1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved cannot update

Discussion in 'Windows Vista' started by punkybunge, Jul 9, 2018.

Thread Status:
Not open for further replies.
Advertisement
  1. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    Tech Support Guy System Info Utility version 1.0.0.4
    OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 64 bit
    Processor: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz, Intel64 Family 6 Model 15 Stepping 13
    Processor Count: 2
    RAM: 4085 Mb
    Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 448 Mb
    Hard Drives: C: 217 GB (112 GB Free); D: 15 GB (5 GB Free);
    Motherboard: Gateway,
    Antivirus: Avast Antivirus, Enabled and Updated

    I am now having trouble with this laptop. windows cannot update for some reason, windows media player will not work among other programs. I don't know what's going on. Please helpo_O:(
     
  2. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    78,005
    First Name:
    Frank
    Nola:

    Windows Vista SP2 ended all support and went "extinct" in April 2017, so there's been no security updates and hotfixes for well over a year.

    Windows Media Player is one of the first features I remove after doing a clean install of a Windows operating system.
    You will likely have better success with installing and using VLC Media Player 3.0.3
    https://www.videolan.org/vlc/download-windows.html

    ----------------------------------------------------------------
     
  3. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    Thank you, would I be able to upgrade without alot of difficulty? I installed VLC media player and it will not respond, just like windows media player. is all this because of Vista?
     
  4. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    78,005
    First Name:
    Frank
    VLC Media Player 3.0.3 works fine for me in Windows XP SP3, so I don't know why it won't work for you in Windows Vista SP2.

    I'm not there to see the condition of your Gateway(unknown model number), so I can't advise you how to resolve the problem.

    You probably should retire it and get something newer with a supported Windows operating system - Windows 7 SP1 or Windows 10.

    ----------------------------------------------------------------
     
  5. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,547
    First Name:
    Derek
    if no media players work then I would automatically assume an Avast AV problem.

    Uninstall Avast & see if they work then. If they do then choose a different antivirus. I have seen too many examples of Avast & AVG stopping legitimate programs from working recently
     
  6. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    78,005
    First Name:
    Frank
    I use Avast Free Antivirus in my Windows XP SP3 test computer, and VLC Media Player 3.0.3 still works fine in it.

    However, still do what Derek suggested and see if it helps.

    --------------------------------------------------------------
     
  7. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    Okay. I uninstalled Avast, and now I have security issues. says I have no malware protection nor virus protection and windows defender is out of date and won't update. Better get Avast back on here, and neither player responds without Avast installed. I have another laptop that was suggested that I install windows 8.1 on, I think if it is possible I will do the same on this and get rid of Vista so I can get updates like it's supposed to. Would that be possible on this laptop too? I downloaded win8.1 but I never got it to open up so I could transfer to a dvd. When I do get the win 8.1 to work, will I need to uninstall Vista?
     
  8. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,547
    First Name:
    Derek
    If uninstalling avast didn't let the media players work, then install avast again

    What do you mean exactly by " media players do not respond" ?
    Describe exactly what happens when you try to use a media player.

    Do you just click on a media file like a video or music file or do you open the player first & navigate to a media file
     
  9. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    when I click on windows media player, it opens up but it's a blank box and it says not responding, same thing with the VLC media player. It may be because I have Vista and nothing can be updated. that's why I was asking about putting Windows 8.1 on it. I can't use any Microsoft programs and that's not convenient for me.
     
  10. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    55,547
    First Name:
    Derek
    I don't think it is because of vista, although using an OS that is out of date & unsupported and cannot be updated is very risky.
    It isn't as simple as updating to W 8.1 becasue that also has some degree of issues and will go out of support in a couple of years as well, and 8.1 doesn't always work on older hardware from the vista era.

    I suspect you might have something else blocking some programs from running
    lets just see what is happening on that computer
    Asking you to run this tool, doesn't mean you have malware or that I suspect any malware, but it allows me to see some programs running on the computer & some computer settings and if necessary help you to correct any problems .

    Please download Farbar Recovery Scan Tool and save it to your Desktop or downloads folder.

    Note: You need to download and run the 64 bit version

    • Right click to run as administrator. When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will produce a log called FRST.txt in the same directory the tool is run from.
    • Please copy and paste log back here.
    • The first time the tool is run it generates another log (Addition.txt - also located in the same directory/folder/place as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
     
  11. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    78,005
    First Name:
    Frank
    Nola:

    A Gateway laptop that originally came with Windows Vista is probably too old to support Windows 8.1.

    You cannot do an upgrade install from Windows Vista to Windows 8.1.
    You have to do a clean install of Windows 8.1.
    Even if you could do an upgrade install, it's not advisable because it carries over debris and issues from the earlier version.

    I'll leave you with Derek.
    Good luck. (y)

    --------------------------------------------------------------
     
  12. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    Flavalee: Well, bonkers, After I had uninstalled Avast and then was unprotected, but I had to reboot the pc to complete the uninstall. it would not start again. It came on to the screen telling me that windows had shut down and wrong and did I want to start it normally or start it in safe mode I guess it was, and it would find out what was wrong. I chose that one cause the normally one wouldn't come on, just made a funny noise. It ran all night and half the day trying to fix what was wrong. So i tried to stop it and it said that I couldn't. So I turned it off and restarted it in the normal way. it took about 4-5 minutes before it finally came on. So if I wanted to get Vista off here, how do I do a clean install?
    Derek: I installed the Farbar and am running it right now. when it runs, but it has been stopping and saying it is not responding. as it has been sitting idle for the past 5 minutes now not responding. just like the media players. when I put the mouse in the box, it turns to the hour glass and just keeps turning. It just isn't going to run. this is the second time, I've tried to run it. I wish I could retire this, but I cannot get another so this is what I've got to work with. :sick::(
     
  13. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    78,005
    First Name:
    Frank
    Advise us the exact model number and SNID number on that Gateway.
    Once it's correctly identified, we should be able to advise you if its primary devices will support Windows 8.1.

    Even if you're able to do a clean install of Windows 8.1 in it, how do you plan to activate it afterwards?

    http://event.msi.com/us/win8-1/clean_install.html
    (pictorial guide for doing a clean install of Windows 8.1)

    ---------------------------------------------------------------
     
  14. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    It did work. I guess it was working when it said it wasn't, crazy... here are the results.
    M-6848 I think that is the model number and I don't know how to find the SNID number.

    20.06.2018
    Ran by lola_wright (administrator) on LOLA_WRIGHT-PC (10-07-2018 16:17:55)
    Running from C:\Users\lola_wright\Downloads
    Loaded Profiles: lola_wright (Available Profiles: lola_wright)
    Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Language: English (United States)
    Internet Explorer Version 9 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Windows\System32\SLsvc.exe
    (Agere Systems) C:\Windows\System32\agr64svc.exe
    (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAOsvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
    (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAO.exe
    (iWin Inc.) C:\Program Files (x86)\iWin Games\iWinTrusted.exe
    (RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
    (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
    (PC Drivers Headquarters LP) C:\Program Files (x86)\Driver Support\DriverSupport.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (IDT, Inc.) C:\Windows\sttray64.exe
    (Microsoft Corporation) C:\Windows\ehome\ehtray.exe
    (Ruiware) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
    (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\ScanToPCActivationApp.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Chicony) C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
    () C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\nacl64.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\nacl64.exe
    (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPNetworkCommunicatorCom.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
    () C:\Program Files\Google\Drive\googledrivesync.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    () C:\Program Files\Google\Drive\googledrivesync.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (Farbar) C:\Users\lola_wright\Downloads\FRST64 (2).exe

    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
    HKLM\...\Run: [IAAnotif] => C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-07-12] (Intel Corporation)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1021488 2007-04-26] (Synaptics, Inc.)
    HKLM\...\Run: [SigmatelSysTrayApp] => C:\Windows\sttray64.exe [425984 2007-09-06] (IDT, Inc.)
    HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files\Camera Assistant Software for Gateway\traybar.exe [638976 2007-09-13] (Chicony)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYASwBQAEMAQgAtADYAQgBXAEYATQAtAFQAUgBMAFEAUgAtAEIAUgBVAEgAUAAtAEMAUAA4ADYARwA"&"inst=NwA3AC0ANgA1AD (the data entry has 520 more characters).
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [138240 2008-01-20] (Microsoft Corporation)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1238152 2015-05-17] (Ruiware)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [GoogleChromeAutoLaunch_B3FAE353388799A69E8EF929134EE9F3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [HP] => C:\PROGRAM FILES\HP\HP OFFICEJET 3830 SERIES\BIN\SCANTOPCACTIVATIONAPP.EXE [3651080 2015-03-09] (Hewlett-Packard Development Company, LP)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-03-28] (Piriform Ltd)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\MountPoints2: {2a769a2b-508a-11e8-afe3-00e0b8fa1e2e} - F:\windows\AutoRun.exe
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
    AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => No File
    AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => No File

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Winsock: Catalog9-x64 01 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 02 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 03 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 04 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 15 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Hosts: Hosts file not detected in the default directory
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{1C1D948F-0A57-4EF6-A65F-6B807EF82CDC}: [DhcpNameServer] 192.168.10.1
    Tcpip\..\Interfaces\{F387F585-425E-48B0-A8E6-5A34FAF3790B}: [DhcpNameServer] 192.168.1.254

    Internet Explorer:
    ==================
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-6848
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-6848
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
    URLSearchHook: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 - (No Name) - {f15ff29f-85a1-43cd-9674-e5ba40016c97} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vSrcAs.dll (Mindspark)
    SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM-x32 -> {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
    SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {1B0CA65D-7198-4796-BD98-B1994D13AF37} URL = hxxp://search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20120103,6901,0,8,0
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={3CF6154B-4A98-450D-8C11-CA4462C40C66}&mid=ff2f30979a18441cd31c4f62d9a7301f-b35fca0a9cabfac7b20e77d3c068879b11b15e21&lang=us&ds=AVG&pr=fr&d=2011-12-12 12:11:57&v=9.0.0.18&sap=dsp&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL =
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2011-11-01] (Yahoo! Inc.)
    BHO-x32: No Name -> {0631bff0-6846-48ca-982d-d62d7f376e97} -> No File
    BHO-x32: No Name -> {0D778FDC-FAD7-4B1D-AB88-7A76A562D65C} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-23] (Oracle Corporation)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-03-08] (Google Inc.)
    BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
    BHO-x32: No Name -> {beea7fa9-d1f4-49a2-9b1f-6fb7a2d9bc2a} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-23] (Oracle Corporation)
    BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll [2011-11-01] (Yahoo! Inc)
    Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
    Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2011-11-01] (Yahoo! Inc.)
    Toolbar: HKLM-x32 - No Name - {2a942ab7-2073-49bc-a7e1-77e93835889a} - No File
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-03-08] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
    DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    DPF: HKLM-x32 {1A1F56AA-3401-46F9-B277-D57F3421F821} hxxp://www.worldwinner.com/games/v47/shared/FunGamesLoader.cab
    DPF: HKLM-x32 {601B418B-E6A6-47FC-A094-07248741CEB3} file:///E:/vwr_data/WebVwr.cab
    DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: HKLM-x32 {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
    DPF: HKLM-x32 {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
    DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll [2007-01-19] (Microsoft Corporation)
    Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll [2007-01-19] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\lola_wright\AppData\Roaming\Mozilla\Firefox\Profiles\1sbe8qgv.default-1520615271169 [2018-07-10]
    FF Extension: (Smash) - C:\Users\lola_wright\AppData\Roaming\Mozilla\Firefox\Profiles\1sbe8qgv.default-1520615271169\Extensions\{be572ad4-5dd7-4b6b-8204-5d655efaf3b3}.xpi [2018-05-11]
    FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-02-04] [Legacy] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [{98e34367-8df7-42b4-837b-20b892ff0848}] - C:\ProgramData\iWin Games\firefox
    FF Extension: (iWinGames Plugin) - C:\ProgramData\iWin Games\firefox [2012-02-23] [Legacy] [not signed]
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-08] ()
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-08] ()
    FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [No File]
    FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-23] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-23] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-3094174547-28691812-3827549335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\lola_wright\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-22] (Unity Technologies ApS)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&ISID=MBACF4E82-A701-46E8-B62C-54D1B47E47D5&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch
    CHR StartupUrls: Default -> "hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch","hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SPBF91A14B-279A-48C3-A2A2-2E56DE59F9DB&SSPV=","hxxps://www.yahoo.com/?fr=hp-avast&type=avastbcl","hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch","hxxp://Lasaoren.com/?f=7&a=lrn_ir_14_45_ie&cd=2XzuyEtN2Y1L1QzutDtDtByCtB0DtA0FzzyEyE0CtAtB0BtCtN0D0Tzu0StCtDyEtBtN1L2XzutAtFyCtFtCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtB0B0ByDyEtBtDtGtAyEtC0AtGyBtDzz0DtGyEtAyDyBtGtByC0CtCyByB0AyC0EzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtDyD0F0F0C0A0DtGyC0E0D0FtGyE0E0CtCtG0AyEzyzztGtBtByDtByE0EtDyDtBtA0F0A2Q&cr=233277235&ir=","hxxp://homepage-web.com/?s=acer&m=start","hxxp://www.google.com"
    CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms}
    CHR DefaultSuggestURL: Default -> hxxp://srchbar.com/?s={searchTerms}
    CHR Profile: C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default [2018-07-10]
    CHR Extension: (Google Drive) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-15]
    CHR Extension: (Google Play Music) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2018-07-09]
    CHR Extension: (Google Docs Offline) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-17]
    CHR Extension: (Click&Clean) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2018-07-03]
    CHR Extension: (Login Now) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijifkdkjaioojhebgfgdifljkemifapl [2018-05-23]
    CHR Extension: (Chrometana - Redirect Bing Somewhere Better) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaicbfmipfpfpjmlbpejaoaflfdnabnc [2018-05-23]
    CHR Extension: (playCenter Home) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\kamdefopmcpnkpomihddfnelophmppej [2018-05-23]
    CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-04-15]
    CHR Extension: (My Quick Converter) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\mceagidhbmmekjomkgcbmodhommnhomh [2018-05-23]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
    CHR Extension: (Search Manager) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ommbgnllpkjnidkcnginhlacffdcdijc [2018-05-23]
    CHR Extension: (Beach) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\pldjedicbnjmccbpbgbiddfbgilpgmgm [2018-05-23]
    CHR HKU\S-1-5-21-3094174547-28691812-3827549335-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-06-08] (Adobe Systems Incorporated) [File not signed]
    R2 DSAO; C:\Program Files (x86)\driver support\svc\DriverSupportAOsvc.exe [2033104 2016-10-22] (PC Drivers HeadQuarters LP)
    R2 iprip; C:\Windows\System32\iprip.dll [34816 2006-11-02] (Microsoft Corporation)
    S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-29] (IObit)
    R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568 2014-03-27] (RealNetworks, Inc.)
    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-20] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192512 2008-01-20] (Intel Corporation)
    S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
    S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
    S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
    S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
    S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-07-10 16:15 - 2018-07-10 16:17 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64 (2).exe
    2018-07-10 16:00 - 2018-07-10 16:22 - 000022660 _____ C:\Users\lola_wright\Downloads\FRST.txt
    2018-07-10 15:59 - 2018-07-10 16:00 - 000000000 ____D C:\FRST
    2018-07-10 15:58 - 2018-07-10 15:58 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64 (1).exe
    2018-07-10 15:56 - 2018-07-10 15:58 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64.exe
    2018-07-10 04:48 - 2018-07-10 04:48 - 000178320 _____ (AVAST Software) C:\Users\lola_wright\Downloads\avast_free_antivirus_setup_online_cnet1.exe
    2018-07-10 04:34 - 2018-07-10 04:34 - 000000000 _____ C:\Windows\SysWOW64\last.dump
    2018-07-09 09:31 - 2018-07-09 09:31 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\vlc
    2018-07-09 09:24 - 2018-07-09 09:24 - 000000912 _____ C:\Users\Public\Desktop\VLC media player.lnk
    2018-07-09 09:24 - 2018-07-09 09:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
    2018-07-09 09:23 - 2018-07-09 09:23 - 000000000 ____D C:\Program Files (x86)\VideoLAN
    2018-07-09 09:21 - 2018-07-09 09:23 - 040184976 _____ C:\Users\lola_wright\Downloads\vlc-3.0.3-win32.exe
    2018-07-09 02:44 - 2018-07-09 02:44 - 000748192 _____ (TechGuy, Inc.) C:\Users\lola_wright\Downloads\SysInfo (1).exe
    2018-07-09 02:40 - 2018-07-09 02:40 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\skp
    2018-07-09 02:22 - 2018-07-09 02:22 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
    2018-07-09 02:18 - 2018-07-09 02:18 - 000679696 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\Downloads\DriverSupport (1).exe
    2018-07-09 01:28 - 2018-07-09 01:30 - 000000000 ____D C:\Users\lola_wright\AppData\Local\SquirrelTemp
    2018-07-09 01:28 - 2018-07-09 01:30 - 000000000 ____D C:\Users\lola_wright\AppData\Local\GPMDP_3
    2018-07-09 01:24 - 2018-07-09 01:28 - 060447248 _____ (Samuel Attard) C:\Users\lola_wright\Downloads\Google.Play.Music.Desktop.Player.Setup.exe
    2018-07-03 23:43 - 2018-07-03 23:43 - 000000000 ____D C:\Users\lola_wright\Downloads\ISORecorderV3RC1x64
    2018-07-03 23:37 - 2018-07-03 23:37 - 000000000 ____D C:\Program Files\Alex Feinman
    2018-07-03 23:34 - 2018-07-03 23:34 - 000408326 _____ C:\Users\lola_wright\Downloads\ISORecorderV3RC1x64.zip
    2018-07-03 09:37 - 2018-07-02 23:57 - 025559040 _____ C:\Users\lola_wright\Desktop\Win8.1_English_x64.iso
    2018-07-03 05:36 - 2018-07-03 05:36 - 000000000 ____D C:\Users\lola_wright\Downloads\Driver Support
    2018-07-03 05:35 - 2018-07-10 16:14 - 000003658 _____ C:\Windows\System32\Tasks\Driver Support
    2018-07-03 05:35 - 2018-07-10 13:45 - 000003990 _____ C:\Windows\System32\Tasks\Driver Support-RTMScan
    2018-07-03 05:35 - 2018-07-08 21:16 - 000003992 _____ C:\Windows\System32\Tasks\Driver Support-RTMUpdater
    2018-07-03 05:35 - 2018-07-08 21:16 - 000003976 _____ C:\Windows\System32\Tasks\Driver Support-RTMRules
    2018-07-03 05:35 - 2018-07-04 05:38 - 000000000 ____D C:\ProgramData\UAB
    2018-07-03 05:35 - 2018-07-03 05:35 - 000000000 ____D C:\Users\lola_wright\AppData\Local\PC_Drivers_Headquarters
    2018-07-03 05:35 - 2018-07-03 05:35 - 000000000 ____D C:\ProgramData\Driver Support
    2018-07-03 05:34 - 2018-07-03 05:34 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support
    2018-07-03 05:33 - 2018-07-03 05:36 - 000000000 ____D C:\Program Files (x86)\Driver Support
    2018-07-01 06:21 - 2018-07-01 06:21 - 000012800 _____ C:\Users\lola_wright\Documents\letter.wps
    2018-06-26 01:58 - 2018-06-26 01:58 - 000000000 ____D C:\Windows\System32\Tasks\WPD
    2018-06-24 03:46 - 2018-06-24 03:46 - 000000000 ____D C:\Program Files\Windows Portable Devices
    2018-06-24 03:46 - 2018-06-24 03:46 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
    2018-06-24 03:45 - 2018-06-24 03:45 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
    2018-06-24 03:45 - 2018-06-24 03:45 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
    2018-06-24 03:28 - 2009-09-30 20:02 - 002537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShextAutoplay.exe
    2018-06-24 03:28 - 2009-09-30 20:01 - 000350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceWMDRM.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceTypes.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceClassExtension.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceConnectApi.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 002727936 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 000453120 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
    2018-06-24 03:28 - 2009-09-30 19:51 - 000573440 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000218624 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys
    2018-06-24 03:28 - 2009-09-30 19:51 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll
    2018-06-24 03:24 - 2014-11-25 21:05 - 000564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2018-06-24 03:24 - 2014-11-25 20:42 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001875968 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001796096 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001402368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001253376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2018-06-24 03:08 - 2012-07-25 22:08 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2018-06-24 03:08 - 2012-07-25 21:26 - 000198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2018-06-24 03:08 - 2012-07-25 21:26 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2018-06-24 03:08 - 2012-06-02 09:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    2018-06-24 03:08 - 2009-07-14 07:19 - 000020480 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
    2018-06-24 03:08 - 2009-07-14 07:12 - 000016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winusb.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrssrv.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrsmgr.dll
    2018-06-24 03:03 - 2009-10-09 16:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
    2018-06-24 03:03 - 2009-10-09 16:35 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\winrsmgr.dll
    2018-06-24 03:03 - 2009-10-09 16:34 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 001181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrscmd.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrs.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrshost.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
    2018-06-24 03:02 - 2009-10-09 16:55 - 000252416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtfwd.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wecutil.exe
    2018-06-24 03:02 - 2009-10-09 16:55 - 000056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wecapi.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
    2018-06-24 03:02 - 2009-10-09 16:36 - 002050048 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2018-06-24 03:02 - 2009-10-09 16:36 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
    2018-06-24 03:02 - 2009-10-09 16:35 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2018-06-24 03:02 - 2009-10-09 16:35 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe
    2018-06-24 03:02 - 2009-10-09 16:35 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe
    2018-06-24 03:02 - 2009-10-09 16:35 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\winrscmd.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000352768 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000348672 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000232960 _____ (Microsoft Corporation) C:\Windows\system32\wecsvc.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wevtfwd.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wecutil.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wecapi.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
    2018-06-24 03:02 - 2009-08-01 01:27 - 000201184 _____ C:\Windows\SysWOW64\winrm.vbs
    2018-06-24 03:02 - 2009-08-01 01:27 - 000201184 _____ C:\Windows\system32\winrm.vbs
    2018-06-24 03:02 - 2009-07-16 12:30 - 000004675 _____ C:\Windows\SysWOW64\wsmanconfig_schema.xml
    2018-06-24 03:02 - 2009-07-16 12:30 - 000004675 _____ C:\Windows\system32\wsmanconfig_schema.xml
    2018-06-24 03:02 - 2009-07-16 12:30 - 000002426 _____ C:\Windows\SysWOW64\WsmTxt.xsl
    2018-06-24 03:02 - 2009-07-16 12:30 - 000002426 _____ C:\Windows\system32\WsmTxt.xsl
    2018-06-23 10:57 - 2018-06-23 10:57 - 000035840 _____ C:\Users\lola_wright\Documents\the letter.wps
    2018-06-23 03:13 - 2013-04-17 08:04 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
    2018-06-23 03:13 - 2013-04-17 07:30 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
    2018-06-23 03:13 - 2012-11-21 23:22 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
    2018-06-23 03:13 - 2012-11-21 22:54 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll
    2018-06-23 03:13 - 2011-06-15 11:16 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
    2018-06-23 03:13 - 2011-06-15 11:12 - 000182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
    2018-06-23 03:13 - 2011-03-12 17:52 - 001653760 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2018-06-23 03:13 - 2011-03-12 16:55 - 000876032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
    2018-06-23 03:13 - 2011-02-22 09:47 - 000479744 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2018-06-23 03:13 - 2011-02-22 09:13 - 000288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000539136 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000538624 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2018-06-23 03:13 - 2010-01-25 07:08 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
    2018-06-23 03:13 - 2010-01-25 06:58 - 000332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
    2018-06-23 03:13 - 2010-01-25 03:29 - 000600576 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000413696 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000347136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
    2018-06-23 03:13 - 2009-10-23 12:30 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2018-06-23 03:13 - 2009-10-23 12:10 - 000714240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
    2018-06-23 03:07 - 2011-03-03 10:59 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
    2018-06-23 03:07 - 2011-03-03 10:40 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Apphlpdm.dll
    2018-06-23 03:07 - 2011-03-03 09:00 - 004240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll
    2018-06-23 03:07 - 2011-03-03 08:35 - 004240384 _____ (Microsoft) C:\Windows\SysWOW64\GameUXLegacyGDFs.dll
    2018-06-23 03:07 - 2010-08-26 12:42 - 001927680 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2018-06-23 03:07 - 2010-08-26 11:34 - 001696256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
    2018-06-23 03:04 - 2009-09-09 21:07 - 003815424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
    2018-06-23 03:04 - 2009-09-09 21:06 - 001164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
    2018-06-23 03:04 - 2009-09-09 21:05 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2018-06-23 03:04 - 2009-09-09 21:01 - 003023360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
    2018-06-23 03:04 - 2009-09-09 21:00 - 001164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
    2018-06-23 03:04 - 2009-09-09 21:00 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
    2018-06-22 02:19 - 2018-06-22 02:19 - 000032832 _____ C:\Windows\SysWOW64\rnd_chunk.bin
    2018-06-22 02:15 - 2018-06-22 02:15 - 000679328 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\Downloads\DriverSupport.exe
    2018-06-22 00:26 - 2018-06-22 00:26 - 000015360 _____ C:\Users\lola_wright\Documents\resume.wps
    2018-06-17 03:23 - 2018-06-17 03:23 - 000001070 _____ C:\Users\Public\Desktop\Ultimate Solitaire 750.lnk
    2018-06-17 03:23 - 2018-06-17 03:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Solitaire 750
    2018-06-10 22:55 - 2018-06-10 22:55 - 002239488 _____ (Monterix Software LLC ) C:\Users\lola_wright\Downloads\SystemKeeperInst_47b38c54 (2).exe

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-07-10 16:14 - 2006-11-02 10:22 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    2018-07-10 16:14 - 2006-11-02 10:22 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    2018-07-10 16:09 - 2006-11-02 10:42 - 000000006 ____H C:\Windows\Tasks\SA.DAT
    2018-07-10 14:25 - 2018-04-20 09:51 - 000000000 ___HD C:\Users\lola_wright\Desktop\.tmp.drivedownload
    2018-07-10 14:07 - 2018-04-15 01:57 - 000000000 ___RD C:\Users\lola_wright\Google Drive
    2018-07-10 13:50 - 2012-01-07 13:03 - 000000000 ____D C:\ProgramData\AVAST Software
    2018-07-10 13:35 - 2015-09-12 22:06 - 000000000 ____D C:\ProgramData\ProductData
    2018-07-10 08:30 - 2018-05-05 23:09 - 000000000 ____D C:\Program Files\ZTE_Handset_USB_Driver
    2018-07-10 08:30 - 2018-03-11 12:28 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
    2018-07-10 08:30 - 2015-09-12 22:07 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\ProductData
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\IObit
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\Users\lola_wright\AppData\LocalLow\IObit
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\ProgramData\IObit
    2018-07-10 08:30 - 2014-03-26 09:52 - 000000000 ____D C:\ProgramData\PureLeads
    2018-07-10 08:30 - 2008-05-26 01:30 - 000000000 ____D C:\Program Files (x86)\IDT
    2018-07-10 08:30 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\spool
    2018-07-10 08:30 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\Msdtc
    2018-07-10 08:30 - 2006-11-02 08:33 - 000000000 ___HD C:\Windows\inf
    2018-07-10 08:30 - 2006-11-02 08:33 - 000000000 ____D C:\Windows\rescache
    2018-07-08 21:16 - 2018-05-05 00:44 - 000002884 _____ C:\Windows\System32\Tasks\HPCustPartic.exe_{3BFAF120-AAAC-4042-812B-7BBF96E09B15}
    2018-07-08 21:16 - 2018-05-05 00:42 - 000003542 _____ C:\Windows\System32\Tasks\HPCustParticipation HP OfficeJet 3830 series
    2018-07-08 21:16 - 2018-03-28 12:42 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
    2018-07-08 21:16 - 2018-03-13 22:01 - 000004536 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
    2018-07-08 21:16 - 2015-09-12 21:51 - 000002814 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
    2018-07-08 21:16 - 2015-09-08 22:44 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2018-07-08 21:16 - 2015-09-08 22:22 - 000003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2018-07-08 21:16 - 2012-08-22 17:20 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2018-07-08 21:16 - 2010-10-08 02:46 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2018-07-08 20:50 - 2009-01-05 21:28 - 000000000 ____D C:\ProgramData\TEMP
    2018-07-04 03:17 - 2018-03-16 11:10 - 000000000 ____D C:\Users\lola_wright\Desktop\Pets
    2018-07-03 05:31 - 2018-04-26 03:52 - 136971704 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
    2018-07-03 05:30 - 2006-11-02 07:35 - 136971704 ____C (Microsoft Corporation) C:\Windows\system32\mrt.exe
    2018-07-01 06:21 - 2018-04-15 02:15 - 000000000 ___HD C:\Users\lola_wright\Documents\.tmp.drivedownload
    2018-07-01 06:21 - 2010-03-23 17:27 - 000001080 _____ C:\Users\lola_wright\AppData\Roaming\wklnhst.dat
    2018-06-30 22:46 - 2006-11-02 10:42 - 000032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2018-06-28 20:34 - 2015-09-18 15:07 - 000000252 _____ C:\Users\lola_wright\AppData\LocalLow\rbxcsettings.rbx
    2018-06-26 01:58 - 2008-07-15 18:52 - 000086528 _____ C:\Users\lola_wright\AppData\Local\GDIPFONTCACHEV1.DAT
    2018-06-24 03:48 - 2006-11-02 10:21 - 000349552 _____ C:\Windows\system32\FNTCACHE.DAT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\et-EE
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\lv-LV
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\lt-LT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\et-EE
    2018-06-24 03:46 - 2006-11-02 08:33 - 000000000 ____D C:\Windows\PolicyDefinitions
    2018-06-24 03:19 - 2006-11-02 07:46 - 000773298 _____ C:\Windows\system32\PerfStringBackup.INI
    2018-06-24 03:17 - 2018-03-10 00:31 - 000752234 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
    2018-06-17 04:51 - 2013-11-09 10:50 - 000000000 ____D C:\Program Files (x86)\Ocean Express
    2018-06-17 03:22 - 2018-03-14 08:42 - 000000000 ____D C:\Program Files (x86)\ValuSoft
    2018-06-16 14:41 - 2018-03-16 18:13 - 000000000 ___RD C:\Users\Public\Recorded TV
    2018-06-10 08:53 - 2006-11-02 10:07 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

    ==================== Files in the root of some directories =======

    2013-10-20 03:37 - 2013-10-20 03:37 - 050053120 _____ () C:\Program Files (x86)\GUTCDDA.tmp
    2015-02-04 00:17 - 2015-02-04 00:17 - 015931883 _____ () C:\Users\lola_wright\AppData\Roaming\UserTile.png
    2010-03-23 17:27 - 2018-07-01 06:21 - 000001080 _____ () C:\Users\lola_wright\AppData\Roaming\wklnhst.dat
    2011-11-22 03:40 - 2011-11-22 03:40 - 000000552 _____ () C:\Users\lola_wright\AppData\Local\d3d8caps.dat
    2012-01-17 23:14 - 2012-01-18 00:24 - 000000680 _____ () C:\Users\lola_wright\AppData\Local\d3d9caps.dat
    2008-08-03 23:50 - 2018-03-29 23:16 - 000001460 _____ () C:\Users\lola_wright\AppData\Local\d3d9caps64.dat
    2008-07-25 19:19 - 2018-05-07 16:34 - 000010240 _____ () C:\Users\lola_wright\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2010-04-11 17:28 - 2010-04-11 17:29 - 000200097 _____ () C:\Users\lola_wright\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
    2010-04-11 17:28 - 2010-04-11 17:28 - 000000002 _____ () C:\Users\lola_wright\AppData\Local\dd_dotnetfx35error.txt
    2010-04-11 17:28 - 2010-04-11 17:30 - 000108444 _____ () C:\Users\lola_wright\AppData\Local\dd_dotnetfx35install.txt
    2012-01-25 21:20 - 2012-01-25 21:20 - 000362842 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI6D32.txt
    2012-01-07 13:03 - 2012-01-07 13:04 - 000427936 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7236.txt
    2012-01-18 02:47 - 2012-01-18 02:48 - 000331566 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7696.txt
    2012-01-25 21:39 - 2012-01-25 21:39 - 000361754 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7BA0.txt
    2012-01-25 21:20 - 2012-01-25 21:20 - 000017530 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI6D32.txt
    2012-01-07 13:03 - 2012-01-07 13:04 - 000011674 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7236.txt
    2012-01-18 02:47 - 2012-01-18 02:48 - 000011434 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7696.txt
    2012-01-25 21:39 - 2012-01-25 21:39 - 000011370 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7BA0.txt
    2010-04-11 17:28 - 2010-04-11 17:30 - 000002176 _____ () C:\Users\lola_wright\AppData\Local\uxeventlog.txt

    Some files in TEMP:
    ====================
    2018-07-03 05:34 - 2018-07-03 05:34 - 006326728 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\AppData\Local\Temp\DriverSupport.exe
    2018-07-10 02:40 - 2018-07-10 02:40 - 002208232 _____ (Monterix Software LLC ) C:\Users\lola_wright\AppData\Local\Temp\DriverUpdaterInst_47b38c54.11.2.0.37.exe
    2018-04-23 21:13 - 2018-04-23 21:13 - 001884616 _____ (Oracle Corporation) C:\Users\lola_wright\AppData\Local\Temp\jre-8u171-windows-au.exe
    2018-07-10 02:40 - 2018-07-10 02:40 - 002239080 _____ (Monterix Software LLC ) C:\Users\lola_wright\AppData\Local\Temp\SystemKeeperInst_47b38c54.12.3.0.52.exe
    2018-05-22 09:42 - 2014-01-20 04:38 - 000354392 ____R (CANON INC.) C:\Users\lola_wright\AppData\Local\Temp\uninstall.exe

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signe
     
  15. punkybunge

    punkybunge Thread Starter

    Joined:
    Jun 28, 2005
    Messages:
    96
    First Name:
    Nola
    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
    Ran by lola_wright (administrator) on LOLA_WRIGHT-PC (10-07-2018 16:17:55)
    Running from C:\Users\lola_wright\Downloads
    Loaded Profiles: lola_wright (Available Profiles: lola_wright)
    Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Language: English (United States)
    Internet Explorer Version 9 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Windows\System32\SLsvc.exe
    (Agere Systems) C:\Windows\System32\agr64svc.exe
    (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAOsvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
    (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAO.exe
    (iWin Inc.) C:\Program Files (x86)\iWin Games\iWinTrusted.exe
    (RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
    (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
    (PC Drivers Headquarters LP) C:\Program Files (x86)\Driver Support\DriverSupport.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (IDT, Inc.) C:\Windows\sttray64.exe
    (Microsoft Corporation) C:\Windows\ehome\ehtray.exe
    (Ruiware) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
    (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\ScanToPCActivationApp.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Chicony) C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
    () C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\nacl64.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\nacl64.exe
    (Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPNetworkCommunicatorCom.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
    () C:\Program Files\Google\Drive\googledrivesync.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    () C:\Program Files\Google\Drive\googledrivesync.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (Farbar) C:\Users\lola_wright\Downloads\FRST64 (2).exe

    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
    HKLM\...\Run: [IAAnotif] => C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-07-12] (Intel Corporation)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1021488 2007-04-26] (Synaptics, Inc.)
    HKLM\...\Run: [SigmatelSysTrayApp] => C:\Windows\sttray64.exe [425984 2007-09-06] (IDT, Inc.)
    HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files\Camera Assistant Software for Gateway\traybar.exe [638976 2007-09-13] (Chicony)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start hxxp://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYASwBQAEMAQgAtADYAQgBXAEYATQAtAFQAUgBMAFEAUgAtAEIAUgBVAEgAUAAtAEMAUAA4ADYARwA"&"inst=NwA3AC0ANgA1AD (the data entry has 520 more characters).
    Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [138240 2008-01-20] (Microsoft Corporation)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1238152 2015-05-17] (Ruiware)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [GoogleChromeAutoLaunch_B3FAE353388799A69E8EF929134EE9F3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [HP] => C:\PROGRAM FILES\HP\HP OFFICEJET 3830 SERIES\BIN\SCANTOPCACTIVATIONAPP.EXE [3651080 2015-03-09] (Hewlett-Packard Development Company, LP)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-03-28] (Piriform Ltd)
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\MountPoints2: {2a769a2b-508a-11e8-afe3-00e0b8fa1e2e} - F:\windows\AutoRun.exe
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
    AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => No File
    AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => No File

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Winsock: Catalog9-x64 01 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 02 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 03 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 04 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Winsock: Catalog9-x64 15 C:\Windows\system32\plsapp64.dll [439296 2013-11-13] (Sendori)
    Hosts: Hosts file not detected in the default directory
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{1C1D948F-0A57-4EF6-A65F-6B807EF82CDC}: [DhcpNameServer] 192.168.10.1
    Tcpip\..\Interfaces\{F387F585-425E-48B0-A8E6-5A34FAF3790B}: [DhcpNameServer] 192.168.1.254

    Internet Explorer:
    ==================
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-6848
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=GTW&Loc=ENG_US&Sys=PTB&M=M-6848
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
    URLSearchHook: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 - (No Name) - {f15ff29f-85a1-43cd-9674-e5ba40016c97} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vSrcAs.dll (Mindspark)
    SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKLM-x32 -> {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
    SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {1B0CA65D-7198-4796-BD98-B1994D13AF37} URL = hxxp://search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20120103,6901,0,8,0
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={3CF6154B-4A98-450D-8C11-CA4462C40C66}&mid=ff2f30979a18441cd31c4f62d9a7301f-b35fca0a9cabfac7b20e77d3c068879b11b15e21&lang=us&ds=AVG&pr=fr&d=2011-12-12 12:11:57&v=9.0.0.18&sap=dsp&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD21} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=540&systemid=1&sr=0&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL =
    SearchScopes: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2011-11-01] (Yahoo! Inc.)
    BHO-x32: No Name -> {0631bff0-6846-48ca-982d-d62d7f376e97} -> No File
    BHO-x32: No Name -> {0D778FDC-FAD7-4B1D-AB88-7A76A562D65C} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-23] (Oracle Corporation)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-03-08] (Google Inc.)
    BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
    BHO-x32: No Name -> {beea7fa9-d1f4-49a2-9b1f-6fb7a2d9bc2a} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-23] (Oracle Corporation)
    BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll [2011-11-01] (Yahoo! Inc)
    Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
    Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2011-11-01] (Yahoo! Inc.)
    Toolbar: HKLM-x32 - No Name - {2a942ab7-2073-49bc-a7e1-77e93835889a} - No File
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-03-08] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-03-08] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3094174547-28691812-3827549335-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
    DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    DPF: HKLM-x32 {1A1F56AA-3401-46F9-B277-D57F3421F821} hxxp://www.worldwinner.com/games/v47/shared/FunGamesLoader.cab
    DPF: HKLM-x32 {601B418B-E6A6-47FC-A094-07248741CEB3} file:///E:/vwr_data/WebVwr.cab
    DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: HKLM-x32 {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
    DPF: HKLM-x32 {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
    DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll [2007-01-19] (Microsoft Corporation)
    Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll [2007-01-19] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\lola_wright\AppData\Roaming\Mozilla\Firefox\Profiles\1sbe8qgv.default-1520615271169 [2018-07-10]
    FF Extension: (Smash) - C:\Users\lola_wright\AppData\Roaming\Mozilla\Firefox\Profiles\1sbe8qgv.default-1520615271169\Extensions\{be572ad4-5dd7-4b6b-8204-5d655efaf3b3}.xpi [2018-05-11]
    FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-02-04] [Legacy] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [{98e34367-8df7-42b4-837b-20b892ff0848}] - C:\ProgramData\iWin Games\firefox
    FF Extension: (iWinGames Plugin) - C:\ProgramData\iWin Games\firefox [2012-02-23] [Legacy] [not signed]
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-08] ()
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-08] ()
    FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [No File]
    FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-23] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-23] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-3094174547-28691812-3827549335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\lola_wright\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-22] (Unity Technologies ApS)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3323878&octid=EB_ORIGINAL_CTID&ISID=MBACF4E82-A701-46E8-B62C-54D1B47E47D5&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch
    CHR StartupUrls: Default -> "hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch","hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SPBF91A14B-279A-48C3-A2A2-2E56DE59F9DB&SSPV=","hxxps://www.yahoo.com/?fr=hp-avast&type=avastbcl","hxxp://search.conduit.com/?gd=&ctid=CT3321972&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=5&UP=SP8131E8C3-CF81-4C37-8707-942F0EBC0B9E&SSPV=SE3NTPBCG_sp_ch","hxxp://Lasaoren.com/?f=7&a=lrn_ir_14_45_ie&cd=2XzuyEtN2Y1L1QzutDtDtByCtB0DtA0FzzyEyE0CtAtB0BtCtN0D0Tzu0StCtDyEtBtN1L2XzutAtFyCtFtCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtB0B0ByDyEtBtDtGtAyEtC0AtGyBtDzz0DtGyEtAyDyBtGtByC0CtCyByB0AyC0EzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtDyD0F0F0C0A0DtGyC0E0D0FtGyE0E0CtCtG0AyEzyzztGtBtByDtByE0EtDyDtBtA0F0A2Q&cr=233277235&ir=","hxxp://homepage-web.com/?s=acer&m=start","hxxp://www.google.com"
    CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms}
    CHR DefaultSuggestURL: Default -> hxxp://srchbar.com/?s={searchTerms}
    CHR Profile: C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default [2018-07-10]
    CHR Extension: (Google Drive) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-15]
    CHR Extension: (Google Play Music) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2018-07-09]
    CHR Extension: (Google Docs Offline) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-17]
    CHR Extension: (Click&Clean) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2018-07-03]
    CHR Extension: (Login Now) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijifkdkjaioojhebgfgdifljkemifapl [2018-05-23]
    CHR Extension: (Chrometana - Redirect Bing Somewhere Better) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\kaicbfmipfpfpjmlbpejaoaflfdnabnc [2018-05-23]
    CHR Extension: (playCenter Home) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\kamdefopmcpnkpomihddfnelophmppej [2018-05-23]
    CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-04-15]
    CHR Extension: (My Quick Converter) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\mceagidhbmmekjomkgcbmodhommnhomh [2018-05-23]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
    CHR Extension: (Search Manager) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\ommbgnllpkjnidkcnginhlacffdcdijc [2018-05-23]
    CHR Extension: (Beach) - C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\Default\Extensions\pldjedicbnjmccbpbgbiddfbgilpgmgm [2018-05-23]
    CHR HKU\S-1-5-21-3094174547-28691812-3827549335-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-06-08] (Adobe Systems Incorporated) [File not signed]
    R2 DSAO; C:\Program Files (x86)\driver support\svc\DriverSupportAOsvc.exe [2033104 2016-10-22] (PC Drivers HeadQuarters LP)
    R2 iprip; C:\Windows\System32\iprip.dll [34816 2006-11-02] (Microsoft Corporation)
    S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-29] (IObit)
    R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568 2014-03-27] (RealNetworks, Inc.)
    R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-20] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192512 2008-01-20] (Intel Corporation)
    S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
    S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
    S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
    S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
    S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-07-10 16:15 - 2018-07-10 16:17 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64 (2).exe
    2018-07-10 16:00 - 2018-07-10 16:22 - 000022660 _____ C:\Users\lola_wright\Downloads\FRST.txt
    2018-07-10 15:59 - 2018-07-10 16:00 - 000000000 ____D C:\FRST
    2018-07-10 15:58 - 2018-07-10 15:58 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64 (1).exe
    2018-07-10 15:56 - 2018-07-10 15:58 - 002412544 _____ (Farbar) C:\Users\lola_wright\Downloads\FRST64.exe
    2018-07-10 04:48 - 2018-07-10 04:48 - 000178320 _____ (AVAST Software) C:\Users\lola_wright\Downloads\avast_free_antivirus_setup_online_cnet1.exe
    2018-07-10 04:34 - 2018-07-10 04:34 - 000000000 _____ C:\Windows\SysWOW64\last.dump
    2018-07-09 09:31 - 2018-07-09 09:31 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\vlc
    2018-07-09 09:24 - 2018-07-09 09:24 - 000000912 _____ C:\Users\Public\Desktop\VLC media player.lnk
    2018-07-09 09:24 - 2018-07-09 09:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
    2018-07-09 09:23 - 2018-07-09 09:23 - 000000000 ____D C:\Program Files (x86)\VideoLAN
    2018-07-09 09:21 - 2018-07-09 09:23 - 040184976 _____ C:\Users\lola_wright\Downloads\vlc-3.0.3-win32.exe
    2018-07-09 02:44 - 2018-07-09 02:44 - 000748192 _____ (TechGuy, Inc.) C:\Users\lola_wright\Downloads\SysInfo (1).exe
    2018-07-09 02:40 - 2018-07-09 02:40 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\skp
    2018-07-09 02:22 - 2018-07-09 02:22 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
    2018-07-09 02:18 - 2018-07-09 02:18 - 000679696 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\Downloads\DriverSupport (1).exe
    2018-07-09 01:28 - 2018-07-09 01:30 - 000000000 ____D C:\Users\lola_wright\AppData\Local\SquirrelTemp
    2018-07-09 01:28 - 2018-07-09 01:30 - 000000000 ____D C:\Users\lola_wright\AppData\Local\GPMDP_3
    2018-07-09 01:24 - 2018-07-09 01:28 - 060447248 _____ (Samuel Attard) C:\Users\lola_wright\Downloads\Google.Play.Music.Desktop.Player.Setup.exe
    2018-07-03 23:43 - 2018-07-03 23:43 - 000000000 ____D C:\Users\lola_wright\Downloads\ISORecorderV3RC1x64
    2018-07-03 23:37 - 2018-07-03 23:37 - 000000000 ____D C:\Program Files\Alex Feinman
    2018-07-03 23:34 - 2018-07-03 23:34 - 000408326 _____ C:\Users\lola_wright\Downloads\ISORecorderV3RC1x64.zip
    2018-07-03 09:37 - 2018-07-02 23:57 - 025559040 _____ C:\Users\lola_wright\Desktop\Win8.1_English_x64.iso
    2018-07-03 05:36 - 2018-07-03 05:36 - 000000000 ____D C:\Users\lola_wright\Downloads\Driver Support
    2018-07-03 05:35 - 2018-07-10 16:14 - 000003658 _____ C:\Windows\System32\Tasks\Driver Support
    2018-07-03 05:35 - 2018-07-10 13:45 - 000003990 _____ C:\Windows\System32\Tasks\Driver Support-RTMScan
    2018-07-03 05:35 - 2018-07-08 21:16 - 000003992 _____ C:\Windows\System32\Tasks\Driver Support-RTMUpdater
    2018-07-03 05:35 - 2018-07-08 21:16 - 000003976 _____ C:\Windows\System32\Tasks\Driver Support-RTMRules
    2018-07-03 05:35 - 2018-07-04 05:38 - 000000000 ____D C:\ProgramData\UAB
    2018-07-03 05:35 - 2018-07-03 05:35 - 000000000 ____D C:\Users\lola_wright\AppData\Local\PC_Drivers_Headquarters
    2018-07-03 05:35 - 2018-07-03 05:35 - 000000000 ____D C:\ProgramData\Driver Support
    2018-07-03 05:34 - 2018-07-03 05:34 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support
    2018-07-03 05:33 - 2018-07-03 05:36 - 000000000 ____D C:\Program Files (x86)\Driver Support
    2018-07-01 06:21 - 2018-07-01 06:21 - 000012800 _____ C:\Users\lola_wright\Documents\letter.wps
    2018-06-26 01:58 - 2018-06-26 01:58 - 000000000 ____D C:\Windows\System32\Tasks\WPD
    2018-06-24 03:46 - 2018-06-24 03:46 - 000000000 ____D C:\Program Files\Windows Portable Devices
    2018-06-24 03:46 - 2018-06-24 03:46 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
    2018-06-24 03:45 - 2018-06-24 03:45 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
    2018-06-24 03:45 - 2018-06-24 03:45 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
    2018-06-24 03:28 - 2009-09-30 20:02 - 002537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
    2018-06-24 03:28 - 2009-09-30 20:02 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShextAutoplay.exe
    2018-06-24 03:28 - 2009-09-30 20:01 - 000350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceWMDRM.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceTypes.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceClassExtension.dll
    2018-06-24 03:28 - 2009-09-30 20:01 - 000060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceConnectApi.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 002727936 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 000453120 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
    2018-06-24 03:28 - 2009-09-30 19:52 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
    2018-06-24 03:28 - 2009-09-30 19:51 - 000573440 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000218624 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys
    2018-06-24 03:28 - 2009-09-30 19:51 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
    2018-06-24 03:28 - 2009-09-30 19:51 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll
    2018-06-24 03:24 - 2014-11-25 21:05 - 000564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2018-06-24 03:24 - 2014-11-25 20:42 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001875968 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001796096 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001402368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
    2018-06-24 03:10 - 2015-09-02 16:26 - 001253376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2018-06-24 03:08 - 2012-07-25 22:08 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2018-06-24 03:08 - 2012-07-25 22:08 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2018-06-24 03:08 - 2012-07-25 21:26 - 000198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2018-06-24 03:08 - 2012-07-25 21:26 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2018-06-24 03:08 - 2012-06-02 09:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    2018-06-24 03:08 - 2009-07-14 07:19 - 000020480 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
    2018-06-24 03:08 - 2009-07-14 07:12 - 000016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winusb.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrssrv.dll
    2018-06-24 03:03 - 2009-10-09 16:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrsmgr.dll
    2018-06-24 03:03 - 2009-10-09 16:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
    2018-06-24 03:03 - 2009-10-09 16:35 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\winrsmgr.dll
    2018-06-24 03:03 - 2009-10-09 16:34 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 001181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000246272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrscmd.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pwrshplugin.dll
    2018-06-24 03:02 - 2009-10-09 16:56 - 000040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrs.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winrshost.exe
    2018-06-24 03:02 - 2009-10-09 16:56 - 000012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
    2018-06-24 03:02 - 2009-10-09 16:55 - 000252416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtfwd.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wecutil.exe
    2018-06-24 03:02 - 2009-10-09 16:55 - 000056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wecapi.dll
    2018-06-24 03:02 - 2009-10-09 16:55 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
    2018-06-24 03:02 - 2009-10-09 16:36 - 002050048 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2018-06-24 03:02 - 2009-10-09 16:36 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
    2018-06-24 03:02 - 2009-10-09 16:35 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2018-06-24 03:02 - 2009-10-09 16:35 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe
    2018-06-24 03:02 - 2009-10-09 16:35 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe
    2018-06-24 03:02 - 2009-10-09 16:35 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\winrscmd.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000352768 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000348672 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000232960 _____ (Microsoft Corporation) C:\Windows\system32\wecsvc.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wevtfwd.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wecutil.exe
    2018-06-24 03:02 - 2009-10-09 16:34 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wecapi.dll
    2018-06-24 03:02 - 2009-10-09 16:34 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
    2018-06-24 03:02 - 2009-08-01 01:27 - 000201184 _____ C:\Windows\SysWOW64\winrm.vbs
    2018-06-24 03:02 - 2009-08-01 01:27 - 000201184 _____ C:\Windows\system32\winrm.vbs
    2018-06-24 03:02 - 2009-07-16 12:30 - 000004675 _____ C:\Windows\SysWOW64\wsmanconfig_schema.xml
    2018-06-24 03:02 - 2009-07-16 12:30 - 000004675 _____ C:\Windows\system32\wsmanconfig_schema.xml
    2018-06-24 03:02 - 2009-07-16 12:30 - 000002426 _____ C:\Windows\SysWOW64\WsmTxt.xsl
    2018-06-24 03:02 - 2009-07-16 12:30 - 000002426 _____ C:\Windows\system32\WsmTxt.xsl
    2018-06-23 10:57 - 2018-06-23 10:57 - 000035840 _____ C:\Users\lola_wright\Documents\the letter.wps
    2018-06-23 03:13 - 2013-04-17 08:04 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
    2018-06-23 03:13 - 2013-04-17 07:30 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
    2018-06-23 03:13 - 2012-11-21 23:22 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
    2018-06-23 03:13 - 2012-11-21 22:54 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll
    2018-06-23 03:13 - 2011-06-15 11:16 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
    2018-06-23 03:13 - 2011-06-15 11:12 - 000182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
    2018-06-23 03:13 - 2011-03-12 17:52 - 001653760 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2018-06-23 03:13 - 2011-03-12 16:55 - 000876032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
    2018-06-23 03:13 - 2011-02-22 09:47 - 000479744 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2018-06-23 03:13 - 2011-02-22 09:13 - 000288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000539136 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000538624 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:10 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2018-06-23 03:13 - 2010-01-25 07:08 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
    2018-06-23 03:13 - 2010-01-25 07:00 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
    2018-06-23 03:13 - 2010-01-25 06:58 - 000332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
    2018-06-23 03:13 - 2010-01-25 03:29 - 000600576 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000413696 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:29 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000347136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
    2018-06-23 03:13 - 2010-01-25 03:21 - 000346624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
    2018-06-23 03:13 - 2009-10-23 12:30 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2018-06-23 03:13 - 2009-10-23 12:10 - 000714240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
    2018-06-23 03:07 - 2011-03-03 10:59 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
    2018-06-23 03:07 - 2011-03-03 10:40 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Apphlpdm.dll
    2018-06-23 03:07 - 2011-03-03 09:00 - 004240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll
    2018-06-23 03:07 - 2011-03-03 08:35 - 004240384 _____ (Microsoft) C:\Windows\SysWOW64\GameUXLegacyGDFs.dll
    2018-06-23 03:07 - 2010-08-26 12:42 - 001927680 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2018-06-23 03:07 - 2010-08-26 11:34 - 001696256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
    2018-06-23 03:04 - 2009-09-09 21:07 - 003815424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
    2018-06-23 03:04 - 2009-09-09 21:06 - 001164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
    2018-06-23 03:04 - 2009-09-09 21:05 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2018-06-23 03:04 - 2009-09-09 21:01 - 003023360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
    2018-06-23 03:04 - 2009-09-09 21:00 - 001164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
    2018-06-23 03:04 - 2009-09-09 21:00 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
    2018-06-22 02:19 - 2018-06-22 02:19 - 000032832 _____ C:\Windows\SysWOW64\rnd_chunk.bin
    2018-06-22 02:15 - 2018-06-22 02:15 - 000679328 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\Downloads\DriverSupport.exe
    2018-06-22 00:26 - 2018-06-22 00:26 - 000015360 _____ C:\Users\lola_wright\Documents\resume.wps
    2018-06-17 03:23 - 2018-06-17 03:23 - 000001070 _____ C:\Users\Public\Desktop\Ultimate Solitaire 750.lnk
    2018-06-17 03:23 - 2018-06-17 03:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Solitaire 750
    2018-06-10 22:55 - 2018-06-10 22:55 - 002239488 _____ (Monterix Software LLC ) C:\Users\lola_wright\Downloads\SystemKeeperInst_47b38c54 (2).exe

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2018-07-10 16:14 - 2006-11-02 10:22 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    2018-07-10 16:14 - 2006-11-02 10:22 - 000003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    2018-07-10 16:09 - 2006-11-02 10:42 - 000000006 ____H C:\Windows\Tasks\SA.DAT
    2018-07-10 14:25 - 2018-04-20 09:51 - 000000000 ___HD C:\Users\lola_wright\Desktop\.tmp.drivedownload
    2018-07-10 14:07 - 2018-04-15 01:57 - 000000000 ___RD C:\Users\lola_wright\Google Drive
    2018-07-10 13:50 - 2012-01-07 13:03 - 000000000 ____D C:\ProgramData\AVAST Software
    2018-07-10 13:35 - 2015-09-12 22:06 - 000000000 ____D C:\ProgramData\ProductData
    2018-07-10 08:30 - 2018-05-05 23:09 - 000000000 ____D C:\Program Files\ZTE_Handset_USB_Driver
    2018-07-10 08:30 - 2018-03-11 12:28 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
    2018-07-10 08:30 - 2015-09-12 22:07 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\ProductData
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\Users\lola_wright\AppData\Roaming\IObit
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\Users\lola_wright\AppData\LocalLow\IObit
    2018-07-10 08:30 - 2015-09-12 22:03 - 000000000 ____D C:\ProgramData\IObit
    2018-07-10 08:30 - 2014-03-26 09:52 - 000000000 ____D C:\ProgramData\PureLeads
    2018-07-10 08:30 - 2008-05-26 01:30 - 000000000 ____D C:\Program Files (x86)\IDT
    2018-07-10 08:30 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\spool
    2018-07-10 08:30 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\Msdtc
    2018-07-10 08:30 - 2006-11-02 08:33 - 000000000 ___HD C:\Windows\inf
    2018-07-10 08:30 - 2006-11-02 08:33 - 000000000 ____D C:\Windows\rescache
    2018-07-08 21:16 - 2018-05-05 00:44 - 000002884 _____ C:\Windows\System32\Tasks\HPCustPartic.exe_{3BFAF120-AAAC-4042-812B-7BBF96E09B15}
    2018-07-08 21:16 - 2018-05-05 00:42 - 000003542 _____ C:\Windows\System32\Tasks\HPCustParticipation HP OfficeJet 3830 series
    2018-07-08 21:16 - 2018-03-28 12:42 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
    2018-07-08 21:16 - 2018-03-13 22:01 - 000004536 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
    2018-07-08 21:16 - 2015-09-12 21:51 - 000002814 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
    2018-07-08 21:16 - 2015-09-08 22:44 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2018-07-08 21:16 - 2015-09-08 22:22 - 000003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2018-07-08 21:16 - 2012-08-22 17:20 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2018-07-08 21:16 - 2010-10-08 02:46 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2018-07-08 20:50 - 2009-01-05 21:28 - 000000000 ____D C:\ProgramData\TEMP
    2018-07-04 03:17 - 2018-03-16 11:10 - 000000000 ____D C:\Users\lola_wright\Desktop\Pets
    2018-07-03 05:31 - 2018-04-26 03:52 - 136971704 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
    2018-07-03 05:30 - 2006-11-02 07:35 - 136971704 ____C (Microsoft Corporation) C:\Windows\system32\mrt.exe
    2018-07-01 06:21 - 2018-04-15 02:15 - 000000000 ___HD C:\Users\lola_wright\Documents\.tmp.drivedownload
    2018-07-01 06:21 - 2010-03-23 17:27 - 000001080 _____ C:\Users\lola_wright\AppData\Roaming\wklnhst.dat
    2018-06-30 22:46 - 2006-11-02 10:42 - 000032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2018-06-28 20:34 - 2015-09-18 15:07 - 000000252 _____ C:\Users\lola_wright\AppData\LocalLow\rbxcsettings.rbx
    2018-06-26 01:58 - 2008-07-15 18:52 - 000086528 _____ C:\Users\lola_wright\AppData\Local\GDIPFONTCACHEV1.DAT
    2018-06-24 03:48 - 2006-11-02 10:21 - 000349552 _____ C:\Windows\system32\FNTCACHE.DAT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\SysWOW64\et-EE
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\lv-LV
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\lt-LT
    2018-06-24 03:46 - 2006-11-02 08:34 - 000000000 ____D C:\Windows\system32\et-EE
    2018-06-24 03:46 - 2006-11-02 08:33 - 000000000 ____D C:\Windows\PolicyDefinitions
    2018-06-24 03:19 - 2006-11-02 07:46 - 000773298 _____ C:\Windows\system32\PerfStringBackup.INI
    2018-06-24 03:17 - 2018-03-10 00:31 - 000752234 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
    2018-06-17 04:51 - 2013-11-09 10:50 - 000000000 ____D C:\Program Files (x86)\Ocean Express
    2018-06-17 03:22 - 2018-03-14 08:42 - 000000000 ____D C:\Program Files (x86)\ValuSoft
    2018-06-16 14:41 - 2018-03-16 18:13 - 000000000 ___RD C:\Users\Public\Recorded TV
    2018-06-10 08:53 - 2006-11-02 10:07 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

    ==================== Files in the root of some directories =======

    2013-10-20 03:37 - 2013-10-20 03:37 - 050053120 _____ () C:\Program Files (x86)\GUTCDDA.tmp
    2015-02-04 00:17 - 2015-02-04 00:17 - 015931883 _____ () C:\Users\lola_wright\AppData\Roaming\UserTile.png
    2010-03-23 17:27 - 2018-07-01 06:21 - 000001080 _____ () C:\Users\lola_wright\AppData\Roaming\wklnhst.dat
    2011-11-22 03:40 - 2011-11-22 03:40 - 000000552 _____ () C:\Users\lola_wright\AppData\Local\d3d8caps.dat
    2012-01-17 23:14 - 2012-01-18 00:24 - 000000680 _____ () C:\Users\lola_wright\AppData\Local\d3d9caps.dat
    2008-08-03 23:50 - 2018-03-29 23:16 - 000001460 _____ () C:\Users\lola_wright\AppData\Local\d3d9caps64.dat
    2008-07-25 19:19 - 2018-05-07 16:34 - 000010240 _____ () C:\Users\lola_wright\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2010-04-11 17:28 - 2010-04-11 17:29 - 000200097 _____ () C:\Users\lola_wright\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
    2010-04-11 17:28 - 2010-04-11 17:28 - 000000002 _____ () C:\Users\lola_wright\AppData\Local\dd_dotnetfx35error.txt
    2010-04-11 17:28 - 2010-04-11 17:30 - 000108444 _____ () C:\Users\lola_wright\AppData\Local\dd_dotnetfx35install.txt
    2012-01-25 21:20 - 2012-01-25 21:20 - 000362842 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI6D32.txt
    2012-01-07 13:03 - 2012-01-07 13:04 - 000427936 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7236.txt
    2012-01-18 02:47 - 2012-01-18 02:48 - 000331566 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7696.txt
    2012-01-25 21:39 - 2012-01-25 21:39 - 000361754 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistMSI7BA0.txt
    2012-01-25 21:20 - 2012-01-25 21:20 - 000017530 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI6D32.txt
    2012-01-07 13:03 - 2012-01-07 13:04 - 000011674 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7236.txt
    2012-01-18 02:47 - 2012-01-18 02:48 - 000011434 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7696.txt
    2012-01-25 21:39 - 2012-01-25 21:39 - 000011370 _____ () C:\Users\lola_wright\AppData\Local\dd_vcredistUI7BA0.txt
    2010-04-11 17:28 - 2010-04-11 17:30 - 000002176 _____ () C:\Users\lola_wright\AppData\Local\uxeventlog.txt

    Some files in TEMP:
    ====================
    2018-07-03 05:34 - 2018-07-03 05:34 - 006326728 _____ (PC Drivers HeadQuarters LP) C:\Users\lola_wright\AppData\Local\Temp\DriverSupport.exe
    2018-07-10 02:40 - 2018-07-10 02:40 - 002208232 _____ (Monterix Software LLC ) C:\Users\lola_wright\AppData\Local\Temp\DriverUpdaterInst_47b38c54.11.2.0.37.exe
    2018-04-23 21:13 - 2018-04-23 21:13 - 001884616 _____ (Oracle Corporation) C:\Users\lola_wright\AppData\Local\Temp\jre-8u171-windows-au.exe
    2018-07-10 02:40 - 2018-07-10 02:40 - 002239080 _____ (Monterix Software LLC ) C:\Users\lola_wright\AppData\Local\Temp\SystemKeeperInst_47b38c54.12.3.0.52.exe
    2018-05-22 09:42 - 2014-01-20 04:38 - 000354392 ____R (CANON INC.) C:\Users\lola_wright\AppData\Local\Temp\uninstall.exe

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
    Ran by lola_wright (10-07-2018 16:23:15)
    Running from C:\Users\lola_wright\Downloads
    Windows Vista (TM) Home Premium Service Pack 2 (X64) (2008-05-26 06:22:51)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3094174547-28691812-3827549335-500 - Administrator - Disabled)
    Guest (S-1-5-21-3094174547-28691812-3827549335-501 - Limited - Disabled)
    lola_wright (S-1-5-21-3094174547-28691812-3827549335-1000 - Administrator - Enabled) => C:\Users\lola_wright

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    100% Hidden Objects (HKLM-x32\...\BFG-100 Percent Hidden Objects) (Version: - )
    Adobe Flash Player 30 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 30.0.0.113 - Adobe Systems Incorporated)
    Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)
    Adobe Reader X (10.1.16) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
    Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.3.633 - Adobe Systems, Inc.)
    Agere Systems HDA Modem (HKLM\...\Agere Systems Soft Modem) (Version: - Agere Systems)
    Ancient TriJong (HKLM-x32\...\BFG-Ancient TriJong) (Version: - )
    Backup and Sync from Google (HKLM\...\{AEFBDB5B-899F-4AE6-B789-BA56A652A476}) (Version: 3.42.9858.3671 - Google, Inc.)
    Big City Adventure - San Francisco (HKLM-x32\...\BFG-Big City Adventure - San Francisco) (Version: - )
    Big City Adventure: Shanghai (HKLM-x32\...\BFG-Big City Adventure - Shanghai) (Version: - )
    Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )
    Camera Assistant Software for Gateway (HKLM-x32\...\{39098402-3F7A-4257-A4AE-FC1181D1B40B}) (Version: 1.7.050.1029 - Chicony Electronics Co.,Ltd.)
    CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform)
    Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Concentration (HKLM-x32\...\BFG-Concentration) (Version: - )
    Concentration (remove only) (HKLM-x32\...\Concentration) (Version: - )
    Doras Carnival 2: At the Boardwalk (HKLM-x32\...\BFG-Doras Carnival 2 - At the Boardwalk) (Version: - )
    Driver Support (HKLM-x32\...\DriverSupport) (Version: 10.1.4.86 - PC Drivers HeadQuarters LP) <==== ATTENTION
    DustBuster XP (HKLM-x32\...\{7BEF8E43-094D-4C07-9684-EAEBE79BFA04}) (Version: 2.8.0.1 - Casper&McAlba)
    Fairy Jewels 2 (HKLM-x32\...\BFG-Fairy Jewels 2) (Version: - )
    Fiber Twig 2 (HKLM-x32\...\BFG-Fiber Twig 2) (Version: - )
    Flip Words 2 (HKLM-x32\...\BFG-Flip Words 2) (Version: - )
    GameHouse Word Collection (HKLM-x32\...\6ae8b8ac5ca42ec5ce57f44cc4f07965) (Version: - GameHouse)
    Gardenscapes 2 (HKLM-x32\...\BFG-Gardenscapes 2) (Version: - )
    Gateway Games (HKLM-x32\...\WildTangent gateway Master Uninstall) (Version: 1.0.0.50 - WildTangent)
    Gateway Recovery Center Installer (HKLM-x32\...\{7F3BCF8A-8E02-4659-AF25-F9AB66BD6718}) (Version: 1.01.044 - Gateway)
    GearDrvs (HKLM-x32\...\{CB84F0F2-927B-458D-9DC5-87832E3DC653}) (Version: 1.00.0000 - GEAR Software) Hidden
    Gold Miner (HKLM-x32\...\Gold Miner_is1) (Version: - )
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
    Google Play Music Desktop Player (HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\GPMDP_3) (Version: 4.5.0 - Samuel Attard)
    Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
    Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
    Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
    Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
    Hidden Expedition: Titanic ™ (HKLM-x32\...\BFG-Hidden Expedition - Titanic) (Version: - )
    HP Dropbox Plugin (HKLM-x32\...\{23617173-F935-4C17-A323-EB1207F3ED49}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
    HP Google Drive Plugin (HKLM-x32\...\{AFF80405-E56A-48E7-98FC-8E46E261949F}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
    HP OfficeJet 3830 series Basic Device Software (HKLM\...\{644380A4-11D0-48CB-AAB8-CCB6BD072784}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
    HP OfficeJet 3830 series Help (HKLM-x32\...\{1FCCD112-2F27-463D-8C36-1D5C29A3BB3E}) (Version: 35.0.0 - Hewlett Packard)
    HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    IDT Audio (HKLM-x32\...\{07D8511D-C9FE-4A93-933F-EAA5C8F20095}) (Version: 5.10.5303.0 - IDT)
    Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - )
    ISO Recorder (HKLM\...\{39600969-41C3-4658-876E-16F108FC5C92}) (Version: 3.0.0 - Alex Feinman)
    iWin Games (HKLM-x32\...\iWinArcade) (Version: 2.92 - )
    Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
    Jewel Quest (remove only) (HKLM-x32\...\Jewel Quest) (Version: - )
    Jewel Quest 3 (remove only) (HKLM-x32\...\Jewel Quest 3) (Version: - )
    Jigsaw365 (HKLM-x32\...\BFG-Jigsaw365) (Version: - )
    Jigsaws Galore (HKLM-x32\...\BFG-Jigsaws Galore) (Version: - )
    Letter Lab (HKLM-x32\...\BFG-Letter Lab) (Version: - )
    Liong: The Lost Amulets (HKLM-x32\...\BFG-Liong - The Lost Amulets) (Version: - )
    Luxor Amun Rising (HKLM-x32\...\BFG-Luxor Amun Rising) (Version: - )
    Mahjong Escape Ancient China (HKLM-x32\...\BFG-Mahjong Escape Ancient China) (Version: - )
    Mahjongg Dimensions Deluxe (HKLM-x32\...\BFG-Mahjongg Dimensions Deluxe) (Version: - )
    Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.7969.0 - Microsoft Corporation)
    Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.7 - Microsoft Corporation)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
    Mozilla Firefox 52.8.0 ESR (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.8.0 ESR (x86 en-US)) (Version: 52.8.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.8.0.6694 - Mozilla)
    Napster Burn Engine (HKLM-x32\...\{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}) (Version: 3.5.0000 - Roxio) Hidden
    Ocean Express (HKLM-x32\...\BFG-Ocean Express) (Version: - )
    Online Games Manager v1.30 (HKLM-x32\...\Online Games Manager) (Version: 1.30.14 - Real Networks, Inc.)
    Paradise Pet Salon (HKLM-x32\...\BFG-Paradise Pet Salon) (Version: - )
    Pat Sajak's Lucky Letters (HKLM-x32\...\BFG-Pat Sajak's Lucky Letters) (Version: - )
    Peggle (remove only) (HKLM-x32\...\Peggle) (Version: - )
    Peggle Deluxe (HKLM-x32\...\BFG-Peggle Deluxe) (Version: - )
    Peggle Nights (HKLM-x32\...\BFG-Peggle Nights) (Version: - )
    Press Your Luck (HKLM-x32\...\BFG-Press Your Luck) (Version: - )
    Product Improvement Study for HP OfficeJet 3830 series (HKLM\...\{5BE0E395-86C0-4539-B6BB-AE9125F452F7}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
    Puppy Sanctuary (HKLM-x32\...\BFG-Puppy Sanctuary) (Version: - )
    PureLeads (HKLM-x32\...\PureLeads) (Version: 2.0.17 - PureLeads)
    Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
    Realtek USB 2.0 Card Reader (HKLM-x32\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: - Realtek Semiconductor Corp.)
    Sandlot Games Client Services 1.2.2 (HKLM-x32\...\Sandlot Games Client Services 1.2.2_is1) (Version: - Sandlot Games)
    SpongeBob Atlantis SquareOff (HKLM-x32\...\BFG-SpongeBob Atlantis SquareOff) (Version: - )
    Sprill (HKLM-x32\...\BFG-Sprill) (Version: - )
    Summer Tri-Peaks Solitaire (HKLM-x32\...\BFG-Summer Tri-Peaks Solitaire) (Version: - )
    Super GameHouse Solitaire (HKLM-x32\...\BFG-Super GameHouse Solitaire) (Version: - )
    Super Granny 3 (HKLM-x32\...\28420124aae0385e5ed5d69f9710f660) (Version: - GameHouse)
    Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
    swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 9.2.3.0 - Synaptics)
    The Magicians Handbook: Cursed Valley (HKLM-x32\...\BFG-The Magicians Handbook - Cursed Valley) (Version: - )
    Trivia Machine (HKLM-x32\...\BFG-Trivia Machine) (Version: - )
    Ultimate Mahjongg 15 (HKLM-x32\...\Ultimate Mahjongg 15) (Version: 15.0 - ValuSoft, Inc.)
    Ultimate Solitaire 750 (HKLM-x32\...\Ultimate Solitaire 750) (Version: - )
    Unity Web Player (HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
    Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)
    VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.3 - VideoLAN)
    Weave Words Demo 1.7 (HKLM-x32\...\Weave Words Demo_is1) (Version: - Redclaw Games)
    Wild West Billy (HKLM-x32\...\BFG-Wild West Billy) (Version: - )
    Windows 7 Upgrade Advisor (HKLM-x32\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
    Windows Live Messenger (HKLM-x32\...\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}) (Version: 8.1.0178.00 - Microsoft Corporation)
    WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.5.2015.12 - Ruiware)
    Word Bird Supreme (HKLM-x32\...\BFG-Word Bird Supreme) (Version: - )
    Word Mojo Gold (HKLM-x32\...\Word Mojo Gold) (Version: - )
    Word Monaco (HKLM-x32\...\BFG-Word Monaco) (Version: - )
    WordLab v1.12 (HKLM-x32\...\WordLab_is1) (Version: - NCBuy.com)
    Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - )
    Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - Yahoo! Inc.)
    ZTE Handset USB Driver (HKLM\...\{01D42BF0-ED08-463f-8A28-99EB6FEE962B}) (Version: - ZTE Corporation)
    ZTE Handset USB Driver (HKLM\...\{D2D77DC2-8299-11D1-8949-444553540000}_is1) (Version: 5.2104.1.02B08 - ZTE Corporation)
    Zuma Deluxe (HKLM-x32\...\BFG-Zuma Deluxe) (Version: - )

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3094174547-28691812-3827549335-1000_Classes\CLSID\{0B4AA204-AB61-47E3-B5B4-27DCF375EBAC}\localserver32 -> "CDStart.exe" => No File
    ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google)
    ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
    ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
    ContextMenuHandlers2: [Record To CD] -> {34F4B935-17DC-4885-8BC9-CCD1ADF42F93} => C:\Program Files\Alex Feinman\ISO Recorder\ISORecorder.dll [2006-10-19] (Alex Feinman)
    ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google)
    ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2008-01-01] (Intel Corporation)
    ContextMenuHandlers6: [Create ISO Image from directory] -> {34F4B935-17DC-4885-8BC9-CCD1ADF42F93} => C:\Program Files\Alex Feinman\ISO Recorder\ISORecorder.dll [2006-10-19] (Alex Feinman)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {334AB140-ABE9-4564-B2F4-E798CBC7F9B5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-03-28] (Piriform Ltd)
    Task: {35F10533-85DF-4246-BE10-6FF9E2528E56} - System32\Tasks\Driver Support-RTMUpdater => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2018-02-12] (PC Drivers Headquarters LP)
    Task: {3B864AC2-2356-455A-9FB7-DA89EF9F94C4} - System32\Tasks\avastBCLRestartS-1-5-21-3094174547-28691812-3827549335-1000 => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Task: {40BFB879-7BC8-4E53-962C-DC516091D9E7} - System32\Tasks\Driver Support-RTMScan => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2018-02-12] (PC Drivers Headquarters LP)
    Task: {54BA3EF0-3C6E-4E50-A317-0B5044F992C1} - System32\Tasks\HPCustParticipation HP OfficeJet 3830 series => C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPCustPartic.exe [2015-03-09] (Hewlett-Packard Development Company, LP)
    Task: {56E7FAEF-6838-40CA-A2B0-C1E478B90BCD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08] (Google Inc.)
    Task: {59D95FAF-C6D5-45FF-BDF0-B53690B92BED} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-03-28] (Piriform Ltd)
    Task: {5E5BA3E2-9B30-4A2E-96DD-354001140480} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-08] (Adobe Systems Incorporated)
    Task: {9350DBB8-6805-4B94-B4C7-3922C691E24C} - System32\Tasks\Driver Support-RTMRules => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2018-02-12] (PC Drivers Headquarters LP)
    Task: {A1DFEF6C-1EF6-411C-9C62-5675FECC7327} - System32\Tasks\Driver Support => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2018-02-12] (PC Drivers Headquarters LP)
    Task: {AAFC7397-B3AF-4726-9F94-314CAA0110B6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-08] (Adobe Systems Incorporated)
    Task: {AE66C256-91FB-4EB7-9C40-AF4C574EE8F0} - \RunAsStdUser Task -> No File <==== ATTENTION
    Task: {B4FEBAD7-9A25-4B17-A58B-3C487E54E23B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2018-06-07] (AVAST Software)
    Task: {CE8BD9AC-38D5-49B8-A9B8-12814F4D35D1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
    Task: {D0FB3FDA-B861-41DE-B52A-EA693A3E5DC8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-08] (Google Inc.)
    Task: {EA7D2C75-D2C7-4FBB-9422-634B64117842} - System32\Tasks\HPCustPartic.exe_{3BFAF120-AAAC-4042-812B-7BBF96E09B15} => C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPCustPartic.exe [2015-03-09] (Hewlett-Packard Development Company, LP)

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    ShortcutWithArgument: C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi

    ==================== Loaded Modules (Whitelisted) ==============

    2008-05-26 01:32 - 2007-09-27 18:27 - 004839936 _____ () C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
    2018-05-30 11:03 - 2018-05-30 11:03 - 046281248 _____ () C:\PROGRAM FILES\GOOGLE\DRIVE\GOOGLEDRIVESYNC.EXE
    2018-07-10 16:14 - 2018-07-10 16:14 - 000113152 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_ctypes.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000080896 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\bz2.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001585152 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_hashlib.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000128512 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32api.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000137728 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\pywintypes27.dll
    2018-07-10 16:14 - 2018-07-10 16:14 - 000548864 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\pythoncom27.dll
    2018-07-10 16:14 - 2018-07-10 16:14 - 000689664 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\unicodedata.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000438784 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32com.shell.shell.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001489408 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._core_.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001007104 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._gdi_.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001039872 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._windows_.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001325056 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._controls_.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000916992 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._misc_.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 001084416 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\pysqlite2._sqlite.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000149504 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32file.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000136192 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32security.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000007680 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\hashobjs_ext.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000020992 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\thumbnails_ext.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000118784 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\usb_ext.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000047616 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_socket.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 002224640 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_ssl.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000014848 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\common.time34.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000023040 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32event.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000034304 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows.conditional.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000020480 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows.winwrap.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000110080 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows.volumes.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000223232 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32gui.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000173568 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_elementtree.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000169472 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\pyexpat.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000048128 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32inet.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000103424 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\wx._html2.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000046080 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_psutil_windows.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000633272 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows._cacheinvalidation.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000011776 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32crypt.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000301568 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\PIL._imaging.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000032256 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_multiprocessing.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 005458944 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\cello.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000026112 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\_yappi.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000044032 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32process.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000027648 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32pipe.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000010752 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\select.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000029696 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32pdh.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000038400 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows.connectivity.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000073216 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\windows.device_monitor.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000020480 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32profile.pyd
    2018-07-10 16:14 - 2018-07-10 16:14 - 000026624 _____ () C:\Users\lola_wright\AppData\Local\Temp\_MEI43522\win32ts.pyd
    2018-03-09 11:55 - 2016-09-06 12:00 - 005197312 _____ () C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll
    2018-03-09 11:55 - 2016-09-06 12:00 - 000147456 _____ () C:\Users\lola_wright\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:00D77978 [280]
    AlternateDataStreams: C:\ProgramData\TEMP:03D08225 [137]
    AlternateDataStreams: C:\ProgramData\TEMP:0778CBF2 [213]
    AlternateDataStreams: C:\ProgramData\TEMP:077F4C77 [219]
    AlternateDataStreams: C:\ProgramData\TEMP:07D64CD9 [217]
    AlternateDataStreams: C:\ProgramData\TEMP:081C5B23 [196]
    AlternateDataStreams: C:\ProgramData\TEMP:09867A8B [141]
    AlternateDataStreams: C:\ProgramData\TEMP:0ADB5110 [125]
    AlternateDataStreams: C:\ProgramData\TEMP:0B352B60 [288]
    AlternateDataStreams: C:\ProgramData\TEMP:0C65EA0E [129]
    AlternateDataStreams: C:\ProgramData\TEMP:0F6AC518 [470]
    AlternateDataStreams: C:\ProgramData\TEMP:10CFA7D4 [127]
    AlternateDataStreams: C:\ProgramData\TEMP:10E111E1 [230]
    AlternateDataStreams: C:\ProgramData\TEMP:114BD271 [196]
    AlternateDataStreams: C:\ProgramData\TEMP:1409277B [193]
    AlternateDataStreams: C:\ProgramData\TEMP:15752405 [95]
    AlternateDataStreams: C:\ProgramData\TEMP:159E9E4E [210]
    AlternateDataStreams: C:\ProgramData\TEMP:175721D5 [244]
    AlternateDataStreams: C:\ProgramData\TEMP:18E35126 [246]
    AlternateDataStreams: C:\ProgramData\TEMP:1BFE92CC [153]
    AlternateDataStreams: C:\ProgramData\TEMP:1D0E1028 [118]
    AlternateDataStreams: C:\ProgramData\TEMP:1DD8718C [111]
    AlternateDataStreams: C:\ProgramData\TEMP:2176484C [141]
    AlternateDataStreams: C:\ProgramData\TEMP:23925D5D [99]
    AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [270]
    AlternateDataStreams: C:\ProgramData\TEMP:2FC7B9E4 [190]
    AlternateDataStreams: C:\ProgramData\TEMP:322D2CD3 [212]
    AlternateDataStreams: C:\ProgramData\TEMP:38E2864F [258]
    AlternateDataStreams: C:\ProgramData\TEMP:3F2212BB [217]
    AlternateDataStreams: C:\ProgramData\TEMP:3F6B95A0 [426]
    AlternateDataStreams: C:\ProgramData\TEMP:43301D1D [406]
    AlternateDataStreams: C:\ProgramData\TEMP:47BC930A [432]
    AlternateDataStreams: C:\ProgramData\TEMP:4A1628E5 [216]
    AlternateDataStreams: C:\ProgramData\TEMP:4A448DB2 [134]
    AlternateDataStreams: C:\ProgramData\TEMP:4AA2F6A9 [198]
    AlternateDataStreams: C:\ProgramData\TEMP:4BB4F863 [472]
    AlternateDataStreams: C:\ProgramData\TEMP:4E243396 [278]
    AlternateDataStreams: C:\ProgramData\TEMP:51EFAA18 [140]
    AlternateDataStreams: C:\ProgramData\TEMP:52AB1CE4 [219]
    AlternateDataStreams: C:\ProgramData\TEMP:538A9F02 [384]
    AlternateDataStreams: C:\ProgramData\TEMP:545C78AF [119]
    AlternateDataStreams: C:\ProgramData\TEMP:548AE60C [388]
    AlternateDataStreams: C:\ProgramData\TEMP:550A1487 [452]
    AlternateDataStreams: C:\ProgramData\TEMP:551BED5F [104]
    AlternateDataStreams: C:\ProgramData\TEMP:5971F190 [238]
    AlternateDataStreams: C:\ProgramData\TEMP:5A6EA835 [258]
    AlternateDataStreams: C:\ProgramData\TEMP:5CE65446 [222]
    AlternateDataStreams: C:\ProgramData\TEMP:66FC2E6F [148]
    AlternateDataStreams: C:\ProgramData\TEMP:708AB985 [282]
    AlternateDataStreams: C:\ProgramData\TEMP:70B3C619 [420]
    AlternateDataStreams: C:\ProgramData\TEMP:71441FEF [386]
    AlternateDataStreams: C:\ProgramData\TEMP:72E6616C [440]
    AlternateDataStreams: C:\ProgramData\TEMP:744478A2 [218]
    AlternateDataStreams: C:\ProgramData\TEMP:753A0081 [199]
    AlternateDataStreams: C:\ProgramData\TEMP:78ADFF54 [199]
    AlternateDataStreams: C:\ProgramData\TEMP:79460433 [207]
    AlternateDataStreams: C:\ProgramData\TEMP:7C412B92 [208]
    AlternateDataStreams: C:\ProgramData\TEMP:80BFDE16 [272]
    AlternateDataStreams: C:\ProgramData\TEMP:82FF14B1 [194]
    AlternateDataStreams: C:\ProgramData\TEMP:83BAA24B [280]
    AlternateDataStreams: C:\ProgramData\TEMP:86148D88 [194]
    AlternateDataStreams: C:\ProgramData\TEMP:86725A4F [143]
    AlternateDataStreams: C:\ProgramData\TEMP:8944C195 [440]
    AlternateDataStreams: C:\ProgramData\TEMP:93226FE3 [124]
    AlternateDataStreams: C:\ProgramData\TEMP:9812B773 [232]
    AlternateDataStreams: C:\ProgramData\TEMP:996104FC [220]
    AlternateDataStreams: C:\ProgramData\TEMP:99A77513 [246]
    AlternateDataStreams: C:\ProgramData\TEMP:9D86EE01 [145]
    AlternateDataStreams: C:\ProgramData\TEMP:9EF92A1A [432]
    AlternateDataStreams: C:\ProgramData\TEMP:A1D3FEF0 [406]
    AlternateDataStreams: C:\ProgramData\TEMP:A3E34FEB [101]
    AlternateDataStreams: C:\ProgramData\TEMP:A3E39C6A [408]
    AlternateDataStreams: C:\ProgramData\TEMP:A4CDE823 [94]
    AlternateDataStreams: C:\ProgramData\TEMP:A4F4BAA2 [296]
    AlternateDataStreams: C:\ProgramData\TEMP:A57239FA [246]
    AlternateDataStreams: C:\ProgramData\TEMP:ADDDF689 [210]
    AlternateDataStreams: C:\ProgramData\TEMP:AE75CCC8 [145]
    AlternateDataStreams: C:\ProgramData\TEMP:B91EDB04 [194]
    AlternateDataStreams: C:\ProgramData\TEMP:B9F8237A [390]
    AlternateDataStreams: C:\ProgramData\TEMP:BC8E9899 [498]
    AlternateDataStreams: C:\ProgramData\TEMP:BCDC6E07 [132]
    AlternateDataStreams: C:\ProgramData\TEMP:BDCD8531 [224]
    AlternateDataStreams: C:\ProgramData\TEMP:BDD83DC4 [478]
    AlternateDataStreams: C:\ProgramData\TEMP:BDE546C6 [198]
    AlternateDataStreams: C:\ProgramData\TEMP:C0692342 [220]
    AlternateDataStreams: C:\ProgramData\TEMP:C0DD063D [107]
    AlternateDataStreams: C:\ProgramData\TEMP:C15FE8A0 [436]
    AlternateDataStreams: C:\ProgramData\TEMP:C3392F75 [213]
    AlternateDataStreams: C:\ProgramData\TEMP:C7A3B688 [100]
    AlternateDataStreams: C:\ProgramData\TEMP:C820549A [219]
    AlternateDataStreams: C:\ProgramData\TEMP:CA8D6B60 [282]
    AlternateDataStreams: C:\ProgramData\TEMP:CD6E25A6 [210]
    AlternateDataStreams: C:\ProgramData\TEMP:CF61CE5A [94]
    AlternateDataStreams: C:\ProgramData\TEMP:CF75D88F [237]
    AlternateDataStreams: C:\ProgramData\TEMP:D9EDE5FA [256]
    AlternateDataStreams: C:\ProgramData\TEMP:D9FA218A [204]
    AlternateDataStreams: C:\ProgramData\TEMP:DD97F9D3 [292]
    AlternateDataStreams: C:\ProgramData\TEMP:E1D06077 [232]
    AlternateDataStreams: C:\ProgramData\TEMP:E412AAF2 [209]
    AlternateDataStreams: C:\ProgramData\TEMP:E5DE9C8F [143]
    AlternateDataStreams: C:\ProgramData\TEMP:EA031481 [119]
    AlternateDataStreams: C:\ProgramData\TEMP:EB333CFC [484]
    AlternateDataStreams: C:\ProgramData\TEMP:ECC979BD [115]
    AlternateDataStreams: C:\ProgramData\TEMP:ED194880 [248]
    AlternateDataStreams: C:\ProgramData\TEMP:EF5B3572 [276]
    AlternateDataStreams: C:\ProgramData\TEMP:F0762150 [113]
    AlternateDataStreams: C:\ProgramData\TEMP:F5E4BCD5 [119]
    AlternateDataStreams: C:\ProgramData\TEMP:F5E90ED3 [436]
    AlternateDataStreams: C:\ProgramData\TEMP:F72306CC [225]
    AlternateDataStreams: C:\ProgramData\TEMP:F7F6E6CB [123]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\plsapp => ""="service"

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKLM\...\cmdfile\DefaultIcon: %SystemRoot%\System32\shell32.dll,-153 <==== ATTENTION

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\netzero.com -> netzero.com
    IE trusted site: HKU\S-1-5-21-3094174547-28691812-3827549335-1000\...\netzero.net -> netzero.net

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3094174547-28691812-3827549335-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\lola_wright\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
    DNS Servers: 192.168.1.254
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==


    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [{61B826F9-10B8-412E-9BEF-77D319616472}] => (Allow) C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
    FirewallRules: [{E0F61ECB-2B72-4A25-B1A6-D11638F091BA}] => (Allow) svchost.exe
    FirewallRules: [{BEF1EF6C-C91B-4A09-9474-F85EF277A23D}] => (Allow) C:\Program Files (x86)\MSN Messenger\livecall.exe
    FirewallRules: [{748C69E4-7FBA-4CC1-99A7-5EEB0FD26562}] => (Allow) C:\Program Files (x86)\iWin Games\iWinGames.exe
    FirewallRules: [{D0AAD1D3-6765-45BF-8C32-BB4069B76A0E}] => (Allow) C:\Program Files (x86)\iWin Games\iWinGames.exe
    FirewallRules: [{B3BA00A6-7EAF-4E81-85E2-C9AAF224A2E9}] => (Allow) C:\Program Files (x86)\iWin Games\WebUpdater.exe
    FirewallRules: [{84590FFF-6031-4222-8281-338F6B648CB3}] => (Allow) C:\Program Files (x86)\iWin Games\WebUpdater.exe
    FirewallRules: [TCP Query User{B48EAF61-7EC1-43C2-B537-A71E49ECB024}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
    FirewallRules: [UDP Query User{B5924B45-6979-452D-BFB1-4CED92ABAB13}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
    FirewallRules: [{74E91803-8867-4038-86F5-06E5807250F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{00194C34-C875-450D-AD83-F535E87FB789}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{E5D55B29-05E8-4031-9073-BCA2C4FC9A28}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxApplications.exe
    FirewallRules: [{722D5A29-446A-47FA-BDB1-D96DA2077A1C}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\DigitalWizards.exe
    FirewallRules: [{0EC60599-FC2B-4386-8591-678ABDFEDDAB}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\SendAFax.exe
    FirewallRules: [{5A0769D1-9775-4858-B250-763D3A602402}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxPrinterUtility.exe
    FirewallRules: [{401912CA-9259-4097-B10E-4162201FE92E}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\DeviceSetup.exe
    FirewallRules: [{8864F26E-DD80-40FD-8780-B9CC765DEDDA}] => (Allow) LPort=5357
    FirewallRules: [{852BC137-979C-4A30-BB66-91358F96E641}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{DBF8F220-71B9-47F8-9662-594E9D4649F2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{A8CDD775-8CC0-4AE8-90ED-15D061064429}] => (Allow) LPort=80
    FirewallRules: [{816F7D4C-4234-41B9-9973-E368A5E406C5}] => (Allow) LPort=80
    FirewallRules: [{E9BA26B1-005C-42FF-8E27-73A410B923B7}] => (Allow) LPort=80
    FirewallRules: [TCP Query User{C8D38054-1F20-41F8-B41F-E1B058B61D2C}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
    FirewallRules: [UDP Query User{9CBD82BB-9FFC-424E-AD6A-CD3B05F73ABB}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe

    ==================== Restore Points =========================

    11-06-2018 01:22:33 Scheduled Checkpoint
    12-06-2018 00:00:04 Scheduled Checkpoint
    13-06-2018 00:00:04 Scheduled Checkpoint
    14-06-2018 00:00:04 Scheduled Checkpoint
    15-06-2018 12:05:04 Scheduled Checkpoint
    17-06-2018 00:00:15 Scheduled Checkpoint
    18-06-2018 02:21:31 Scheduled Checkpoint
    19-06-2018 00:00:05 Scheduled Checkpoint
    21-06-2018 05:40:44 Scheduled Checkpoint
    22-06-2018 05:36:38 Scheduled Checkpoint
    23-06-2018 03:00:12 Windows Update
    24-06-2018 03:00:16 Windows Update
    03-07-2018 23:36:11 Installed ISO Recorder

    ==================== Faulty Device Manager Devices =============

    Name: ACER NIC-559A PRO/100+ with Alert On LAN 2*
    Description: ACER NIC-559A PRO/100+ with Alert On LAN 2*
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: Acer
    Service: E100B
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (07/10/2018 04:09:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (07/10/2018 03:50:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (07/10/2018 01:45:59 PM) (Source: Perflib) (EventID: 1008) (User: )
    Description: The Open Procedure for service "PNRPsvc" in DLL "C:\Windows\system32\pnrpperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

    Error: (07/10/2018 01:45:57 PM) (Source: Perflib) (EventID: 1010) (User: )
    Description: The Collect Procedure for the "EmdCache" service in DLL "C:\Windows\system32\emdmgmt.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.

    Error: (07/10/2018 01:34:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (07/09/2018 01:29:59 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application Google Play Music Desktop Player.exe, version 4.5.0.0, time stamp 0x59dd2f76, faulting module SHELL32.dll!Shell_NotifyIconGetRect, version 6.0.6002.19454, time stamp 0x55ae6da5, exception code 0xc0000139, fault offset 0x0006f40f,
    process id 0x15d8, application start time 0x01d4174e3feb2510.

    Error: (07/09/2018 01:29:44 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application Google Play Music Desktop Player.exe, version 4.5.0.0, time stamp 0x59dd2f76, faulting module SHELL32.dll!Shell_NotifyIconGetRect, version 6.0.6002.19454, time stamp 0x55ae6da5, exception code 0xc0000139, fault offset 0x0006f40f,
    process id 0x17d0, application start time 0x01d4174e3717edb0.

    Error: (07/09/2018 01:09:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program wmplayer.exe version 11.0.6002.19378 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel.
    Process ID: 126c
    Start Time: 01d4174b219d4cd0
    Termination Time: 60000


    System errors:
    =============
    Error: (07/10/2018 04:25:40 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:35 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:30 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:25 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:21 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:16 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:11 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.

    Error: (07/10/2018 04:25:06 PM) (Source: cdrom) (EventID: 7) (User: )
    Description: The device, \Device\CdRom0, has a bad block.


    CodeIntegrity:
    ===================================

    Date: 2015-01-23 00:25:46.066
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:51.506
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:51.365
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:51.240
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:51.084
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:50.960
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 17:46:50.819
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    Date: 2012-07-31 14:23:25.615
    Description:
    Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\Setup\INF\x64\aswKbd.sys because the set of per-page image hashes could not be found on the system.

    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
    Percentage of memory in use: 82%
    Total physical RAM: 4085.5 MB
    Available physical RAM: 733.85 MB
    Total Virtual: 8372.26 MB
    Available Virtual: 4595.59 MB

    ==================== Drives ================================

    Drive c: (Partition_1) (Fixed) (Total:217.2 GB) (Free:110.04 GB) NTFS ==>[drive with boot components (obtained from BCD)]
    Drive d: (Recovery) (Fixed) (Total:15.69 GB) (Free:5.68 GB) NTFS ==>[system with boot components (obtained from drive)]
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1212613

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice