Hello there I'm having problems with my laptop I can't get any sound from it, Spotify won't play tracks can't avast can't scan some files some software not working or blocked.
Here's the FRST log
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-10-2015
Ran by lasetta29 (administrator) on MAX (29-10-2015 14:36:28)
Running from C:\Users\lasetta29\Downloads\Programs
Loaded Profiles: lasetta29 (Available Profiles: lasetta29)
Platform: Windows 8.1 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee Inc.) C:\Program Files\McAfee\Real Protect\RealProtect.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(Internet Download Manager, Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-08-24] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2565544 2012-10-31] ()
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2172816 2012-10-22] (SRS Labs, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-29] (Synaptics Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-18] (Intel Corporation)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7152640 2012-12-05] (Pegatron Corporation)
HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-25] (AVAST Software)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKLM\...\RunOnce: [RealProtect] => C:\Program Files\McAfee\Real Protect\RealProtect.exe [1710448 2015-10-28] (McAfee Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Spotify Web Helper] => C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-19] (Spotify Ltd)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3491264 2013-01-31] (Tonec Inc.)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Spotify] => C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-10-19] (Spotify Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-25] (AVAST Software)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2012-02-08] (Tonec Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{92113B8D-C02D-49CE-AF4C-11D1B529E8C2}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
BHO: No Name -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-02] (AVAST Software)
BHO-x32: No Name -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-02] (AVAST Software)
FireFox:
========
FF ProfilePath: C:\Users\lasetta29\AppData\Roaming\Mozilla\Firefox\Profiles\oszd3f03.default
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.youtube.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-08-13] ()
FF Extension: Adblock Plus - C:\Users\lasetta29\AppData\Roaming\Mozilla\Firefox\Profiles\oszd3f03.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-25] [not signed]
FF HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5 [2015-07-01] [not signed]
FF HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5
Chrome:
=======
CHR StartupUrls: Default -> "hxxps://uk.yahoo.com/?fr=hp-avast&type=agc511",
"hxxps://www.google.com/?trackid=sp-006"
CHR Profile: C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-06]
CHR Extension: (Google Docs) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-06]
CHR Extension: (Google Drive) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-31]
CHR Extension: (YouTube) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-06]
CHR Extension: (Google Search) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06]
CHR Extension: (Avast SafePrice) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-30]
CHR Extension: (Google Sheets) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-06]
CHR Extension: (Google Docs Offline) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-31]
CHR Extension: (Gmail) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-06]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-18]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [821024 2015-08-05] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-25] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-09-25] (Avast Software)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-13] (WildTangent)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201872 2012-12-05] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-08-26] (IObit)
R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116240 2013-01-04] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 AVGIDSAgent; no ImagePath
S2 avgwd; no ImagePath
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-25] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-25] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-09-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-09-25] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-25] (AVAST Software)
S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2015-04-18] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-25] (AVAST Software)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-03-19] (AVG Technologies CZ, s.r.o.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-22] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-06] (REALiX(tm))
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-10-11] (Intel Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-09-25] (AVAST Software)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-08-24] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3737304 2015-08-24] (Realtek Semiconductor Corporation )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-29] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [36712 2015-06-30] (Toshiba Corporation)
S3 Tosrfcom; no ImagePath
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-10-28] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-09-25] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S4 AVGIDSDriver; system32\DRIVERS\avgidsdrivera.sys [X]
S4 Avgrkx64; system32\DRIVERS\avgrkx64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-29 14:35 - 2015-10-29 14:36 - 00000000 ____D C:\FRST
2015-10-28 20:49 - 2015-10-28 20:49 - 01801288 _____ (Malwarebytes) C:\Users\lasetta29\Downloads\JRT.exe
2015-10-28 20:46 - 2015-10-29 14:26 - 00000154 _____ C:\WINDOWS\setupact.log
2015-10-28 20:46 - 2015-10-28 20:46 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-28 20:45 - 2015-10-28 20:45 - 00002038 _____ C:\WINDOWS\PFRO.log
2015-10-28 20:38 - 2015-10-28 20:38 - 01694208 _____ C:\Users\lasetta29\Downloads\adwcleaner_5.015.exe
2015-10-28 20:13 - 2015-10-28 20:37 - 00000000 ____D C:\ProgramData\RogueKiller
2015-10-28 20:13 - 2015-10-28 20:13 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-10-28 19:47 - 2015-10-28 19:47 - 00001141 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-28 19:47 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-10-28 19:47 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-10-28 19:47 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-10-28 19:43 - 2015-10-28 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Local\AvgSetupLog
2015-10-28 18:34 - 2015-10-28 18:35 - 00000000 ____D C:\Program Files\stinger
2015-10-28 18:34 - 2015-10-28 18:34 - 00000000 ____D C:\Program Files\McAfee
2015-10-28 18:34 - 2015-10-28 14:05 - 07805808 ____N (McAfee Inc) C:\Users\lasetta29\Desktop\stinger.exe
2015-10-28 18:19 - 2015-10-28 18:20 - 00000000 ____D C:\KVRT_Data
2015-10-28 16:59 - 2015-10-28 16:59 - 00002841 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\ProgramData\Sophos
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\Program Files (x86)\Sophos
2015-10-28 16:44 - 2015-10-28 16:44 - 00003652 _____ C:\WINDOWS\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-10-28 16:44 - 2015-10-28 16:44 - 00002210 _____ C:\Users\lasetta29\Desktop\Tweaking.com - Windows Repair.lnk
2015-10-27 13:24 - 2015-10-27 13:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-10-27 13:23 - 2015-10-27 13:23 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-10-27 13:23 - 2015-10-27 13:23 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-10-27 13:23 - 2015-10-27 13:23 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-10-27 13:23 - 2015-10-27 13:23 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-10-27 13:23 - 2015-10-27 13:23 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-10-27 13:23 - 2015-10-27 13:23 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-10-20 15:00 - 2015-10-16 04:51 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-20 15:00 - 2015-10-16 04:51 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-16 10:33 - 2015-10-16 13:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 19:36 - 2015-09-19 03:18 - 00035384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-10-14 19:36 - 2015-09-18 13:42 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 01163776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00766464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 06:39 - 2015-08-27 02:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-14 06:39 - 2015-08-27 02:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-14 06:38 - 2015-09-29 12:31 - 07457624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 06:38 - 2015-09-29 12:31 - 01658536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-14 06:38 - 2015-09-29 12:31 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-14 06:38 - 2015-09-29 12:31 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-14 06:38 - 2015-09-29 12:31 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-14 06:38 - 2015-09-24 16:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-10-14 06:38 - 2015-09-24 16:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-14 06:38 - 2015-09-10 18:02 - 25851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-14 06:38 - 2015-09-10 17:19 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-14 06:38 - 2015-09-10 17:18 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-14 06:38 - 2015-09-10 17:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-10-14 06:38 - 2015-09-10 17:14 - 05990400 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-14 06:38 - 2015-09-10 17:09 - 20358144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-14 06:38 - 2015-09-10 17:06 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-14 06:38 - 2015-09-10 17:04 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-14 06:38 - 2015-09-10 16:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-10-14 06:38 - 2015-09-10 16:39 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-14 06:38 - 2015-09-10 16:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-14 06:38 - 2015-09-10 16:37 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-10-14 06:38 - 2015-09-10 16:35 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-10-14 06:38 - 2015-09-10 16:33 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-14 06:38 - 2015-09-10 16:28 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-14 06:38 - 2015-09-10 16:28 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-10-14 06:38 - 2015-09-10 16:27 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-14 06:38 - 2015-09-10 16:24 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-14 06:38 - 2015-09-10 16:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-10-14 06:38 - 2015-09-10 16:19 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-10-14 06:38 - 2015-09-10 16:19 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-14 06:38 - 2015-09-10 16:19 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-14 06:38 - 2015-09-10 16:17 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-14 06:38 - 2015-09-10 16:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-10-14 06:38 - 2015-09-10 16:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-10-14 06:38 - 2015-09-10 16:05 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-10-14 06:38 - 2015-09-10 16:02 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-14 06:38 - 2015-09-10 16:01 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-10-14 06:38 - 2015-09-10 16:00 - 12853760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-14 06:38 - 2015-09-10 15:57 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-14 06:38 - 2015-09-10 15:57 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-10-14 06:38 - 2015-09-10 15:55 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-10-14 06:38 - 2015-09-10 15:55 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-10-14 06:38 - 2015-09-10 15:55 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-10-14 06:38 - 2015-09-10 15:45 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-14 06:38 - 2015-09-10 15:34 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-14 06:38 - 2015-09-10 15:31 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-14 06:38 - 2015-09-10 15:27 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-14 06:38 - 2015-09-10 15:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-10-13 19:23 - 2015-10-13 19:23 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\ProductData
2015-10-13 17:44 - 2015-10-13 17:44 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-MAX-Windows-8.1-(64-bit).dat
2015-10-13 17:44 - 2015-10-13 17:44 - 00000000 ____D C:\RegBackup
2015-10-13 17:17 - 2015-10-28 19:42 - 00000000 ____D C:\ProgramData\ProductData
2015-10-13 16:57 - 2015-10-13 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-10-13 16:56 - 2015-10-13 16:56 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-10-13 16:40 - 2015-10-13 16:40 - 00074703 _____ C:\WINDOWS\SysWOW64\mfc45.dat
2015-10-13 16:40 - 2015-10-13 16:40 - 00003534 _____ C:\WINDOWS\System32\Tasks\iolo System Checkup
2015-10-13 16:40 - 2015-10-13 16:40 - 00001212 _____ C:\Users\lasetta29\Desktop\System Checkup.lnk
2015-10-13 16:40 - 2015-10-13 16:40 - 00000000 ____D C:\ProgramData\iolo
2015-10-13 16:40 - 2015-10-13 16:40 - 00000000 ____D C:\Program Files (x86)\iolo
2015-10-13 16:26 - 2015-10-28 16:02 - 80076800 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 80076800 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00024576 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00024576 _____ C:\WINDOWS\system32\config\SAM.iodefrag
2015-10-13 16:26 - 2015-10-13 16:26 - 06307840 _____ C:\WINDOWS\system32\config\DRIVERS.iodefrag.bak
2015-10-12 17:47 - 2015-10-12 17:47 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-12 17:47 - 2015-10-12 17:47 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-10-12 17:47 - 2015-10-12 17:47 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-10-12 17:46 - 2014-10-16 09:27 - 00027424 _____ (IObit) C:\WINDOWS\system32\RegistryDefragBootTime.exe
2015-10-11 13:16 - 2015-10-11 13:16 - 00184608 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2015-10-04 17:41 - 2015-10-04 17:41 - 00885504 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2015-10-04 17:41 - 2015-10-04 17:41 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-29 14:37 - 2015-04-06 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\Spotify
2015-10-29 14:33 - 2015-07-01 17:25 - 00003922 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B7978072-FEE5-4B58-AAE5-531187501637}
2015-10-29 14:33 - 2015-04-10 15:12 - 01947318 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-29 14:32 - 2015-04-06 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Spotify
2015-10-29 14:27 - 2015-09-15 21:14 - 00000910 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-29 14:26 - 2013-08-22 14:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-28 22:32 - 2015-04-06 23:57 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\DMCache
2015-10-28 22:00 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-28 21:24 - 2015-04-06 20:09 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-10-28 21:19 - 2015-09-15 21:14 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-28 20:56 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\IDM
2015-10-28 20:53 - 2015-09-25 19:55 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-28 20:45 - 2015-09-16 15:27 - 00000000 ____D C:\Program Files (x86)\ESET
2015-10-28 20:40 - 2015-09-14 17:38 - 00000000 ____D C:\AdwCleaner
2015-10-28 20:40 - 2015-08-29 10:08 - 00000258 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_lasetta29.job
2015-10-28 20:33 - 2015-04-06 19:48 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3938888361-216902260-1540475144-1001
2015-10-28 19:48 - 2015-09-14 17:55 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-10-28 19:47 - 2015-09-14 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-28 19:47 - 2015-09-14 17:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-28 19:43 - 2015-04-06 22:38 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Avg
2015-10-28 18:35 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\Downloads\Compressed
2015-10-28 16:03 - 2013-08-22 14:44 - 00337808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-27 23:19 - 2013-08-22 13:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-27 13:24 - 2015-08-29 10:08 - 00002220 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-10-27 13:24 - 2012-07-26 07:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-27 13:17 - 2014-11-22 01:01 - 00765714 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-25 14:23 - 2015-04-10 14:52 - 00000000 ____D C:\Users\lasetta29
2015-10-25 14:21 - 2015-04-06 19:53 - 00002214 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-23 11:54 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-17 11:57 - 2015-04-06 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-16 22:24 - 2015-04-06 20:09 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-10-15 13:43 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-14 21:36 - 2015-04-07 04:51 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-14 21:36 - 2014-11-22 05:25 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-10-14 21:36 - 2013-08-22 15:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-10-14 19:41 - 2015-04-06 20:08 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Adobe
2015-10-14 06:47 - 2015-04-07 02:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 06:42 - 2015-04-07 02:34 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-13 18:04 - 2012-07-26 05:26 - 00000160 _____ C:\WINDOWS\win.ini
2015-10-13 17:12 - 2015-04-10 23:02 - 00000000 ____D C:\Users\ADMINI~1
2015-10-13 16:51 - 2015-04-06 20:53 - 00000000 ____D C:\ProgramData\IObit
2015-10-13 16:51 - 2015-04-06 20:51 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\IObit
2015-10-13 16:51 - 2015-04-06 20:51 - 00000000 ____D C:\Program Files (x86)\IObit
2015-10-12 22:44 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-10 00:14 - 2015-04-06 23:55 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\vlc
2015-10-06 13:49 - 2015-04-10 15:37 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-10-06 00:09 - 2015-04-10 15:37 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-10-02 20:53 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\Downloads\Video
Some files in TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\lasetta29\AppData\Local\Temp\dllnt_dump.dll
C:\Users\lasetta29\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-24 14:10
==================== End of FRST.txt ============================
Here's the FRST log
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-10-2015
Ran by lasetta29 (administrator) on MAX (29-10-2015 14:36:28)
Running from C:\Users\lasetta29\Downloads\Programs
Loaded Profiles: lasetta29 (Available Profiles: lasetta29)
Platform: Windows 8.1 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee Inc.) C:\Program Files\McAfee\Real Protect\RealProtect.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(Internet Download Manager, Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-08-24] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2565544 2012-10-31] ()
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2172816 2012-10-22] (SRS Labs, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-29] (Synaptics Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-18] (Intel Corporation)
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7152640 2012-12-05] (Pegatron Corporation)
HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-25] (AVAST Software)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKLM\...\RunOnce: [RealProtect] => C:\Program Files\McAfee\Real Protect\RealProtect.exe [1710448 2015-10-28] (McAfee Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Spotify Web Helper] => C:\Users\lasetta29\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-19] (Spotify Ltd)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3491264 2013-01-31] (Tonec Inc.)
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Run: [Spotify] => C:\Users\lasetta29\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-10-19] (Spotify Ltd)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\lasetta29\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-04-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-25] (AVAST Software)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2012-02-08] (Tonec Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{92113B8D-C02D-49CE-AF4C-11D1B529E8C2}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKU\S-1-5-21-3938888361-216902260-1540475144-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
BHO: No Name -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-02] (AVAST Software)
BHO-x32: No Name -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-02] (AVAST Software)
FireFox:
========
FF ProfilePath: C:\Users\lasetta29\AppData\Roaming\Mozilla\Firefox\Profiles\oszd3f03.default
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.youtube.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-08-13] ()
FF Extension: Adblock Plus - C:\Users\lasetta29\AppData\Roaming\Mozilla\Firefox\Profiles\oszd3f03.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-25] [not signed]
FF HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5 [2015-07-01] [not signed]
FF HKU\S-1-5-21-3938888361-216902260-1540475144-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\lasetta29\AppData\Roaming\IDM\idmmzcc5
Chrome:
=======
CHR StartupUrls: Default -> "hxxps://uk.yahoo.com/?fr=hp-avast&type=agc511",
"hxxps://www.google.com/?trackid=sp-006"
CHR Profile: C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-06]
CHR Extension: (Google Docs) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-06]
CHR Extension: (Google Drive) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-31]
CHR Extension: (YouTube) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-06]
CHR Extension: (Google Search) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-06]
CHR Extension: (Avast SafePrice) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-30]
CHR Extension: (Google Sheets) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-06]
CHR Extension: (Google Docs Offline) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-31]
CHR Extension: (Gmail) - C:\Users\lasetta29\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-06]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-18]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [821024 2015-08-05] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-25] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-09-25] (Avast Software)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-13] (WildTangent)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [File not signed]
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201872 2012-12-05] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-08-26] (IObit)
R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116240 2013-01-04] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 AVGIDSAgent; no ImagePath
S2 avgwd; no ImagePath
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-25] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-25] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-09-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-09-25] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-25] (AVAST Software)
S3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2015-04-18] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-25] (AVAST Software)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-03-19] (AVG Technologies CZ, s.r.o.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-22] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-06] (REALiX(tm))
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-10-11] (Intel Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-09-25] (AVAST Software)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-08-24] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3737304 2015-08-24] (Realtek Semiconductor Corporation )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-29] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [36712 2015-06-30] (Toshiba Corporation)
S3 Tosrfcom; no ImagePath
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-10-28] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-09-25] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S4 AVGIDSDriver; system32\DRIVERS\avgidsdrivera.sys [X]
S4 Avgrkx64; system32\DRIVERS\avgrkx64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-29 14:35 - 2015-10-29 14:36 - 00000000 ____D C:\FRST
2015-10-28 20:49 - 2015-10-28 20:49 - 01801288 _____ (Malwarebytes) C:\Users\lasetta29\Downloads\JRT.exe
2015-10-28 20:46 - 2015-10-29 14:26 - 00000154 _____ C:\WINDOWS\setupact.log
2015-10-28 20:46 - 2015-10-28 20:46 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-28 20:45 - 2015-10-28 20:45 - 00002038 _____ C:\WINDOWS\PFRO.log
2015-10-28 20:38 - 2015-10-28 20:38 - 01694208 _____ C:\Users\lasetta29\Downloads\adwcleaner_5.015.exe
2015-10-28 20:13 - 2015-10-28 20:37 - 00000000 ____D C:\ProgramData\RogueKiller
2015-10-28 20:13 - 2015-10-28 20:13 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-10-28 19:47 - 2015-10-28 19:47 - 00001141 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-28 19:47 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-10-28 19:47 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-10-28 19:47 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-10-28 19:43 - 2015-10-28 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Local\AvgSetupLog
2015-10-28 18:34 - 2015-10-28 18:35 - 00000000 ____D C:\Program Files\stinger
2015-10-28 18:34 - 2015-10-28 18:34 - 00000000 ____D C:\Program Files\McAfee
2015-10-28 18:34 - 2015-10-28 14:05 - 07805808 ____N (McAfee Inc) C:\Users\lasetta29\Desktop\stinger.exe
2015-10-28 18:19 - 2015-10-28 18:20 - 00000000 ____D C:\KVRT_Data
2015-10-28 16:59 - 2015-10-28 16:59 - 00002841 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\ProgramData\Sophos
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2015-10-28 16:59 - 2015-10-28 16:59 - 00000000 ____D C:\Program Files (x86)\Sophos
2015-10-28 16:44 - 2015-10-28 16:44 - 00003652 _____ C:\WINDOWS\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-10-28 16:44 - 2015-10-28 16:44 - 00002210 _____ C:\Users\lasetta29\Desktop\Tweaking.com - Windows Repair.lnk
2015-10-27 13:24 - 2015-10-27 13:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-10-27 13:23 - 2015-10-27 13:23 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-10-27 13:23 - 2015-10-27 13:23 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-10-27 13:23 - 2015-10-27 13:23 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-10-27 13:23 - 2015-10-27 13:23 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-10-27 13:23 - 2015-10-27 13:23 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-10-27 13:23 - 2015-10-27 13:23 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-10-20 15:00 - 2015-10-16 04:51 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-20 15:00 - 2015-10-16 04:51 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-16 10:33 - 2015-10-16 13:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 19:36 - 2015-09-19 03:18 - 00035384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-10-14 19:36 - 2015-09-18 13:42 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 01163776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00766464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-10-14 19:36 - 2015-09-18 13:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 06:39 - 2015-08-27 02:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-14 06:39 - 2015-08-27 02:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-14 06:38 - 2015-09-29 12:31 - 07457624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 06:38 - 2015-09-29 12:31 - 01658536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-14 06:38 - 2015-09-29 12:31 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-14 06:38 - 2015-09-29 12:31 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-14 06:38 - 2015-09-29 12:31 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-14 06:38 - 2015-09-24 16:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-10-14 06:38 - 2015-09-24 16:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-14 06:38 - 2015-09-10 18:02 - 25851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-14 06:38 - 2015-09-10 17:19 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-14 06:38 - 2015-09-10 17:18 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-14 06:38 - 2015-09-10 17:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-10-14 06:38 - 2015-09-10 17:14 - 05990400 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-14 06:38 - 2015-09-10 17:09 - 20358144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-14 06:38 - 2015-09-10 17:06 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-14 06:38 - 2015-09-10 17:04 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-14 06:38 - 2015-09-10 16:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-10-14 06:38 - 2015-09-10 16:39 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-14 06:38 - 2015-09-10 16:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-14 06:38 - 2015-09-10 16:37 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-10-14 06:38 - 2015-09-10 16:35 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-10-14 06:38 - 2015-09-10 16:33 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-14 06:38 - 2015-09-10 16:28 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-14 06:38 - 2015-09-10 16:28 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-10-14 06:38 - 2015-09-10 16:27 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-14 06:38 - 2015-09-10 16:24 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-14 06:38 - 2015-09-10 16:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-10-14 06:38 - 2015-09-10 16:19 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-10-14 06:38 - 2015-09-10 16:19 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-14 06:38 - 2015-09-10 16:19 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-14 06:38 - 2015-09-10 16:17 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-14 06:38 - 2015-09-10 16:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-10-14 06:38 - 2015-09-10 16:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-10-14 06:38 - 2015-09-10 16:05 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-10-14 06:38 - 2015-09-10 16:02 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-14 06:38 - 2015-09-10 16:01 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-10-14 06:38 - 2015-09-10 16:00 - 12853760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-14 06:38 - 2015-09-10 15:57 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-14 06:38 - 2015-09-10 15:57 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-10-14 06:38 - 2015-09-10 15:55 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-10-14 06:38 - 2015-09-10 15:55 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-10-14 06:38 - 2015-09-10 15:55 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-10-14 06:38 - 2015-09-10 15:45 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-14 06:38 - 2015-09-10 15:34 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-14 06:38 - 2015-09-10 15:31 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-14 06:38 - 2015-09-10 15:27 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-14 06:38 - 2015-09-10 15:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-10-13 19:23 - 2015-10-13 19:23 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\ProductData
2015-10-13 17:44 - 2015-10-13 17:44 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-MAX-Windows-8.1-(64-bit).dat
2015-10-13 17:44 - 2015-10-13 17:44 - 00000000 ____D C:\RegBackup
2015-10-13 17:17 - 2015-10-28 19:42 - 00000000 ____D C:\ProgramData\ProductData
2015-10-13 16:57 - 2015-10-13 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-10-13 16:56 - 2015-10-13 16:56 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-10-13 16:40 - 2015-10-13 16:40 - 00074703 _____ C:\WINDOWS\SysWOW64\mfc45.dat
2015-10-13 16:40 - 2015-10-13 16:40 - 00003534 _____ C:\WINDOWS\System32\Tasks\iolo System Checkup
2015-10-13 16:40 - 2015-10-13 16:40 - 00001212 _____ C:\Users\lasetta29\Desktop\System Checkup.lnk
2015-10-13 16:40 - 2015-10-13 16:40 - 00000000 ____D C:\ProgramData\iolo
2015-10-13 16:40 - 2015-10-13 16:40 - 00000000 ____D C:\Program Files (x86)\iolo
2015-10-13 16:26 - 2015-10-28 16:02 - 80076800 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 80076800 _____ C:\WINDOWS\system32\config\SOFTWARE.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.iodefrag
2015-10-13 16:26 - 2015-10-28 16:02 - 00024576 _____ C:\WINDOWS\system32\config\SAM.iodefrag.bak
2015-10-13 16:26 - 2015-10-28 16:02 - 00024576 _____ C:\WINDOWS\system32\config\SAM.iodefrag
2015-10-13 16:26 - 2015-10-13 16:26 - 06307840 _____ C:\WINDOWS\system32\config\DRIVERS.iodefrag.bak
2015-10-12 17:47 - 2015-10-12 17:47 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-12 17:47 - 2015-10-12 17:47 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-10-12 17:47 - 2015-10-12 17:47 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-10-12 17:47 - 2015-10-12 17:47 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-10-12 17:46 - 2014-10-16 09:27 - 00027424 _____ (IObit) C:\WINDOWS\system32\RegistryDefragBootTime.exe
2015-10-11 13:16 - 2015-10-11 13:16 - 00184608 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2015-10-04 17:41 - 2015-10-04 17:41 - 00885504 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2015-10-04 17:41 - 2015-10-04 17:41 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-29 14:37 - 2015-04-06 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\Spotify
2015-10-29 14:33 - 2015-07-01 17:25 - 00003922 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B7978072-FEE5-4B58-AAE5-531187501637}
2015-10-29 14:33 - 2015-04-10 15:12 - 01947318 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-29 14:32 - 2015-04-06 19:43 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Spotify
2015-10-29 14:27 - 2015-09-15 21:14 - 00000910 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-29 14:26 - 2013-08-22 14:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-28 22:32 - 2015-04-06 23:57 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\DMCache
2015-10-28 22:00 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-28 21:24 - 2015-04-06 20:09 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-10-28 21:19 - 2015-09-15 21:14 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-28 20:56 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\IDM
2015-10-28 20:53 - 2015-09-25 19:55 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-28 20:45 - 2015-09-16 15:27 - 00000000 ____D C:\Program Files (x86)\ESET
2015-10-28 20:40 - 2015-09-14 17:38 - 00000000 ____D C:\AdwCleaner
2015-10-28 20:40 - 2015-08-29 10:08 - 00000258 _____ C:\WINDOWS\Tasks\ASC8_SkipUac_lasetta29.job
2015-10-28 20:33 - 2015-04-06 19:48 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3938888361-216902260-1540475144-1001
2015-10-28 19:48 - 2015-09-14 17:55 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-10-28 19:47 - 2015-09-14 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-28 19:47 - 2015-09-14 17:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-28 19:43 - 2015-04-06 22:38 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Avg
2015-10-28 18:35 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\Downloads\Compressed
2015-10-28 16:03 - 2013-08-22 14:44 - 00337808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-27 23:19 - 2013-08-22 13:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-27 13:24 - 2015-08-29 10:08 - 00002220 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-10-27 13:24 - 2012-07-26 07:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-27 13:17 - 2014-11-22 01:01 - 00765714 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-25 14:23 - 2015-04-10 14:52 - 00000000 ____D C:\Users\lasetta29
2015-10-25 14:21 - 2015-04-06 19:53 - 00002214 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-23 11:54 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-17 11:57 - 2015-04-06 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-16 22:24 - 2015-04-06 20:09 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-10-15 13:43 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-14 21:36 - 2015-04-07 04:51 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-14 21:36 - 2014-11-22 05:25 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-10-14 21:36 - 2013-08-22 15:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-10-14 19:41 - 2015-04-06 20:08 - 00000000 ____D C:\Users\lasetta29\AppData\Local\Adobe
2015-10-14 06:47 - 2015-04-07 02:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 06:42 - 2015-04-07 02:34 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-13 18:04 - 2012-07-26 05:26 - 00000160 _____ C:\WINDOWS\win.ini
2015-10-13 17:12 - 2015-04-10 23:02 - 00000000 ____D C:\Users\ADMINI~1
2015-10-13 16:51 - 2015-04-06 20:53 - 00000000 ____D C:\ProgramData\IObit
2015-10-13 16:51 - 2015-04-06 20:51 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\IObit
2015-10-13 16:51 - 2015-04-06 20:51 - 00000000 ____D C:\Program Files (x86)\IObit
2015-10-12 22:44 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-10 00:14 - 2015-04-06 23:55 - 00000000 ____D C:\Users\lasetta29\AppData\Roaming\vlc
2015-10-06 13:49 - 2015-04-10 15:37 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-10-06 00:09 - 2015-04-10 15:37 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-10-02 20:53 - 2015-07-01 17:19 - 00000000 ____D C:\Users\lasetta29\Downloads\Video
Some files in TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\lasetta29\AppData\Local\Temp\dllnt_dump.dll
C:\Users\lasetta29\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-24 14:10
==================== End of FRST.txt ============================