Inactive-A umdf.exe virus

[Inactive-A] umdf.exe virus

when AVG runs a scan a report comes up, Notification, C;\umdf.exe found. I have run Malware Bytes, Norton and Avira antivirus scans and nothing comes up. what do I need to do to remove this virus? I have downloaded and saved Farber resorces

 

Umdf.exe virus

Additional scan result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Stephens (2016-04-08 14:35:51)
Running from C:\Users\Stephens\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) (2014-01-11 17:20:59)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1041595210-3142763762-647459838-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-1041595210-3142763762-647459838-501 - Limited - Enabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-1041595210-3142763762-647459838-1002 - Limited - Enabled)
johnny (S-1-5-21-1041595210-3142763762-647459838-1004 - Limited - Enabled) => C:\Users\johnny
Stephens (S-1-5-21-1041595210-3142763762-647459838-1001 - Administrator - Enabled) => C:\Users\Stephens

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: GFI Software AntiMalware (Disabled - Out of date) {5BB89C30-6480-BC7C-9F17-199BD76F557A}
AS: AVG AntiVirus 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG update module (Disabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AbiWord 2.8.6 (HKLM\...\AbiWord2) (Version: 2.8.6 - AbiSource Developers)
Adobe Flash Player 21 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.15) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.15 - Adobe Systems Incorporated)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6189 - AVG Technologies)
AVG 2015 (Version: 15.0.4545 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.6189 - AVG Technologies) Hidden
AVG PC TuneUp 2014 (en-US) (Version: 14.0.1001.536 - AVG) Hidden
AVG PC TuneUp 2014 (HKLM\...\AVG PC TuneUp) (Version: 14.0.1001.536 - AVG)
AVG PC TuneUp 2014 (Version: 14.0.1001.536 - AVG) Hidden
Belarc Advisor 8.5c (HKLM\...\Belarc Advisor) (Version: 8.5.3.0 - Belarc Inc.)
Canon DIGITAL CAMERA Solution Disk Software Guide (HKLM\...\Software Guide) (Version: 1.4.0.1 - Canon Inc.)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon PowerShot ELPH 100 HS_IXUS 115 HS Camera User Guide (HKLM\...\CameraUserGuide-PSELPH100HS_IXUS115HS) (Version: 1.0.1.2 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM\...\CameraWindowDC8) (Version: 8.4.0.3 - Canon Inc.)
Canon Utilities CameraWindow Launcher (HKLM\...\CameraWindowLauncher) (Version: 7.5.0.2 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities MyCamera (HKLM\...\MyCamera) (Version: 7.4.0.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Google Update Helper (Version: 1.3.21.169 - Google Inc.) Hidden
HP Deskjet 1510 series Basic Device Software (HKLM\...\{0B0A60AF-B875-4A65-A866-8220A9285BF5}) (Version: 30.0.1093.41190 - Hewlett-Packard Co.)
HP Deskjet 1510 series Help (HKLM\...\{2E25FCEB-EFCB-4696-AA01-D3CBAC721831}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Support Solutions Framework (HKLM\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 10.1.5 Full (HKLM\...\KLiteCodecPack_is1) (Version: 10.1.5 - )
Magical Jelly Bean KeyFinder (HKLM\...\KeyFinder_is1) (Version: 2.0.10.10 - Magical Jelly Bean)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Web Platform Installer 5.0 (HKLM\...\{1D39E015-C3D2-45DE-B070-A69C5F2FB309}) (Version: 5.0.50430.0 - Microsoft Corporation)
Microsoft Works 2000 (HKLM\...\{56364334-9530-11D2-BFFC-00C04FA329AA}) (Version: 1.0.0.0000 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Product Improvement Study for HP Deskjet 1510 series (HKLM\...\{C48DC998-8551-4AD4-8770-0246D2FD69D8}) (Version: 30.0.1093.41190 - Hewlett-Packard Co.)
Recover Keys (HKLM\...\Recover Keys_is1) (Version: 9.0.3.168 - Recover Keys)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
TuneUp Utilities 2014 (en-US) (Version: 14.0.1000.340 - TuneUp Software) Hidden
Tweaking.com - Windows Repair (HKLM\...\Tweaking.com - Windows Repair) (Version: 3.7.3 - Tweaking.com)
Vipre (Version: 6.1.5496 - Vipre) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows 7 Upgrade Advisor (HKLM\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Word in Works Suite add-in (HKLM\...\{0DB93918-2A77-11D3-805A-00C04FA329AA}) (Version: 1.0.0.0000 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1041595210-3142763762-647459838-1001_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08B4A03E-889F-4025-827F-96B8D33AB4BC} - System32\Tasks\HP online update program => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard)
Task: {0AD09C81-FD24-4E8A-82A0-C31D49DE8233} - System32\Tasks\{475D0157-1A07-4A05-8564-E680ACDA985C} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {0F909BE0-372A-426E-AF9D-543028B1EADD} - System32\Tasks\SpeedFixToolSoftware_Start => C:\Program Files\Speed Fix Tool Software\SpeedFixToolSoftware.exe
Task: {131884A4-6A42-4D52-A200-2DD8F57E7144} - System32\Tasks\HP AR Program Upload - 06b20428f4814eb3af2280137065afdd10b28af46c414545b5b076db1be6874e => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-02-08] (TODO: <Company name>)
Task: {19714E99-A2FF-4711-A13A-B91B1DF255AA} - System32\Tasks\{1D29382A-5BB7-41CD-8649-BEBA16E3F222} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {1C683E7E-EE09-4C4D-9295-5E03F3AA5E1D} - System32\Tasks\{B2AEF246-42AC-41E9-84A3-DB51277F1F86} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {1DFCB0BE-BC04-49FA-84D5-575F5A5595EA} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe
Task: {2655D496-DC56-4DD6-81F3-348F3FF33FD6} - System32\Tasks\{8E4DF4EC-07A6-4819-BA41-807F4F47DF51} => C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [1999-09-04] (Microsoft® Corporation)
Task: {27A1BB58-5948-408A-B59C-271D67B76A18} - System32\Tasks\Adobe online update program => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {3015E1E0-AAFD-4079-AF0D-5CC4716D7662} - System32\Tasks\{50212A37-663F-4C91-B1D5-E03F67C18CE3} => pcalua.exe -a D:\WKSSTE2KCD1\setup.exe -d D:\WKSSTE2KCD1
Task: {332CACC4-E064-4D88-8C81-E807BCE1BED1} - System32\Tasks\{6FA76D9B-D5FB-45D0-9D8A-65835944F346} => pcalua.exe -a "C:\Program Files\Microsoft Works Suite 2000\Setup\Launcher.exe" -c E:\
Task: {36456D0D-E13B-4E01-8E0A-D339CEBCECAB} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1041595210-3142763762-647459838-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {37289172-E092-480C-BD9E-174E4A88CFC7} - System32\Tasks\{746BDA29-37AF-46C6-BB2B-39130AF01B0C} => C:\Program Files\Microsoft Works\msworks.exe [1999-09-04] (Microsoft® Corporation)
Task: {37A5434F-15BE-43C9-9412-1CD24CDB9E0F} - System32\Tasks\SpeedFixToolPro_Start => C:\Program Files\Speed Fix Tool Pro\SpeedFixToolPro.exe
