-08 13:20 - 2016-10-07 07:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-11-08 13:20 - 2016-10-07 07:37 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-11-08 13:20 - 2016-10-07 07:37 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-11-08 13:20 - 2016-10-07 07:35 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 03649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:18 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-11-08 13:20 - 2016-10-07 07:18 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-11-08 13:20 - 2016-10-07 07:15 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:04 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-11-08 13:20 - 2016-10-07 07:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-11-08 13:20 - 2016-10-07 07:04 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-11-08 13:20 - 2016-10-07 07:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-11-08 13:20 - 2016-10-07 07:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-11-08 13:20 - 2016-10-07 06:56 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-11-08 13:20 - 2016-10-07 06:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-11-08 13:20 - 2016-10-07 06:49 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-11-08 13:20 - 2016-10-05 06:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-11-08 13:20 - 2016-09-15 06:56 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-11-08 13:20 - 2016-09-13 07:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-11-08 13:20 - 2016-09-13 07:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-11-08 13:20 - 2016-09-09 10:20 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-11-08 13:20 - 2016-09-09 10:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-11-08 13:19 - 2016-08-22 08:19 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-11-06 10:42 - 2016-11-06 10:45 - 574216234 _____ C:\Users\user\Downloads\[HorribleSubs] One Piece - 763 [1080p].mkv
2016-11-06 10:42 - 2016-11-06 10:45 - 559869070 _____ C:\Users\user\Downloads\[HorribleSubs] Dragon Ball Super - 65 [1080p].mkv
2016-11-06 08:29 - 2016-11-06 08:29 - 00000000 ___DL C:\Users\Guest\AppData\LocalLow\PlayReady
2016-11-04 16:19 - 2016-11-04 16:23 - 1715620573 _____ C:\Users\user\Downloads\American Horror Story S06E08 Chapter 8.mkv
2016-10-31 18:46 - 2016-10-31 18:50 - 00000000 ____D C:\Users\user\Downloads\Shameless.US.S07E05.720p.HDTV.X264-DIMENSION[ettv]
2016-10-30 14:00 - 2016-10-30 14:03 - 560689719 _____ C:\Users\user\Downloads\[HorribleSubs] Dragon Ball Super - 64 [1080p].mkv
2016-10-30 14:00 - 2016-10-30 14:02 - 573978094 _____ C:\Users\user\Downloads\[HorribleSubs] One Piece - 762 [1080p].mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-11-28 18:15 - 2012-02-18 18:31 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleForuser.job
2016-11-28 18:14 - 2012-04-26 12:44 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-28 18:00 - 2014-09-30 20:54 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-28 17:45 - 2012-11-08 00:38 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000UA.job
2016-11-28 15:01 - 2014-09-30 20:54 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-28 14:46 - 2012-11-08 00:38 - 00000852 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000Core.job
2016-11-28 02:14 - 2014-05-31 15:31 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2016-11-27 21:51 - 2012-02-18 18:31 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{37A87542-CBDE-4569-8B70-22735BB33C86}
2016-11-27 11:14 - 2015-01-08 18:07 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-24 18:19 - 2012-02-18 18:31 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForuser
2016-11-24 12:59 - 2009-07-13 20:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-24 12:59 - 2009-07-13 20:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-24 11:19 - 2009-07-13 21:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-24 11:19 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\inf
2016-11-24 11:12 - 2011-08-16 00:18 - 00000000 ____D C:\ProgramData\PDFC
2016-11-24 10:56 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-24 10:53 - 2014-06-10 19:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-21 23:07 - 2012-02-26 17:58 - 00003216 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUSER-HP$
2016-11-21 23:07 - 2012-02-26 17:58 - 00000340 _____ C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job
2016-11-21 22:22 - 2009-07-13 21:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-11-21 20:48 - 2014-09-30 20:57 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-17 15:33 - 2014-05-26 10:33 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-11-17 15:25 - 2015-01-08 13:32 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-17 15:25 - 2015-01-08 13:30 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-16 15:02 - 2014-05-25 23:14 - 00000000 ____D C:\AdwCleaner
2016-11-16 14:19 - 2016-04-24 12:25 - 00000000 ____D C:\Users\user\Desktop\Virus
2016-11-09 16:59 - 2012-11-16 13:23 - 00000000 ____D C:\Users\user\AppData\Local\Spotify
2016-11-09 16:59 - 2012-11-16 13:22 - 00000000 ____D C:\Users\user\AppData\Roaming\Spotify
2016-11-09 16:21 - 2016-02-17 18:58 - 00000000 ____D C:\Users\user\Downloads\Downloaded Music
2016-11-09 10:23 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2016-11-09 09:44 - 2009-07-13 20:45 - 04937152 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-09 01:14 - 2014-07-08 17:26 - 00000000 ____D C:\Windows\system32\MRT
2016-11-09 01:06 - 2014-07-08 17:26 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-08 17:13 - 2012-04-26 12:44 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 17:13 - 2012-04-26 12:44 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-08 17:13 - 2012-02-21 01:09 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-08 17:13 - 2011-08-16 00:16 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 17:13 - 2011-08-16 00:16 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-07 01:14 - 2016-09-12 23:15 - 00000000 ____D C:\Users\user\AppData\Roaming\qBittorrent
2016-11-06 12:13 - 2013-10-05 15:08 - 00003416 _____ C:\Windows\System32\Tasks\Apple Diagnostics
2016-11-06 06:19 - 2015-12-19 12:21 - 00000000 ____D C:\Users\Guest\AppData\Local\Spotify
2016-11-06 06:19 - 2015-12-19 12:20 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Spotify
2016-11-06 06:18 - 2014-06-04 19:20 - 00000000 __SHD C:\Users\Guest\AppData\LocalLow\EmieUserList
2016-11-06 06:18 - 2014-06-04 19:20 - 00000000 __SHD C:\Users\Guest\AppData\LocalLow\EmieSiteList
2016-11-06 06:18 - 2014-05-03 15:26 - 00000000 __SHD C:\Users\Guest\AppData\Local\EmieUserList
2016-11-06 06:18 - 2014-05-03 15:26 - 00000000 __SHD C:\Users\Guest\AppData\Local\EmieSiteList

==================== Files in the root of some directories =======

2014-05-25 10:49 - 2014-05-25 10:49 - 0000045 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2014-05-24 23:02 - 2014-05-24 23:02 - 0007608 _____ () C:\Users\user\AppData\Local\Resmon.ResmonCfg
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ () C:\ProgramData\cmn_upld.log
2012-03-05 20:40 - 2012-10-07 17:02 - 0036460 _____ () C:\ProgramData\lxeeJSW.log
2012-03-05 20:29 - 2012-10-30 21:36 - 0001516 _____ () C:\ProgramData\lxeescan.log
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ () C:\ProgramData\LxWbGwLog.log
2013-01-09 18:27 - 2013-01-09 18:27 - 0377537 _____ () C:\ProgramData\SPL1C58.tmp
2014-06-05 21:29 - 2014-06-05 21:29 - 0377537 _____ () C:\ProgramData\SPL2888.tmp
2013-03-03 20:38 - 2013-03-03 20:38 - 0377537 _____ () C:\ProgramData\SPL6712.tmp
2014-03-30 22:18 - 2014-03-30 22:18 - 0377537 _____ () C:\ProgramData\SPL76ED.tmp
2012-10-30 21:57 - 2012-10-30 21:57 - 0377537 _____ () C:\ProgramData\SPLACF7.tmp
2012-10-30 21:36 - 2012-10-30 21:36 - 0841298 _____ () C:\ProgramData\SPLB051.tmp
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ () C:\ProgramData\UpdaterLog.txt

Some files in TEMP:
====================
C:\Users\user\AppData\Local\Temp\Extract.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2016-10-11 10:52] - [2016-08-29 07:04] - 3229696 ____A (Microsoft Corporation) 38AE1B3C38FAEF56FE4907922F0385BA

C:\Windows\SysWOW64\explorer.exe
[2016-10-11 10:52] - [2016-08-29 06:55] - 2972672 ____A (Microsoft Corporation) 6DDCA324434FFA506CF7DC4E51DB7935

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll
[2016-09-13 20:18] - [2016-08-16 09:36] - 1009152 ____A (Microsoft Corporation) 8F4B991E7837E8E0F90C856659456652

C:\Windows\SysWOW64\User32.dll
[2016-09-13 20:18] - [2016-08-15 18:48] - 0833024 ____A (Microsoft Corporation) 0FBC0E335B65EE5A0175631237817510

C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-11-04 12:56

==================== End of FRST.txt ============================

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 2nd December 2016, 12:55 am

ComboFix scan

Please download ComboFix by sUBs
[You must be registered and logged in to see this link.]

Please save the file to your Desktop.

Important information about ComboFix


After the download:

  • Close any open browsers.
  • Very Important: Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". [You must be registered and logged in to see this link.] if you don't know how.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
  • If there is no Internet connection after running ComboFix, then restart your computer to restore back your connection.

Running ComboFix:

  • Double click on ComboFix.exe & follow the prompts.
  • When ComboFix finishes, it will produce a report for you.
  • Please post the report, which will launch or be found at "C:\Combo-Fix.txt" in your next reply.

Troubleshooting ComboFix

Safe Mode:

If you still cannot get ComboFix to run, try booting into Safe Mode, and run it there.

(To boot into Safe Mode, tap F8 after BIOS, and just before the Windows
logo appears. A list of options will appear, select "Safe Mode.")

Re-downloading:

If this doesn't work either, try the same method (above method), but try to download it again, except name
ComboFix.exe to iexplore.exe, explorer.exe, or winlogon.exe.

Malware is known for blocking all "user" processes, except for its whitelist of system important processes such as iexplore.exe, explorer.exe, winlogon.exe.

