|
|||||||
| Windows 10 Problem solving for the Windows 10 Operating System. |
 |
|
|
Topic Tools |
|
#1
June 16th, 2019, 12:27 AM
|
|||
|
|||
|
Windows Update / windows version 1903
This is the fourth time trying to update the version 1903 for windows 10 and it always fails . This time around it has been updating for 8 hours and is at 5% . I sure hope y'all can help with this one ! Thanks !
|
|
#3
June 17th, 2019, 12:23 AM
|
|||
|
|||
|
Thanks Jintan this morning before I knew you had posted I did run the trouble shooter and it said things were working properly so I did a search at Support and they said to do the Command Prompt and type DISM.exe / Online / Cleanup-image / Restore ....then it came back and said it did not recongnise Restore also had an error 87 . So ....it also said in instructions , if The Operation Completed Successfully .... type sfc /scannow ....so I did it anyway and it came back and said , Windows Resource Protection did not find any integrity violations . I did some reading in Support and saw that one place said on the first operation I did that instead of Restore ..only .... it said Restorehealth ....so I just gave up and did not try anything else . Now I did run the trouble shooter that you said to do and it stopped quickly and said to try as administrator and I did and it said could not identify the problem and I could do other research ! Thanks for getting back to me !
|
|
#4
June 17th, 2019, 04:58 PM
|
||||
|
||||
|
Darn, those Windows update repair tools are about the only Microsoft software that I have found useful. I assume that you tried Windows update is still has problems. Before we go any further, are there any other issues and problems on this computer, that I might think might be related?
|
|
#5
June 17th, 2019, 06:24 PM
|
|||
|
|||
|
Well for some time now I notice that the bar where the Start, Microsoft Edge, File Explorer and other icons are ....they flash a lot and sometimes flash off for a few seconds and back on ! That's why I use the user name " many problems " because I have always had many problems for many years . That is why I ask here that one time that I allowed a scammer in my PC and the person here told me how to go back and change the setting back to never allow anyone in my PC ...but I ask him if that change will stop the scammer and get him out of my PC and I was told it would but ..... I do not know if this gives you any insight in this new problem and .....Yes I did use the regular Update Troubleshooter as I explained earlier and then I also used the one you said to click " here " as in my earlier explanation . The scammer that was / is in my PC had access for many months . Because when y'all told me what to do .... I was surprised that I never thought of that immediately after he scammed me ! Thank you very much for your help . Terry W. Hurley
|
|
#6
June 18th, 2019, 12:32 PM
|
||||
|
||||
|
Lost my Internet yesterday.
Since I am one of the malware removal folks here, I admit I feel blind unless I can see a scan log of the situation there, so I would like you to post a log. If I do see malware however I will be moving this thread to the Malware Removal forum. For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to the desktop. For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to the desktop. Please run it and click Scan, post back with the 2 logfiles. Use extra posts here as needed.
|
|
#7
June 18th, 2019, 01:48 PM
|
|||
|
|||
|
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-06-2019
Ran by TERRY WAYNE HURLEY (administrator) on TERRYWAYNEHURLE (Dell Inc. Inspiron 660s) (18-06-2019 08:13:57) Running from C:\Users\TERRY WAYNE HURLEY\Downloads Loaded Profiles: TERRY WAYNE HURLEY (Available Profiles: TERRY WAYNE HURLEY & DefaultAppPool) Platform: Windows 10 Home Version 1809 17763.557 (X64) Language: English (United States) Default browser: Edge Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x6 4__kzf8qxf38zg5c\SkypeBackgroundHost.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19052.657. 0_x64__8wekyb3d8bbwe\YourPhone.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Andrea Electronics -> Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe (Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe (Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe (Dell Inc -> Dell Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe (Dell Inc. -> ) C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_ 3.2.5.0_x64__htrsf667h5kn2\win32\SupportAssistAppW ire.exe (Dell Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAge nt.exe (Dell Inc. -> Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe (Lexmark International, Inc. -> ) C:\Windows\System32\lxedcoms.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\Pres entationFontCache.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SM SvcHost.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SM SvcHost.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wek yb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x6 4__kzf8qxf38zg5c\SkypeApp.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\snmp.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe (PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6 .0.7033.2285\DSAPI.exe (PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6 .0.7033.2285\pcdrwi.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Rivet Networks LLC -> CloudBees, Inc.) C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe (Rivet Networks LLC -> DELL) C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe (Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RNDBWM.exe (Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPC P.exe (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8497368 2015-07-07] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [lxedmon.exe] => C:\Program Files (x86)\Lexmark S600 Series\lxedmon.exe [772712 2013-01-23] (Lexmark International, Inc. -> ) HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark S600 Series\ezprint.exe [150264 2013-01-23] (Lexmark International, Inc. -> ) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2011-12-16] (Intel Corporation -> Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation -> Intel Corporation) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [653352 2017-03-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [862248 2017-03-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMBE. EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22691064 2019-06-04] (Piriform Software Ltd -> Piriform Software Ltd) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\Inst aller\chrmstp.exe [2019-05-22] (Google LLC -> Google Inc.) HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {03371B8D-1631-4792-9C93-ABF2D73AF48F} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe Task: {04ACFFB6-810F-4359-91F8-DEDB34F7EF1E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {0DB4886B-AF1E-4B04-ACEA-DCD7DFF75E22} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {25D9C75E-5407-41D1-AB0D-E77CF131168B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {26A5E551-6E87-415B-A5BB-8C5FA11BCA4D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {27053591-E89B-4DD3-8FF9-AB89D832D13C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {28A5D283-7C4E-4CF6-8942-B654C8859600} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistIns taller.exe [1512920 2019-05-24] (Dell Inc. -> Dell Inc.) Task: {2C020096-AAC9-47D1-9CE9-4FB224400F9D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe [335416 2019-06-11] (Adobe Inc. -> Adobe) Task: {2F0D33BE-F4D5-4A9B-A806-C2A5A6883CA9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {30AEFC67-F451-41D0-9107-9E3C062295CE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {351C2B39-D346-45F2-9B25-72E896A349A1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {356128F0-4131-4430-B334-78437FCCAFA6} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [32448 2018-12-04] (Rivet Networks LLC -> DELL) Task: {375DB7CB-0CB4-4C0E-9B88-D5E20B47E31B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {3940D888-2BBF-421B-892E-D9A0CB3776A7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandco ntent -> No File <==== ATTENTION Task: {3B4BAD13-B55F-455C-B9B7-63C675019A6D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {3D1B8B0E-6642-4134-B72D-F76D88BE4544} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {467A8184-2C42-4A01-97B4-838C3310DA08} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION Task: {46DE6BAF-6A87-4A66-92AE-C81FCD309D47} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {473A627B-3B9A-4AEB-9F29-8F1D1FE542F2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxcon fig-B -> No File <==== ATTENTION Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsPare ntalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB} Task: {4CE4033A-BEB9-45F8-9ACE-085A50C2E917} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4F66A357-5D38-4F20-B5E4-F57C2D1B2CA4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {58F9D863-A854-41B6-AA88-0369C8C4F4ED} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgra deTime -> No File <==== ATTENTION Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsPare ntalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A} Task: {5B6621C4-0623-44A7-B11C-5C066DF1A4CF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {61F655F8-95BD-4DB3-8ED4-1E46AFDA3A7B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {62CD5F12-2156-440D-BE8B-E128153E58A2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {647AF3A7-FD4A-4899-8FC5-458E74C2371E} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {65899461-1FC6-40B3-AFA4-F2A43923DCB6} - System32\Tasks\Microsoft\Windows\SideShow\GadgetMa nager => {FF87090D-4A9A-4F47-879B-29A80C355D61} Task: {679158D9-7666-45CD-8D2E-B9FB2543A2CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-08] (Google Inc -> Google Inc.) Task: {777E1701-75C6-4F62-8F92-F876D658BA63} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {7A14CA65-B2A2-4788-B4F3-D25BEFE56933} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {89534E8B-0C0E-4515-8C09-5F39D456CD4D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_ 0_0_207_pepper.exe [1452600 2019-06-11] (Adobe Inc. -> Adobe) Task: {89C17ECA-1457-42F8-AA59-98D704CD0397} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {8B3454B0-E5CB-4BEA-9D5F-DC36E6E6A619} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {8CC764A0-B47D-4174-9FED-261CA4736C55} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {8EEE53AA-6353-4A53-85A4-3D89EA7FC672} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {94CCB070-7E51-4368-A06D-D359BD5446B3} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION Task: {9D65A817-7772-43A6-9AA0-EFFE675B1821} - System32\Tasks\Microsoft\Office\OfficeTelemetryAge ntFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {A125A484-387B-4DD3-8EE1-E3FD8865DEFB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAge ntLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {A1D46B91-3052-4983-A3C7-EE1CEAA661F8} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgra deReminderTime -> No File <==== ATTENTION Task: {A45031B4-CE64-45E6-A290-E46EE19ED9FE} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\Backgro undConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {B2DBA6E0-8CB4-4FCC-A949-47176C650EE5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {B80B82BB-EF32-41FC-82B7-78EA124485F8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {B8541BDC-C229-498C-9F4F-02E7897007D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B9F4CBFA-6AC9-45D0-87BD-8C82AE9F399D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16664352 2019-06-04] (Piriform Software Ltd -> Piriform Software Ltd) Task: {BAEE117B-20B4-49EA-94A2-D757CE74E18B} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {BBD99D54-D4CF-47E7-82EE-74E7FA9BA4BB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {BFA47043-60AA-4FA3-9FCA-5FD9A75E19E7} - System32\Tasks\Microsoft\Windows\SideShow\SessionA gent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1} Task: {C4A98B8C-4E17-4EB3-97B0-6D808B8A83C8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {CA209243-FFD3-4C33-8101-CF53D720C344} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CA59CB91-6A95-42AF-84A0-107AB2814569} - System32\Tasks\EPSON WF-2650 Series Update {A36B6B2C-B5B8-4DBC-AF05-C9AC432B1D10} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) Task: {CDAE82C1-A307-4E2A-9F18-FD91909E8222} - System32\Tasks\{6AF3063D-8A44-4EDF-A9D2-77518C3F238E} => C:\Program Files (x86)\PCPitstop\PC Matic\PCMatic.exe Task: {D33852CA-C423-4FD3-AC01-697759769829} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D429CE55-323E-4D46-BA7B-FE717A6BB53E} - System32\Tasks\EPSON WF-2650 Series Update {8295068A-6DED-4F71-BD80-FECAF2458A83} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) Task: {E159655E-8751-4152-9347-6B8274B6CC6D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-08] (Google Inc -> Google Inc.) Task: {E57E8024-690B-43B2-8B7A-D3DC51CF5251} - System32\Tasks\{CD70DCFB-1B56-4BFB-91A8-FE65EB18825B} => C:\Program Files (x86)\PCPitstop\PC Matic\PCMatic.exe Task: {E7CE2F71-A981-4344-A9D2-3CF6FE79E734} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {EB83D832-396B-443C-8865-738855D83E41} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION Task: {ECB6050B-1EED-402B-8686-244B9ACDCB1D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {EF62269D-A795-4E81-B886-6C8C9588251C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F143F4B4-9B08-46ED-8C8B-A2843B7C2714} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {F27710C1-6D11-4D29-94FE-F87AD1CF1D59} - System32\Tasks\EPSON WF-2650 Series Update {EB83DCDB-9F97-4D75-BB0C-574D76E28A0F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) Task: {F29147B7-A909-4993-A988-209B54944DCF} - System32\Tasks\Microsoft\Windows\SideShow\SystemDa taProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {F365DE6C-571F-4B97-B178-88BE6EF6442A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {F4AD797C-CDD3-4186-A16A-661BEF97FC25} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-06-04] (Piriform Software Ltd -> Piriform Software Ltd) Task: {F9608979-743F-4487-9C15-A6F7676BD678} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E} Task: {FBEBDFEF-A32E-4A1F-BDF8-06F4117F0E0C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\EPSON WF-2650 Series Update {8295068A-6DED-4F71-BD80-FECAF2458A83}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE:/EXE:{8295068A-6DED-4F71-BD80-FECAF2458A83} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\EPSON WF-2650 Series Update {A36B6B2C-B5B8-4DBC-AF05-C9AC432B1D10}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE:/EXE:{A36B6B2C-B5B8-4DBC-AF05-C9AC432B1D10} /F:UpdateWORKGROUP\TERRYWAYNEHURLE$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\EPSON WF-2650 Series Update {EB83DCDB-9F97-4D75-BB0C-574D76E28A0F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMBE.E XE:/EXE:{EB83DCDB-9F97-4D75-BB0C-574D76E28A0F} /F:UpdateWORKGROUP\TERRYWAYNEHURLE$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.2.65 Tcpip\..\Interfaces\{07db8fad-b88a-49ba-a553-a99dc9d097f3}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{d8569de9-1419-48b9-9ace-074e9bda2370}: [DhcpNameServer] 192.168.0.1 205.171.2.65 Internet Explorer: ================== HKU\S-1-5-21-16782871-739715336-2386910222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-16782871-739715336-2386910222-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKU\S-1-5-21-16782871-739715336-2386910222-1000 -> DefaultScope {9489BC01-1BC4-47FE-8BEF-7DE0B9D54A59} URL = SearchScopes: HKU\S-1-5-21-16782871-739715336-2386910222-1000 -> {9489BC01-1BC4-47FE-8BEF-7DE0B9D54A59} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2019-05-25] (Microsoft Corporation -> Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-03-13] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation) DPF: HKLM-x32 {0E5F0222-96B9-11D3-8997-00104BD12D94} hxxp://files.pcpitstop.com/cab/pcmatic.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File FireFox: ======== FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us CHR NewTab: Default -> Not-active:"chrome-extension://iaeekpabpcikcefenchcpjolkefpcdgn/first.html" CHR Profile: C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default [2019-06-18] CHR Extension: (Docs) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfi lokake [2017-10-12] CHR Extension: (Google Drive) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigk jlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldk acnbeo [2015-09-24] CHR Extension: (Google Search) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljnie djpjpf [2015-10-26] CHR Extension: (Google Docs Offline) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdl olhkhi [2018-08-19] CHR Extension: (WebLinks Direct Tab) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaeekpabpcikcefenchcpjolke fpcdgn [2017-04-24] CHR Extension: (Chrome Web Store Payments) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda [2018-04-03] CHR Extension: (Gmail) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoe jaedia [2019-04-05] CHR Extension: (Chrome Media Router) - C:\Users\TERRY WAYNE HURLEY\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcj beemfm [2019-05-22] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [okmhneofinpilciglijihehjpaegledb] - <no Path/update_url> ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2768472 2015-08-11] (Microsoft Corporation -> Microsoft Corporation) R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [209392 2019-02-28] (Dell Inc -> Dell Inc.) R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3363824 2019-02-28] (Dell Inc -> Dell Inc.) R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [218096 2019-02-28] (Dell Inc -> Dell Inc.) R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6 .0.7033.2285\DSAPI.exe [1050952 2019-05-28] (PC-Doctor, Inc. -> PC-Doctor, Inc.) R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [35976 2018-11-12] (Dell Inc -> ) R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPC P.exe [681400 2018-12-01] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation) R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel(R) pGFX -> Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-25] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S3 lxedCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxedserv. exe [45736 2010-04-14] (Lexmark International, Inc. -> Lexmark International, Inc.) R2 lxed_device; C:\Windows\system32\lxedcoms.exe [1052328 2010-04-14] (Lexmark International, Inc. -> ) R2 lxed_device; C:\Windows\SysWOW64\lxedcoms.exe [598696 2010-04-14] (Lexmark International, Inc. -> ) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64184 2018-12-04] (Rivet Networks LLC -> CloudBees, Inc.) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-05-22] (Realtek Semiconductor Corp -> Realtek Semiconductor) S3 SftService; C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE [1695040 2012-02-16] (Dell Inc -> SoftThinks SAS) R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2114248 2018-12-04] (Rivet Networks LLC -> Rivet Networks) R2 SNMP; C:\WINDOWS\System32\snmp.exe [53248 2018-12-13] (Microsoft Windows -> Microsoft Corporation) R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAge nt.exe [39896 2019-05-24] (Dell Inc. -> Dell Inc.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-03] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\WINDOWS\System32\drivers\athw8x.sys [4233728 2018-09-15] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.) R4 DBUtil_2_3; C:\WINDOWS\TEMP\DBUtil_2_3.Sys [14840 2019-06-17] (Dell Inc. -> ) R3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [40824 2019-02-27] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.) S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation) S3 gfiark; C:\WINDOWS\System32\drivers\gfiark.sys [40584 2015-08-27] (Threattrack Security, Inc. -> ThreatTrack Security) S3 gfiutil; C:\WINDOWS\System32\drivers\gfiutil.sys [31264 2013-09-04] (GFI Software (Florida) Inc. -> ThreatTrack Security) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-06-15] (Malwarebytes Corporation -> Malwarebytes) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [410848 2015-08-13] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation) R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [120008 2018-12-04] (Rivet Networks LLC -> Rivet Networks, LLC.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [47496 2019-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [337632 2019-06-03] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-03] (Microsoft Windows -> Microsoft Corporation) U3 idsvc; no ImagePath