Task: {3C079F18-69AC-44FD-B0BB-4269592D56BA} - System32\Tasks\{76D83B6D-398D-4DD0-9E3F-43E4562BE1EF} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {3E30EC39-9725-41D3-8A23-D4CD91BFDCCD} - System32\Tasks\{AC263ED6-6C48-4F11-970B-72C73BE8CFFD} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {3F3F8206-21D0-475F-8923-4141E57FDCA9} - System32\Tasks\{3BEC3B08-FDCF-4FEB-B3FE-AC5B20AE43FE} => C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe
Task: {44CB9A32-5351-47F4-8B6C-918DB7E5D445} - System32\Tasks\{5300AD31-869E-4C70-B945-416258F35668} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {48D11652-8645-4A2C-BB28-FB8C2E050EB4} - System32\Tasks\{E5AC14F6-A492-43F5-81CE-4AA37070BDD5} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {4E392A93-4516-440C-8DF4-0ACEE04DC98D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {51F51F39-7CBB-4D8C-93D1-2EA32471E4A1} - System32\Tasks\{4F22F1E3-529B-4AD2-AB01-0E8885B8A25F} => C:\Program Files\Microsoft Works\msworks.exe [1999-09-04] (Microsoft® Corporation)
Task: {544252C5-D573-49C6-BE82-8E1781637F55} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {5B4219B2-97D6-45DB-BBE6-CBAB94D01AAF} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Users\Stephens\Documents\COMPUTER STUFF\WR_Tray_Icon.exe [2015-03-11] (Tweaking.com)
Task: {5C05F09D-21F9-4490-940A-F9B8A007B812} - System32\Tasks\{DDF727F5-4D39-455D-8B76-899329817AD9} => C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [1999-09-04] (Microsoft® Corporation)
Task: {625FF593-8A52-4232-8101-D72FCFF03C0E} - System32\Tasks\{485C0D61-200D-454E-ACC2-169ED6F15632} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {6380B2BD-388E-41FC-9D5F-AA2A5671BF52} - System32\Tasks\{752273B7-2A38-46FC-9325-43B36BCBD426} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {64DA92E9-25DB-49D7-A8BD-EE5692889EC6} - System32\Tasks\ParetoLogic Registration3 => Rundll32.exe "C:\Program Files\Common Files\ParetoLogic\UUS3\UUS3.dll" RunUns
Task: {688F2515-D6AB-4B38-B9D8-6E54755BB22B} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2013-02-08] (Hewlett-Packard Co.)
Task: {69BE1DA2-43CB-4E38-B5F1-D8941C46C691} - System32\Tasks\{C99935CD-7473-4AD2-8AA8-8D85B414F1BA} => pcalua.exe -a E:\setup.exe -d E:\
Task: {6B671CE9-F476-4236-A6D2-49C999105DE1} - System32\Tasks\{494114DF-D65E-4012-AC10-44BB4DF89929} => pcalua.exe -a C:\ProgramData\pclunst.exe -c -removeit
Task: {6BA71432-D5DE-4DF8-8E30-6514C0DA56D1} - System32\Tasks\{6B8E86B7-26B2-404E-BCE2-A6E0B53172E8} => C:\Program Files\Microsoft Works\msworks.exe [1999-09-04] (Microsoft® Corporation)
Task: {6CF45E97-2701-453F-95E5-2A44E1BA98E4} - System32\Tasks\{F4CE1A51-6A01-4E0D-BB8F-5BF575939A16} => pcalua.exe -a "E:\CM550 4.1 CD\USB Drivers\remove.exe" -d "E:\CM550 4.1 CD\USB Drivers "
Task: {706C8267-93EA-415E-A748-7502205ABF4E} - System32\Tasks\{4D898BD5-D16A-4C1E-9943-288F31EEC644} => C:\Program Files\AVG\AVG PC TuneUp\DuplicateFinder.exe [2015-06-25] (AVG)
Task: {780150D3-3528-4A87-AC03-F045FF4082A0} - System32\Tasks\{694F30BD-A248-4B9B-9FC3-3412BA14804A} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {79D047A2-08C7-45F7-B535-0C4A2920B55F} - System32\Tasks\{0314516E-CF84-4BA2-8A17-0C8CEA8D3CAA} => C:\Program Files\AbiWord\bin\AbiWord.exe [2010-06-13] ()
Task: {7CAB4138-FB78-4ED7-80BB-B5594C8B9232} - System32\Tasks\HP AR Program Upload - 8e09b13ffb524449b246c36ff21fa402cbe383f5c59344ea8e2b8bf3043b2629 => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-02-08] (TODO: <Company name>)
Task: {7E13BDA6-8BB8-4645-89D0-72CEF6645C82} - System32\Tasks\{1163D83E-9BBA-439A-BBE0-7CCCDD9C2619} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {9FD0CE3B-36F0-4E6F-8950-24CC45234AF9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-07] (Adobe Systems Incorporated)
Task: {A52820A8-86F7-4659-8D4C-7B7A1D4DEAB5} - System32\Tasks\SpeedFixToolSoftware_Popup => C:\Program Files\Speed Fix Tool Software\Splash.exe
Task: {A718465E-F7EA-46DB-ADA5-4480234D191A} - System32\Tasks\{01CEA44D-50A8-4CA8-8858-96DFC5441D32} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {A7A18808-BD0B-4272-971F-F24961B85FA9} - System32\Tasks\{9AB849E4-38D3-42BF-A30F-BACC7FDE5F07} => C:\Program Files\AbiWord\bin\AbiWord.exe [2010-06-13] ()
Task: {AC724B64-1822-4A77-96DD-B90F4D4ED48E} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe <==== ATTENTION
Task: {B159F029-04E0-46F8-9376-54C1ED1009E7} - \DriverUpdate Startup -> No File <==== ATTENTION
Task: {B63B8114-CCF2-43C1-BD18-6919E4F4DD8A} - System32\Tasks\{8FA0BF3C-4D05-4A4A-8DE0-79D51479BF43} => pcalua.exe -a "C:\Program Files\Uninstaller\Uninstall.exe "
Task: {BD7C101E-56AE-4ADE-8ECB-E61BE2328778} - System32\Tasks\{2C7FA859-3A0F-4C76-914F-982E51C9F1B6} => C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [1999-09-04] (Microsoft® Corporation)
Task: {C58C873D-E969-4A99-B5B5-46C38FD500B0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1041595210-3142763762-647459838-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {CD153BA1-C04E-4856-B31F-E020F3F9CCF7} - System32\Tasks\HP AR Program Upload - 0f580b897253434a8969f09bb07ba74ecaf8ccdace084f15a6f7d2a59ea69b3e => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-02-08] (TODO: <Company name>)
Task: {D30C4E01-5F78-487B-8C53-1B08D151BCD6} - System32\Tasks\HP AR Program Upload - 6e8f21b8b3a74476bd259e37fb5114da9913b4a245c34c78966e5cdc59457afc => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-02-08] (TODO: <Company name>)
Task: {D6F7CCE7-7875-4E6C-9090-8F88917E078C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [2015-06-25] (AVG)
Task: {DE773EAF-C415-4371-B2F4-DFF623984DC4} - System32\Tasks\{B83E1830-4343-4AC9-892E-C1C55465D630} => C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [1999-09-04] (Microsoft® Corporation)
Task: {E5C1B1E2-8CAE-4E80-B68B-5E4856EA5190} - System32\Tasks\Google Updater and Installer => C:\Users\Stephens\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {E615E923-ACEF-4BC7-BDCB-AC1044AC2104} - \Turbo Clean PC Schedule -> No File <==== ATTENTION
Task: {E7A3C3A4-EA7D-42B0-AB47-F5B9DD906852} - \DriverUpdate Scan -> No File <==== ATTENTION
Task: {EF15CD94-582B-4A20-BA18-F6A0CFF92565} - System32\Tasks\{81B8CE9B-251B-4875-A6B4-7868EE768CB9} => msiexec.exe /package "E:\MSWorks\wks2000.msi "
Task: {F4630BEB-D812-4408-858E-DC76B763E3D2} - System32\Tasks\{2914DEAB-B78B-43C4-8C2F-055884749ABB} => pcalua.exe -a D:\IrfanView\iv_uninstall.exe
Task: {F57CEF92-7CFA-462C-BC8D-62A3B4805C53} - System32\Tasks\{E3D75845-F3B9-4681-B3D7-295187F0D09E} => C:\Program Files\Microsoft Office\Office\WINWORD.EXE
Task: {F91539E9-2090-4479-83B9-D8ACF1990BAC} - \Vosteran mici -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Windows\system32\rundll32.exeAC:\Program Files\Common Files\ParetoLogic\UUS3\UUS3.dll

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-06-25 01:05 - 2015-06-25 01:05 - 00586040 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll
2015-06-25 01:05 - 2015-06-25 01:05 - 00357176 _____ () C:\Program Files\AVG\AVG PC TuneUp\tuavgx.dll
2015-07-30 23:46 - 2015-06-26 03:13 - 00184184 _____ () C:\Users\Stephens\ParetoLogic Internet Security\Definitions\libBase64.dll
2015-07-30 23:46 - 2015-06-26 03:13 - 00175992 _____ () C:\Users\Stephens\ParetoLogic Internet Security\Definitions\libMachoUniv.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\18202d74202d5a50.dat:a56c182a-e195-435d-a7ac-d87aef14f94c [2097154]
AlternateDataStreams: C:\4030c40f30c40dba.dat:2a16486c-367f-4e58-99cf-c10dafd95b6d [4276226]
AlternateDataStreams: C:\4030c40f30c40dba.dat:41768059-06aa-4166-aee6-b80d2c11de77 [4276226]
AlternateDataStreams: C:\4030c40f30c40dba.dat:8216d50a-ded2-4077-833c-2353e1140c3b [4276226]
AlternateDataStreams: C:\4030c40f30c40dba.dat:e399697e-ca5c-4008-89a1-be76ccd6f166 [3784706]
AlternateDataStreams: C:\4030c40f30c40dba.dat:eb630e6a-566a-4b18-bda6-2064ef83b829 [4276226]
AlternateDataStreams: C:\595D7125-00000011.eml:OEStandardProperty [732]
AlternateDataStreams: C:\6624843824840ced.dat:2b13316d-ba38-4c10-8911-5708d5b7af7f [2097154]
AlternateDataStreams: C:\6624843824840ced.dat:8c21237b-6728-452d-bab4-0a6370cd705c [2097154]
AlternateDataStreams: C:\6624843824840ced.dat:b7cb6412-5460-4611-93d2-470a19a4022f [2097154]
AlternateDataStreams: C:\6624843824840ced.dat:cc051406-1516-4d4c-8bd1-915396668839 [2097154]
AlternateDataStreams: C:\6624843824840ced.dat:e6947b77-2c78-4e47-9f2c-cc315ea4675c [2097154]
AlternateDataStreams: C:\6624843824840ced.dat:f596ed1e-f638-4c49-b7b5-8304418def3e [2097154]
AlternateDataStreams: C:\94d6baebd6bacd2c.dat:dcdb4276-7849-484b-bc92-843749290e1c [2097154]
AlternateDataStreams: C:\faae7fe9ae7f9d37.dat:9ce76007-cab0-4e6a-91b8-e63573454508 [2097154]
AlternateDataStreams: C:\faae7fe9ae7f9d37.dat:a63b5a6d-92a6-4224-827d-f708ddafad0d [2097154]
AlternateDataStreams: C:\faae7fe9ae7f9d37.dat:be131c06-c999-427b-b4f6-666796791f2c [2097154]
AlternateDataStreams: C:\faae7fe9ae7f9d37.dat:dc0b1c32-edcb-4715-8cf9-5056b7505449 [2097154]
AlternateDataStreams: C:\ProgramData\TEMP:373E1720 [126]
AlternateDataStreams: C:\ProgramData\TEMP:FCA8C9CD [264]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMPCHelper => " "=" "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => " "= "Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => " "= "Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => " "= "Driver "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tvnserver => " "=" "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => " "= "Service "
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => " "= "Service "

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\amazon.com -> amazon.com
IE trusted site: HKU\S-1-5-21-1041595210-3142763762-647459838-1001\...\amazon.com -> amazon.com
IE trusted site: HKU\S-1-5-21-1041595210-3142763762-647459838-1001\...\driversupport.com -> hxxp://apps.driversupport.com
IE trusted site: HKU\S-1-5-21-1041595210-3142763762-647459838-1001\...\driversupport.com -> hxxps://apps.driversupport.com
IE trusted site: HKU\S-1-5-21-1041595210-3142763762-647459838-1001\...\genieo.com -> hxxp://search.genieo.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:04 - 2016-01-06 13:44 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1041595210-3142763762-647459838-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 66.0.60.9 - 66.0.32.14
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{767BB3D2-0BEC-4569-84F5-D58D2F624FCE}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{FA2C2E81-23B0-4C07-A6B8-5AC1E9D68D6A}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{C8BEAD1B-D182-4747-84DF-66DAE3B84B37}] => (Allow) LPort=2869
FirewallRules: [{5303C6D7-A57F-440E-AEB2-D5D2DD0CBA30}] => (Allow) LPort=1900
FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TelnetServer-TlntSvr-TCP-In] => (Allow) %systemroot%\system32\tlntsvr.exe
FirewallRules: [TelnetServer-Tlntadmn-RPC-In] => (Allow) %systemroot%\system32\tlntsvr.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) %systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
FirewallRules: [ScanManagement-RCWS-Out-TCP] => (Allow) %SystemRoot%\System32\mmc.exe
FirewallRules: [ScanManagement-WSD-Out-TCP] => (Allow) %SystemRoot%\System32\mmc.exe
FirewallRules: [{C399990E-AFBD-4820-ABF7-60D47D825FBF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{F6BA075C-BFB9-4E33-B913-FAABCCB70749}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{BEB682DE-EF10-4A3E-9B1B-19E52D8FDABA}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5F3E57D0-2102-45AE-9C06-95312FC50705}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A354AB63-F22B-4798-9C37-BF7E782A0FD6}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [{782FF69D-BE13-4C3F-8D96-8AC78B85FDB1}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{05E893A4-90DE-48B4-B679-0208B6168B3D}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{7EC6598E-B4BD-4E9B-B04B-9A0A67319FBD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{21D30287-F2EF-4DE5-A6E0-7794578FE42F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0445CD69-195B-4EE1-85B4-4159A21F47F4}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{F6E816BE-1E9D-480D-9ECE-56C0340BA9B7}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{07012146-D863-4FFA-8DF0-5C6717771026}] => (Allow) C:\Program Files\AVG\AVG PC TuneUp\RepairWizard.exe
FirewallRules: [{327BC5F1-FB88-4CAF-A74C-8369343D4595}] => (Allow) C:\Program Files\AVG\AVG PC TuneUp\RepairWizard.exe
FirewallRules: [{05410C3E-C692-4EDD-B6CF-06DA73FD7683}] => (Allow) C:\Program Files\AVG\AVG PC TuneUp\RepairWizard.exe
FirewallRules: [{F1F270C2-731D-4300-9E9C-FA4D42A12654}] => (Allow) C:\Program Files\AVG\AVG PC TuneUp\RepairWizard.exe
FirewallRules: [{87AF55ED-682B-4963-BEFB-0A5880C04B43}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{BAB6AC70-7214-4E1A-8C9B-59F7003D914F}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{BF77AE47-899F-455A-9D88-2D8878423BF3}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{3376B3EE-70F0-4DFA-91A7-05E1AA125D59}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{3A677BA7-EA6D-4CE7-A0D4-40D3CF3AF245}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{BA8EA8B4-440E-41E4-8002-DCFA1264CBE3}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe

==================== Restore Points =========================

16-03-2016 11:30:12 Scheduled Checkpoint
23-03-2016 14:09:55 Scheduled Checkpoint
24-03-2016 02:06:18 Restore Operation
24-03-2016 03:00:10 Windows Update
25-03-2016 03:01:18 Windows Update
25-03-2016 22:25:40 6-6=2018
31-03-2016 01:05:41 Restore Operation
03-04-2016 10:53:06 Reimage Express Restore Point
04-04-2016 07:01:28 Restore Operation
05-04-2016 03:37:30 Windows Update
06-04-2016 03:00:13 Windows Update
07-04-2016 21:50:13 Restore Operation
07-04-2016 22:34:22 Windows Update

==================== Faulty Device Manager Devices =============

Name: MpKsl0554d5af
Description: MpKsl0554d5af
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl0554d5af
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/07/2016 10:16:05 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: The backup did not complete because of an error writing to the backup location D:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).

Error: (04/07/2016 10:07:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: TuneUpUtilitiesService32.exe, version: 14.0.1001.536, time stamp: 0x558b9993
Faulting module name: TuneUpUtilitiesService32.exe, version: 14.0.1001.536, time stamp: 0x558b9993
Exception code: 0xc0000005
Fault offset: 0x00019098
Faulting process id: 0xcd4
Faulting application start time: 0xTuneUpUtilitiesService32.exe0
Faulting application path: TuneUpUtilitiesService32.exe1
Faulting module path: TuneUpUtilitiesService32.exe2
Report Id: TuneUpUtilitiesService32.exe3

Error: (04/05/2016 08:08:49 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.9600.18231 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 14e8

Start Time: 01d18f38c77617cb

Termination Time: 352

Application Path: C:\Program Files\Internet Explorer\iexplore.exe

Report Id: 6be538d7-fb2f-11e5-a346-001aa0a798dd

Error: (04/04/2016 02:30:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.9600.18231 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 149c

Start Time: 01d18ea86758bd24

Termination Time: 47

Application Path: C:\Program Files\Internet Explorer\iexplore.exe

Report Id: ac8b2854-fa9b-11e5-a346-001aa0a798dd

Error: (04/04/2016 07:16:41 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: The backup did not complete because of an error writing to the backup location D:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).

Error: (04/03/2016 07:00:03 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: The backup did not complete because of an error writing to the backup location D:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).

Error: (04/03/2016 01:56:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: TuneUpUtilitiesService32.exe, version: 14.0.1001.536, time stamp: 0x558b9993
Faulting module name: ntdll.dll, version: 6.1.7601.19160, time stamp: 0x56bcd4d2
Exception code: 0xc0000005
Fault offset: 0x00047792
Faulting process id: 0xfe8
Faulting application start time: 0xTuneUpUtilitiesService32.exe0
Faulting application path: TuneUpUtilitiesService32.exe1
Faulting module path: TuneUpUtilitiesService32.exe2
Report Id: TuneUpUtilitiesService32.exe3

Error: (04/03/2016 04:33:12 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.9600.18231 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1424

Start Time: 01d18d8b9a6f55e7

Termination Time: 0

Application Path: C:\Program Files\Internet Explorer\iexplore.exe

Report Id: f7b6c60c-f97e-11e5-93c7-001aa0a798dd

Error: (04/01/2016 09:50:24 AM) (Source: SupremoSystem.exe) (EventID: 0) (User: )
Description: The service process could not connect to the service controller

Error: (04/01/2016 05:24:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.18231, time stamp: 0x56b8edd6
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x9f285521
Faulting process id: 0x1458
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3


System errors:
=============
Error: (04/08/2016 02:28:46 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (04/08/2016 02:28:46 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (04/08/2016 07:28:40 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (04/08/2016 07:28:40 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (04/08/2016 06:04:06 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.

Error: (04/08/2016 06:01:27 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The AntiMalware service hung on starting.

Error: (04/08/2016 05:55:41 AM) (Source: SNMP) (EventID: 1500) (User: )
Description: The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error: (04/08/2016 05:55:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Net.Tcp Listener Adapter service depends on the Net.Tcp Port Sharing Service service which failed to start because of the following error:
%%1058

Error: (04/07/2016 10:34:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AD3EDBCA-0901-415B-82E9-C16D3B65E38C}

Error: (04/07/2016 10:07:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The AVG PC TuneUp Service service terminated unexpectedly. It has done this 1 time(s).


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 CPU 4300 @ 1.80GHz
Percentage of memory in use: 60%
Total physical RAM: 2037.61 MB
Available physical RAM: 808.52 MB
Total Virtual: 4075.23 MB
Available Virtual: 2253.06 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:74.4 GB) (Free:39.56 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: D663168D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

 

I am sorry I am so old and ignorant I can't seem to get it right. What am I doing wrong? I posted where the problem is located (Drive C Hard drive) I stated I had scanned with 3 different programs. and sent the Balrac scan information. I cut and pasted. did not send as an attachment. please advise what else I need. Thanks

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Stephens (administrator) on STEPHENS-PC (09-04-2016 15:47:47)
Running from C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I3J5T4NJ
Loaded Profiles: Stephens (Available Profiles: Stephens & johnny & Administrator & Guest & Classic .NET AppPool & DefaultAppPool)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\mqtgsvc.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(GFI Software) C:\Users\Stephens\ParetoLogic Internet Security\SBAMSvc.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Tweaking.com) C:\Users\Stephens\Documents\COMPUTER STUFF\Repair_Windows.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_21_0_0_213_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3795880 2016-02-04] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-1041595210-3142763762-647459838-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6495144 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-1041595210-3142763762-647459838-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-01-12] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
Startup: C:\Users\Stephens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Deskjet 1510 series (Copy 1).lnk [2016-04-09]
ShortcutTarget: Monitor Ink Alerts - HP Deskjet 1510 series (Copy 1).lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL No File
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL No File
Tcpip\Parameters: [DhcpNameServer] 66.0.60.9 66.0.32.14
Tcpip\..\Interfaces\{741D99A2-3717-4F01-BB00-2A31EC26960F}: [DhcpNameServer] 66.0.60.9 66.0.32.14

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1041595210-3142763762-647459838-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\S-1-5-21-1041595210-3142763762-647459838-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
SearchScopes: HKLM -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL =
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1041595210-3142763762-647459838-1001 -> {108F28A5-20DB-46F6-9B81-A1E18BC1358E} URL =
SearchScopes: HKU\S-1-5-21-1041595210-3142763762-647459838-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-1041595210-3142763762-647459838-1001 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1041595210-3142763762-647459838-1001 -> {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.com/websearch/ref=bit_bds-p08_serp_ie_us_display?ie=UTF8&tagbase=bds-p08&tag=bds-p08-serp-us-ie-20&tbrId=v1_abb-channel-8_35b48aa3da57487e90669a52e24bd1f0_1036_1068_20150912_US_ie_ds_&query={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKU\S-1-5-21-1041595210-3142763762-647459838-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2016-01-04] (Belarc, Inc.)

FireFox:
========
FF Plugin: @canon.com/MycameraPlugin -> C:\Program Files\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://search.conduit.com/?ctid=CT3320049&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPEC9F1CCA-F0ED-46A2-AC7A-1F984F5DE277&SSPV=
CHR StartupUrls: Default -> "hxxp://www.amazon.com/websearch/ref=bit_bds-p23_serp_cr_us_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_d9e90155b1094da7ae52d881268e9a3f_39_1006_20130908_US_cr_sp_ ", "hxxp://mysearch.avg.com?cid={F974A7B4-B85F-4F39-8AD5-CD41905D34B9}&mid=b8482535b23247d29621d153e643712e-1ed54f7cc85099c282b104841b91eb2f8de6884c&lang=en&ds=vb011&coid=avgtbdisvb&cmpid=&pr=sa&d=2014-02-07 22:53:04&v=17.3.1.91&pid=safeguard&sg=&sap=hp "
CHR NewTab: Default -> "chrome-extension://mallpejgeafdahhflmliiahjdpgbegpk/stubby.html"
CHR Profile: C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-25]
CHR Extension: (Google Docs) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-25]
CHR Extension: (Google Drive) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Bible Inspiration Quotes) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\cefjlnahlihagmakdigkomidanbcheol [2015-09-25]
CHR Extension: (Google Search) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Yahoo Extension) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag [2015-09-25]
CHR Extension: (Google Sheets) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-25]
CHR Extension: (Google Docs Offline) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-25]
CHR Extension: (FromDocToPDF) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk [2015-10-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25]
CHR Extension: (Gmail) - C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25]
CHR HKLM\...\Chrome\Extension: [eihhgekonheiliaidomffpplfhecmkag] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3646888 2016-02-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [335656 2016-02-04] (AVG Technologies CZ, s.r.o.)
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [310272 2012-05-31] (Microsoft Corporation)
S2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [13824 2009-07-13] (Microsoft Corporation)
R2 iprip; C:\Windows\System32\iprip.dll [29696 2009-07-13] (Microsoft Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MSMQTriggers; C:\Windows\system32\mqtgsvc.exe [126464 2010-11-20] (Microsoft Corporation)
R2 SBAMSvc; C:\Users\Stephens\ParetoLogic Internet Security\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1858360 2015-06-25] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [35640 2015-06-25] (AVG)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [252336 2015-12-16] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [223152 2016-01-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [234416 2015-12-16] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [290272 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193456 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [230832 2015-08-04] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-08-11] (AVG Technologies)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [66344 2012-09-12] (GFI Software)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [226080 2012-09-20] (GFI Software)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [95488 2012-09-12] (GFI Software)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [95488 2012-09-12] (GFI Software)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [94496 2012-09-20] (GFI Software)
R3 sbwtis; C:\Windows\System32\DRIVERS\sbwtis.sys [75552 2012-09-20] (GFI Software)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [30632 2015-06-04] (TuneUp Software)
S3 cpuz134; \??\C:\Users\Stephens\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S1 MpKsl0554d5af; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5A0320F8-F120-4A31-B7C9-A4324359EC59}\MpKsl0554d5af.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-09 11:23 - 2016-04-09 11:24 - 00246520 _____ (Reason Software Company Inc.) C:\Users\Stephens\Downloads\microsoft.win32.taskscheduler.dll
2016-04-08 14:39 - 2016-04-08 15:47 - 00000000 ____D C:\Users\Stephens\Desktop\Farber
2016-04-08 14:35 - 2016-04-08 14:36 - 00038005 _____ C:\Users\Stephens\Downloads\Addition.txt
2016-04-08 14:34 - 2016-04-08 14:36 - 00037608 _____ C:\Users\Stephens\Downloads\FRST.txt
2016-04-08 14:33 - 2016-04-08 14:34 - 01725440 _____ (Farbar) C:\Users\Stephens\Downloads\FRST.exe
2016-04-08 09:49 - 2016-04-08 09:49 - 00001054 _____ C:\Users\Stephens\Desktop\PC MMAINTAINCE TOOLS - Shortcut.lnk
2016-04-08 09:48 - 2016-04-08 09:48 - 00000176 _____ C:\Users\Stephens\Desktop\BBS HELP.url
2016-04-08 09:47 - 2016-04-09 15:46 - 00000519 _____ C:\Users\Stephens\Desktop\Google.website
2016-04-07 22:31 - 2016-04-07 22:31 - 00000329 _____ C:\Users\Stephens\Desktop\Facebook.url
2016-04-07 22:09 - 2016-04-07 22:10 - 00000000 ____D C:\Users\Stephens\Desktop\CANAON CAMERA
2016-04-06 22:51 - 2016-04-06 22:52 - 00000000 ____D C:\ProgramData\Reimage Protector
2016-04-05 07:39 - 2016-04-05 07:39 - 00104960 _____ C:\Users\Stephens\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-05 03:32 - 2016-04-07 21:57 - 00000000 ___DC C:\Program Files\Microsoft Security Client
2016-04-01 14:57 - 2016-04-01 14:57 - 00000000 ____D C:\Users\Stephens\AppData\Roaming\SumatraPDF
2016-04-01 09:50 - 2016-04-01 09:50 - 00000000 ____D C:\ProgramData\SupremoRemoteDesktop
2016-03-27 22:23 - 2016-03-27 22:23 - 00040137 _____ C:\Users\Stephens\Documents\Johnnys Story.abw
2016-03-25 23:24 - 2016-03-31 01:10 - 00000000 ___DC C:\Program Files\RegistryNuke 2014
2016-03-22 01:02 - 2016-04-07 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2016-03-16 21:42 - 2016-03-16 09:51 - 00001586 _____ C:\Users\Stephens\Desktop\YouTube.url
2016-03-11 07:43 - 2016-03-11 07:43 - 00002038 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
2016-03-11 07:43 - 2016-03-11 07:43 - 00000000 ___DC C:\Program Files\Belarc

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-09 15:47 - 2015-11-19 13:01 - 00000000 ___DC C:\FRST
2016-04-09 15:28 - 2015-12-10 02:52 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-09 14:18 - 2014-01-13 03:48 - 00000000 ____D C:\ProgramData\MFAData
2016-04-09 13:05 - 2009-07-13 23:34 - 00029888 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-09 13:05 - 2009-07-13 23:34 - 00029888 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-09 11:25 - 2015-01-03 07:34 - 00000000 ____D C:\Users\Stephens\Documents\COMPUTER STUFF
2016-04-09 11:15 - 2015-07-30 09:55 - 00000000 ____D C:\Users\Stephens\AbiSuite
2016-04-09 05:19 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\inetsrv
2016-04-09 05:16 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-08 18:00 - 2015-08-06 23:18 - 00000450 _____ C:\Windows\Tasks\ParetoLogic Registration3.job
2016-04-08 15:57 - 2014-12-22 13:50 - 00000569 _____ C:\Users\Stephens\AppData\Roaming\Microsoft\Windows\Start Menu\Windows Essentials - Windows Help.website
2016-04-08 10:50 - 2015-09-15 03:15 - 00000000 ____D C:\Users\Stephens\Documents\EVERYTHING MASONIC
2016-04-08 06:33 - 2015-06-28 13:31 - 00000000 ____D C:\Users\Stephens\AppData\Roaming\HpUpdate
2016-04-08 06:02 - 2014-01-11 13:38 - 00856974 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-08 06:02 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf
2016-04-07 22:34 - 2015-04-04 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-07 22:28 - 2015-12-10 02:52 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-04-07 22:28 - 2015-12-10 02:52 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-04-07 22:03 - 2014-01-11 12:21 - 00000000 ____D C:\Users\Stephens
2016-04-07 21:57 - 2015-12-05 00:38 - 00000000 ___DC C:\Program Files\Malwarebytes Anti-Malware
2016-04-07 21:56 - 2016-03-08 23:01 - 00000000 ___DC C:\Program Files\Recover Keys
2016-04-07 21:56 - 2015-12-05 00:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-07 21:56 - 2015-09-12 21:38 - 00000000 ____D C:\Users\Stephens\AppData\Roaming\IrfanView
2016-04-07 21:56 - 2015-08-28 07:38 - 00000000 ____D C:\Users\johnny
2016-04-07 21:56 - 2015-08-20 07:29 - 00000000 ____D C:\Users\Guest
2016-04-07 21:56 - 2015-08-20 07:03 - 00000000 ____D C:\Users\Administrator
2016-04-07 21:56 - 2015-07-30 23:30 - 00000000 ____D C:\Users\Stephens\ParetoLogic Internet Security
2016-04-07 21:56 - 2015-07-24 10:56 - 00000000 ___DC C:\Program Files\ZoomBrowser EX MCU
2016-04-07 21:56 - 2015-04-22 11:43 - 00000000 ___DC C:\Program Files\Speccy
2016-04-07 21:56 - 2015-02-16 13:42 - 00000000 ____D C:\Users\DefaultAppPool
2016-04-07 21:56 - 2015-02-04 11:28 - 00000000 ____D C:\Users\Classic .NET AppPool
2016-04-07 21:56 - 2015-02-03 18:33 - 00000000 ___DC C:\Program Files\CMAK
2016-04-07 21:56 - 2014-01-11 12:26 - 00000000 ____D C:\Program Files\TeamViewer
2016-04-07 21:56 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\spool
2016-04-07 21:55 - 2016-03-08 23:20 - 00000000 ___DC C:\Program Files\Magical Jelly Bean
2016-04-07 21:55 - 2015-09-25 18:54 - 00000000 ___DC C:\IrfanView
2016-04-07 21:55 - 2015-08-28 07:22 - 00000000 ___DC C:\Program Files\CCleaner
2016-04-07 21:55 - 2015-07-24 10:57 - 00000000 ___DC C:\Program Files\PhotoStitch
2016-04-07 21:55 - 2015-07-19 23:03 - 00000000 ___DC C:\Program Files\Microsoft Works
2016-04-07 21:55 - 2015-06-28 13:31 - 00000000 ___DC C:\Program Files\HP Photo Creations
2016-04-07 21:55 - 2015-03-26 22:18 - 00000000 ___DC C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2016-04-07 21:55 - 2014-07-25 13:17 - 00000000 ____D C:\Program Files\Recuva
2016-04-07 21:55 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\registration
2016-03-27 23:33 - 2015-12-07 10:07 - 00000000 ____D C:\Users\Stephens\Documents\ONEONTA 324 DATABASE
2016-03-24 02:52 - 2015-12-19 18:40 - 00000000 ____D C:\Users\Stephens\AppData\Local\ElevatedDiagnostics
2016-03-24 02:08 - 2014-02-13 17:46 - 00000000 ____D C:\Users\Stephens\AppData\Roaming\TeamViewer
2016-03-22 08:33 - 2014-01-20 09:51 - 00000000 ____D C:\Users\Stephens\AppData\Local\Windows Live
2016-03-13 01:32 - 2014-02-16 00:26 - 00000000 ___DC C:\Users\Stephens\AppData\Local\MigWiz

==================== Files in the root of some directories =======

2015-10-10 11:52 - 2015-10-11 20:50 - 0019456 ____C () C:\Program Files\324 DATABASE.wdb
2015-01-30 19:05 - 2015-01-30 19:17 - 0008704 ___SH () C:\Users\Stephens\AppData\Roaming\Thumbs.db
2014-01-12 21:35 - 2014-01-12 21:35 - 0033193 _____ () C:\Users\Stephens\AppData\Roaming\UserTile.png
2014-02-12 20:58 - 2015-01-29 01:49 - 0000156 _____ () C:\Users\Stephens\AppData\Roaming\WB.CFG
2015-01-27 07:49 - 2015-01-27 07:49 - 0000010 _____ () C:\Users\Stephens\AppData\Local\DSI.DAT
2015-01-08 07:50 - 2015-01-31 10:30 - 0007634 _____ () C:\Users\Stephens\AppData\Local\resmon.resmoncfg
2015-06-28 13:30 - 2015-06-28 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-01-26 06:35 - 2014-01-26 06:20 - 4911888 _____ (PC Cleaners) C:\ProgramData\pclunst.exe

Files to move or delete:
====================
C:\ProgramData\pclunst.exe


Some files in TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp_e59gm.dll
C:\Users\Administrator\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-08 08:26

==================== End of FRST.txt ============================

 

Broni: Sorry about that.
Hhope tis is what you need. Never did it before. Please forgive an 81 yr. old man

 

Broni: I downloaded Rogue Killer 1. ran a scan and it showed a multicolored box, with 28 items found only 3 had check marks in the boxes on the left side. Is that the status box? MBAM was shown as corrupted. I could not figure out hoe to get it to note pad. could not drag or cut and paste. while I was struggling with what to do , had a momentary power interruption and of course I lost the whole thing. It made me very nervous and I will rescan tomorrow. do I try to send all scans in one reply or make a reply for each scan. I can't help being so dumb. Please be patient with me.

 

alwarebytes Anti-Malware
www.malwarebytes.org


Update, 4/10/2016 4:31 AM, SYSTEM, STEPHENS-PC, Manual, Domain Database, 2016.4.9.1, 2016.4.10.2,
Update, 4/10/2016 4:31 AM, SYSTEM, STEPHENS-PC, Manual, Malware Database, 2016.4.9.5, 2016.4.10.1,
Scan, 4/10/2016 4:32 AM, SYSTEM, STEPHENS-PC, Manual, Start:4/9/2016 7:18 PM, Duration:27 min 3 sec, Threat Scan, Completed, 0 Malware Detections, 2 Non-Malware Detections,
Error, 4/10/2016 4:35 AM, SYSTEM, STEPHENS-PC, Protection, IsLicensed, 13,
Protection, 4/10/2016 4:35 AM, SYSTEM, STEPHENS-PC, Protection, Malware Protection, Stopping,
Protection, 4/10/2016 4:35 AM, SYSTEM, STEPHENS-PC, Protection, Malware Protection, Stopped,
Scan, 4/10/2016 4:57 AM, SYSTEM, STEPHENS-PC, Manual, Start:4/10/2016 4:37 AM, Duration:19 min 52 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,
Error, 4/10/2016 5:03 AM, SYSTEM, STEPHENS-PC, Protection, IsLicensed, 13,
Protection, 4/10/2016 5:03 AM, SYSTEM, STEPHENS-PC, Protection, Malware Protection, Stopping,
Protection, 4/10/2016 5:03 AM, SYSTEM, STEPHENS-PC, Protection, Malware Protection, Stopped,

(end)

 

RogueKiller V12.1.1.0 [Apr 4 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : Stephens [Administrator]
Started from : C:\Users\Stephens\Downloads\RogueKiller.exe
Mode : Scan -- Date : 04/10/2016 05:42:06

¤¤¤ Processes : 1 ¤¤¤
[ZeroAccess] SBAMSvc.exe(3324) -- C:\Users\Stephens\ParetoLogic Internet Security\SBAMSvc.exe[x] -> Found

¤¤¤ Registry : 17 ¤¤¤
[PUP] HKEY_LOCAL_MACHINE\Software\ParetoLogic -> Found
[PUP] HKEY_LOCAL_MACHINE\Software\Reimage -> Found
[PUP] HKEY_LOCAL_MACHINE\Software\SlimWare Utilities Inc -> Found
[PUP] HKEY_LOCAL_MACHINE\Software\SlimWare Utilities, Inc. -> Found
[PUP] HKEY_LOCAL_MACHINE\Software\SmartPCFixer -> Found
[PUP] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SWDUMon (system32\DRIVERS\SWDUMon.sys) -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-21-1041595210-3142763762-647459838-1001\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-21-1041595210-3142763762-647459838-1001\Software\Microsoft\Internet Explorer\Main | Search Bar : Preserve -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{741D99A2-3717-4F01-BB00-2A31EC26960F} | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{741D99A2-3717-4F01-BB00-2A31EC26960F} | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{741D99A2-3717-4F01-BB00-2A31EC26960F} | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{741D99A2-3717-4F01-BB00-2A31EC26960F} | DhcpNameServer : 66.0.60.9 66.0.32.14 ([X][X]) -> Found
[PUM.StartMenu] HKEY_USERS\S-1-5-21-1041595210-3142763762-647459838-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 3 ¤¤¤
[PUP][Folder] C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} -> Found
[PUP][Folder] C:\ProgramData\{C9ED212E-996F-F0A8-28E9-802AF86B53A4} -> Found
[PUP][Folder] C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} -> Found

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST380815AS ATA Device +++++
--- User ---
[MBR] e18000062bf729e8ddf22183285a8401
[BSP] 45cbcf2aee4f17ed533318df75cf09bc : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 208848 | Size: 76190 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

 

# AdwCleaner v5.109 - Logfile created 10/04/2016 at 06:03:55
# Updated 04/04/2016 by Xplode
# Database : 2016-04-09.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x86)
# Username : Stephens - STEPHENS-PC
# Running from : C:\Users\Stephens\Downloads\adwcleaner_5.109.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\Reimage Protector
[#] Folder Deleted : C:\ProgramData\Application Data\Reimage Protector
[-] Folder Deleted : C:\Users\Public\Documents\Downloaded Installers
[-] Folder Deleted : C:\Users\Stephens\AppData\Local\Downloaded Installers

***** [ Files ] *****

[-] File Deleted : C:\Windows\Reimage.ini

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : paretologic registration3
[-] Task Deleted : ReimageUpdater

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\AppID\ShopAtHomeHelper.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.CookiesManager
[-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.CookiesManager.1
[-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.hxxpHandle302
[-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.PostUrlWorker
[-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.PostUrlWorker.1
[-] Key Deleted : HKCU\Software\Classes\Toolbar3.CustomInternetSecurityImpl
[-] Key Deleted : HKCU\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
[-] Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\uus3url-pl
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{08613A51-6E3E-43CC-9ECF-DD58B5837341}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{153EDC41-A2CC-4BEB-9EC8-008242389E50}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{188028B8-D91D-4BE2-BABA-68E32BDE4420}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{28E74F15-18C2-465E-B545-6CC738121C68}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{2BF6042B-B9B1-46D9-A3F8-9C987FADD4C6}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{40A222E2-93B1-45F9-9B07-0D1160A31A6C}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{6325A84C-E746-4007-A9C5-E4C1A50ED61F}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{BB17DE65-B548-48C2-AC73-1FD1996C7261}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{C77D3EEF-FDCA-4D37-B0D2-5FF650E07825}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{EA70EB31-CBAD-4862-AFDA-DCFCC32722ED}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{F1A1ABE3-F454-4DD9-B520-01F2EEC5F0DD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{09CFDB88-F9F0-40BA-885E-F47A957D12E6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2B1B440F-A9DB-46E3-ADCF-AA6E08143FB8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D879A501-50A7-BEFC-A4C5-32DC6E0CB208}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F13A0006-F3A9-4778-B8F1-6BD167475531}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8E505161-C877-49F5-82CA-D2FF0B72862C}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECCA77AD-EF06-4650-B6FC-7A0E90687EB4}
[-] Key Deleted : HKCU\Software\distromatic
[-] Key Deleted : HKCU\Software\OMX_Media
[-] Key Deleted : HKCU\Software\ParetoLogic
[-] Key Deleted : HKCU\Software\Reimage
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKCU\Software\Yahoo\Companion
[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar
[-] Key Deleted : HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Key Deleted : HKLM\SOFTWARE\ParetoLogic
[-] Key Deleted : HKLM\SOFTWARE\Reimage
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\SmartPCFixer
[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\Lavasoft\Web Companion
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Object Browser
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser
[-] Key Deleted : HKU\S-1-5-21-1041595210-3142763762-647459838-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF}

***** [ Web browsers ] *****

[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : inbox.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mysearch.avg.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : dts.search-results.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch.ask.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www2.inbox.com
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.amazon.com/websearch/ref=bit_bds-p23_serp_cr_us_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_d9e90155b1094da7ae52d881268e9a3f_39_1006_20130908_US_cr_sp_
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://mysearch.avg.com?cid={F974A7B4-B85F-4F39-8AD5-CD41905D34B9}&mid=b8482535b23247d29621d153e643712e-1ed54f7cc85099c282b104841b91eb2f8de6884c&lang=en&ds=vb011&coid=avgtbdisvb&cmpid=&pr=sa&d=2014-02-07 22:53:04&v=17.3.1.91&pid=safeguard&sg=&sap=hp
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : dlmebkoiahbppacaicbgncnjhbpdfkcc
[-] [C:\Users\Stephens\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://search.conduit.com/?ctid=CT3320049&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPEC9F1CCA-F0ED-46A2-AC7A-1F984F5DE277&SSPV=
[-] [C:\Users\johnny\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\johnny\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

*************************

:: "Tracing" keys deleted
:: Winsock2 - Deleted C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [9207 bytes] - [10/04/2016 06:03:55]
C:\AdwCleaner\AdwCleaner[C6].txt - [1533 bytes] - [01/01/2016 12:36:42]
C:\AdwCleaner\AdwCleaner[R0].txt - [12971 bytes] - [27/12/2014 12:56:59]
C:\AdwCleaner\AdwCleaner[R1].txt - [1846 bytes] - [31/01/2015 19:13:00]
C:\AdwCleaner\AdwCleaner[R2].txt - [1345 bytes] - [19/03/2015 18:10:20]
C:\AdwCleaner\AdwCleaner[R3].txt - [1462 bytes] - [19/03/2015 18:26:44]
C:\AdwCleaner\AdwCleaner[R4].txt - [2546 bytes] - [20/03/2015 18:48:51]
C:\AdwCleaner\AdwCleaner[R5].txt - [2838 bytes] - [28/06/2015 12:06:33]
C:\AdwCleaner\AdwCleaner[R6].txt - [2897 bytes] - [28/06/2015 12:10:52]
C:\AdwCleaner\AdwCleaner[S0].txt - [13170 bytes] - [27/12/2014 12:59:16]
C:\AdwCleaner\AdwCleaner[S1].txt - [13966 bytes] - [31/01/2015 19:15:23]
C:\AdwCleaner\AdwCleaner[S2].txt - [12098 bytes] - [19/03/2015 18:13:40]
C:\AdwCleaner\AdwCleaner[S3].txt - [331 bytes] - [19/03/2015 18:29:56]
C:\AdwCleaner\AdwCleaner[S4].txt - [3017 bytes] - [28/06/2015 12:14:44]
C:\AdwCleaner\AdwCleaner[S8].txt - [7228 bytes] - [01/01/2016 12:31:42]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [10305 bytes] ##########

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 7 Professional x86
Ran by Stephens (Administrator) on Sun 04/10/2016 at 6:15:34.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 22

Successfully deleted: C:\Users\Stephens\AppData\Roaming\nico mak computing (Folder)
Successfully deleted: C:\Windows\System32\Tasks\SpeedFixToolPro_Start (Task)
Successfully deleted: C:\Windows\System32\Tasks\SpeedFixToolSoftware_Popup (Task)
Successfully deleted: C:\Windows\System32\Tasks\SpeedFixToolSoftware_Start (Task)
Successfully deleted: C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 (Task)
Successfully deleted: C:\Program Files\pc driver kit (Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3WO471HG (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6OR0GQQL (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PHUIE7 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I3J5T4NJ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KNUPAUVW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M97L9UZ6 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2K8JUT8 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Stephens\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UG2S6AVH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3WO471HG (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6OR0GQQL (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77PHUIE7 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I3J5T4NJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KNUPAUVW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M97L9UZ6 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2K8JUT8 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UG2S6AVH (Temporary Internet Files Folder)



Registry: 4

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{108F28A5-20DB-46F6-9B81-A1E18BC1358E} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 04/10/2016 at 6:18:21.16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Broni: nothing cam up on scan last night. I will rin it again

 

Broni I followed your Instructions And ran another scan. It showed 0 Threats. clicked history. nothing in history, just like last time. showed a protection log for today but no threats nothing in Quarantine

 

Ran another MBAM scan this A. M. Still 0 threats

 

This is the reason I cant get any threat results. how fix?
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/11/2016
Scan Time: 11:47 AM
Logfile: MBAM.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.04.11.04
Rootkit Database: v2016.04.09.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7
CPU: x86
File System: NTFS
User: Stephens


Scan Type: Threat Scan
Result: Completed

All the threat protection is disabled