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 5th December 2016, 6:02 pm

ComboFix 16-12-02.01 - user 12/03/2016  16:56:42.2.2 - x64 NETWORK
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.5617.4879
[GMT -8:00]
Running from: c:\users\user\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Spybot - Search and Destroy *Disabled/Outdated*
{9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions
)))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\SPL1C58.tmp
c:\programdata\SPL2888.tmp
c:\programdata\SPL6712.tmp
c:\programdata\SPL76ED.tmp
c:\programdata\SPLACF7.tmp
c:\programdata\SPLB051.tmp
c:\users\Public\sdelevURL.tmp
c:\windows\msdownld.tmp
c:\windows\msdownld.tmp\AS616E7C.tmp\Apr2006_d3dx9_30_x64.cab
.
.
(((((((((((((((((((((((((   Files Created from 2016-11-04 to
2016-12-04  )))))))))))))))))))))))))))))))
.
.
2016-12-04 07:18 . 2016-12-04
07:18   --------        d-----w-        c:\users\Guest\AppData\Local\temp
2016-12-04 07:18 . 2016-12-04
07:18   --------        d-----w-        c:\users\Default\AppData\Local\temp
2016-11-26 06:07 . 2016-11-29 18:50     --------        d-----w-        C:\FRST
2016-11-08 21:19 . 2016-08-22
16:19   1386496 ----a-w-        c:\windows\system32\diagtrack.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report
))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-11-17 23:25 . 2015-01-08
21:32   192216  ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-11-17 23:25 . 2015-01-08
21:30   109272  ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2016-11-09 09:06 . 2014-07-09
01:26   141011376       -c--a-w-        c:\windows\system32\MRT.exe
2016-11-09 01:13 . 2012-04-26
20:44   796352  ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2016-11-09 01:13 . 2011-08-16
08:16   142528  ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-10-27 00:29 . 2010-11-21
03:27   485032  ------w-        c:\windows\system32\MpSigStub.exe
2016-10-07 15:12 . 2016-11-08
21:20   44032   ----a-w-        c:\windows\apppatch\acwow64.dll
2016-09-12 21:17 . 2016-10-11
18:52   77032   ----a-w-        c:\windows\system32\CompatTelRunner.exe
2016-09-12 21:08 . 2016-10-11
18:53   107520  ----a-w-        c:\windows\system32\adsmsext.dll
2016-09-12 21:08 . 2016-10-11
18:52   1226752 ----a-w-        c:\windows\system32\aeinv.dll
2016-09-12 20:49 . 2016-10-11
18:53   76800   ----a-w-        c:\windows\SysWow64\adsmsext.dll
2016-09-12 19:08 . 2016-10-11
18:53   1251328 ----a-w-        c:\windows\SysWow64\DWrite.dll
2016-09-12 18:43 . 2016-10-11
18:53   1180160 ----a-w-        c:\windows\system32\FntCache.dll
2016-09-12 18:43 . 2016-10-11
18:53   1648128 ----a-w-        c:\windows\system32\DWrite.dll
2016-09-09 15:54 . 2016-10-11
18:52   586752  ----a-w-        c:\windows\system32\generaltel.dll
2016-09-09 15:54 . 2016-10-11
18:52   314368  ----a-w-        c:\windows\system32\invagent.dll
2016-09-09 15:54 . 2016-10-11
18:52   575488  ----a-w-        c:\windows\system32\devinv.dll
2016-09-09 15:54 . 2016-10-11
18:52   273408  ----a-w-        c:\windows\system32\centel.dll
2016-09-09 15:54 . 2016-10-11
18:52   224256  ----a-w-        c:\windows\system32\aepic.dll
2016-09-09 15:54 . 2016-10-11
18:52   1629184 ----a-w-        c:\windows\system32\appraiser.dll
2016-09-09 15:54 . 2016-10-11
18:52   129024  ----a-w-        c:\windows\system32\acmigration.dll
2016-09-08 20:34 . 2016-10-11
18:53   263680  ----a-w-        c:\windows\system32\WebClnt.dll
2016-09-08 20:34 . 2016-10-11
18:53   108544  ----a-w-        c:\windows\system32\davclnt.dll
2016-09-08 20:34 . 2016-10-11
18:53   208896  ----a-w-        c:\windows\SysWow64\WebClnt.dll
2016-09-08 20:34 . 2016-10-11
18:53   87040   ----a-w-        c:\windows\SysWow64\davclnt.dll
2016-09-08 14:55 . 2016-10-11
18:53   142336  ----a-w-        c:\windows\system32\drivers\mrxdav.sys
2016-09-08 14:55 . 2016-10-11
18:53   106496  ----a-w-        c:\windows\system32\drivers\dfsc.sys
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points
))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\user\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
[2016-10-28 1431664]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet
Services\iCloudServices.exe" [2014-08-08 43816]
"EPLTarget\P0000000000000001"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE"
[2012-02-28 283232]
"EPLTarget\P0000000000000002"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE"
[2012-02-28 283232]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE"
[2012-02-28 283232]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI
Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-07-04 336384]
"HP Software Update"="c:\program files (x86)\HP\HP Software
Update\HPWuSchd2.exe" [2008-12-08 54576]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe"
[2011-05-05 658424]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple
Application Support\APSDaemon.exe" [2016-09-02 67384]
"Camera Assistant Software"="c:\program files (x86)\Camera Assistant
Software for ViewSonic\traybar.exe" [2007-08-20 774144]
"EEventManager"="c:\program files (x86)\Epson Software\Event
Manager\EEventManager.exe" [2012-01-27 1058400]
"FUFAXRCV"="c:\program files (x86)\Epson Software\FAX
Utility\FUFAXRCV.exe" [2012-03-01 502912]
"FUFAXSTM"="c:\program files (x86)\Epson Software\FAX
Utility\FUFAXSTM.exe" [2012-03-01 863360]
"LTCM Client"="c:\program files (x86)\LTCM Client\ltcmClient.exe"
[2009-08-05 1596096]
"SwitchBoard"="c:\program files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common
Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09
1073312]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy
2\SDTray.exe" [2014-06-24 4101576]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java
Update\jusched.exe" [2016-04-01 596504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows
nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute     REG_MULTI_SZ    autocheck autochk *\0\0sdnclean64.exe
.
R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint
Licensing Service;c:\program files (x86)\Common
Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program
files (x86)\Common
Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
[x]
R2 AESTFilters;Andrea ST Filters Service;c:\program
files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
R2 AMD External Events Utility;AMD External Events
Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe
[x]
R2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program
files\Common Files\Apple\Mobile Device
Support\AppleMobileDeviceService.exe;c:\program files\Common
Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN
v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
[x]
R2 DiagTrack;Diagnostics Tracking
Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe
[x]
R2 EPSON_PM_RPCV4_05;EPSON V3 Service4(05);c:\program files\Common
Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE;c:\program files\Common
Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE [x]
R2 EpsonCustomerParticipation;EpsonCustomerParticipation;c:\program
files\EPSON\EpsonCustomerParticipation\EPCP.exe;c:\program
files\EPSON\EpsonCustomerParticipation\EPCP.exe [x]
R2 EpsonScanSvc;Epson Scanner
Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe
[x]
R2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP
Client Services\HPClientServices.exe;c:\program
files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework
Service;c:\program files (x86)\Hewlett-Packard\HP Support
Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files
(x86)\Hewlett-Packard\HP Support
Solutions\HPSupportSolutionsFrameworkService.exe [x]
R2 lxbl_device;lxbl_device;c:\windows\system32\lxblcoms.exe;c:\windows\SYSNATIVE\lxblcoms.exe
[x]
R2 lxee_device;lxee_device;c:\windows\system32\lxeecoms.exe;c:\windows\SYSNATIVE\lxeecoms.exe
[x]
R2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF
Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
R2 RoxioNow Service;RoxioNow Service;c:\program files
(x86)\Roxio\RoxioNow Player\RNowSvc.exe;c:\program files
(x86)\Roxio\RoxioNow Player\RNowSvc.exe [x]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files
(x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files
(x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files
(x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files
(x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files
(x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files
(x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files
(x86)\Skype\Updater\Updater.exe;c:\program files
(x86)\Skype\Updater\Updater.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent
Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent
Games\App\GamesAppService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector
Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe
[x]
R3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys
[x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys
[x]
R3 Netaapl;Apple Mobile Device Ethernet
Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys
[x]
R3 ose64;Office 64 Source Engine;c:\program files\Common
Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common
Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport
Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys
[x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys
[x]
R3 TsUsbGD;Remote Desktop Generic USB
Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys
[x]
R3 USBAAPL64;Apple Mobile USB
Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys
[x]
R3 WatAdminSvc;Windows Activation Technologies
Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe
[x]
R3 WSDScan;WSD Scan Support via
UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys
[x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program
files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows
Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys
[x]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys
[x]
S3 amdhub30;AMD USB 3.0 Hub
Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys
[x]
S3 amdxhc;AMD USB 3.0 Host Controller
Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys
[x]
S3 netr28x;Ralink 802.11n Extensible Wireless
Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys
[x]
S3 RTL8167;Realtek 8167 NT
Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys
[x]
S3 usbfilter;AMD USB Filter
Driver;c:\windows\system32\drivers\usbfilter.sys;c:\windows\SYSNATIVE\drivers\usbfilter.sys
[x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows
nt\currentversion\svchost]
LocalServiceAndNoImpersonation  REG_MULTI_SZ    SSDPSRV upnphost
SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active
setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-11-22 04:22        1364072 ----a-w-        c:\program files
(x86)\Google\Chrome\Application\54.0.2840.99\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2016-11-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[2012-04-26 01:13]
.
2016-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-01 22:31]
.
2016-11-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-01 22:31]
.
2016-11-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-08 03:27]
.
2016-11-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-08 03:27]
.
2016-11-22 c:\windows\Tasks\HPCeeScheduleForUSER-HP$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16 17:51]
.
2016-11-29 c:\windows\Tasks\HPCeeScheduleForuser.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16 17:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BeatsOSDApp"="c:\program files\IDT\WDM\beats64.exe" [2010-10-21 37888]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-06-24 1128448]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP
odometer\hpsysdrv.exe" [2008-11-20 62768]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe"
[2012-11-05 108144]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04
446392]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2016-09-09 176440]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = [You must be registered and logged in to see this link.]
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
Trusted Zone: localhost
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath -
c:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - about:home
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-{06C7AD57-B655-418D-9AB8-9526A6D2E052} - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-AceStream -
c:\users\user\AppData\Roaming\ACEStream\engine\ace_engine.exe
Wow6432Node-HKLM-Run- - (no file)
Wow6432Node-HKLM-RunOnce-20161125 - c:\program files\AVAST
Software\Avast\aswRunDll.exe
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-mbamchameleon
SafeBoot-MBAMSwissArmy
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
- c:\program files (x86)\WildTangent Games\App\Uninstall.exe
AddRemove-{79C54A05-F146-4EA0-8A70-D4EFE6181E52} - c:\program files
(x86)\InstallShield Installation
Information\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe
/startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="[You must be registered and logged in to see this link.]:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_23_0_0_207_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_23_0_0_207_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="[You must be registered and logged in to see this link.]:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_23_0_0_207_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_23_0_0_207_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.23"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_23_0_0_207.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart
Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema
Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft
Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2016-12-04  10:19:14
ComboFix-quarantined-files.txt  2016-12-04 18:19
.
Pre-Run: 221,569,716,224 bytes free
Post-Run: 222,767,091,712 bytes free
.
- - End Of File - - 65BB05A8C1F666D5C65478EFBF3C408B
A36C5E4F47E84449FF07ED3517B43A31

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 5th December 2016, 9:05 pm

Okay, now please try to run FRST as we were going to do originally, please.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:39 am

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2016
Ran by user (administrator) on USER-HP (05-12-2016 13:31:07)
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available Profiles: user & Danilo & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language:
English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool:
[You must be registered and logged in to see this link.]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed.
The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be
restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe
[37888 2010-10-21] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe
[1128448 2011-06-24] (IDT, Inc.)
HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP
odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft
Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft
Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392
2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program
Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI
Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-04]
(Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP
Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF
Complete\pdfsty.exe [658424 2011-05-05] (PDF Complete Inc)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common
Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-09-01]
(Apple Inc.)
HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files
(x86)\Camera Assistant Software for ViewSonic\traybar.exe [774144
2007-08-20] (Chicony)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson
Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO
EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson
Software\FAX Utility\FUFAXRCV.exe [502912 2012-02-29] (SEIKO EPSON
CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson
Software\FAX Utility\FUFAXSTM.exe [863360 2012-02-29] (SEIKO EPSON
CORPORATION)
HKLM-x32\...\Run: [LTCM Client] => C:\Program Files (x86)\LTCM
Client\ltcmClient.exe [1596096 2009-08-05] (Leader Technologies Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe
Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files
(x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
[1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search &
Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files
(x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01]
(Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run: [Spotify
Web Helper] => C:\Users\user\AppData\Roaming\Spotify\SpotifyWebHelper.exe
[1431664 2016-10-28] (Spotify Ltd)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run:
[iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet
Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run:
[EPLTarget\P0000000000000001] =>
C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232
2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run:
[EPLTarget\P0000000000000002] =>
C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232
2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Run:
[EPLTarget\P0000000000000000] =>
C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232
2012-02-28] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [00avast] ->
{472083B0-C522-11CF-8763-00608CC02F24} =>  No File
Startup: C:\Users\Danilo\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2012-07-12]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files
(x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2013-07-03]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files
(x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it
will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8D5C3D27-403F-45C6-A3FF-D29F3ACBE4C2}:
[DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A8D08E84-D6B4-4B9B-8D1E-C8A47B5D033C}:
[DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
<======= ATTENTION
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\SOFTWARE\Policies\Microsoft\Internet
Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page
[You must be registered and logged in to see this link.]
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Software\Microsoft\Internet
Explorer\Main,Start Page = [You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Software\Microsoft\Internet
Explorer\Main,Search Page =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM -> DefaultScope
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {866B19C7-65C3-4340-A244-92A88B9FBFC3} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 ->
DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 ->
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 ->
{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 ->
{85A60A59-D3D8-468F-B598-FB4393789EF4} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
SearchScopes: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 ->
{D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
-> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => No File
BHO: Windows Live ID Sign-in Helper ->
{9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21]
(Microsoft Corp.)
BHO: Office Document Cache Handler ->
{B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft
Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
-> C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
[2016-07-21] (HP Inc.)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} ->
C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
[2014-11-27] (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper ->
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files
(x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-06-04] (Oracle Corporation)
BHO-x32: avast! Online Security ->
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST
Software\Avast\aswWebRepIE.dll => No File
BHO-x32: Windows Live ID Sign-in Helper ->
{9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files
(x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
[2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler ->
{B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files
(x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft
Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper ->
{DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files
(x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-04] (Oracle
Corporation)
BHO-x32: HP Network Check Helper ->
{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files
(x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
[2016-07-21] (HP Inc.)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - No Name - {06C7AD57-B655-418D-9AB8-9526A6D2E052} -  No File
Toolbar: HKLM-x32 - E-Web Print -
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson
Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON
CORPORATION)
Toolbar: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000 -> No Name
- {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

FireFox:
========
FF DefaultProfile: fcpzgi7g.default-1395282151623
FF ProfilePath:
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623
[2016-12-05]
FF NewTab: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> about:home
FF DefaultSearchEngine:
Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF DefaultSearchEngine.US:
Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF SelectedSearchEngine:
Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623 -> Google
FF Homepage: Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623
-> about:home
FF Extension: (Quick Translator) -
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi
[2015-05-31]
FF Extension: (Adblock Plus) -
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2016-11-23]
FF Extension: (Greasemonkey) -
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2016-08-20]
FF SearchPlugin:
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fcpzgi7g.default-1395282151623\searchplugins\google-lavasoft.xml
[2016-03-12]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla
Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2016-11-17]
[not signed]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla
Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2016-11-17]
[not signed]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla
Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2016-11-17]
[not signed]
FF HKLM-x32\...\Firefox\Extensions: [[You must be registered and logged in to see this link.]] -
C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson
Software\E-Web Print\Firefox Add-on [2016-01-14] [not signed]
FF Plugin: @[You must be registered and logged in to see this link.] ->
C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08]
()
FF Plugin: @[You must be registered and logged in to see this link.] -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program
Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (
Microsoft Corporation)
FF Plugin: @[You must be registered and logged in to see this link.] ->
C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft
Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] ->
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08]
()
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files
(x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-04]
(Oracle Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program
Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-04]
(Oracle Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files
(x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (
Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] ->
C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft
Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] ->
C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft
Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] ->
C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] ->
C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @[You must be registered and logged in to see this link.] Update;version=3 -> C:\Program
Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28]
(Google Inc.)
FF Plugin-x32: @[You must be registered and logged in to see this link.] Update;version=9 -> C:\Program
Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28]
(Google Inc.)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files
(x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: @[You must be registered and logged in to see this link.] -> C:\Program Files
(x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0
-> C:\Program Files (x86)\WildTangent
Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2012-04-29] ()
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000:
@[You must be registered and logged in to see this link.] ->
C:\Users\user\AppData\Roaming\ACEStream\player\npace_plugin.dll [No
File]
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000:
@[You must be registered and logged in to see this link.] ->
C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
[2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000:
@[You must be registered and logged in to see this link.] ->
C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08]
(Google)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000:
@[You must be registered and logged in to see this link.] Update;version=3 ->
C:\Users\user\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2324025828-1623389042-2555509162-1000:
@[You must be registered and logged in to see this link.] Update;version=9 ->
C:\Users\user\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll
[2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata:
C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll
[2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata:
C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08]
(Google)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default [2016-11-16]
CHR Extension: (Google Docs) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-09]
CHR Extension: (Google Drive) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-16]
CHR Extension: (YouTube) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-29]
CHR Extension: (Google Search) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-11]
CHR Extension: (Google Docs Offline) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-13]
CHR Extension: (AdBlock) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-05]
CHR Extension: (Avast Online Security) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-11-05]
CHR Extension: (Ace Stream Web Extension) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2016-10-10]
CHR Extension: (Chrome Web Store Payments) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-26]
CHR Extension: (Gmail) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-26]
CHR Extension: (Chrome Media Router) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-05]
CHR HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension:
[mjbepbhonbojpoaenhckjocchgfiaofo] -
[You must be registered and logged in to see this link.][You must be registered and logged in to see this link.]