|
|
#8
June 18th, 2019, 01:51 PM
|
|||
|
|||
|
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-06-18 08:13 - 2019-06-18 08:15 - 000036887 _____ C:\Users\TERRY WAYNE HURLEY\Downloads\FRST.txt 2019-06-18 08:13 - 2019-06-18 08:13 - 000000000 ____D C:\FRST 2019-06-18 08:09 - 2019-06-18 08:11 - 002418688 _____ (Farbar) C:\Users\TERRY WAYNE HURLEY\Downloads\FRST64.exe 2019-06-18 00:38 - 2019-06-18 00:38 - 000003400 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-16782871-739715336-2386910222-1000 2019-06-18 00:38 - 2019-06-18 00:38 - 000002447 _____ C:\Users\TERRY WAYNE HURLEY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-06-17 00:00 - 2019-06-17 00:00 - 000000000 _____ C:\WINDOWS\invcol.tmp 2019-06-16 19:20 - 2019-06-16 19:20 - 000000656 _____ C:\Users\TERRY WAYNE HURLEY\Downloads\wu10 (1).diagcab 2019-06-16 19:03 - 2019-06-16 19:03 - 000000656 _____ C:\Users\TERRY WAYNE HURLEY\Downloads\wu10.diagcab 2019-06-15 18:47 - 2019-06-15 18:47 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-06-15 14:57 - 2019-06-15 14:57 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-06-15 09:27 - 2019-06-15 09:27 - 001993528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 026808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 023438336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 020816384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 018999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 012869120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 012162048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 007875072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayR eady.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 006547144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayR eady.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 006309256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 006068224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 005210904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 004997096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 004661760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 004588544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 003906560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 003743744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 003637248 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 003385344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 003363640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 003091968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 002926096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 002707968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 002653696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 002422272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 002323696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.oneco re.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 002085168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001929216 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001670840 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.deskt op.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001466496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 001229824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 001223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001219424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001098136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 001054712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 001048592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000863544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000773632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000752144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000730592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000676048 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 000604344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-06-12 11:54 - 2019-06-12 11:54 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000553664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000540720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000513904 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000506192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2019-06-12 11:54 - 2019-06-12 11:54 - 000462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000419368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000398208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000386576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade .dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade .dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient. dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000152896 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000137056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000122680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient. dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000101176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker. dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingFilterDS.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000087864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker. dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2019-06-12 11:54 - 2019-06-12 11:54 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dl l 2019-06-12 11:54 - 2019-06-12 11:54 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dl l 2019-06-12 11:54 - 2019-06-12 11:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-06-12 11:54 - 2019-06-12 11:54 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-06-12 11:42 - 2019-05-31 14:03 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-06-12 11:42 - 2019-05-31 14:03 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-06-06 11:42 - 2019-06-06 11:42 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2019-06-06 11:35 - 2019-06-06 11:41 - 020638704 _____ (Piriform Software Ltd) C:\Users\TERRY WAYNE HURLEY\Downloads\ccsetup558.exe 2019-06-03 19:34 - 2019-06-12 12:04 - 000447464 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-05-30 02:07 - 2019-05-30 02:08 - 000000000 ___HD C:\$WINDOWS.~BT 2019-05-25 11:16 - 2019-05-25 11:16 - 015221248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 006926336 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 006441472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 003983872 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 003426816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 003344896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 002777736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 002690048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 002627600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-05-25 11:16 - 2019-05-25 11:16 - 002276192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 002096128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-05-25 11:16 - 2019-05-25 11:16 - 002017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-05-25 11:16 - 2019-05-25 11:16 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001761280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001750016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001700312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-05-25 11:16 - 2019-05-25 11:16 - 001644544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001618944 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001483872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 001342904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-05-25 11:16 - 2019-05-25 11:16 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001260048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-05-25 11:16 - 2019-05-25 11:16 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001180184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authenticatio n.Web.Core.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-05-25 11:16 - 2019-05-25 11:16 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000586040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000555232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000515152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000451104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2019-05-25 11:16 - 2019-05-25 11:16 - 000427688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 000351744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000287912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000262160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2019-05-25 11:16 - 2019-05-25 11:16 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2019-05-25 11:16 - 2019-05-25 11:16 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dl l 2019-05-25 11:16 - 2019-05-25 11:16 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll 2019-05-25 11:16 - 2019-05-25 11:16 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll 2019-05-25 11:15 - 2019-05-25 11:16 - 005297152 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 017484800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 007884288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 002999808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 002928640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 002638336 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 001860096 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 001298952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authenticatio n.Web.Core.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000887808 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000758688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000615440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000282424 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000247608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000196920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 000152400 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000125528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000114648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Microsoft.Bluetooth.Le gacy.LEEnumerator.sys 2019-05-25 11:15 - 2019-05-25 11:15 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2019-05-25 11:15 - 2019-05-25 11:15 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2019-05-25 11:15 - 2019-05-25 11:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-06-18 08:11 - 2018-09-15 03:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-06-18 08:10 - 2018-09-15 03:31 - 000000000 ____D C:\WINDOWS\INF 2019-06-18 08:03 - 2017-07-07 17:45 - 000000000 ____D C:\Program Files\UNP 2019-06-18 07:59 - 2016-04-27 19:53 - 000000000 __SHD C:\Users\TERRY WAYNE HURLEY\IntelGraphicsProfiles 2019-06-18 00:38 - 2016-04-27 19:57 - 000000000 ___RD C:\Users\TERRY WAYNE HURLEY\OneDrive 2019-06-16 08:19 - 2018-12-13 10:40 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-06-15 20:59 - 2018-12-13 10:47 - 000000000 ____D C:\Users\TERRY WAYNE HURLEY 2019-06-15 19:02 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-06-15 18:49 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\Registration 2019-06-15 18:46 - 2018-12-13 11:06 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-06-15 11:08 - 2018-12-13 07:55 - 000000000 ___DC C:\WINDOWS\Panther 2019-06-15 10:38 - 2018-09-15 02:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2019-06-15 09:27 - 2018-09-15 03:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-06-15 00:33 - 2018-09-15 03:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-06-12 14:13 - 2018-12-13 10:57 - 000974076 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-06-12 12:05 - 2017-11-19 14:00 - 000000000 ___RD C:\Users\TERRY WAYNE HURLEY\3D Objects 2019-06-12 12:05 - 2016-02-13 09:20 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-06-12 12:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2019-06-12 12:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\migwiz 2019-06-12 12:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\inetsrv 2019-06-12 12:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-06-12 11:42 - 2013-10-02 00:36 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-06-12 11:39 - 2013-10-02 00:36 - 135349160 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-06-12 11:38 - 2017-08-29 03:24 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2019-06-11 19:02 - 2018-12-13 11:06 - 000004626 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2019-06-11 19:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2019-06-11 19:01 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\Macromed 2019-06-06 11:42 - 2018-05-22 19:52 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-06-03 22:43 - 2018-02-22 14:15 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-05-31 12:33 - 2013-12-18 18:20 - 000000000 ____D C:\Users\TERRY WAYNE HURLEY\AppData\Local\ElevatedDiagnostics 2019-05-28 12:17 - 2013-09-28 02:55 - 000000000 ____D C:\ProgramData\PCDr 2019-05-28 12:15 - 2013-09-28 02:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell 2019-05-28 11:12 - 2017-07-11 16:18 - 000000000 ____D C:\ProgramData\SupportAssist 2019-05-25 15:55 - 2018-09-15 03:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-05-22 19:36 - 2017-03-08 10:46 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-05-22 19:36 - 2017-03-08 10:46 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk ==================== Files in the root of some directories ================ 2014-02-02 17:40 - 2013-01-14 12:34 - 000007680 _____ () C:\Users\TERRY WAYNE HURLEY\AppData\Local\Z@!-cf3f7152-7bdb-4be6-a2be-d5048210850e.tmp 2014-02-02 17:40 - 2013-01-14 12:34 - 000007680 _____ () C:\Users\TERRY WAYNE HURLEY\AppData\Local\Z@!-e36a40f1-5ad1-4990-af82-85997312b512.tmp 2014-02-02 17:40 - 2013-01-14 12:34 - 000007168 _____ () C:\Users\TERRY WAYNE HURLEY\AppData\Local\Z@S!-85ed5541-ffde-412a-92e1-db4ea30d5743.tmp ==================== FLock ================ 2013-09-28 06:22 C:\System Recovery ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================
|
|
#9
June 18th, 2019, 01:55 PM
|
|||
|
|||
|
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-06-2019
Ran by TERRY WAYNE HURLEY (18-06-2019 08:17:36) Running from C:\Users\TERRY WAYNE HURLEY\Downloads Windows 10 Home Version 1809 17763.557 (X64) (2018-12-13 15:08:07) Boot Mode: Normal ================================================== ======== ==================== Accounts: ============================= Administrator (S-1-5-21-16782871-739715336-2386910222-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-16782871-739715336-2386910222-503 - Limited - Disabled) Guest (S-1-5-21-16782871-739715336-2386910222-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-16782871-739715336-2386910222-1002 - Limited - Enabled) TERRY WAYNE HURLEY (S-1-5-21-16782871-739715336-2386910222-1000 - Administrator - Enabled) => C:\Users\TERRY WAYNE HURLEY WDAGUtilityAccount (S-1-5-21-16782871-739715336-2386910222-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20035 - Adobe Systems Incorporated) Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.207 - Adobe) CCleaner (HKLM\...\CCleaner) (Version: 5.58 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.) Dell Digital Delivery (HKLM-x32\...\{693A23FB-F28B-4F7A-A720-4C1263F97F43}) (Version: 3.1.1002.0 - Dell Products, LP) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell SupportAssist (HKLM\...\{806422F1-FC4E-4D7C-8855-05748AEFC031}) (Version: 3.2.2.119 - Dell Inc.) Dell Update - SupportAssist Update Plugin (HKLM\...\{6DE68941-66DE-48DE-9C80-FE60C9DE0AD4}) (Version: 4.0.1.5857 - Dell Inc.) Hidden Dell Update - SupportAssist Update Plugin (HKLM-x32\...\{1dbe752f-b00e-4567-9276-141812b20d28}) (Version: 4.0.1.5857 - Dell Inc.) Dell Update (HKLM-x32\...\{5EBBC1DA-975F-44A0-B438-F325BCD45577}) (Version: 3.0.1 - Dell Inc.) Dell Wireless Driver Installation (HKLM-x32\...\{451517F1-7E41-400B-AA36-FB7E2563526D}) (Version: 10.0 - Dell) Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.80.0000 - Seiko Epson Corporation) Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation) Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 2.04.00 - Seiko Epson Corporation) Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - Seiko Epson Corporation) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{B55DB65D-EF6E-4E04-89D5-B03603BF681B}) (Version: 4.4.5 - SEIKO EPSON CORPORATION) EPSON WF-2650 Series Printer Uninstall (HKLM\...\EPSON WF-2650 Series) (Version: - SEIKO EPSON Corporation) Epson WF-2650 User’s Guide version 1.0 (HKLM-x32\...\UsersGuideEpson WF-2650 User’s Guide_is1) (Version: 1.0 - ) EpsonNet Print (HKLM\...\{F983229B-587E-4322-BCB9-D7A49734E5CD}) (Version: 3.0.0.0 - SEIKO EPSON CORPORATION) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.169 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation) Junk Mail filter update (HKLM-x32\...\{400C31E4-796F-4E86-8FDC-C3C4FACC6847}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\OneDriveSetup.exe) (Version: 19.086.0502.0006 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{5BABDA39-61CF-41EE-992D-4054B6649A9B}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SmartByte Drivers and Services (HKLM\...\{01F01829-4C5A-41B0-8198-0BDD02B34C47}) (Version: 2.0.643 - Rivet Networks) Update for Skype for Business 2015 (KB4464593) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{5BDCA2BB-3BAD-4461-A3A7-35B526AC2039}) (Version: - Microsoft) Update for Skype for Business 2015 (KB4464593) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{5BDCA2BB-3BAD-4461-A3A7-35B526AC2039}) (Version: - Microsoft) Update for Skype for Business 2015 (KB4464593) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{5BDCA2BB-3BAD-4461-A3A7-35B526AC2039}) (Version: - Microsoft) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation) Windows Driver Package - Intel Corporation (igfx) Display (05/26/2015 9.17.10.4229) (HKLM\...\B3A6B01BC6D642E96F648C5F44C2BD5AA6633CF2 ) (Version: 05/26/2015 9.17.10.4229 - Intel Corporation) Windows Driver Package - Intel(R) Corporation (IntcDAud) MEDIA (09/09/2014 6.16.00.3154) (HKLM\...\D5F57E44ED87C8806CD52B84559BF473A9C7BB9F ) (Version: 09/09/2014 6.16.00.3154 - Intel(R) Corporation) Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (07/07/2015 6.0.1.7553) (HKLM\...\B39A18EFB184019B68FF1882D59EB2232F3F5FC7 ) (Version: 07/07/2015 6.0.1.7553 - Realtek Semiconductor Corp.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Packages: ========= Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.14 0.300.0_x86__kgqvnymyfvs32 [2019-05-28] (king.com) Dell SupportAssist for PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_ 3.2.5.0_x64__htrsf667h5kn2 [2019-05-28] (Dell Inc) Facebook -> C:\Program Files\WindowsApps\Facebook.Facebook_186.2191.46880 .0_x86__8xx8rvfyw5nnt [2019-03-30] (Facebook Inc) Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsa pps_16005.11629.20174.0_x64__8wekyb3d8bbwe [2019-05-31] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x86__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad] Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.30.10924.0_ x64__8wekyb3d8bbwe [2019-04-04] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireColl ection_4.4.6132.0_x64__8wekyb3d8bbwe [2019-06-14] (Microsoft Studios) [MS Ad] MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.29.10701 .0_x64__8wekyb3d8bbwe [2019-03-22] (Microsoft Corporation) [MS Ad] MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.28.3242.0 _x64__8wekyb3d8bbwe [2018-12-14] (Microsoft Corporation) [MS Ad] MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351 .0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad] Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neut ral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.) WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.1 3291.0_x64__8wekyb3d8bbwe [2016-05-08] (Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2019-05-28 12:16 - 2019-05-28 12:16 - 017180160 _____ () [File not signed] C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_ 3.2.5.0_x64__htrsf667h5kn2\SupportAssistClientUI.d ll 2013-09-28 02:46 - 2012-02-27 04:59 - 000073728 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.dll 2013-08-07 15:24 - 2013-08-07 15:24 - 000514048 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll 2013-08-07 15:24 - 2013-08-07 15:24 - 000286720 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll 2013-05-11 18:45 - 2013-05-11 18:45 - 000733696 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\iCLS Client\HeciServer.exe 2018-12-04 13:10 - 2018-12-04 13:10 - 000100864 _____ (Rivet Networks) [File not signed] C:\Program Files\Rivet Networks\SmartByte\KillerNetworkServicePS.dll 2015-12-17 11:11 - 2015-12-17 11:11 - 000132096 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll 2009-10-21 17:39 - 2009-10-21 17:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll 2014-03-18 03:00 - 2014-03-18 03:00 - 000493568 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-16782871-739715336-2386910222-1000\Software\Microsoft\Windows\CurrentVersion\Exp lorer\FileExts\.reg\UserChoice => regfile ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 22:34 - 2017-06-21 21:44 - 000000836 _____ C:\WINDOWS\system32\drivers\etc\hosts 2013-12-30 12:58 - 2016-12-17 10:54 - 000000519 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics 192.168.0.100 TERRYWAYNEHURLE.mshome.net # 2021 12 4 16 14 54 18 529 745 192.168.137.1 TERRYWAYNEHURLE.mshome.net # 2021 5 4 6 4 36 52 35 ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%System Root%\System32\Wbem;%SYSTEMROOT%\System32\WindowsP owerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-16782871-739715336-2386910222-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\theme1\img1.jpg DNS Servers: 192.168.0.1 - 205.171.2.65 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol icies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer => (SmartScreenEnabled: RequireAdmin) HKLM\software\microsoft\Windows\CurrentVersion\Tel ephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == If an entry is included in the fixlist, it will be removed. HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk" HKLM\...\StartupApproved\Run: => "EzPrint" HKLM\...\StartupApproved\Run: => "lxedmon.exe" HKLM\...\StartupApproved\Run32: => "FUFAXRCV" HKLM\...\StartupApproved\Run32: => "FUFAXSTM" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\StartupApproved\Run: => "EPLTarget\P0000000000000000" HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-16782871-739715336-2386910222-1000\...\StartupApproved\Run: => "AudialsNotifier" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{AF6D7FF5-758A-4C31-A6F0-22C5541A1B95}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E33E1F16-E67A-473D-9C64-1A6AA38AFF5E}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{31CB7C62-1118-4390-9FF2-4316A53846EB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{ED4E2462-795C-42FA-9BE8-2EE7242CFE9A}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{F898E147-E8AB-4EA1-A46A-B4549ED752E7}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [TCP Query User{E55F10F8-76B3-4F3F-BD48-7230868E6386}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{25704CEB-3AB3-4263-8BD1-3C1641AF50F5}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2115DD5B-AC66-490A-B625-0BAE1E71D33F}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{7D276847-9E62-48C9-8749-A6A6FE71EDFD}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0F48E62F-E782-4F14-ABFD-7AF686D90F13}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{94752878-FF18-45B2-A491-5101DFCC8768}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4DFC64A8-D562-4807-B45C-F317596FFD77}] => (Allow) LPort=2869 FirewallRules: [{CEE0F0C3-BC1D-4960-BA8B-D883CE14C433}] => (Allow) LPort=1900 FirewallRules: [{AC484841-1181-4A11-BD75-BF2BA9189CC5}] => (Allow) C:\Windows\system32\lxedcoms.exe (Lexmark International, Inc. -> ) FirewallRules: [{CC0E77A8-074C-4FB1-AA0D-6B3445FC83BC}] => (Allow) C:\Windows\system32\LXEDcoms.exe (Lexmark International, Inc. -> ) FirewallRules: [{328EDF2C-11AC-4F59-90A1-A58749C40F86}] => (Allow) C:\Windows\system32\LXEDcoms.exe (Lexmark International, Inc. -> ) FirewallRules: [{E61DC544-3574-4B62-AD12-90E759D85D55}] => (Allow) C:\Windows\system32\LXEDcoms.exe (Lexmark International, Inc. -> ) FirewallRules: [{3388FA22-120A-413D-8257-904323D63CBB}] => (Allow) C:\Windows\system32\LXEDcoms.exe (Lexmark International, Inc. -> ) FirewallRules: [{547E4500-EA1F-4FAD-ABD8-711BE2E535D7}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{05A29768-786B-40D3-B052-D2C586A2746F}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{4B62D636-25FC-4176-80B9-EEA694DE0A1F}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{76DC7429-237E-42A3-A10E-151EC287B71F}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{6D1CF74F-CE11-4827-AC61-F9C779015162}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{F9A4BA14-65F9-45D2-A9C9-798AF4382325}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{9AA312F5-31E5-4F41-A74A-F1F0512D2AA4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) ==================== Restore Points ========================= 25-05-2019 11:05:41 Windows Update 03-06-2019 19:19:20 SupportAssist_c0cf7182-a8f9-43a5-82d6-2c7139bd002e 09-06-2019 18:06:56 Windows Update 15-06-2019 09:26:32 Windows Update ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (06/18/2019 08:02:03 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (06/17/2019 07:34:23 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (06/16/2019 07:23:46 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (06/15/2019 06:46:40 PM) (Source: W3SVC-WP) (EventID: 2307) (User: ) Description: The worker process for application pool 'DefaultAppPool' encountered an error 'Cannot read configuration file ' trying to read configuration data from file '\\?\<EMPTY>', line number '0'. The data field contains the error code. Error: (06/15/2019 06:46:39 PM) (Source: W3SVC-WP) (EventID: 2307) (User: ) Description: The worker process for application pool 'DefaultAppPool' encountered an error 'Cannot read configuration file ' trying to read configuration data from file '\\?\<EMPTY>', line number '0'. The data field contains the error code. Error: (06/15/2019 06:46:38 PM) (Source: W3SVC-WP) (EventID: 2307) (User: ) Description: The worker process for application pool 'DefaultAppPool' encountered an error 'Cannot read configuration file ' trying to read configuration data from file '\\?\<EMPTY>', line number '0'. The data field contains the error code. Error: (06/15/2019 06:46:37 PM) (Source: W3SVC-WP) (EventID: 2307) (User: ) Description: The worker process for application pool 'DefaultAppPool' encountered an error 'Cannot read configuration file ' trying to read configuration data from file '\\?\<EMPTY>', line number '0'. The data field contains the error code. Error: (06/15/2019 06:46:36 PM) (Source: W3SVC-WP) (EventID: 2307) (User: ) Description: The worker process for application pool 'DefaultAppPool' encountered an error 'Cannot read configuration file ' trying to read configuration data from file '\\?\<EMPTY>', line number '0'. The data field contains the error code.
|
|
#10
June 18th, 2019, 01:56 PM
|
|||
|
|||
|
System errors:
============= Error: (06/18/2019 08:00:57 AM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/18/2019 12:35:30 AM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 09:42:43 PM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 06:30:08 PM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 05:41:56 PM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 01:10:04 PM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 11:01:51 AM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (06/17/2019 07:32:22 AM) (Source: DCOM) (EventID: 10016) (User: TERRYWAYNEHURLE) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user TERRYWAYNEHURLE\TERRY WAYNE HURLEY SID (S-1-5-21-16782871-739715336-2386910222-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Windows Defender: =================================== Date: 2019-06-12 07:50:59.761 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {82646F8D-7774-4348-836D-EC438A70BE88} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2019-06-11 19:49:01.216 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {AD5DA19C-B98F-4D2B-944C-F6FA048D0D51} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2019-06-03 19:48:37.043 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {7CB47DB0-6525-400E-B982-DE73C936B662} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2019-05-08 15:36:08.482 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {098016F6-D65F-4C27-AD89-87E751D3DA4D} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2019-05-08 15:20:09.772 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {8CDD53F3-B000-4287-B453-BEAA1084CE38} Scan Type: Antimalware Scan Parameters: Quick Scan Date: 2019-06-03 00:04:52.565 Description: Windows Defender Antivirus has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.293.2726.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15900.4 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. Date: 2019-05-14 00:49:07.199 Description: Windows Defender Antivirus has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.293.1471.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15900.4 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. Date: 2019-05-10 11:26:54.234 Description: Windows Defender Antivirus has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.293.1206.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15900.4 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. Date: 2019-04-19 14:40:48.656 Description: Windows Defender Antivirus has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.291.2293.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15800.1 Error code: 0x80240017 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. Date: 2019-04-16 20:26:51.851 Description: Windows Defender Antivirus has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.291.1970.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full Current Engine Version: Previous Engine Version: 1.1.15800.1 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. CodeIntegrity: =================================== Date: 2019-06-13 12:40:45.144 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Micro soft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Micros oft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:44.808 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB \7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:43.338 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDAT ASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:42.283 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Micro soft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Micros oft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:41.881 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB \7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:41.566 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDAT ASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:34.649 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdol e\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2019-06-13 12:40:28.440 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Fra mework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdol e\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. ==================== Memory info =========================== BIOS: Dell Inc. A13 05/23/2018 Motherboard: Dell Inc. 0XFWHV Processor: Intel(R) Pentium(R) CPU G2030 @ 3.00GHz Percentage of memory in use: 88% Total physical RAM: 3967.5 MB Available physical RAM: 452.68 MB Total Virtual: 7935.5 MB Available Virtual: 3024.53 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:438.06 GB) (Free:347.29 GB) NTFS \\?\Volume{eb677944-2818-11e3-98d9-806e6f6e6963}\ (RECOVERY) (Fixed) (Total:27.67 GB) (Free:12.91 GB) NTFS ==================== MBR & Partition Table ================== ================================================== ====== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 5354091C) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=27.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=438.1 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================
|
|
#11
June 18th, 2019, 05:00 PM
|
|||
|
|||
|
Well I forgot to tell you that an image showing in taskbar ( I guess it is called taskbar ) in the past week or two and even sometimes show here at this site sometimes also ....shows many places on my PC but anyway when I was downloading the FRST it showed and I saved the screen shot image but can't figure out how to send you that screenshot . I do not know where that image came from and even on Facebook it will show that image for a split second and then the Facebook image shows . It is a PNG file of that screen shot .....Thanks
|
|
#12
June 18th, 2019, 05:26 PM
|
||||
|
||||
|
Some old Vipre ThreatTrack Security services there, but stopped, so may not be culprits. Makes me wonder if they loaded something in the Winsock though. And a lot of GWX Windows 10 update nags. Is this a windows 10 upgrade?
Is Malwarebytes installed there the free version, or paid for? What is the make and model of this computer, in case you need to download the network adapter driver? And is it wired or wireless? In the search bar, type cmd.exe. When Cmd.exe shows at the top of the display, right click it and select Run as administrator. When the command window opens, type the following, pressing Enter after each: sc delete gfiark sc delete gfiutil Then before we go further post back if those sc deletes were successful please.
|
|
#14
June 18th, 2019, 06:36 PM
|
|||
|
|||
|
OK ... I did this and it said it was successful and I did reboot . That crazy icon in taskbar still shows up . This is a Dell Inspiron 660S . The Malwarebytes is a Free version ....that also acts weird somtimes and I hardly use it anymore . I have the Free version on ccleaner that I also sometimes wonder about . Also about a year or so ago the Dell Support Assist started popping wanting me to update and optimize my PC and after a while I noticed it wanted me to download and install the same stuff all the time . Same version of the same stuff so I do not use it much anymore even though it alerts me all the time . I also tried to update any driver from Dell but never was successful . This is a Windows 10 free upgrade from the Original Windows 7 .
Last edited by manyproblems; June 18th, 2019 at 06:42 PM.
|
|
| Bookmarks |
«
Previous Topic
|
Next Topic
»
| Topic Tools | |
|
|
Similar Topics
|
||||
| Topic | Topic Starter | Forum | Replies | Last Post |
| WINDOWS\SYSTEM32\CONFIG\SYSTEM - file MISSING/CORRUPT after Windows XP Update! | taliesin42 | Windows XP | 15 | August 19th, 2013 05:16 AM |
| Do I need this update?? Windows Internet Explorer 9 for Windows Vista | perplexed | Windows Vista | 32 | April 12th, 2011 11:00 PM |
| Windows defender alerts and unable to windows update | jonnyred | Malware Removal | 65 | November 2nd, 2009 12:57 PM |
| Windows XP Pro 64bit OEM version vs Promo version | Denise_M1 | Windows XP | 3 | July 23rd, 2006 11:02 PM |
| Windows Update Version 5 | Tweaker | Applications | 0 | July 31st, 2004 03:38 AM |
All times are GMT +1. The time now is 02:38 PM.