Inactive-A Found Trojan:Win32/Fuery.B!cl on my Win7 Laptop

[Bob Habart]

Followed steps 1-3
#1 - MSE already on my machine and found Trojan
#2 - Downloaded and Ran - FRST64
#3 - FRST and Addition txt files (below)
=============================================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Bill (administrator) on BILL-VAIO (03-04-2017 15:31:42)
Running from C:\Users\Bill\Desktop
Loaded Profiles: Bill & UpdatusUser (Available Profiles: boinc_master & Bill & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\AstSrv.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-I Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
() C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
() C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
() C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
() C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Digital Delivery Networks, Inc.) C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe
(Digital Delivery Networks, Inc.) C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-06-21] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-05-14] (Alps Electric Co., Ltd.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [36272 2010-04-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SmartWiHelper] => C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWiHelper.exe [89080 2010-07-15] (Sony Electronics Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-03-12] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\570\G2AWinLogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-11-03] (Google Inc.)
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\Run: [Google Update] => C:\Users\Bill\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-26] (Google Inc.)
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\MountPoints2: {3c84a984-5271-11e0-896b-c0cb38fb0689} - D:\LaunchU3.exe -a
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\MountPoints2: {83470220-395f-11e0-9cdc-544249f16790} - D:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-11-03]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4ADD4B33-0FF5-43E5-894E-1E2368E5DE0B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{78AF1F77-A106-43A9-B0B5-19895A0C28A8}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/
HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=U453&ocid=U453DHP&osmkt=en-us
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SNNT
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SNNT
SearchScopes: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Partner BHO Class -> {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} -> C:\ProgramData\Partner\Partner64.dll [2010-11-03] (Google Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-28] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Partner BHO Class -> {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} -> C:\ProgramData\Partner\Partner.dll [2010-11-03] (Google Inc.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-28] (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-03] (Sun Microsystems, Inc.)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-28] (Google Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-28] (Google Inc.)
Toolbar: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-28] (Google Inc.)
Toolbar: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Toolbar: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-19] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-19] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-02] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-26] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2799643452-2932677957-2045640459-1005: @citrixonline.com/appdetectorplugin -> C:\Users\Bill\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-09-21] (Citrix Online)
FF Plugin HKU\S-1-5-21-2799643452-2932677957-2045640459-1005: @talk.google.com/GoogleTalkPlugin -> C:\Users\Bill\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2799643452-2932677957-2045640459-1005: @talk.google.com/O1DPlugin -> C:\Users\Bill\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2799643452-2932677957-2045640459-1005: @tools.google.com/Google Update;version=3 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-26] (Google Inc.)
FF Plugin HKU\S-1-5-21-2799643452-2932677957-2045640459-1005: @tools.google.com/Google Update;version=9 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-26] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Bill\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Bill\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT"
CHR Profile: C:\Users\Bill\AppData\Local\Google\Chrome\User Data\Default [2017-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Bill\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Chrome Media Router) - C:\Users\Bill\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-03]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Ast Service; C:\Windows\SysWOW64\\AstSrv.exe [57344 2007-02-16] (Nalpeiron Ltd.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 Oasis2Service; C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe [61440 2013-07-02] (Digital Delivery Networks, Inc.) [File not signed]
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-I Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1656600 2016-03-31] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
S3 TVICHW32; C:\Windows\system32\DRIVERS\TVICHW32.SYS [21200 2013-10-11] (EnTech Taiwan)
S3 TVICHW32; C:\Windows\SysWOW64\DRIVERS\TVICHW32.SYS [29536 2013-10-11] (EnTech Taiwan)
U2 MSSQL$DDNI; no ImagePath
S3 semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [X]
S3 semav6thermal64ro; \??\C:\Windows\system32\drivers\semav6thermal64ro.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-03 15:31 - 2017-04-03 15:32 - 00019299 _____ C:\Users\Bill\Desktop\FRST.txt
2017-04-03 15:30 - 2017-04-03 15:31 - 00000000 ____D C:\FRST
2017-04-03 15:26 - 2017-04-03 15:27 - 02424832 _____ (Farbar) C:\Users\Bill\Desktop\FRST64.exe
2017-04-03 11:21 - 2017-04-03 11:21 - 00000000 ___HD C:\Windows\msdownld.tmp
2017-04-03 11:21 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2017-04-03 11:19 - 2017-04-03 11:19 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-04-03 11:19 - 2017-04-03 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-04-03 11:19 - 2017-04-03 11:19 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-03 11:19 - 2017-04-03 11:19 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-03 11:19 - 2017-04-03 11:19 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2017-04-03 11:19 - 2017-04-03 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2017-04-03 11:19 - 2017-04-03 11:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-04-03 11:19 - 2017-04-03 11:19 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-04-03 11:19 - 2017-04-03 11:19 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-04-03 11:19 - 2017-04-03 11:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-04-03 11:19 - 2017-04-03 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2017-04-03 11:19 - 2017-04-03 11:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2017-04-03 11:19 - 2017-04-03 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-03 11:18 - 2017-04-03 11:18 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-03 11:18 - 2017-04-03 11:18 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-03 11:18 - 2017-04-03 11:18 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-04-03 11:18 - 2017-04-03 11:18 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-04-03 11:18 - 2017-04-03 11:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-04-03 11:18 - 2017-04-03 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-04-03 11:17 - 2017-04-03 11:17 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-04-03 11:17 - 2017-04-03 11:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-04-03 11:17 - 2017-04-03 11:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2017-04-03 11:17 - 2017-04-03 11:17 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2017-04-03 11:14 - 2017-04-03 11:14 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2017-04-03 11:02 - 2017-04-03 11:07 - 58432912 _____ (Microsoft Corporation) C:\Users\Bill\Documents\EIE11_EN-US_WOL_WIN764.EXE
2017-03-31 09:21 - 2017-03-31 09:21 - 00035833 _____ C:\Users\Bill\Downloads\tax_form_...7101_12312016.pdf
2017-03-30 14:10 - 2017-03-30 14:38 - 00000000 ____D C:\Users\Bill\Documents\TurboTax
2017-03-30 13:29 - 2017-03-30 13:29 - 00000000 ____D C:\Users\Bill\AppData\Local\IsolatedStorage
2017-03-30 13:28 - 2017-03-30 14:10 - 00000000 ____D C:\Users\Bill\AppData\Roaming\Intuit
2017-03-30 13:26 - 2017-03-30 13:29 - 00000614 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2017-03-30 13:25 - 2017-03-30 13:25 - 00002513 _____ C:\Users\Public\Desktop\TurboTax 2016.lnk
2017-03-30 13:25 - 2017-03-30 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2016
2017-03-30 13:20 - 2017-03-30 13:20 - 00000000 ____D C:\Program Files (x86)\TurboTax
2017-03-30 13:07 - 2017-03-30 13:25 - 00000000 ____D C:\ProgramData\Intuit
2017-03-19 10:03 - 2017-03-19 10:03 - 06847064 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2017-03-12 17:05 - 2017-03-12 17:05 - 00001054 _____ C:\Users\Bill\Desktop\mbam 2017.txt
2017-03-08 15:09 - 2017-03-08 15:09 - 00069946 _____ C:\Users\Bill\Downloads\InfoForClients.pdf
2017-03-08 15:08 - 2017-03-08 15:08 - 00095019 _____ C:\Users\Bill\Downloads\HistoryForm.pdf
2017-03-08 15:07 - 2017-03-08 15:07 - 00131091 _____ C:\Users\Bill\Downloads\HIPAA.pdf
2017-03-08 15:07 - 2017-03-08 15:07 - 00040937 _____ C:\Users\Bill\Downloads\HIPAA.Acknowledgment.pdf
2017-03-08 15:06 - 2017-03-08 15:06 - 00037359 _____ C:\Users\Bill\Downloads\ConsentToTreat.pdf
2017-03-08 15:05 - 2017-03-08 15:05 - 00038725 _____ C:\Users\Bill\Downloads\Confidentiality.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-03 14:34 - 2016-09-21 15:35 - 00000536 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2799643452-2932677957-2045640459-1005.job
2017-04-03 14:07 - 2016-09-21 15:35 - 00000632 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2799643452-2932677957-2045640459-1005.job
2017-04-03 13:38 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\tracing
2017-04-03 11:34 - 2009-07-13 21:45 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-03 11:34 - 2009-07-13 21:45 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-03 11:33 - 2009-07-13 22:13 - 00800292 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-03 11:33 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\inf
2017-04-03 11:32 - 2011-02-13 19:01 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{44CF6C4A-FA1D-4D97-890F-2C68C35F6FC5}
2017-04-03 11:29 - 2011-02-13 19:00 - 00001417 _____ C:\Users\Bill\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-04-03 11:28 - 2012-10-20 09:25 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2017-04-03 11:28 - 2010-09-19 09:27 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-03 11:28 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-03 11:28 - 2009-07-13 21:45 - 00457528 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-03 11:25 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-04-03 09:17 - 2010-11-03 13:19 - 00002231 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-30 14:09 - 2011-02-13 19:00 - 00122432 _____ C:\Users\Bill\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-30 13:12 - 2013-10-04 12:21 - 00792906 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-03-23 18:00 - 2011-06-15 15:35 - 00000000 ____D C:\Users\Bill\Documents\MS Excel
2017-03-23 10:08 - 2016-09-21 15:35 - 00003662 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-2799643452-2932677957-2045640459-1005
2017-03-23 10:08 - 2016-09-21 15:35 - 00003566 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-2799643452-2932677957-2045640459-1005
2017-03-19 10:04 - 2012-07-11 19:58 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-19 10:04 - 2012-07-11 19:58 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-19 10:04 - 2012-07-11 19:57 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-19 10:04 - 2012-02-13 11:32 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-19 10:04 - 2010-11-03 13:09 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-15 13:48 - 2011-02-15 17:00 - 00000000 ____D C:\Users\Bill\AppData\Local\Microsoft Games
2017-03-12 17:42 - 2015-09-21 21:00 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-12 17:09 - 2011-02-20 15:17 - 00000000 ____D C:\Users\Bill\AppData\Local\ElevatedDiagnostics
2017-03-12 17:09 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF
2017-03-12 12:59 - 2016-03-31 11:53 - 00000000 ____D C:\Users\UpdatusUser

==================== Files in the root of some directories =======

2017-03-30 13:26 - 2017-03-30 13:29 - 0000614 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Some files in TEMP:
====================
2012-08-22 20:38 - 2012-08-22 20:38 - 0248008 _____ (Ask.com) C:\Users\Bill\AppData\Local\Temp\AskSLib.dll
2014-04-19 09:40 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF3C78.EXE
2014-04-19 09:40 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF44A4.EXE
2013-10-11 15:12 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF5249.EXE
2014-03-15 09:19 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF541D.EXE
2013-10-11 15:12 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF5871.EXE
2014-03-15 09:19 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF5B6E.EXE
2013-10-11 14:53 - 2010-06-20 22:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF7F32.EXE
2013-10-11 15:05 - 2010-06-20 22:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF7F9F.EXE
2013-10-11 14:53 - 2003-05-02 15:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF8377.EXE
2013-10-11 15:05 - 2003-05-02 15:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF8645.EXE
2014-05-17 09:17 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLF8A1B.EXE
2014-05-17 09:17 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLF90DF.EXE
2013-10-11 15:01 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLFAD44.EXE
2013-10-11 15:01 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLFB2F0.EXE
2013-10-11 15:39 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLFC8DF.EXE
2013-10-11 15:39 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLFCD24.EXE
2014-05-28 18:15 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLFE13F.EXE
2013-10-11 16:12 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Bill\AppData\Local\Temp\GLFE4B8.EXE
2013-10-11 16:12 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLFE8DE.EXE
2014-05-28 18:15 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Bill\AppData\Local\Temp\GLFEA54.EXE
2014-06-13 10:28 - 2014-06-13 10:28 - 0000000 _____ () C:\Users\Bill\AppData\Local\Temp\GURCA05.exe
2013-02-22 15:39 - 2013-03-04 14:06 - 0186368 _____ (Sony Corporation) C:\Users\Bill\AppData\Local\Temp\VCPerfService32.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-07-02 22:03

==================== End of FRST.txt ============================

 

[Bob Habart]

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Bill (03-04-2017 15:32:42)
Running from C:\Users\Bill\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-02-14 01:55:30)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2799643452-2932677957-2045640459-500 - Administrator - Disabled)
Bill (S-1-5-21-2799643452-2932677957-2045640459-1005 - Administrator - Enabled) => C:\Users\Bill
boinc_master (S-1-5-21-2799643452-2932677957-2045640459-1000 - Limited - Enabled) => C:\Users\boinc_master
boinc_project (S-1-5-21-2799643452-2932677957-2045640459-1001 - Limited - Enabled)
Guest (S-1-5-21-2799643452-2932677957-2045640459-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2799643452-2932677957-2045640459-1007 - Limited - Enabled)
UpdatusUser (S-1-5-21-2799643452-2932677957-2045640459-1008 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AccuWeather.com Cirrus (HKLM-x32\...\com.AccuWeather.sony.6AF67E59E785A9A644FCA43BED05A7731922EF40.1) (Version: 0.1.6 - AccuWeather, Inc.)
AccuWeather.com Cirrus (x32 Version: 0.1.6 - AccuWeather, Inc.) Hidden
Adaptick PowerStrike (HKLM-x32\...\{09A53631-15B9-43EC-BF5F-0DBC52960A7E}) (Version: 2.0 - Adaptick, Inc.)
Adobe Acrobat 9 Standard (HKLM-x32\...\{AC76BA86-1033-0000-BA7E-000000000004}{AC76BA86-1033-0000-BA7E-000000000004}) (Version: 9.5.5 - Adobe Systems)
Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM-x32\...\{AC76BA86-1033-0000-BA7E-000000000004}_955) (Version: - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe Flash Player 25 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Reader 9.3.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A93000000001}) (Version: 9.3.2 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
Application Manager for VAIO (HKLM-x32\...\Application Manager for VAIO) (Version: - )
ArcSoft Magic-I Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.368 - ArcSoft)
Bollinger Band Tool Kit (HKLM-x32\...\{001E4B32-B7A0-4380-8E53-D2E007E9BA5F}) (Version: 1.00.0000 - Bollinger Capital Management)
Citrix Online Launcher (HKLM-x32\...\{09DA5EE2-7E46-4DC4-96F9-BFEE50D40659}) (Version: 1.0.408 - Citrix)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.297 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.4.2224 - Evernote Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GoToAssist Corporate (HKLM-x32\...\GoToAssist) (Version: 9.0.0.570 - Citrix Online, a division of Citrix Systems, Inc.)
GoToMeeting 8.2.0.6634 (HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\GoToMeeting) (Version: 8.2.0.6634 - CitrixOnline)
HP Officejet 6500 E710n-z Basic Device Software (HKLM\...\{BF09A017-54F4-46BC-AF54-F6DA0D7486D3}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710n-z Help (HKLM-x32\...\{EFBC0CB1-AFFD-4E74-ACEF-42099F1D49C3}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.01.01.1007 - Intel Corporation)
Java(TM) 6 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden
Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden
MetaStock Professional 10.1 (HKLM-x32\...\MetaStock Professional 10.1) (Version: - )
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 en-US)) (Version: 45.4.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nero 12 (HKLM-x32\...\{5019D24D-A627-4402-A393-A3AAAF13DE56}) (Version: 12.0.01600 - Nero AG)
Nero 12 Content Pack (HKLM-x32\...\{B14F874A-79C7-4756-9826-69BAB8F60E6F}) (Version: 12.0.00100 - Nero AG)
NVIDIA 3D Vision Driver 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Graphics Driver 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
Oasis2Service (HKLM-x32\...\{E50FC5DB-7CBD-407D-A46E-0C13E45BC386}) (Version: 1.0.4 - DDNi)
OOBE (x32 Version: 3.10.0630 - Sony Corporation) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PMB (x32 Version: 5.3.00.06040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00 - Sony Corporation) Hidden
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Remote Keyboard with PlayStation 3 (x32 Version: 1.0.2.06170 - Sony Corporation) Hidden
Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden
Remote Play with PlayStation®3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.1 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.1 - Renesas Electronics Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden
SmartWi Connection Utility (HKLM-x32\...\{9B5F85CA-90D4-4AFC-BB37-32477FD0D2B9}) (Version: 4.11.4.20100722.2739 - Sony Corporation)
TC2000 v11 (HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\...\3307560005.www.tc2000.com) (Version: - www.tc2000.com)
TeleChart 2007 (HKLM-x32\...\{8F899627-1EA1-484D-91EA-7B22C05358DB}) (Version: 6.00.0000 - Worden Brothers Inc)
TurboTax 2016 (HKLM-x32\...\TurboTax 2016) (Version: 2016.0 - Intuit, Inc)
VAIO - Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden
VAIO - PMB VAIO Edition Guide (x32 Version: 1.3.00.06040 - Sony Corporation) Hidden
VAIO - PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation) Hidden
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation) Hidden
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation) Hidden
VAIO Care (HKLM\...\{28D70998-F9F8-4F4B-BB1D-64C11123C01B}) (Version: 8.4.5.06021 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Control Center (x32 Version: 4.3.0.05310 - Sony Corporation) Hidden
VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden
VAIO DVD Menu Data (x32 Version: 2.2.00.05120 - Sony Corporation) Hidden
VAIO Gate (x32 Version: 2.4.2.02200 - Sony Corporation) Hidden
VAIO Gate Default (x32 Version: 2.2.0.07020 - Sony Corporation) Hidden
VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden
VAIO Help and Support (HKLM-x32\...\{AD3E7141-A22E-40F1-A7A4-55E898AE35E3}) (Version: 12.00.0622 - Sony Corporation)
VAIO Manual (x32 Version: 1.1.0.05280 - Sony Corporation) Hidden
VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden
VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (x32 Version: 2.1.0.14080 - Sony Corporation) Hidden
VAIO Messenger (HKLM-x32\...\VAIO Messenger) (Version: 2.0.550.0 - DDNi)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden
VAIO Sample Contents (x32 Version: 1.2.0.16080 - Sony Corporation) Hidden
VAIO Survey (x32 Version: 6.00.1028 - Sony Corporation) Hidden
VAIO Transfer Support (x32 Version: 1.2.0.06230 - Sony Corporation) Hidden
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)
VectorVest 7 (HKLM-x32\...\{B54D832F-693D-48FB-8939-C7423D5E2F5F}) (Version: 1.1.9.1 - VectorVest, Inc.)
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VGClientX86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VUx64 (Version: 1.2.0 - Sony Corporation) Hidden
VUx86 (x32 Version: 1.2.0 - Sony Corporation) Hidden
Welcome App (Start-up experience) (x32 Version: 12.0.13000 - Nero AG) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\5530\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2799643452-2932677957-2045640459-1005_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Bill\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {079C8A6F-B53F-42AA-BBB7-C5053381B5A6} - System32\Tasks\Sony\Java Update => C:\Program Files\Java\jre6\bin\jusched.exe
Task: {0B9A01D0-A12C-4816-AA4F-74D38360F053} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {0DC85AD5-5FD0-417A-9FE9-007E85F826DF} - System32\Tasks\Sony Corporation\VAIO Care\GetSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {16BDE0C5-F4D3-4D2C-9416-C8A39F65F195} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {2155E970-7AF5-4BEC-B964-551892E4F7C0} - System32\Tasks\Sony\VAIO Survey => C:\Program Files (x86)\Sony\VAIO Survey\VAIO Sat Survey.exe [2009-10-26] ()
Task: {2181222E-5522-4985-A905-5D9B485E6235} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {25DB78A6-0E6A-4A01-AD6D-53C55A01930A} - System32\Tasks\Sony Corporation\VAIO Care\VTSvc => C:\Program Files\Sony\VAIO Care\VAIOTM\VTSvc.exe [2016-05-30] (Sony Corporation)
Task: {2A51BCFD-D350-44FD-B1AF-E63299DD1432} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {2C2CAFD4-4822-4CFC-AF8F-BD37B85A84AB} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {2DE5FFB2-6B96-4D76-8314-853807AFCA52} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {33F4F0A7-1C43-4E64-8E99-E67AB491304A} - System32\Tasks\Sony Corporation\VAIO Care\VKSvcDaily => C:\Program Files\Sony\VAIO Care\VAIOTM\VKSvc.exe [2016-05-30] (Sony Corporation)
Task: {363651D8-315D-4420-8398-832FED4CAFB2} - System32\Tasks\Sony Corporation\VAIO Care\VKSvcWeekly => C:\Program Files\Sony\VAIO Care\VAIOTM\VKSvc.exe [2016-05-30] (Sony Corporation)
Task: {39C8AD5B-7797-43A9-AB2F-3778598DBACB} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {3C1F1101-22C4-40B4-B51C-E00B0A05F083} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)
Task: {454CB5A9-3B4D-4379-AAB1-05751D1964FB} - System32\Tasks\VAIO® Messenger (Bill) => C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe [2013-07-02] (Digital Delivery Networks, Inc.)
Task: {4689F7D4-0D94-4D30-A549-4373A7EE3E68} - System32\Tasks\G2MUploadTask-S-1-5-21-2799643452-2932677957-2045640459-1005 => C:\Program Files (x86)\Citrix\GoToMeeting\6634\g2mupload.exe [2017-03-23] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {46F517C0-EDBF-4913-8B78-BB941D4340CD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {47A8B766-3B18-4B3C-8C30-6FC3FE3EAA23} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {54B509A5-9D7E-4491-BDEB-F6CF9C56F36C} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {5631592F-842C-4883-89EC-4B9D11216C22} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe
Task: {5EC886F0-44D0-4901-B0B2-A4DC31A02DE4} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {609DA1CF-3EDB-4532-B2D5-AC4F4A4E8C69} - System32\Tasks\{060CA72E-37F9-48C7-8CC6-B8BF44CA219B} => pcalua.exe -a C:\Users\Bill\AppData\Local\Temp\GLFE020\TROUBL~1.EXE -d C:\Users\Bill\AppData\Local\Temp\GLFE020 <==== ATTENTION
Task: {7C45BB60-9774-461A-81E5-105483A0FB6C} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation)
Task: {8F8C8886-6775-427A-9248-67B0FF4CCF24} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2799643452-2932677957-2045640459-1005UA => C:\Users\Bill\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {9842BC36-4667-4BCC-B89E-ADDE9AE80D4A} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)
Task: {A880CA2E-3063-4BFF-8D99-F04DAE17C04F} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {ADEBCB62-207C-468B-9EA2-F5139BA08B4F} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2016-03-24] (Sony Corporation)
Task: {B1E92FDA-6FB8-4DB2-9E28-FA1A8AD16F01} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-07-26] (Sony Corporation)
Task: {BB32E140-E094-4A1D-906B-7DF180507A99} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2799643452-2932677957-2045640459-1005
Task: {C668796E-730B-48D4-A4F1-7149CF0A2898} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2799643452-2932677957-2045640459-1005Core => C:\Users\Bill\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-21] (Google Inc.)
Task: {C9B2DD9D-307B-4969-9B46-4C4483CD0DE6} - System32\Tasks\DDNi Startup => C:\Program Files (x86)\DDNi\Oasis\DDNiStartup.exe [2013-07-02] (Digital Delivery Networks, Inc.)
Task: {D36110CE-D1A8-4712-8F69-D625DE03A23A} - System32\Tasks\G2MUpdateTask-S-1-5-21-2799643452-2932677957-2045640459-1005 => C:\Program Files (x86)\Citrix\GoToMeeting\6634\g2mupdate.exe [2017-03-23] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {DDC8CE33-632E-4F3F-A153-739D5B9445FC} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2016-05-31] (Sony Corporation)
Task: {DEC1C553-1EBF-46BA-9C22-1C04EF9536D6} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-30] (Sony Corporation)
Task: {DECFE51C-A811-493C-B817-025392C4DA22} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2016-03-18] (Sony Corporation)
Task: {E3ED9809-12F8-44DF-B85C-89BBA0703844} - System32\Tasks\Sony Corporation\VAIO Care\VTUsr => C:\Program Files\Sony\VAIO Care\VAIOTM\VTUsr.exe [2016-05-30] (Sony Corporation)
Task: {EB8449A0-582A-4250-B00B-9408FD189693} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-07-26] (Sony Corporation)
Task: {F1053EF5-467B-4D9E-AFDF-364BB5C8AAEA} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)
Task: {F5537C06-7F39-46DF-B40E-BEB4292ADCC5} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {FAF3C348-F3E3-43CF-81F3-0FEDFFAD8E1A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-19] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2799643452-2932677957-2045640459-1005.job => C:\Program Files (x86)\Citrix\GoToMeeting\6634\g2mupdate.exe
Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2799643452-2932677957-2045640459-1005.job => C:\Program Files (x86)\Citrix\GoToMeeting\6634\g2mupload.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Bill\Desktop\TC2000 v11.lnk -> C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe (Microsoft Corporation) -> 3307560005.www.tc2000.com
ShortcutWithArgument: C:\Users\Bill\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TC2000 v11.lnk -> C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe (Microsoft Corporation) -> 3307560005.www.tc2000.com

 

[Bob Habart]

==================== Loaded Modules (Whitelisted) ==============

2016-03-31 11:52 - 2013-08-29 15:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00022504 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
2010-11-03 13:33 - 2010-07-15 11:07 - 00023552 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
2010-11-03 13:33 - 2010-07-15 11:07 - 00040952 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
2010-11-03 13:33 - 2010-07-15 11:07 - 00184816 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
2017-04-03 09:17 - 2017-03-29 01:47 - 02885464 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-04-03 09:17 - 2017-03-29 01:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libegl.dll
2010-11-03 13:42 - 2010-05-31 19:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2010-11-03 13:42 - 2010-05-31 19:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2013-06-17 17:42 - 2013-06-17 17:42 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1ad8638fee6b8f2152118441b9554d18\IsdiInterop.ni.dll
2010-09-19 09:25 - 2010-03-03 20:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00131072 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\SonyCommonLib.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00011264 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Resources.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00007680 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\DebugMsg.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00015360 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\SharedInterfaces.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00018944 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\DictionaryLookup.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00011264 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\MessageXML.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00005120 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.PluginManager.ThirdPartyApp.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00023040 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.PluginManager.Generic.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00027648 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.Plugin.BtPower.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00005120 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.Plugin.Generic.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00015872 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.Plugin.NativeWifiThirdPartyApp.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00009728 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.Plugin.TosBtThirdPartyApp.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00006656 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.Plugin.WlanPower.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00004608 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\Kinoubi.Plugins.PluginManager.Power.dll
2010-11-03 13:33 - 2010-07-15 11:07 - 00109568 _____ () C:\Program Files (x86)\Sony\SmartWi Connection Utility\DevicePanel.dll
2013-07-02 23:06 - 2013-07-02 23:06 - 00039936 _____ () C:\Program Files (x86)\DDNi\Oasis2Service\OasisCloudModel.dll
2013-07-02 23:06 - 2013-07-02 23:06 - 00011264 _____ () C:\Program Files (x86)\DDNi\Oasis2Service\OasisCloudClient.dll
2013-10-04 10:08 - 2013-07-02 23:08 - 00061864 _____ () C:\Program Files (x86)\DDNi\Oasis\OasisCloudModel.dll
2013-10-04 10:08 - 2013-07-02 23:08 - 00018856 _____ () C:\Program Files (x86)\DDNi\Oasis\OasisCloudClient.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:AstInfo [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:34 - 2009-06-10 14:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2799643452-2932677957-2045640459-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Bill\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{49675393-3F31-40CC-9575-340785001347}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{2F2DCA24-1E35-43F2-9BB6-8DAD1CD4B21A}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{659B102D-FE33-45F1-B9E2-75E0548CCB63}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3984DE46-666F-4108-A698-937AB9444DAF}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C9B3C86E-2206-4F3D-BDFD-2737A415B1D7}] => (Allow) svchost.exe
FirewallRules: [{ACE3C5B0-5C6B-41B7-A895-9035EB871DFF}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{8CD9115B-A5CB-452D-9F42-14739DD7C1C2}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{96594184-9A7E-46C1-B901-E37524654F38}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe
FirewallRules: [{4DF057BF-57BC-4C89-9BC6-2BD2642B5E6C}] => (Allow) C:\Users\Bill\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{AF18E937-168E-4C42-9B71-F0D07C0E178F}] => (Allow) C:\Users\Bill\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{C2106755-2DA1-4CC5-AAC3-7AE27B518574}] => (Allow) C:\Users\Bill\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{61F1EE23-0682-4246-A5F7-C62B9F367DB9}] => (Allow) C:\Users\Bill\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [TCP Query User{879020B6-A78C-4B14-9644-D9F42255F2D2}C:\program files (x86)\nero\km\kwikmedia.exe] => (Block) C:\program files (x86)\nero\km\kwikmedia.exe
FirewallRules: [UDP Query User{7FB5A858-DC7D-4805-B804-BAF665A2B61A}C:\program files (x86)\nero\km\kwikmedia.exe] => (Block) C:\program files (x86)\nero\km\kwikmedia.exe
FirewallRules: [{5CE761D0-3788-4204-9E75-3EDA0174EBA3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{5355197A-1E56-4240-B5BD-AFE9A095FEFB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{FE326A31-6536-4C31-A8A2-B7EAE9033775}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{6C6FEE01-1BC2-4B7A-9356-A0913B0A75F1}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{9BDCEEA0-C1A1-458B-A1F9-DBBF86925035}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{A841D627-D6C9-4324-8739-5673131539EF}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [{AFFCC56D-1A91-4322-BC67-877870978407}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9148DA45-4C71-412E-8F32-09A96BC5F270}] => (Allow) LPort=2869
FirewallRules: [{4C92EDD8-0CCD-45F3-9DFF-07F84EE2506A}] => (Allow) LPort=1900
FirewallRules: [{F47B3E93-4309-4D9D-9B12-F14B5F39F4E9}] => (Allow) C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\DeviceSetup.exe
FirewallRules: [{37D20D73-CC7B-49E3-ABDB-161B41AEBE18}] => (Allow) C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\DeviceSetup.exe
FirewallRules: [{470D5EAF-3AE1-43C2-9F60-A04BB33F12D9}] => (Allow) C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe
FirewallRules: [{B4CBE6AD-86CF-4920-8713-033C8A250CE3}] => (Allow) C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe
FirewallRules: [{5D12D334-3F0E-4132-9682-96574CACF842}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe
FirewallRules: [{0D44E177-53E5-4897-8357-CF85061602BA}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{C6B3D46D-9B8C-4711-93E2-09939F7BD65E}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{71FB2733-F09D-4DB0-A6E5-47E51056F1D7}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{47EE0782-D2EA-4FD7-A555-BF5606084150}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{F6E9415C-319F-48E3-BCB2-1A7A12DCB71C}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{2909EA3C-C514-4AB9-B8D9-0E3BBD65846B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

05-11-2016 12:01:57 Windows Update
05-11-2016 12:09:50 Windows Backup
18-11-2016 18:34:22 Windows Update
20-11-2016 15:04:29 Windows Backup
21-11-2016 18:57:14 Windows Backup
27-11-2016 09:59:52 Windows Update
08-12-2016 13:29:54 Windows Backup
08-12-2016 13:34:00 Installed VAIO Care Solution Center Update
14-12-2016 11:19:05 Windows Update
26-12-2016 13:51:55 Windows Backup
29-12-2016 10:04:18 Windows Update
24-01-2017 12:48:05 Windows Update
24-01-2017 14:40:43 Windows Backup
31-01-2017 18:03:18 Windows Update
04-03-2017 09:36:00 Windows Update
05-03-2017 12:47:16 Windows Backup
13-03-2017 08:20:53 Windows Backup
20-03-2017 09:23:41 Windows Backup
29-03-2017 17:07:13 Windows Backup
30-03-2017 13:23:24 Installed TurboTax 2016 wrapper
03-04-2017 08:57:14 Windows Backup
03-04-2017 08:59:01 Installed TurboTax 2016 wcaiper
03-04-2017 11:11:58 Windows Modules Installer

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/03/2017 09:02:42 AM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (03/20/2017 09:27:51 AM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (03/13/2017 08:30:44 AM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (03/05/2017 12:51:53 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (01/24/2017 02:43:31 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (12/26/2016 01:55:35 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (12/08/2016 01:35:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program VAIO Messenger.exe version 2.0.550.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1210

Start Time: 01d248d0a42734ff

Termination Time: 15

Application Path: C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe

Report Id: 354a1c8e-bd85-11e6-978d-c0cb38fb0689

Error: (12/08/2016 01:35:23 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (11/21/2016 07:01:20 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).

Error: (11/20/2016 03:11:06 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005).


System errors:
=============
Error: (04/03/2017 11:30:37 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Error: (04/03/2017 11:28:14 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (04/03/2017 11:23:56 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {51FA2736-5DEE-11D4-98E8-006008BF430C} did not register with DCOM within the required timeout.

Error: (03/30/2017 02:36:01 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Error: (03/30/2017 02:34:59 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (03/30/2017 01:20:04 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Error: (03/30/2017 01:19:03 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.

Module Path: C:\Windows\system32\athExt.dll
Error Code: 126

Error: (03/30/2017 01:17:24 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Microsoft Antimalware has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.239.377.0

Update Source: Microsoft Update Server

Update Stage: Search

Source Path: http://www.microsoft.com

Signature Type: AntiVirus

Update Type: Full

User: NT AUTHORITY\SYSTEM

Current Engine Version:

Previous Engine Version: 1.1.13601.0

Error code: 0x8024001e

Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Error: (03/30/2017 01:16:49 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {51FA2736-5DEE-11D4-98E8-006008BF430C} did not register with DCOM within the required timeout.

Error: (03/23/2017 09:25:58 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.


CodeIntegrity:
===================================
Date: 2016-08-26 19:12:05.776
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-08-26 19:12:05.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-08-26 19:12:01.033
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-08-26 19:12:00.862
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-29 07:39:01.639
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-29 07:39:01.421
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-29 07:38:48.857
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-29 07:38:48.561
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-23 09:40:05.843
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-07-23 09:40:05.734
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\semav6msr64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7 CPU Q 740 @ 1.73GHz
Percentage of memory in use: 76%
Total physical RAM: 4076.93 MB
Available physical RAM: 969.3 MB
Total Virtual: 8152.04 MB
Available Virtual: 3891.54 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:452.23 GB) (Free:73.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=452.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================(Disk ID: 194FE40B)
Partition 1: (Not Active) - (Size=13.4 GB) - (Type=27)

 

[Broni]

Welcome aboard

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
• Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
• Never run more than one scan at a time.
• Keep updating me regarding your computer behavior, good, or bad.
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

================================

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

• Close all the running programs
• Double click on downloaded setup.exe file to install the program.
• Click on Start Scan button.
• Click on another Start Scan button.
• Wait until the Status box shows Scan Finished
• Click on Delete.
• Wait until the Status box shows Deleting Finished.
• Click on Report and copy/paste the content of the Notepad into your next reply.
• RKreport.txt could also be found on your desktop.
• If more than one log is produced post all logs.

Please download Malwarebytes to your desktop.

• Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
• Then click Finish.
• Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
• If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
• When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
• Restart your computer when prompted to do so.
• The Scan log is available throughout History ->Application logs. Please post it contents in your next reply.

Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• The tool will start to update the database if one is required.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Logfile button.
• A window will open which lists the logs of your scans.
• Click on the Scan tab.
• Double-click the most recent scan which will be at the top of the list....the log will appear.
• Review the results...see note below
• After reviewing the log, click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[CX].txt) will open automatically (where the largest value of X represents the most recent report).
• To open a Cleaning log, launch AdwareClearer, click on the Logfile button, click on the Cleaning tab and double-click the log at the top of the list.
• Copy and paste the contents of AdwCleaner[CX].txt in your next reply.
• A copy of all logfiles are saved to C:\AdwCleaner.

-- Note: The contents of the AdwCleaner log file may be confusing. Unless you see a program name or entry that you recognize and know should not be removed, don't worry about it. If you see an entry you want to keep, return to AdwCleaner before cleaning...all detected items will be listed (and checked) in each tab. Click on and uncheck any items you want to keep.

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[Bob Habart]

Broni,

Not sure on how to proceed,...
I ran Rogue Killer it shows 7 entries and only 2 are checked. Do I check the other 5 that are not checked to delete all 7?
The 5 unchecked are registry entries and the 2 that are checked are files,..
The box for removing is marked - [Remove Selected] and not [Delete] as you state above in your directions,...

RogueKiller V12.10.3.0 (x64) [Apr 3 2017] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : https://forum.adlice.com
Website : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Bill [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Scan -- Date : 04/04/2017 08:51:39 (Duration : 00:53:43)

¤¤¤ Processes : 0 ¤¤¤

***** My Note to Broni: These 5 entries are not checked for deletion

¤¤¤ Registry : 5 ¤¤¤
[PUP.Gen0] (X64) HKEY_CLASSES_ROOT\CLSID\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} (C:\ProgramData\Partner\Partner64.dll) -> Found
[PUP.Gen0] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} (C:\ProgramData\Partner\Partner64.dll) -> Found
[PUP.Gen0] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} (C:\ProgramData\Partner\Partner64.dll) -> Found
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Found
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Found

¤¤¤ Tasks : 0 ¤¤¤

***** My Note to Broni: These 2 entries are checked for deletion

¤¤¤ Files : 2 ¤¤¤
[PUP.Gen1][Folder] C:\ProgramData\Partner -> Found
[PUP.Gen1][Folder] C:\ProgramData\Partner -> Found

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST9500420AS +++++
--- User ---
[MBR] 1f64060441dcbb9d07723ebff6d762c7
[BSP] ed0df23d5beae5553a17160588f6bba3 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 13758 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 28178432 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 28383232 | Size: 463080 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

 

[Broni]

Do I check the other 5 that are not checked to delete all 7?
NO. You delete only checkmarked items.

 

[Broni]

Still with me?

 

[Broni]

This topic is marked as abandoned and closed due to inactivity.

This member will NOT be eligible to receive any more help in malware removal forum.