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:40 am

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)

S2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files
(x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
[759048 2009-05-14] (ABBYY)
S3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2015-10-29]
(Microsoft Corporation) [File not signed]
S2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600
2009-03-03] (Andrea Electronics Corporation) [File not signed]
S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-13] (Microsoft
Corporation) [File not signed]
S2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe
[204288 2011-07-04] (AMD) [File not signed]
S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [34816 2016-10-07]
(Microsoft Corporation) [File not signed]
S3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2016-05-04]
(Microsoft Corporation) [File not signed]
S2 Apple Mobile Device Service; C:\Program Files\Common
Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768
2016-08-05] (Apple Inc.)
S2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680448
2016-06-14] (Microsoft Corporation) [File not signed]
S2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680448 2016-06-14]
(Microsoft Corporation) [File not signed]
S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 BITS; C:\Windows\system32\qmgr.dll [849920 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04]
(Microsoft Corporation) [File not signed]
S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-20]
(Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [190976 2016-06-14]
(Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [145920 2016-06-14]
(Microsoft Corporation) [File not signed]
R2 DcomLaunch; C:\Windows\system32\rpcss.dll [511488 2016-02-02]
(Microsoft Corporation) [File not signed]
S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-20]
(Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 DiagTrack; C:\Windows\system32\diagtrack.dll [1386496 2016-08-22]
(Microsoft Corporation) [File not signed]
R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-08-15]
(Microsoft Corporation) [File not signed]
S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-20] (Microsoft
Corporation) [File not signed]
R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 EFS; C:\Windows\System32\lsass.exe [30720 2016-10-10] (Microsoft
Corporation) [File not signed]
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12]
(Seiko Epson Corporation)
R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 FontCache; C:\Windows\system32\FntCache.dll [1180160 2016-09-12]
(Microsoft Corporation) [File not signed]
S2 gpsvc; C:\Windows\System32\gpsvc.dll [794624 2016-05-12] (Microsoft
Corporation) [File not signed]
S3 hidserv; C:\Windows\System32\hidserv.dll [38912 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448
2010-11-20] (Microsoft Corporation) [File not signed]
S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904
2010-11-20] (Microsoft Corporation) [File not signed]
S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376
2010-11-20] (Microsoft Corporation) [File not signed]
S2 HPSupportSolutionsFrameworkService; C:\Program Files
(x86)\Hewlett-Packard\HP Support
Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15]
(HP Inc.)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe
[114688 2016-10-27] (Microsoft Corporation) [File not signed]
R2 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-11]
(Microsoft Corporation) [File not signed]
S2 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03]
(Microsoft Corporation) [File not signed]
R3 KeyIso; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft
Corporation) [File not signed]
S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 LanmanServer; C:\Windows\System32\srvsvc.dll [236032 2010-11-20]
(Microsoft Corporation) [File not signed]
R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784
2010-11-20] (Microsoft Corporation) [File not signed]
S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 lxbl_device; C:\Windows\system32\lxblcoms.exe [566704 2007-04-20] ( )
S2 lxbl_device; C:\Windows\SysWOW64\lxblcoms.exe [537520 2007-04-20] ( )
S2 lxee_device; C:\Windows\system32\lxeecoms.exe [1052328 2010-04-14] ( )
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-13] (Microsoft
Corporation) [File not signed]
R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 msiserver; C:\Windows\System32\msiexec.exe [128512 2016-05-04]
(Microsoft Corporation) [File not signed]
S3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2016-05-04]
(Microsoft Corporation) [File not signed]
S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 Netlogon; C:\Windows\system32\lsass.exe [30720 2016-10-10]
(Microsoft Corporation) [File not signed]
R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303616 2014-12-05]
(Microsoft Corporation) [File not signed]
R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 PcaSvc; C:\Windows\System32\pcasvc.dll [187904 2016-06-14]
(Microsoft Corporation) [File not signed]
S2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe
[1128952 2011-05-05] (PDF Complete Inc)
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-20] (Microsoft
Corporation) [File not signed]
R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24]
(Microsoft Corporation) [File not signed]
S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [502272 2016-05-12]
(Microsoft Corporation) [File not signed]
R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-13] (Microsoft
Corporation) [File not signed]
R2 ProfSvc; C:\Windows\system32\profsvc.dll [210432 2014-12-18]
(Microsoft Corporation) [File not signed]
S3 ProtectedStorage; C:\Windows\system32\lsass.exe [30720 2016-10-10]
(Microsoft Corporation) [File not signed]
S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 QWAVE; C:\Windows\SysWOW64\qwave.dll [210944 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-20]
(Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-13]
(Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-13]
(Microsoft Corporation) [File not signed]
R2 RpcSs; C:\Windows\system32\rpcss.dll [511488 2016-02-02] (Microsoft
Corporation) [File not signed]
S2 SamSs; C:\Windows\system32\lsass.exe [30720 2016-10-10] (Microsoft
Corporation) [File not signed]
S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2015-08-05]
(Microsoft Corporation) [File not signed]
S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy
2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy
2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy
2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 seclogon; C:\Windows\system32\seclogon.dll [30720 2016-02-09]
(Microsoft Corporation) [File not signed]
S2 SENS; C:\Windows\system32\sens.dll [64512 2009-07-13] (Microsoft
Corporation) [File not signed]
S2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688
2010-11-20] (Microsoft Corporation) [File not signed]
S2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192
2010-11-20] (Microsoft Corporation) [File not signed]
S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-10]
(Microsoft Corporation) [File not signed]
S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [302592 2011-06-24]
(IDT, Inc.) [File not signed]
S2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common
Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe
Systems Incorporated) [File not signed]
S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-13] (Microsoft
Corporation) [File not signed]
S2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2015-07-15]
(Microsoft Corporation) [File not signed]
S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672
2010-11-20] (Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-13]
(Microsoft Corporation) [File not signed]
S2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048
2010-11-20] (Microsoft Corporation) [File not signed]
S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-13] (Microsoft
Corporation) [File not signed]
S3 VaultSvc; C:\Windows\system32\lsass.exe [30720 2016-10-10]
(Microsoft Corporation) [File not signed]
S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-20] (Microsoft
Corporation) [File not signed]
S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960
2009-07-13] (Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768
2009-07-13] (Microsoft Corporation) [File not signed]
S3 WdiServiceHost; C:\Windows\system32\wdi.dll [91136 2015-01-08]
(Microsoft Corporation) [File not signed]
S3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-08]
(Microsoft Corporation) [File not signed]
S3 WdiSystemHost; C:\Windows\system32\wdi.dll [91136 2015-01-08]
(Microsoft Corporation) [File not signed]
S3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-08]
(Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\System32\webclnt.dll [263680 2016-09-08]
(Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [208896 2016-09-08]
(Microsoft Corporation) [File not signed]
S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480
2009-07-13] (Microsoft Corporation) [File not signed]
S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712
2013-05-26] (Microsoft Corporation) [File not signed]
S3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444928
2016-05-11] (Microsoft Corporation) [File not signed]
R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\system32\WsmSvc.dll [2023424 2016-08-06]
(Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1178112 2016-08-06]
(Microsoft Corporation) [File not signed]
R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe
[1525248 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-20]
(Microsoft Corporation) [File not signed]
S2 wscsvc; C:\Windows\system32\wscsvc.dll [97280 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-03]
(Microsoft Corporation) [File not signed]
S2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-03]
(Microsoft Corporation) [File not signed]
S2 wuauserv; C:\Windows\system32\wuaueng.dll [2607104 2016-05-13]
(Microsoft Corporation) [File not signed]
S3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-25]
(Microsoft Corporation) [File not signed]
S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-27]
(Microsoft Corporation) [File not signed]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888
2010-11-20] (Microsoft Corporation) [File not signed]
S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20]
(Microsoft Corporation) [File not signed]
R1 AFD; C:\Windows\system32\drivers\afd.sys [497664 2015-10-13]
(Microsoft Corporation) [File not signed]
S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [9359872
2011-07-04] (ATI Technologies Inc.) [File not signed]
S3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [309760
2011-07-04] (Advanced Micro Devices, Inc.) [File not signed]
S3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 AppID; C:\Windows\system32\drivers\appid.sys [62464 2016-10-07]
(Microsoft Corporation) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040
2009-07-13] (Microsoft Corporation) [File not signed]
S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10]
(Broadcom Corporation) [File not signed]
S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848
2009-06-10] (Broadcom Corporation) [File not signed]
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 blbdrive; C:\Windows\system32\drivers\blbdrive.sys [45056
2009-07-13] (Microsoft Corporation) [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90112 2016-10-05]
(Microsoft Corporation) [File not signed]
S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432
2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704
2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720
2009-07-13] (Brother Industries Ltd.) [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104
2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976
2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720
2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192
2009-07-13] (Microsoft Corporation) [File not signed]
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 cdrom; C:\Windows\system32\drivers\cdrom.sys [147456 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568
2009-07-13] (Microsoft Corporation) [File not signed]
S3 CmBatt; C:\Windows\system32\drivers\CmBatt.sys [17664 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912
2010-11-20] (Microsoft Corporation) [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [106496 2016-09-08]
(Microsoft Corporation) [File not signed]
S1 discache; C:\Windows\System32\drivers\discache.sys [40448
2009-07-13] (Microsoft Corporation) [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2015-12-08]
(Microsoft Corporation) [File not signed]
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10]
(Broadcom Corporation) [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800
2009-07-13] (Microsoft Corporation) [File not signed]
S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304
2009-07-13] (Microsoft Corporation) [File not signed]
S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576
2009-07-13] (Microsoft Corporation) [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232
2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed]
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208
2010-11-20] (Microsoft Corporation) [File not signed]
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368
2010-11-20] (Microsoft Corporation) [File not signed]
S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-24]
(Microsoft Corporation) [File not signed]
S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472
2009-07-13] (Microsoft Corporation) [File not signed]
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6108416 2009-06-10]
(Intel Corporation) [File not signed]
S3 intelppm; C:\Windows\system32\drivers\intelppm.sys [62464
2009-07-13] (Microsoft Corporation) [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944
2010-11-20] (Microsoft Corporation) [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys
[109272 2016-11-17] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys
[192216 2016-11-17] (Malwarebytes)
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [142336 2016-09-08]
(Microsoft Corporation) [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [159744 2016-10-10]
(Microsoft Corporation) [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [291328
2016-10-10] (Microsoft Corporation) [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [129536
2016-10-10] (Microsoft Corporation) [File not signed]
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192
2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168
2009-07-13] (Microsoft Corporation) [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360
2009-07-13] (Microsoft Corporation) [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976
2009-07-13] (Microsoft Corporation) [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064
2009-07-13] (Microsoft Corporation) [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20]
(Microsoft Corporation) [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352
2010-11-20] (Microsoft Corporation) [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040
2013-07-25] (Apple Inc.) [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [262144 2016-05-11]
(Microsoft Corporation) [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576
2009-07-13] (Microsoft Corporation) [File not signed]
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832
2009-07-13] (Microsoft Corporation) [File not signed]
S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-13]
(Microsoft Corporation) [File not signed]
S2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2016-06-14]
(Microsoft Corporation) [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104
2010-11-20] (Microsoft Corporation) [File not signed]
S3 Processor; C:\Windows\system32\drivers\processr.sys [60416
2009-07-13] (Microsoft Corporation) [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592
2009-07-13] (Microsoft Corporation) [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416
2009-07-13] (Microsoft Corporation) [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536
2010-11-20] (Microsoft Corporation) [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672
2009-07-13] (Microsoft Corporation) [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-13]
(Microsoft Corporation) [File not signed]
S1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680
2009-07-13] (Microsoft Corporation) [File not signed]
S1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192
2009-07-13] (Microsoft Corporation) [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys
[19456 2012-08-23] (Microsoft Corporation) [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-16]
(Microsoft Corporation) [File not signed]
S2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696
2010-11-20] (Microsoft Corporation) [File not signed]
S3 sdbus; C:\Windows\System32\DRIVERS\sdbus.sys [109056 2010-11-20]
(Microsoft Corporation) [File not signed]
S4 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10]
(Macrovision Corporation, Macrovision Europe Limited, and Macrovision
Japan and Asia K.K.) [File not signed]
S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624
2009-07-13] (Microsoft Corporation) [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824
2009-07-13] (Microsoft Corporation) [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 srv; C:\Windows\System32\DRIVERS\srv.sys [464896 2016-08-12]
(Microsoft Corporation) [File not signed]
S3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [405504 2016-08-12]
(Microsoft Corporation) [File not signed]
S3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168960 2016-08-12]
(Microsoft Corporation) [File not signed]
S3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [528384 2011-06-10]
(IDT, Inc.) [File not signed]
S2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [46080
2016-07-07] (Microsoft Corporation) [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-16]
(Microsoft Corporation) [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [118272 2015-10-13]
(Microsoft Corporation) [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936
2014-07-16] (Microsoft Corporation) [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [56832
2013-10-01] (Microsoft Corporation) [File not signed]
S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [30208 2012-08-23]
(Microsoft Corporation) [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20]
(Microsoft Corporation) [File not signed]
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20]
(Microsoft Corporation) [File not signed]
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 UmPass; C:\Windows\system32\drivers\umpass.sys [9728 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784
2015-06-10] (Apple, Inc.) [File not signed]
S3 usbaudio; C:\Windows\System32\drivers\usbaudio.sys [109824
2013-07-12] (Microsoft Corporation) [File not signed]
R3 usbccgp; C:\Windows\system32\drivers\usbccgp.sys [99840 2016-08-16]
(Microsoft Corporation) [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12]
(Microsoft Corporation) [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [56320 2016-08-16]
(Microsoft Corporation) [File not signed]
R3 usbhub; C:\Windows\system32\drivers\usbhub.sys [343552 2016-08-16]
(Microsoft Corporation) [File not signed]
R3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2016-08-16]
(Microsoft Corporation) [File not signed]
S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088
2009-07-13] (Microsoft Corporation) [File not signed]
S3 usbscan; C:\Windows\System32\DRIVERS\usbscan.sys [42496 2013-07-02]
(Microsoft Corporation) [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2016-02-03]
(Microsoft Corporation) [File not signed]
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2016-08-16]
(Microsoft Corporation) [File not signed]
S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344
2013-07-12] (Microsoft Corporation) [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-13]
(Microsoft Corporation) [File not signed]
R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576
2009-07-13] (Microsoft Corporation) [File not signed]
R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904
2009-07-13] (Microsoft Corporation) [File not signed]
R3 vwifimp; C:\Windows\System32\DRIVERS\vwifimp.sys [17920 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776
2009-07-13] (Microsoft Corporation) [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20]
(Microsoft Corporation) [File not signed]
S1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20]
(Microsoft Corporation) [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20]
(Microsoft Corporation) [File not signed]
S3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-13]
(Microsoft Corporation) [File not signed]
R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WSDPrintDevice; C:\Windows\System32\DRIVERS\WSDPrint.sys [23040
2009-07-13] (Microsoft Corporation) [File not signed]
S3 WSDScan; C:\Windows\System32\DRIVERS\WSDScan.sys [25088 2009-07-13]
(Microsoft Corporation) [File not signed]
S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-25]
(Microsoft Corporation) [File not signed]
S3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-25]
(Microsoft Corporation) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:41 am

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-04 10:19 - 2016-12-04 10:19 - 00022155 _____ C:\ComboFix.txt
2016-12-03 16:06 - 2016-12-01 19:36 - 05659954 ____R (Swearware)
C:\Users\user\Desktop\ComboFix.exe
2016-12-01 20:40 - 2011-06-25 22:45 - 00256000 _____ C:\Windows\PEV.exe
2016-12-01 20:40 - 2010-11-07 09:20 - 00208896 _____ C:\Windows\MBR.exe
2016-12-01 20:40 - 2009-04-19 20:56 - 00060416 _____ (NirSoft)
C:\Windows\NIRCMD.exe
2016-12-01 20:40 - 2000-08-30 16:00 - 00518144 _____ (SteelWerX)
C:\Windows\SWREG.exe
2016-12-01 20:40 - 2000-08-30 16:00 - 00406528 _____ (SteelWerX)
C:\Windows\SWSC.exe
2016-12-01 20:40 - 2000-08-30 16:00 - 00098816 _____ C:\Windows\sed.exe
2016-12-01 20:40 - 2000-08-30 16:00 - 00080412 _____ C:\Windows\grep.exe
2016-12-01 20:40 - 2000-08-30 16:00 - 00068096 _____ C:\Windows\zip.exe
2016-12-01 20:25 - 2016-12-04 10:19 - 00000000 ____D C:\Qoobox
2016-12-01 19:51 - 2016-12-04 00:58 - 00000000 ____D C:\Windows\erdnt
2016-12-01 19:36 - 2016-12-01 19:36 - 05659954 ____R (Swearware)
C:\Users\user\Downloads\ComboFix.exe
2016-11-29 00:06 - 2016-11-29 11:31 - 00056382 _____
C:\Users\user\Downloads\Addition.txt
2016-11-25 22:19 - 2016-12-05 21:23 - 00056563 _____
C:\Users\user\Downloads\FRST.txt
2016-11-25 22:07 - 2016-12-05 13:31 - 00000000 ____D C:\FRST
2016-11-25 21:48 - 2016-11-25 21:53 - 02412032 _____ (Farbar)
C:\Users\user\Downloads\FRST64.exe
2016-11-25 21:11 - 2016-11-25 21:17 - 06253640 _____ (AVAST Software)
C:\Users\user\Downloads\avast_free_antivirus_setup_online_cnet_2.exe
2016-11-25 21:11 - 2016-11-25 21:17 - 06253640 _____ (AVAST Software)
C:\Users\Public\Desktop\avast_free_antivirus_setup_online_cnet_2.exe
2016-11-23 13:32 - 2016-12-05 08:56 - 00000000 ____D
C:\Users\user\AppData\LocalLow\Mozilla
2016-11-17 16:36 - 2016-12-02 00:00 - 00000000 ____D C:\Program Files
(x86)\Mozilla Firefox
2016-11-17 15:13 - 2016-11-17 15:18 - 16563352 _____ (Malwarebytes
Corp.) C:\Users\user\Downloads\mbar-1.09.3.1001.exe
2016-11-17 14:46 - 2016-11-17 15:25 - 00000000 ____D C:\Users\user\Desktop\mbar
2016-11-16 14:31 - 2016-11-16 14:31 - 03910208 _____
C:\Users\user\Downloads\adwcleaner_6.030.exe
2016-11-15 14:57 - 2016-12-05 13:12 - 00833352 _____ C:\Windows\ntbtlog.txt
2016-11-08 13:20 - 2016-11-02 07:36 - 00382696 _____ (Adobe Systems
Incorporated) C:\Windows\system32\atmfd.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00100864 _____ (Microsoft
Corporation) C:\Windows\system32\fontsub.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00046080 _____ (Adobe Systems)
C:\Windows\system32\atmlib.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00041472 _____ (Microsoft
Corporation) C:\Windows\system32\lpk.dll
2016-11-08 13:20 - 2016-11-02 07:32 - 00014336 _____ (Microsoft
Corporation) C:\Windows\system32\dciman32.dll
2016-11-08 13:20 - 2016-11-02 07:22 - 00308456 _____ (Adobe Systems
Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00070656 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00025600 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\lpk.dll
2016-11-08 13:20 - 2016-11-02 07:16 - 00010240 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-11-08 13:20 - 2016-11-02 06:53 - 00034304 _____ (Adobe Systems)
C:\Windows\SysWOW64\atmlib.dll
2016-11-08 13:20 - 2016-10-27 19:59 - 00394440 _____ (Microsoft
Corporation) C:\Windows\system32\iedkcs32.dll
2016-11-08 13:20 - 2016-10-27 19:14 - 00346320 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-11-08 13:20 - 2016-10-27 11:13 - 02724864 _____ (Microsoft
Corporation) C:\Windows\system32\mshtml.tlb
2016-11-08 13:20 - 2016-10-27 11:13 - 00004096 _____ (Microsoft
Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-11-08 13:20 - 2016-10-27 10:55 - 00066560 _____ (Microsoft
Corporation) C:\Windows\system32\iesetup.dll
2016-11-08 13:20 - 2016-10-27 10:54 - 00417792 _____ (Microsoft
Corporation) C:\Windows\system32\html.iec
2016-11-08 13:20 - 2016-10-27 10:54 - 00048640 _____ (Microsoft
Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-11-08 13:20 - 2016-10-27 10:53 - 00576000 _____ (Microsoft
Corporation) C:\Windows\system32\vbscript.dll
2016-11-08 13:20 - 2016-10-27 10:53 - 00088064 _____ (Microsoft
Corporation) C:\Windows\system32\MshtmlDac.dll
2016-11-08 13:20 - 2016-10-27 10:51 - 02896384 _____ (Microsoft
Corporation) C:\Windows\system32\iertutil.dll
2016-11-08 13:20 - 2016-10-27 10:44 - 00054784 _____ (Microsoft
Corporation) C:\Windows\system32\jsproxy.dll
2016-11-08 13:20 - 2016-10-27 10:43 - 00034304 _____ (Microsoft
Corporation) C:\Windows\system32\iernonce.dll
2016-11-08 13:20 - 2016-10-27 10:38 - 00615936 _____ (Microsoft
Corporation) C:\Windows\system32\ieui.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00817664 _____ (Microsoft
Corporation) C:\Windows\system32\jscript.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00814080 _____ (Microsoft
Corporation) C:\Windows\system32\jscript9diag.dll
2016-11-08 13:20 - 2016-10-27 10:37 - 00144384 _____ (Microsoft
Corporation) C:\Windows\system32\ieUnatt.exe
2016-11-08 13:20 - 2016-10-27 10:37 - 00114688 _____ (Microsoft
Corporation) C:\Windows\system32\ieetwcollector.exe
2016-11-08 13:20 - 2016-10-27 10:28 - 25763328 _____ (Microsoft
Corporation) C:\Windows\system32\mshtml.dll
2016-11-08 13:20 - 2016-10-27 10:28 - 00968704 _____ (Microsoft
Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-11-08 13:20 - 2016-10-27 10:24 - 00489984 _____ (Microsoft
Corporation) C:\Windows\system32\dxtmsft.dll
2016-11-08 13:20 - 2016-10-27 10:19 - 06047744 _____ (Microsoft
Corporation) C:\Windows\system32\jscript9.dll
2016-11-08 13:20 - 2016-10-27 10:15 - 00077824 _____ (Microsoft
Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-11-08 13:20 - 2016-10-27 10:13 - 00107520 _____ (Microsoft
Corporation) C:\Windows\system32\inseng.dll
2016-11-08 13:20 - 2016-10-27 10:09 - 00199680 _____ (Microsoft
Corporation) C:\Windows\system32\msrating.dll
2016-11-08 13:20 - 2016-10-27 10:08 - 00092160 _____ (Microsoft
Corporation) C:\Windows\system32\mshtmled.dll
2016-11-08 13:20 - 2016-10-27 10:05 - 00315392 _____ (Microsoft
Corporation) C:\Windows\system32\dxtrans.dll
2016-11-08 13:20 - 2016-10-27 10:02 - 00152064 _____ (Microsoft
Corporation) C:\Windows\system32\occache.dll
2016-11-08 13:20 - 2016-10-27 09:49 - 00262144 _____ (Microsoft
Corporation) C:\Windows\system32\webcheck.dll
2016-11-08 13:20 - 2016-10-27 09:46 - 00806912 _____ (Microsoft
Corporation) C:\Windows\system32\msfeeds.dll
2016-11-08 13:20 - 2016-10-27 09:46 - 00725504 _____ (Microsoft
Corporation) C:\Windows\system32\ie4uinit.exe
2016-11-08 13:20 - 2016-10-27 09:44 - 02131456 _____ (Microsoft
Corporation) C:\Windows\system32\inetcpl.cpl
2016-11-08 13:20 - 2016-10-27 09:44 - 01359360 _____ (Microsoft
Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-11-08 13:20 - 2016-10-27 09:17 - 15257088 _____ (Microsoft
Corporation) C:\Windows\system32\ieframe.dll
2016-11-08 13:20 - 2016-10-27 09:16 - 02920448 _____ (Microsoft
Corporation) C:\Windows\system32\wininet.dll
2016-11-08 13:20 - 2016-10-27 09:03 - 01543680 _____ (Microsoft
Corporation) C:\Windows\system32\urlmon.dll
2016-11-08 13:20 - 2016-10-27 08:54 - 00800768 _____ (Microsoft
Corporation) C:\Windows\system32\ieapfltr.dll
2016-11-08 13:20 - 2016-10-27 07:05 - 20304896 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-08 13:20 - 2016-10-25 07:02 - 03219456 _____ (Microsoft
Corporation) C:\Windows\system32\win32k.sys
2016-11-08 13:20 - 2016-10-22 09:54 - 02724864 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-11-08 13:20 - 2016-10-22 09:36 - 00062464 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-11-08 13:20 - 2016-10-22 09:36 - 00047616 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-11-08 13:20 - 2016-10-22 09:35 - 00498688 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-11-08 13:20 - 2016-10-22 09:35 - 00341504 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\html.iec
2016-11-08 13:20 - 2016-10-22 09:34 - 00064000 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-11-08 13:20 - 2016-10-22 09:27 - 02287616 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-08 13:20 - 2016-10-22 09:27 - 00047104 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-11-08 13:20 - 2016-10-22 09:26 - 00030720 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-11-08 13:20 - 2016-10-22 09:22 - 00476160 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ieui.dll
2016-11-08 13:20 - 2016-10-22 09:21 - 00663552 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\jscript.dll
2016-11-08 13:20 - 2016-10-22 09:21 - 00115712 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-11-08 13:20 - 2016-10-22 09:20 - 00620032 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-11-08 13:20 - 2016-10-22 09:09 - 00416256 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-11-08 13:20 - 2016-10-22 09:04 - 00060416 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-11-08 13:20 - 2016-10-22 09:03 - 00091136 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\inseng.dll
2016-11-08 13:20 - 2016-10-22 08:59 - 00168960 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msrating.dll
2016-11-08 13:20 - 2016-10-22 08:58 - 00076288 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-08 13:20 - 2016-10-22 08:56 - 00279040 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-08 13:20 - 2016-10-22 08:54 - 00130048 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\occache.dll
2016-11-08 13:20 - 2016-10-22 08:46 - 00230400 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-11-08 13:20 - 2016-10-22 08:45 - 00693248 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-11-08 13:20 - 2016-10-22 08:44 - 04608000 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-08 13:20 - 2016-10-22 08:43 - 02055680 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-11-08 13:20 - 2016-10-22 08:43 - 01155072 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-11-08 13:20 - 2016-10-22 08:30 - 13654016 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-08 13:20 - 2016-10-22 08:12 - 02444800 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-08 13:20 - 2016-10-22 08:09 - 01312256 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-08 13:20 - 2016-10-22 08:09 - 00710144 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-11-08 13:20 - 2016-10-15 07:31 - 00976896 _____ (Microsoft
Corporation) C:\Windows\system32\inetcomm.dll
2016-11-08 13:20 - 2016-10-15 07:31 - 00084480 _____ (Microsoft
Corporation) C:\Windows\system32\INETRES.dll
2016-11-08 13:20 - 2016-10-15 07:13 - 00741888 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-08 13:20 - 2016-10-15 07:13 - 00084480 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-11-08 13:20 - 2016-10-11 07:37 - 00370920 _____ (Microsoft
Corporation) C:\Windows\system32\clfs.sys
2016-11-08 13:20 - 2016-10-11 07:31 - 01148416 _____ (Microsoft
Corporation) C:\Windows\system32\IMJP10.IME
2016-11-08 13:20 - 2016-10-11 07:31 - 01068544 _____ (Microsoft
Corporation) C:\Windows\system32\msctf.dll
2016-11-08 13:20 - 2016-10-11 07:31 - 00878080 _____ (Microsoft
Corporation) C:\Windows\system32\IMJP10K.DLL
2016-11-08 13:20 - 2016-10-11 07:31 - 00457216 _____ (Microsoft
Corporation) C:\Windows\system32\imkr80.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00246784 _____ (Microsoft
Corporation) C:\Windows\system32\input.dll
2016-11-08 13:20 - 2016-10-11 07:31 - 00176128 _____ (Microsoft
Corporation) C:\Windows\system32\tintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft
Corporation) C:\Windows\system32\quick.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft
Corporation) C:\Windows\system32\qintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft
Corporation) C:\Windows\system32\phon.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft
Corporation) C:\Windows\system32\cintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00175104 _____ (Microsoft
Corporation) C:\Windows\system32\chajei.ime
2016-11-08 13:20 - 2016-10-11 07:31 - 00132608 _____ (Microsoft
Corporation) C:\Windows\system32\pintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 01027584 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\IMJP10.IME
2016-11-08 13:20 - 2016-10-11 07:18 - 00829952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msctf.dll
2016-11-08 13:20 - 2016-10-11 07:18 - 00701440 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-11-08 13:20 - 2016-10-11 07:18 - 00430080 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\imkr80.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00202240 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\input.dll
2016-11-08 13:20 - 2016-10-11 07:18 - 00126976 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\tintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\quick.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\qintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\phon.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\cintlgnt.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00125952 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\chajei.ime
2016-11-08 13:20 - 2016-10-11 07:18 - 00090112 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\pintlgnt.ime
2016-11-08 13:20 - 2016-10-11 05:33 - 00187392 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-11-08 13:20 - 2016-10-11 05:06 - 00221184 _____ (Microsoft
Corporation) C:\Windows\system32\UIAnimation.dll
2016-11-08 13:20 - 2016-10-10 07:38 - 00154856 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-11-08 13:20 - 2016-10-10 07:38 - 00095464 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-11-08 13:20 - 2016-10-10 07:34 - 00210432 _____ (Microsoft
Corporation) C:\Windows\system32\wdigest.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00135680 _____ (Microsoft
Corporation) C:\Windows\system32\sspicli.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00086528 _____ (Microsoft
Corporation) C:\Windows\system32\TSpkg.dll
2016-11-08 13:20 - 2016-10-10 07:34 - 00028672 _____ (Microsoft
Corporation) C:\Windows\system32\sspisrv.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 01462272 _____ (Microsoft
Corporation) C:\Windows\system32\lsasrv.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 01212928 _____ (Microsoft
Corporation) C:\Windows\system32\rpcrt4.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00730624 _____ (Microsoft
Corporation) C:\Windows\system32\kerberos.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00690688 _____ (Microsoft
Corporation) C:\Windows\system32\adtschema.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00463872 _____ (Microsoft
Corporation) C:\Windows\system32\certcli.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00345600 _____ (Microsoft
Corporation) C:\Windows\system32\schannel.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00316928 _____ (Microsoft
Corporation) C:\Windows\system32\msv1_0.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00312320 _____ (Microsoft
Corporation) C:\Windows\system32\ncrypt.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00190464 _____ (Microsoft
Corporation) C:\Windows\system32\rpchttp.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00146432 _____ (Microsoft
Corporation) C:\Windows\system32\msaudite.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00060416 _____ (Microsoft
Corporation) C:\Windows\system32\msobjs.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00043520 _____ (Microsoft
Corporation) C:\Windows\system32\cryptbase.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00028160 _____ (Microsoft
Corporation) C:\Windows\system32\secur32.dll
2016-11-08 13:20 - 2016-10-10 07:33 - 00022016 _____ (Microsoft
Corporation) C:\Windows\system32\credssp.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00690688 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00666112 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00553472 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00342528 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\certcli.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00261120 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00254464 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\schannel.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00223232 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00172032 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00146432 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00141312 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00096768 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00065536 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00060416 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00022016 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\secur32.dll
2016-11-08 13:20 - 2016-10-10 07:16 - 00017408 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\credssp.dll
2016-11-08 13:20 - 2016-10-10 07:02 - 00064000 _____ (Microsoft
Corporation) C:\Windows\system32\auditpol.exe
2016-11-08 13:20 - 2016-10-10 06:56 - 00159744 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00291328 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00129536 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-11-08 13:20 - 2016-10-10 06:55 - 00030720 _____ (Microsoft
Corporation) C:\Windows\system32\lsass.exe
2016-11-08 13:20 - 2016-10-10 06:54 - 00050176 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-11-08 13:20 - 2016-10-10 06:50 - 00036352 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-11-08 13:20 - 2016-10-07 07:40 - 00631176 _____ (Microsoft
Corporation) C:\Windows\system32\winresume.efi
2016-11-08 13:20 - 2016-10-07 07:37 - 05547752 _____ (Microsoft
Corporation) C:\Windows\system32\ntoskrnl.exe
2016-11-08 13:20 - 2016-10-07 07:37 - 00706792 _____ (Microsoft
Corporation) C:\Windows\system32\winload.efi
2016-11-08 13:20 - 2016-10-07 07:35 - 01732864 _____ (Microsoft
Corporation) C:\Windows\system32\ntdll.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 03649536 _____ (Microsoft
Corporation) C:\Windows\system32\MSVidCtl.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 01163264 _____ (Microsoft
Corporation) C:\Windows\system32\kernel32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00880640 _____ (Microsoft
Corporation) C:\Windows\system32\advapi32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00877056 _____ (Microsoft
Corporation) C:\Windows\system32\oleaut32.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00503808 _____ (Microsoft
Corporation) C:\Windows\system32\srcore.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00419840 _____ (Microsoft
Corporation) C:\Windows\system32\KernelBase.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00362496 _____ (Microsoft
Corporation) C:\Windows\system32\wow64win.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00243712 _____ (Microsoft
Corporation) C:\Windows\system32\wow64.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00215552 _____ (Microsoft
Corporation) C:\Windows\system32\winsrv.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00084992 _____ (Microsoft
Corporation) C:\Windows\system32\asycfilt.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00063488 _____ (Microsoft
Corporation) C:\Windows\system32\setbcdlocale.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00059904 _____ (Microsoft
Corporation) C:\Windows\system32\appidapi.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00050176 _____ (Microsoft
Corporation) C:\Windows\system32\srclient.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00044032 _____ (Microsoft
Corporation) C:\Windows\system32\csrsrv.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00034816 _____ (Microsoft
Corporation) C:\Windows\system32\appidsvc.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00016384 _____ (Microsoft
Corporation) C:\Windows\system32\ntvdm64.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00013312 _____ (Microsoft
Corporation) C:\Windows\system32\wow64cpu.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00006656 _____ (Microsoft
Corporation) C:\Windows\system32\apisetschema.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00006144 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00005120 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004608 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004608 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00004096 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003584 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:32 - 00003072 ____H (Microsoft
Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:18 - 04000488 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-11-08 13:20 - 2016-10-07 07:18 - 03944680 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-11-08 13:20 - 2016-10-07 07:15 - 01314112 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 02291712 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 01114112 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00644096 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00581632 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00275456 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00067584 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00050688 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00043008 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\srclient.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00006656 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00005120 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00005120 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\wow32.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004608 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00004096 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:12 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 07:04 - 00148480 _____ (Microsoft
Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-11-08 13:20 - 2016-10-07 07:04 - 00062464 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\appid.sys
2016-11-08 13:20 - 2016-10-07 07:04 - 00017920 _____ (Microsoft
Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-11-08 13:20 - 2016-10-07 07:01 - 00338432 _____ (Microsoft
Corporation) C:\Windows\system32\conhost.exe
2016-11-08 13:20 - 2016-10-07 07:00 - 00296960 _____ (Microsoft
Corporation) C:\Windows\system32\rstrui.exe
2016-11-08 13:20 - 2016-10-07 06:56 - 00112640 _____ (Microsoft
Corporation) C:\Windows\system32\smss.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00025600 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\setup16.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00014336 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-11-08 13:20 - 2016-10-07 06:50 - 00007680 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\instnm.exe
2016-11-08 13:20 - 2016-10-07 06:50 - 00002048 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\user.exe
2016-11-08 13:20 - 2016-10-07 06:49 - 00006144 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00004608 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00003584 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-11-08 13:20 - 2016-10-07 06:49 - 00003072 ____H (Microsoft
Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-11-08 13:20 - 2016-10-05 06:54 - 00090112 _____ (Microsoft
Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-11-08 13:20 - 2016-09-15 06:56 - 00041984 _____ (Microsoft
Corporation) C:\Windows\system32\UtcResources.dll
2016-11-08 13:20 - 2016-09-13 07:37 - 00002048 _____ (Microsoft
Corporation) C:\Windows\system32\tzres.dll
2016-11-08 13:20 - 2016-09-13 07:11 - 00002048 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\tzres.dll
2016-11-08 13:20 - 2016-09-09 10:20 - 00756736 _____ (Microsoft
Corporation) C:\Windows\system32\win32spl.dll
2016-11-08 13:20 - 2016-09-09 10:00 - 00497152 _____ (Microsoft
Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-11-08 13:19 - 2016-08-22 08:19 - 01386496 _____ (Microsoft
Corporation) C:\Windows\system32\diagtrack.dll
2016-11-06 10:42 - 2016-11-06 10:45 - 574216234 _____
C:\Users\user\Downloads\[HorribleSubs] One Piece - 763 [1080p].mkv
2016-11-06 10:42 - 2016-11-06 10:45 - 559869070 _____
C:\Users\user\Downloads\[HorribleSubs] Dragon Ball Super - 65
[1080p].mkv
2016-11-06 08:29 - 2016-11-06 08:29 - 00000000 ___DL
C:\Users\Guest\AppData\LocalLow\PlayReady

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:42 am

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-05 13:20 - 2009-07-13 21:13 - 00782470 _____
C:\Windows\system32\PerfStringBackup.INI
2016-12-05 13:20 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\inf
2016-12-04 00:08 - 2009-07-13 18:34 - 00000215 _____ C:\Windows\system.ini
2016-12-03 16:07 - 2012-02-22 19:36 - 00000000 ____D
C:\ProgramData\AVAST Software
2016-12-03 15:37 - 2012-02-22 19:36 - 00000000 ____D C:\Program
Files\AVAST Software
2016-12-02 00:22 - 2013-08-05 10:25 - 00000000 ____D C:\Windows\Minidump
2016-12-02 00:22 - 2012-02-18 16:38 - 00270906 ____N
C:\Windows\Minidump\120216-18688-01.dmp
2016-12-01 19:05 - 2014-06-10 19:35 - 00000000 ____D C:\Program Files
(x86)\Mozilla Maintenance Service
2016-12-01 18:31 - 2011-08-16 00:18 - 00000000 ____D C:\ProgramData\PDFC
2016-12-01 18:17 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-29 22:14 - 2012-04-26 12:44 - 00000830 _____
C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-29 21:55 - 2014-09-30 20:54 - 00000898 _____
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-29 21:45 - 2012-11-08 00:38 - 00000904 _____
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000UA.job
2016-11-29 21:14 - 2012-02-18 18:31 - 00003918 _____
C:\Windows\System32\Tasks\User_Feed_Synchronization-{37A87542-CBDE-4569-8B70-22735BB33C86}
2016-11-29 16:07 - 2012-11-08 00:38 - 00000852 _____
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000Core.job
2016-11-29 14:55 - 2014-09-30 20:54 - 00000894 _____
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-29 02:05 - 2014-05-31 15:31 - 00000000 ____D
C:\Users\user\AppData\Local\Adobe
2016-11-29 02:04 - 2012-02-18 18:31 - 00000328 _____
C:\Windows\Tasks\HPCeeScheduleForuser.job
2016-11-29 02:00 - 2012-02-18 18:31 - 00003180 _____
C:\Windows\System32\Tasks\HPCeeScheduleForuser
2016-11-27 11:14 - 2015-01-08 18:07 - 00004182 _____
C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-24 12:59 - 2009-07-13 20:45 - 00024608 ____H
C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-24 12:59 - 2009-07-13 20:45 - 00024608 ____H
C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-21 23:07 - 2012-02-26 17:58 - 00003216 _____
C:\Windows\System32\Tasks\HPCeeScheduleForUSER-HP$
2016-11-21 23:07 - 2012-02-26 17:58 - 00000340 _____
C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job
2016-11-21 22:22 - 2009-07-13 21:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-11-21 20:48 - 2014-09-30 20:57 - 00002197 _____
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-17 15:33 - 2014-05-26 10:33 - 00000000 ____D
C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-11-17 15:25 - 2015-01-08 13:32 - 00192216 _____ (Malwarebytes)
C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-17 15:25 - 2015-01-08 13:30 - 00109272 _____ (Malwarebytes)
C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-16 15:02 - 2014-05-25 23:14 - 00000000 ____D C:\AdwCleaner
2016-11-16 14:19 - 2016-04-24 12:25 - 00000000 ____D C:\Users\user\Desktop\Virus
2016-11-09 16:59 - 2012-11-16 13:23 - 00000000 ____D
C:\Users\user\AppData\Local\Spotify
2016-11-09 16:59 - 2012-11-16 13:22 - 00000000 ____D
C:\Users\user\AppData\Roaming\Spotify
2016-11-09 16:21 - 2016-02-17 18:58 - 00000000 ____D
C:\Users\user\Downloads\Downloaded Music
2016-11-09 10:23 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2016-11-09 09:44 - 2009-07-13 20:45 - 04937152 _____
C:\Windows\system32\FNTCACHE.DAT
2016-11-09 01:14 - 2014-07-08 17:26 - 00000000 ____D C:\Windows\system32\MRT
2016-11-09 01:06 - 2014-07-08 17:26 - 141011376 ____C (Microsoft
Corporation) C:\Windows\system32\MRT.exe
2016-11-08 17:13 - 2012-04-26 12:44 - 00796352 _____ (Adobe Systems
Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 17:13 - 2012-04-26 12:44 - 00003768 _____
C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-08 17:13 - 2012-02-21 01:09 - 00000000 ____D
C:\Windows\system32\Macromed
2016-11-08 17:13 - 2011-08-16 00:16 - 00142528 _____ (Adobe Systems
Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 17:13 - 2011-08-16 00:16 - 00000000 ____D
C:\Windows\SysWOW64\Macromed
2016-11-07 01:14 - 2016-09-12 23:15 - 00000000 ____D
C:\Users\user\AppData\Roaming\qBittorrent
2016-11-06 12:13 - 2013-10-05 15:08 - 00003416 _____
C:\Windows\System32\Tasks\Apple Diagnostics
2016-11-06 06:19 - 2015-12-19 12:21 - 00000000 ____D
C:\Users\Guest\AppData\Local\Spotify
2016-11-06 06:19 - 2015-12-19 12:20 - 00000000 ____D
C:\Users\Guest\AppData\Roaming\Spotify
2016-11-06 06:18 - 2014-06-04 19:20 - 00000000 __SHD
C:\Users\Guest\AppData\LocalLow\EmieUserList
2016-11-06 06:18 - 2014-06-04 19:20 - 00000000 __SHD
C:\Users\Guest\AppData\LocalLow\EmieSiteList
2016-11-06 06:18 - 2014-05-03 15:26 - 00000000 __SHD
C:\Users\Guest\AppData\Local\EmieUserList
2016-11-06 06:18 - 2014-05-03 15:26 - 00000000 __SHD
C:\Users\Guest\AppData\Local\EmieSiteList

==================== Files in the root of some directories =======

2014-05-25 10:49 - 2014-05-25 10:49 - 0000045 _____ ()
C:\Users\user\AppData\Roaming\WB.CFG
2014-05-24 23:02 - 2014-05-24 23:02 - 0007608 _____ ()
C:\Users\user\AppData\Local\Resmon.ResmonCfg
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ ()
C:\ProgramData\cmn_upld.log
2012-03-05 20:40 - 2012-10-07 17:02 - 0036460 _____ ()
C:\ProgramData\lxeeJSW.log
2012-03-05 20:29 - 2012-10-30 21:36 - 0001516 _____ ()
C:\ProgramData\lxeescan.log
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ ()
C:\ProgramData\LxWbGwLog.log
2012-10-07 17:09 - 2012-10-07 17:09 - 0000000 _____ ()
C:\ProgramData\UpdaterLog.txt

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2016-10-11 10:52] - [2016-08-29 07:04] - 3229696 ____A (Microsoft
Corporation) 38AE1B3C38FAEF56FE4907922F0385BA

C:\Windows\SysWOW64\explorer.exe
[2016-10-11 10:52] - [2016-08-29 06:55] - 2972672 ____A (Microsoft
Corporation) 6DDCA324434FFA506CF7DC4E51DB7935

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll
[2016-09-13 20:18] - [2016-08-16 09:36] - 1009152 ____A (Microsoft
Corporation) 8F4B991E7837E8E0F90C856659456652

C:\Windows\SysWOW64\User32.dll
[2016-09-13 20:18] - [2016-08-15 18:48] - 0833024 ____A (Microsoft
Corporation) 0FBC0E335B65EE5A0175631237817510

C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-11-04 12:56

==================== End of FRST.txt ============================

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:44 am

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2016
Ran by user (05-12-2016 22:08:40)
Running from C:\Users\user\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-02-19 02:23:59)
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2324025828-1623389042-2555509162-500 -
Administrator - Disabled)
Danilo (S-1-5-21-2324025828-1623389042-2555509162-1001 - Limited -
Enabled) => C:\Users\Danilo
Guest (S-1-5-21-2324025828-1623389042-2555509162-501 - Limited -
Enabled) => C:\Users\Guest
user (S-1-5-21-2324025828-1623389042-2555509162-1000 - Administrator -
Enabled) => C:\Users\user

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date)
{17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date)
{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date)
{9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Disabled - Up to date)
{ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the
fixlist to unhide them. The adware programs should be uninstalled
manually.)

µTorrent (HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\uTorrent)
(Version: 3.4.6.42094 - BitTorrent Inc.)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint)
(Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe Acrobat 4.0 (HKLM-x32\...\Adobe Acrobat 4.0) (Version: 4.0 -
Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe
Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player
ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI)
(Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS6
(HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 -
Adobe Systems Incorporated)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 -
WildTangent) Hidden
Apple Application Support (32-bit)
(HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1
- Apple Inc.)
Apple Application Support (64-bit)
(HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 -
Apple Inc.)
Apple Mobile Device Support
(HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18
- Apple Inc.)
Apple Software Update
(HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version:
2.2.0.150 - Apple Inc.)
ATI Catalyst Install Manager
(HKLM\...\{F580D12E-01E5-31A6-A321-7C8E6D5361A5}) (Version: 3.0.829.0
- ATI Technologies, Inc.)
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Blio (HKLM-x32\...\{9368DDD5-CE7F-4BD7-A83A-F00FABE338EC}) (Version:
2.2.6699 - K-NFB Reading Technology, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version:
3.1.0.1 - Apple Inc.)
Bounce Symphony (x32 Version: 2.2.0.97 - WildTangent) Hidden
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Camera Assistant Software for ViewSonic
(HKLM-x32\...\{C33F3EF6-3625-4FE5-BCBA-41361C99AF1D}) (Version:
1.7.054.0820 - Chicony Electronics Co.,Ltd.)
CDisplayEx 1.10.29 (HKLM\...\CDisplayEx_is1) (Version:  - Progdigy
Software S.A.R.L.)
Chronicles of Albian (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined
Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
Combined Community Codec Pack 64bit 2015-10-18 (HKLM\...\Combined
Community Codec Pack 64bit_is1) (Version: 2015.10.19.0 - CCCP Project)
Cradle of Rome 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Epson Connect Printer Setup
(HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0
- Seiko Epson Corporation)
EPSON Connect version 1.0 (HKLM-x32\...\EPSON Connect_is1) (Version:
1.0 - Epson America Inc.) <==== ATTENTION
Epson Customer Participation
(HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 -
SEIKO EPSON CORPORATION)
Epson Event Manager
(HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version:
3.01.0003 - Seiko Epson Corporation)
Epson E-Web Print
(HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version:
1.23.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility
(HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version:
1.30.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Printer Finder
(HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0
- SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater
(HKLM-x32\...\{C7AA3D65-1F84-4590-AFAA-0777A04B6687}) (Version: 4.4.1
- SEIKO EPSON CORPORATION)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series)
(Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799})
(Version: 2.5.00 - SEIKO EPSON CORPORATION)
Facebook Video Calling 3.1.0.521
(HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version:
3.1.521 - Skype Limited)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Free MKV Player version 1.0
(HKLM-x32\...\{138FE2EF-B1A5-40E1-A385-B771BF75E86D}_is1) (Version:
1.0 - [You must be registered and logged in to see this link.])
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Talk Plugin
(HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version:
5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard [You must be registered and logged in to see this link.] v1.2.2.3 (x32 Version: 1.00.0000 -
Hewlett-Packard Company) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version:
1.0.2.5 - WildTangent)
HP LinkUp (HKLM-x32\...\{DB3147AB-4024-4773-8EC0-A1FE5B44933D})
(Version: 2.01.028 - Hewlett-Packard)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA})
(Version: 2.0 - Hewlett-Packard Company)
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562})
(Version: 2.10.0000 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{D35B72B6-F0E4-462B-BDEB-E08032B3B681})
(Version: 8.7.4747.3786 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C})
(Version: 1.1.13880.3792 - Hewlett-Packard Company)
HP Support Assistant
(HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version:
8.3.34.7 - Hewlett-Packard Company)
HP Support Information
(HKLM-x32\...\{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}) (Version:
10.1.1000 - Hewlett-Packard)
HP Support Solutions Framework
(HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version:
12.5.32.37 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{DE77FE3F-A33D-499A-87AD-5FC406617B40})
(Version: 5.002.003.003 - Hewlett-Packard)
HP Vision Hardware Diagnostics
(HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.9.0.0 -
Hewlett-Packard)
iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version:
4.0.3.56 - Apple Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001})
(Version: 1.0.6349.0 - IDT)
iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version:
12.5.1.21 - Apple Inc.)
Java 8 Update 77 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0})
(Version: 8.0.770.3 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0})
(Version: 8.0.910.14 - Oracle Corporation)
Jewel Quest: The Sleepless Star - Collector's Edition (x32 Version:
2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft
Corporation) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 1.6 - Kobo Inc.)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243})
(Version: 2.5.3925 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.3925 - CyberLink Corp.) Hidden
Lexmark Z700-P700 Series (HKLM\...\Lexmark Z700-P700 Series) (Version:
 - Lexmark International, Inc.)
LTCM Client (HKLM-x32\...\LTCM Client) (Version:  - Leader Technologies Inc.)
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043
(HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 -
Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1
(HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version:
4.6.01055 - Microsoft Corporation)
Microsoft Mathematics
(HKLM-x32\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 -
Microsoft Corporation)
Microsoft PowerPoint 2010 (HKLM\...\Office14.POWERPOINT) (Version:
14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight
(HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version:
5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU]
(HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version:
3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable
(HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version:
8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64)
(HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336
- Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64)
(HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000
- Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
(HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729
- Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
(HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version:
9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
(HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version:
9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
(HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version:
9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
(HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version:
9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
(HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version:
9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
(HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version:
9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
(HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219
- Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
(HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version:
10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
(HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64))
(Version: 10.0.50903 - Microsoft Corporation)
Microsoft Word 2010 (HKLM\...\Office14.WORD) (Version: 14.0.7015.1000
- Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872})
(Version: 1.0.3.0 - Mojang)
Mozilla Firefox 50.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox
50.0.2 (x86 en-US)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService)
(Version: 50.0.2.6177 - Mozilla)
MPC-HC 1.7.10 (64-bit)
(HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10
- MPC-HC Team)
MSXML 4.0 SP2 (KB954430)
(HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version:
4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688)
(HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version:
4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.97 - WildTangent) Hidden
Namco All-Stars: PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Office Suite X 3.3 (HKLM-x32\...\Office Suite X 3.3) (Version:  - )
OpenOffice.org 3.3
(HKLM-x32\...\{3E171899-0175-47CC-84C4-562ACDD4C021}) (Version:
3.3.9567 - OpenOffice.org)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5350) (Version:  - )
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version:
4.0.54 - PDF Complete, Inc)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 -
WildTangent) Hidden
PlayReady PC Runtime amd64
(HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 -
Microsoft Corporation)
PlayReady PC Runtime x86
(HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0
- Microsoft Corporation)
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658})
(Version: 6.1.5331 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.5331 - CyberLink Corp.) Hidden
PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-132318649765})
(Version: 5.10.1217.0 -  NewspaperDirect Inc.)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727})
(Version: 1.6 - Project64)
qBittorrent 3.3.7 (HKLM-x32\...\qBittorrent) (Version: 3.3.7 - The
qBittorrent project)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C})
(Version: 7.79.80.95 - Apple Inc.)
Ralink 802.11n Wireless LAN Card
(HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version:
4.0.3.0 - Ralink)
Recovery Manager (x32 Version: 5.5.0.4320 - CyberLink Corp.) Hidden
Remote Graphics Receiver
(HKLM-x32\...\{16FC3056-90C0-4757-8A68-64D8DA846ADA}) (Version: 5.4.5
- Hewlett-Packard)
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55})
(Version: 1.9.5.103 - RoxioNow)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
(HKLM\...\{90140000-0018-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{A3364707-2F53-4C83-8F68-C9877A9080C7})
(Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
(HKLM\...\{90140000-001B-0000-1000-0000000FF1CE}_Office14.WORD_{A3364707-2F53-4C83-8F68-C9877A9080C7})
(Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
(Version:  - Microsoft) Hidden
SketchUp 2015 (HKLM\...\{350488A4-1540-4103-8F01-B27503891EB0})
(Version: 15.3.331 - Trimble Navigation Limited)
Skype™ 7.29 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6})
(Version: 7.29.102 - Skype Technologies S.A.)
Slingo Supreme (x32 Version: 2.2.0.97 - WildTangent) Hidden
Spotify (HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\Spotify)
(Version: 1.0.41.375.g040056ca - Spotify AB)
Spybot - Search & Destroy
(HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version:
2.4.40 - Safer-Networking Ltd.)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vacation Quest - The Hawaiian Islands (x32 Version: 2.2.0.97 -
WildTangent) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 2.2.0.97 - WildTangent) Hidden
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3
- VideoLAN)
VSFilter 2.41.322 (0c3a1ea) Nightly (HKLM-x32\...\vsfilter_is1)
(Version: 2.41.322 - MPC-HC Team)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.37 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version:
15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections
(HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version:
15.4.5722.2 - Microsoft Corporation)
WinRAR 4.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinZip 16.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240CC})
(Version: 16.0.9715 - WinZip Computing, S.L. )
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll
(Google Inc.)
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll
=> No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll
=> No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll =>
No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll
=> No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll
=> No File
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll
(Google Inc.)
CustomCLSID: HKU\S-1-5-21-2324025828-1623389042-2555509162-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32
-> C:\Users\user\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll =>
No File

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:45 am

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)

Task: {0B9632AA-4000-4352-ADE6-D0E2CDF2CC7A} - System32\Tasks\avast!
Emergency Update => C:\Program Files\AVAST
Software\Avast\AvastEmUpdate.exe
Task: {0D6978BA-8744-4F9B-AF07-1C98ED5744A3} -
System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker =>
C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-10-12]
(HP Inc.)
Task: {24446ADE-2911-4121-82D4-0D5A7E8AE4D0} - System32\Tasks\AVAST
Software\Avast settings backup => C:\Program Files\Common
Files\AV\avast! Antivirus\backup.exe [2016-06-02] (AVAST Software)
Task: {29FB01B7-5D95-4D7B-9F67-EEC4392F9AE4} - System32\Tasks\SafeZone
scheduled Autoupdate 1461091127 => C:\Program Files\AVAST
Software\SZBrowser\launcher.exe
Task: {4444B025-B756-4B7C-957E-024DCE8CE1DA} -
System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files
(x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16]
(Hewlett-Packard)
Task: {4C4E22C0-0E2D-44D3-A357-14FC0CF097A6} - System32\Tasks\Apple
Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet
Services\EReporter.exe [2014-08-25] (Apple Inc.)
Task: {5716DFF1-49C0-465A-902C-70A0F23CD8DD} -
System32\Tasks\AdobeAAMUpdater-1.0-user-HP-user => C:\Program Files
(x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
[2012-04-04] (Adobe Systems Incorporated)
Task: {69657C43-79CD-4BE1-B9C3-4FCF95963022} - \Speedial -> No File
<==== ATTENTION
Task: {6C86EB10-7C29-4B0D-9CA1-839E915D777E} -
System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {778AA53E-568C-4679-A591-FCEE26F0136D} -
System32\Tasks\{A1894CDE-D00E-4F91-BF4E-EA13569ED700} => pcalua.exe -a
C:\Users\user\Downloads\jxpiinstall(1).exe -d C:\Users\user\Downloads
Task: {7A22195C-0D6F-416B-B915-BE8164ED9153} -
System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh
immunization => C:\Program Files (x86)\Spybot - Search & Destroy
2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {8602E0C6-7AAD-459F-AE27-3CD493DE1D93} -
System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis
=> C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\HPSF.exe [2016-08-23] (HP Inc.)
Task: {86B9C762-8C14-4AB6-9975-035C0DA916F3} -
System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support
Solutions Framework Report => C:\Program Files
(x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
[2016-05-09] (Hewlett-Packard)
Task: {AAC81BFD-3292-4B92-B689-D2C30DF3A14B} -
System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the
system => C:\Program Files (x86)\Spybot - Search & Destroy
2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {B5A2775C-90D1-4B77-8F12-D62E523D6D5A} -
System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000Core
=> C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
[2015-08-30] (Google Inc.)
Task: {B661F2D9-8F06-4571-BB20-138FE9F913FF} -
System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000UA
=> C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
[2015-08-30] (Google Inc.)
Task: {B9E48006-39FF-4D3D-A48E-61FAA3DE6692} -
System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support
Solutions Framework Updater => C:\Program Files
(x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
[2016-08-03] (HP Inc.)
Task: {C05F2CAB-836A-46C1-9DE9-5A2A231A01F0} -
System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan
(HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-08-18] (HP
Inc.)
Task: {C094DE56-9132-4D88-B307-C34615AD8C26} -
System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files
(x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple
Inc.)
Task: {C92195A2-F864-4CA9-A165-9F6EC6C54A9B} -
System32\Tasks\Registration => C:\Program Files
(x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-06-15] ()
Task: {D1569325-C211-426A-9F98-A9745320805E} - System32\Tasks\Adobe
Flash Player Updater =>
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[2016-11-08] (Adobe Systems Incorporated)
Task: {D2FFE436-CAE2-44E6-9A80-0CB70F707043} -
System32\Tasks\{FC9A82A7-0042-45A4-9EF3-B3D63DEBF64D} => C:\Program
Files (x86)\Camera Assistant Software for ViewSonic\traybar.exe
[2007-08-20] (Chicony)
Task: {D40CD51D-8C55-46AD-B8EF-3F0023583696} -
System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {D92C4764-53EC-4EB3-A15E-2779996D76AC} -
System32\Tasks\HPCeeScheduleForuser => C:\Program Files
(x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16]
(Hewlett-Packard)
Task: {DEF6E5A9-DCBA-4583-9A0C-12C3420250EB} -
System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for
updates => C:\Program Files (x86)\Spybot - Search & Destroy
2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {E5F7D25B-D55C-495F-8E3A-590D2EE3965E} -
System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support
Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP
Support Framework\HPSF.exe [2016-08-23] (HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be
moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job =>
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program
Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program
Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000Core.job
=> C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2324025828-1623389042-2555509162-1000UA.job
=> C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program
Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForuser.job => C:\Program Files
(x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============


==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams:
C:\Users\Danilo\Desktop\Danilo.jpg: 3or4kl4x13tuuug3Byamue2s4b [93]
AlternateDataStreams:
C:\Users\Danilo\Desktop\Danilo.jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
[0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the
registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
e"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be
restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site:
HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\...\localhost ->
localhost

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 18:34 - 2016-12-04 00:01 - 00000027 ____A
C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2324025828-1623389042-2555509162-1000\Control
Panel\Desktop\\Wallpaper ->
C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System =>
(ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3)
(EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the
registry. The file will not be moved unless listed separately.)

FirewallRules: [{18AED543-2950-41D3-923D-5AB010D2BE0D}] => (Allow)
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowShell.exe
FirewallRules: [{60DBFC41-F9D1-46B8-BAF3-389C323C359F}] => (Allow)
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowShell.exe
FirewallRules: [{5159912B-E329-476E-BBB9-48B1B89EF16F}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe
FirewallRules: [{E5D0D150-FDA9-4190-855E-9343E5B017F4}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe
FirewallRules: [{3F6B3D96-CC15-4DC0-9907-A4104DFCEEEB}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\Remote Graphics
Receiver\rgreceiver.exe
FirewallRules: [{04928767-7255-4326-8A37-1EEE5153B945}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\Remote Graphics
Receiver\rgreceiver.exe
FirewallRules: [{ADDE7ECD-5ED1-468F-AB51-5ADDF2AA1DAC}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
FirewallRules: [{0E474077-7176-40F7-ADC5-9B0E0B313DE9}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
FirewallRules: [{F849AEDC-6FA9-4D75-9F84-17B815E495E0}] => (Allow)
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CAD07812-1B76-48D6-B8BF-DF12D4CBD08D}] => (Allow) LPort=2869
FirewallRules: [{5E0F1344-EF56-4D46-A8F3-98F78C25B4AD}] => (Allow) LPort=1900
FirewallRules: [{E8F43D79-BBB9-4ACB-9D39-22CD0E2119EA}] => (Allow)
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{3BFD9CC4-6266-4204-A688-3ACB732FD8AC}] => (Allow)
C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{F8CFDFD0-2482-4508-9006-96E53464D74B}] => (Allow)
C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{84FCB8AF-EED1-4461-9C40-7B6B22E75574}] => (Allow)
C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D3A79EC2-B37A-450A-9373-AC641A5DC005}] => (Allow)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{ED2B9E6A-D8B0-4FF7-85F6-FFA332D2306A}] => (Allow)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EDAAA742-3FD2-417F-9E1A-84F20326A59A}] => (Allow)
C:\Windows\system32\lxeecoms.exe
FirewallRules: [TCP Query
User{0FB1A18E-527E-409E-8BF9-55188B9DA5FE}C:\users\guest\appdata\local\facebook\video\skype\facebookvideocalling.exe]
=> (Block) C:\users\guest\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [UDP Query
User{B905EF65-7EE2-469E-BED1-4D1CA0A40766}C:\users\guest\appdata\local\facebook\video\skype\facebookvideocalling.exe]
=> (Block) C:\users\guest\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [{FF9D7CEB-8A64-49F2-B6DF-D0C8834B7ADC}] => (Allow)
C:\Windows\SysWOW64\lxblcoms.exe
FirewallRules: [{599E3819-EF12-4FE9-9549-14B2A71FDCC3}] => (Allow)
C:\Windows\SysWOW64\lxblcoms.exe
FirewallRules: [{E48EAB46-256D-4746-A7AA-7729C55C4B7E}] => (Allow)
C:\Windows\System32\lxblcoms.exe
FirewallRules: [{D2609B49-2FCC-497E-B847-96461FE7E412}] => (Allow)
C:\Windows\System32\lxblcoms.exe
FirewallRules: [TCP Query
User{8C3B322E-9D58-43A0-A940-7CF9BC845287}C:\users\user\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{68DE2661-9F2B-45A0-B2EF-9844E9A67211}C:\users\user\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [{32E10518-702D-464F-AA77-DA11D412ADBE}] => (Allow)
E:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{58429B1B-CCA3-4BAF-8CC0-D88EB676289A}] => (Allow)
E:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [TCP Query
User{34FC9910-726C-4F73-837B-0CF7E3F1FF6F}C:\program files (x86)\epson
software\event manager\eeventmanager.exe] => (Allow) C:\program files
(x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query
User{1534ADAD-8142-4334-A99D-FFCA812233B3}C:\program files (x86)\epson
software\event manager\eeventmanager.exe] => (Allow) C:\program files
(x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query
User{9EED4216-E86E-4AAA-BB77-40D7AE17D6FE}C:\windows\syswow64\javaw.exe]
=> (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query
User{0A14E1BE-1A71-4D84-99E2-B8830AB049FC}C:\windows\syswow64\javaw.exe]
=> (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{8B208778-860E-4EF6-BBA2-9EBDB7DFD226}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
FirewallRules: [TCP Query
User{370B9B87-458F-428D-8056-21B5A5464E5B}C:\program files
(x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query
User{49C85F11-559C-4F5B-BDC9-39BD8CA17A09}C:\program files
(x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query
User{56E6EB59-4577-4F99-A8D5-62834E49447E}C:\program files
(x86)\java\jre7\bin\java.exe] => (Block) C:\program files
(x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query
User{DCB1E1D0-ABC3-4DF2-ACCE-083AF042150B}C:\program files
(x86)\java\jre7\bin\java.exe] => (Block) C:\program files
(x86)\java\jre7\bin\java.exe
FirewallRules: [{ED9B777E-B43F-42FE-A3FF-6F0DC0ECB482}] => (Allow)
C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5254B2D3-3A59-4B96-9018-BCE358863479}] => (Allow)
C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DB088B72-0B58-49EC-BB25-677C27039895}] => (Allow)
C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{252AC2EB-8C28-4C57-8916-8D367A3930F0}] => (Allow)
C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8A65207B-7B43-4F94-B446-EDE149EAB740}] => (Allow)
C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{385AFE49-E3C4-4C3C-9E6C-3A0D94C1830A}] => (Allow)
C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4F3998E2-A4C2-4EAD-886F-222A75305DF1}] => (Allow)
C:\Program Files (x86)\Vuze\Azureus.exe
FirewallRules: [{63E10791-2126-4002-91DE-F7180DE482A6}] => (Allow)
C:\Program Files (x86)\Vuze\Azureus.exe
FirewallRules: [{13A09811-A8E7-4117-9092-975560935178}] => (Allow)
C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{3D858FC4-C699-457A-A8D1-CFE79BA38E4F}] => (Allow)
C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [TCP Query
User{A780B10E-4424-41A1-AF65-ED9727DF026A}C:\program files (x86)\epson
software\event manager\eeventmanager.exe] => (Allow) C:\program files
(x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query
User{205A5CCE-7C3E-449E-9AAD-6F58F94E884A}C:\program files (x86)\epson
software\event manager\eeventmanager.exe] => (Allow) C:\program files
(x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query
User{C79A47D2-9747-442E-8504-23A94174790A}C:\program files
(x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query
User{3A7D5BA4-12C3-4BCA-8942-C8471DC17140}C:\program files
(x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query
User{A1DD7821-DFE9-4137-AC8A-6F06E20DEACD}C:\users\user\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{D1B17AF2-79B5-4C55-B85C-7232F746668E}C:\users\user\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query
User{198B965A-405C-4093-B944-F9AB154A047A}C:\users\user\appdata\roaming\utorrent\updates\3.4.2_34944.exe]
=> (Allow) C:\users\user\appdata\roaming\utorrent\updates\3.4.2_34944.exe
FirewallRules: [UDP Query
User{106FBA5F-DFD5-4BFB-B2CB-3AC0F47A4780}C:\users\user\appdata\roaming\utorrent\updates\3.4.2_34944.exe]
=> (Allow) C:\users\user\appdata\roaming\utorrent\updates\3.4.2_34944.exe
FirewallRules: [{5361E01E-8BED-4E73-8B9D-B044874AF0F8}] => (Allow)
C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E10EC5DE-317C-4FE3-9610-98336659DCBE}] => (Allow)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7D4B3ADD-D416-456C-BAB5-4EA7B6A80566}] => (Allow)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE0FD889-DC2F-42C7-928C-DF8DD0454408}] => (Allow)
C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D71F2BE7-FD57-4105-839E-293AE4F12835}] => (Allow)
C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query
User{CBD196EA-23BD-4148-BF20-30216E8D24B6}C:\program files
(x86)\java\jre1.8.0_31\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query
User{B8D67BDE-2DD0-46B9-B7D9-4B9A18876408}C:\program files
(x86)\java\jre1.8.0_31\bin\javaw.exe] => (Block) C:\program files
(x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{8473836D-0245-4C97-9C86-ECDD4692C57E}] => (Allow)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A23EAB65-0F41-40F1-A65E-3AD358B47CF3}] => (Allow)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CC93B914-858A-4E4A-B84E-A6C741E0BD84}] => (Allow)
C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2AAFEC93-47FB-4A91-ADD0-E46C1A7151BF}] => (Allow)
C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2EC6774C-5971-4579-ADCE-341AF872A863}] => (Allow)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{03181888-5EBB-40DA-9738-81967F31F22F}] => (Allow)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3DA13E45-1C20-4792-87DD-E0EE4C3A237E}] => (Allow)
C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [TCP Query
User{73A883FC-54E5-42A1-A469-851EC66EA414}C:\users\guest\appdata\roaming\spotify\spotify.exe]
=> (Block) C:\users\guest\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{9E1AD300-0544-47A8-9C87-DE245A0F72F8}C:\users\guest\appdata\roaming\spotify\spotify.exe]
=> (Block) C:\users\guest\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query
User{8F7C7376-6C80-42FC-845C-DE0665140724}C:\users\guest\appdata\roaming\spotify\spotify.exe]
=> (Block) C:\users\guest\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{F956F9E0-5470-4BF0-9735-A55A253D3287}C:\users\guest\appdata\roaming\spotify\spotify.exe]
=> (Block) C:\users\guest\appdata\roaming\spotify\spotify.exe
FirewallRules: [{26C7E964-39B7-4313-B65F-C5E564A8E375}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{B3795538-29BA-4D06-9AA6-913D92A212D4}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{51153FB8-ED84-4993-8541-5411A50F3462}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{2B42B3C6-067B-4A32-88AB-7568B8BD62A5}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{437BC1B4-B947-4702-8028-4A0E495074D7}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{4083A5A2-CCFC-4310-BA3A-21B6C798490F}] => (Allow)
C:\Users\user\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [TCP Query
User{48DDA238-5D70-4378-B520-82D863C9B9B1}C:\users\user\appdata\roaming\utorrent\updates\3.4.6_42094.exe]
=> (Block) C:\users\user\appdata\roaming\utorrent\updates\3.4.6_42094.exe
FirewallRules: [UDP Query
User{8B04A807-9876-45DF-8181-B4F06E91F8C3}C:\users\user\appdata\roaming\utorrent\updates\3.4.6_42094.exe]
=> (Block) C:\users\user\appdata\roaming\utorrent\updates\3.4.6_42094.exe
FirewallRules: [TCP Query
User{2E23EEC0-2920-4442-B36D-DA63CBE39A3F}C:\users\theta\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\theta\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{0C70A534-324B-4E6A-99F7-9E0685E381EB}C:\users\theta\appdata\roaming\spotify\spotify.exe]
=> (Allow) C:\users\theta\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query
User{BEBEC6DF-C65C-4D44-BF58-36AD319276CA}C:\users\roger
xo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\roger
xo\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query
User{E6DFD8DD-E6D1-4C10-870D-B3091612429D}C:\users\roger
xo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\roger
xo\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query
User{8861E5F7-72AB-4488-A203-336693D5C469}C:\program files
(x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow)
C:\program files
(x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query
User{A1FAAAE0-768E-4D74-8797-269F2CE1DDE1}C:\program files
(x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow)
C:\program files
(x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{607AE373-8F31-40BB-A4FE-0452844BBE36}] => (Allow)
C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{8EE604D8-B82A-479E-AFFD-AFE4759D698F}] => (Allow)
C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{11A8D8F1-C400-41F1-9B5D-73B2D84D4DED}] => (Allow)
C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{132D5BD1-6BAE-407A-887C-3978DF757BFB}] => (Allow)
C:\Users\user\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{5F52F37A-DA47-42F2-BA44-BC687E57FF44}] => (Allow)
C:\Users\user\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{83CDE3BC-B09F-48FC-BF21-B3AEC1A8D19A}] => (Allow)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot
- Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy
tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot
- Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner
Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot
- Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot
- Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background
update service

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or
does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be
a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device,
and this error should be resolved.

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 10:46 am

==================== Event log errors: =========================

Application errors:
==================
Error: (12/05/2016 10:08:39 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 10:05:28 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 10:02:38 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:59:27 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:56:28 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:25:36 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:22:33 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:19:21 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:16:11 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.

Error: (12/05/2016 09:13:04 PM) (Source: Microsoft-Windows-CAPI2)
(EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialize
the Catalog Database. The error was: 1117 (0x45d) : The request could
not be performed because of an I/O device error.
.


System errors:
=============
Error: (12/05/2016 10:22:51 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:22:51 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:22:51 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:21:35 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:21:35 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:21:35 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:20:39 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:20:39 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:20:39 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (12/05/2016 10:19:39 PM) (Source: Service Control Manager)
(EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server
service which failed to start because of the following error:
The dependency service or group failed to start.


CodeIntegrity:
===================================
  Date: 2016-12-03 23:05:52.486
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash
could not be found on the system. A recent hardware or software change
might have installed a file that is signed incorrectly or damaged, or
that might be malicious software from an unknown source.

  Date: 2016-12-03 23:03:14.255
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash
could not be found on the system. A recent hardware or software change
might have installed a file that is signed incorrectly or damaged, or
that might be malicious software from an unknown source.

  Date: 2016-11-16 15:21:47.080
  Description: Code Integrity is unable to verify the image integrity
of the file \Device\HarddiskVolume2\Windows\System32\crypt32.dll
because the set of per-page image hashes could not be found on the
system.

  Date: 2016-11-10 06:06:29.824
  Description: Code Integrity is unable to verify the image integrity
of the file \Device\HarddiskVolume2\Windows\System32\audiodg.exe
because the set of per-page image hashes could not be found on the
system.

  Date: 2016-11-10 04:02:15.569
  Description: Code Integrity is unable to verify the image integrity
of the file \Device\HarddiskVolume2\Windows\System32\audiodg.exe
because the set of per-page image hashes could not be found on the
system.

  Date: 2016-11-09 23:05:44.026
  Description: Code Integrity is unable to verify the image integrity
of the file \Device\HarddiskVolume2\Windows\System32\audiodg.exe
because the set of per-page image hashes could not be found on the
system.

  Date: 2016-11-09 22:28:51.475
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\Windows\System32\drivers\dfsc.sys because
file hash could not be found on the system. A recent hardware or
software change might have installed a file that is signed incorrectly
or damaged, or that might be malicious software from an unknown
source.

  Date: 2016-11-09 22:21:19.074
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\Windows\System32\drivers\netbt.sys
because file hash could not be found on the system. A recent hardware
or software change might have installed a file that is signed
incorrectly or damaged, or that might be malicious software from an
unknown source.

  Date: 2016-11-09 22:15:58.212
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\Windows\System32\drivers\netbt.sys
because file hash could not be found on the system. A recent hardware
or software change might have installed a file that is signed
incorrectly or damaged, or that might be malicious software from an
unknown source.

  Date: 2016-11-09 22:10:45.837
  Description: Windows is unable to verify the image integrity of the
file \Device\HarddiskVolume2\Windows\System32\drivers\afd.sys because
file hash could not be found on the system. A recent hardware or
software change might have installed a file that is signed incorrectly
or damaged, or that might be malicious software from an unknown
source.


==================== Memory info ===========================

Processor: AMD A4-3400 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 14%
Total physical RAM: 5616.61 MB
Available physical RAM: 4820.32 MB
Total Virtual: 11231.4 MB
Available Virtual: 10484.12 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:919.87 GB) (Free:207.58 GB) NTFS
==>[system with boot components (obtained from drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:11.54 GB) (Free:1.38 GB) NTFS
==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: BB217DD7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=11.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 6th December 2016, 5:13 pm

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!


  • Right-click on FRST icon and select Run as Administrator to start the tool.
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.


Please post it to your reply.




Please read carefully and follow these steps.

  • Download [You must be registered and logged in to see this link.] and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.





  • If an infected file is detected, the default action will be Cure, click on Continue.



  • If a suspicious file is detected, the default action will be Skip, click on Continue.





  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.




  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents the report here.





Re-running FRST to search for any leftovers:

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST icon and select Run as Administrator to start the tool.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.
Attachments
fixlist.txt Fixlist.txtYou don't have permission to download attachments.(1 Kb) Downloaded 4 times


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by omicron_persei8 on 6th December 2016, 8:40 pm

I just downloaded the TSSKiller tool, but I haven't ran it yet. When I hit fix on FarBar under admin, it pops up with this message:

"No fixlist.txt found.

The fixlist.txt should be in the same folder/directory the tool is located."

I've only ran this program twice. The first time we scanned and just this second time with the Additional log. Both FRST and Additional logs are in the same Downloads folder with the program.

omicron_persei8
Novice
Novice

Posts Posts : 20
Joined Joined : 2012-01-21
Gender Gender : Male
OS OS : Windows 7 Home Premium
Protection Protection : Avast
Points Points : 18112
# Likes # Likes : 0

View user profile

Back to top Go down

In Progress Re: EXTREMELY slow computer with terrible startup

Post by Dr Jay on 7th December 2016, 12:12 am

Please ensure the fixlist.txt is in the same folder as FRST. If it is not, then it will fail to fix anything.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14309
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302970
# Likes # Likes : 10

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum