jacobi

Starbuck, I've tried all these things and chrome does open which it didn't do before. It opens unusual but I can live with.It's no big deal and in time it will start working again I'm sure. Thanks for all the time you have spent.I really appreciate it.

When I goto user settings I've got it set to the 1st notch down and google chrome opens but I have to say yes to [do .I never had to do that before. you want this app make changes to your computer] Google chrome seems to work pk other than that.Like I said before if I set it to the 2nd notch down my search arrow buffers and won't stoping. By buffering I mean you get a circle going around your arrow and nothing hardly works at that point. I would like it if the google chrome search page would come up without that other page with[Do you want this app to make changes and have to say yes each time. Hope that clears it up some.

I done that and I thought things were going great and I slide the slide down 1 notch and my arrow started to buffer and wouldn't stop.So I changed the slide back to original settingd and buffering won't stop. So I rebooted and now the computer is working agsin but of course my google chrome is not. Do I need to set the slider to a different setting? Now your site I have on the taskbar acts like google chrome,don't open I'm now going to your site from a browser if I can.

It opens now but differently.It opens in[ user account control.] It asks if I want to allow this app to make changes to your device. I click yes and it says upper left on page Chrome extention hchmm what ever that is. an option appears to change to restore settings.I do that and upper left on page says new tab. It seems to be working good but why do I always get the page[ allow to make changes ] That blue & yellow is still on the google chrome icon.

Fix result of Farbar Recovery Scan Tool (x64) Version: 05-02-2017 Ran by johnson (07-02-2017 13:46:17) Run:1 Running from C:\Users\johnson\Desktop Loaded Profiles: johnson (Available Profiles: johnson & norman) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: HKLM-x32\...\Run: [] => [X] ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File Toolbar: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File CHR Extension: (Website Logon) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlagl aciobe [2016-11-06] U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath 2017-01-29 10:22 - 2017-01-29 10:22 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\-j61psnc.dll 2017-01-26 10:01 - 2017-01-26 10:02 - 6187064 _____ (PC Drivers HeadQuarters LP) C:\Users\johnson\AppData\Local\Temp\DriverSupport. exe 2017-02-02 10:06 - 2017-02-02 10:06 - 0094208 _____ () C:\Users\johnson\AppData\Local\Temp\fjy9bice.dll 2017-02-02 10:06 - 2017-02-02 10:06 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\iid-exne.dll 2017-01-28 10:13 - 2017-01-28 10:13 - 0010752 _____ () C:\Users\johnson\AppData\Local\Temp\vim9tu59.dll CustomCLSID: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.3 1.5\psuser_64.dll => No File Task: {7C08363C-3BE1-497D-8E46-535B389248BE} - \DriverUpdate Plus Autostart -> No File <==== ATTENTION Task: {CCE5B268-A298-41E1-BA53-F4D66D7502F0} - \DriverAssist.AutoScheduledFirstWeek -> No File <==== ATTENTION Task: {F69D18AD-122F-4E94-A268-6B205067FE5F} - \DriverUpdate Startup.job -> No File <==== ATTENTION AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125] IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxp://apps.driversupport.com IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxps://apps.driversupport.com CMD: ipconfig /flushdns Hosts: EmptyTemp: ***************** Processes closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => key removed successfully HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found. HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found. C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlagl aciobe => not found HKLM\System\CurrentControlSet\Services\idsvc => key removed successfully idsvc => service removed successfully HKLM\System\CurrentControlSet\Services\wpcsvc => key removed successfully wpcsvc => service removed successfully C:\Users\johnson\AppData\Local\Temp\-j61psnc.dll => moved successfully "C:\Users\johnson\AppData\Local\Temp\DriverSupport. exe" => not found. C:\Users\johnson\AppData\Local\Temp\fjy9bice.dll => moved successfully C:\Users\johnson\AppData\Local\Temp\iid-exne.dll => moved successfully C:\Users\johnson\AppData\Local\Temp\vim9tu59.dll => moved successfully HKU\S-1-5-21-1299748725-2840673240-3181589748-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7C08363C-3BE1-497D-8E46-535B389248BE} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C08363C-3BE1-497D-8E46-535B389248BE} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DriverUpdate Plus Autostart => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CCE5B268-A298-41E1-BA53-F4D66D7502F0} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCE5B268-A298-41E1-BA53-F4D66D7502F0} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DriverAssist.AutoScheduledFirstWeek => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F69D18AD-122F-4E94-A268-6B205067FE5F} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F69D18AD-122F-4E94-A268-6B205067FE5F} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DriverUpdate Startup.job => key removed successfully C:\ProgramData\Temp => ":5C321E34" ADS removed successfully. HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\driversupport.com => key removed successfully HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\driversupport.com => key not found. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. =========== EmptyTemp: ========== BITS transfer queue => 3308793 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 288062533 B Java, Flash, Steam htmlcache => 506 B Windows/system/drivers => 9468735 B Edge => 77544059 B Chrome => 483603465 B Firefox => 373432698 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 6620 B NetworkService => 106464 B johnson => 257507083 B norman => 21727068 B RecycleBin => 19707609 B EmptyTemp: => 1.4 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 13:48:29 ====

CloseProcesses: HKLM-x32\...\Run: [] => [X] ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File Toolbar: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File CHR Extension: (Website Logon) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlagl aciobe [2016-11-06] U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath 2017-01-29 10:22 - 2017-01-29 10:22 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\-j61psnc.dll 2017-01-26 10:01 - 2017-01-26 10:02 - 6187064 _____ (PC Drivers HeadQuarters LP) C:\Users\johnson\AppData\Local\Temp\DriverSupport. exe 2017-02-02 10:06 - 2017-02-02 10:06 - 0094208 _____ () C:\Users\johnson\AppData\Local\Temp\fjy9bice.dll 2017-02-02 10:06 - 2017-02-02 10:06 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\iid-exne.dll 2017-01-28 10:13 - 2017-01-28 10:13 - 0010752 _____ () C:\Users\johnson\AppData\Local\Temp\vim9tu59.dll CustomCLSID: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.3 1.5\psuser_64.dll => No File Task: {7C08363C-3BE1-497D-8E46-535B389248BE} - \DriverUpdate Plus Autostart -> No File <==== ATTENTION Task: {CCE5B268-A298-41E1-BA53-F4D66D7502F0} - \DriverAssist.AutoScheduledFirstWeek -> No File <==== ATTENTION Task: {F69D18AD-122F-4E94-A268-6B205067FE5F} - \DriverUpdate Startup.job -> No File <==== ATTENTION AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125] IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxp://apps.driversupport.com IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxps://apps.driversupport.com CMD: ipconfig /flushdns Hosts: EmptyTemp:

I only have first 64 on desktop icon where you show fixit on there to. when I r click on the icon I got on the desktop I get the fix to click on but I gort the message Don't have a fixlog I took out megabytes and still same thing

When I click on fix I get this.Not sure what to do. No fixlist found The fixlist.txt should be in the same folder/directory the tool is located

I have microsoft Edge for my default browser but that also quit working just like google chrome did .But it's working again now. When google chrome quit working I downloaded chrome canary and it worked ok. On my google chrome icon on my desktop a smaller version of malwarebyts icon is impressed on the google chrome desktop icon. How does that happen? When I get time I'll try that fix. That small malwarebytes icon is also on the Fist64.exe.

chrome don';t work in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) 　 Task: {02294D0B-7700-48E0-B608-47C6F972F368} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1299748725-2840673240-3181589748-1001UA => C:\Users\johnson\AppData\Local\Google\Update\GoogleUpdate.exe [2017-02-02] (Google Inc.) Task: {042937CB-5476-4C2A-8480-C5E036578E2B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {100106ED-7309-4442-9A51-7B981E818C7D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-01-09] (HP Inc.) Task: {16148B58-7BE7-40A9-9301-F4316CA0586E} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.) Task: {1DBE1DA8-EC4D-43A8-9211-7A79ADAD6EB5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-28] (Google Inc.) Task: {2C7382A3-B92A-42F8-9B47-17343C731095} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.) Task: {35A742C1-2971-4943-A2E3-29AD462FFAAC} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {3ACF76E4-F5DF-431C-BEA2-BE70CF85AE6D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {3BA58CD2-6D3D-4691-B39F-A8A256308857} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated) Task: {44050269-0D2D-4143-A83A-BBB00844F8E6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.) Task: {448270B0-5154-498D-B24D-AE71E7DB5927} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {487439A5-8857-4FAF-9176-1319ED8B7CDD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.) Task: {4D0B003D-84DF-41CB-B93E-AFFA3BE19081} - System32\Tasks\Driver Support => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2017-01-12] (PC Drivers Headquarters LP) Task: {4EF9C94A-BEB8-4886-8EFB-6F8DC72DE967} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {53ABC437-1B0B-41C8-BFA8-0949927B2CAE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {55FDF64B-3C5A-49F4-9EC4-597B575CA285} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {60C6872D-D8C5-4B88-8980-45D08F81447E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {60FDD1C0-3CB4-43EC-9585-EF06480EF0EE} - System32\Tasks\Driver Support-RTMScan => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2017-01-12] (PC Drivers Headquarters LP) Task: {629D44A3-0E4C-41DE-B7A4-319A4230C94C} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [2017-01-27] (AVG Technologies CZ, s.r.o.) Task: {66373DB8-4A8D-49A8-88A9-7AC45A9257AE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {76028AB5-AC97-4F06-8327-7D5A47A19935} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7653EF50-8645-4345-90D9-8F0370DD4E61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-28] (Google Inc.) Task: {7C08363C-3BE1-497D-8E46-535B389248BE} - \DriverUpdate Plus Autostart -> No File <==== ATTENTION Task: {8019363D-BCAD-4773-B90D-F17D42075CBA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {8D77A25D-FD6A-481A-B0D6-9678902CB9A5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {97D57FBC-B035-440C-88E7-9E676CD64057} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {9EE88514-786B-4C6B-B761-AD00A3815399} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {ABE81196-0AAC-419A-993A-CA0F9FA7E738} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {B0783751-AFAE-4BFF-B02A-3C74BBADC98E} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B37F7684-87C2-4FCE-8C4D-D8B2743C2C3B} - System32\Tasks\Driver Support-RTMRules => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2017-01-12] (PC Drivers Headquarters LP) Task: {BB891099-3F04-45DA-8DFA-066AB33B0F7D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {BE689D5B-151D-45B7-A75A-6A0EEDF5EF24} - System32\Tasks\Driver Support-RTMUpdater => C:\Program Files (x86)\Driver Support\DriverSupport.exe [2017-01-12] (PC Drivers Headquarters LP) Task: {C0F395F2-9715-4314-A840-2E6C417F6A32} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C4441B81-D463-4334-8DDB-1B8A21A73015} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2011-07-20] (CyberLink) Task: {C6429797-F491-4F5C-BD36-6AC08CF60D18} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CB49B405-8F58-47A1-94EA-456AD3BA1F3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-01-09] (HP Inc.) Task: {CCC8BAFB-1D8E-47BC-907B-2389BE8FDB55} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe Task: {CCE5B268-A298-41E1-BA53-F4D66D7502F0} - \DriverAssist.AutoScheduledFirstWeek -> No File <==== ATTENTION Task: {EC84A4E7-8BD0-4933-93A1-3B310E9FA9E8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2016-12-15] (HP Inc.) Task: {ECFBE5E3-A68A-4F64-B21F-F9CD2D4ED7C0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1299748725-2840673240-3181589748-1001Core => C:\Users\johnson\AppData\Local\Google\Update\GoogleUpdate.exe [2017-02-02] (Google Inc.) Task: {EE44F1BC-3A65-4249-BBAC-F4DEB17CDF61} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {F0347D40-49C4-46F6-AFB5-FE3AEBBE61A8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.) Task: {F2511BEE-366D-49C8-BB06-D1D74AAAE162} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F69D18AD-122F-4E94-A268-6B205067FE5F} - \DriverUpdate Startup.job -> No File <==== ATTENTION Task: {FE359D52-B96F-4580-9929-3CFDC7A49C65} - System32\Tasks\HPCeeScheduleForjohnson => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.) 　 (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) 　 Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForjohnson.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe 　 ==================== Shortcuts ============================= 　 (The entries could be listed to be restored or removed.) 　 ==================== Loaded Modules (Whitelisted) ============== 　 2016-07-16 05:42 - 2016-07-16 05:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2017-01-06 07:21 - 2017-01-06 07:21 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2017-01-06 07:21 - 2017-01-06 07:21 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2017-01-06 07:21 - 2017-01-06 07:21 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2017-01-06 07:21 - 2017-01-06 07:21 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-12 16:00 - 2016-12-21 01:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-22 17:11 - 2017-01-22 17:16 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-01-22 17:11 - 2017-01-22 17:16 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-01-22 17:11 - 2017-01-22 17:16 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-01-06 11:06 - 2017-01-06 11:12 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\roottools.dll 2016-08-24 22:19 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll 2017-01-12 15:59 - 2016-12-21 00:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-02-02 10:54 - 2017-02-02 04:47 - 02927448 _____ () C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\58.0.3000.0\libglesv2.dll 2017-02-02 10:54 - 2017-02-02 04:47 - 00099672 _____ () C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\58.0.3000.0\libegl.dll 2017-02-02 13:02 - 2017-02-02 13:02 - 00051200 _____ () C:\Program Files\WindowsApps\11361JustinChase.Clipboard_1.6.0.18_neutral__aahkhnxzpwnc4\Clipboard.exe 2017-01-12 15:59 - 2016-12-21 00:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-12 15:59 - 2016-12-21 00:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-12 15:59 - 2016-12-21 00:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2017-01-12 15:59 - 2016-12-21 00:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-12 15:59 - 2016-12-21 00:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2017-01-27 10:44 - 2016-06-23 13:07 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll 2017-01-27 10:46 - 2017-01-27 10:46 - 00171208 _____ () C:\Program Files (x86)\AVG\Antivirus\JsonRpcServer.dll 2017-01-27 10:46 - 2017-01-27 10:46 - 48936448 _____ () C:\Program Files (x86)\AVG\Antivirus\libcef.dll 2017-01-27 10:46 - 2017-01-27 10:46 - 00656040 _____ () C:\Program Files (x86)\AVG\Antivirus\ffl2.dll 　 ==================== Alternate Data Streams (Whitelisted) ========= 　 (If an entry is included in the fixlist, only the ADS will be removed.) 　 AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125] 　 ==================== Safe Mode (Whitelisted) =================== 　 (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) 　 　 ==================== Association (Whitelisted) =============== 　 (If an entry is included in the fixlist, the registry item will be restored to default or removed.) 　 　 ==================== Internet Explorer trusted/restricted =============== 　 (If an entry is included in the fixlist, it will be removed from the registry.) 　 IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxp://apps.driversupport.com IE trusted site: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\driversupport.com -> hxxps://apps.driversupport.com 　 ==================== Hosts content: =============================== 　 (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 　 2009-07-13 20:34 - 2009-06-10 15:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts 　 　 ==================== Other Areas ============================ 　 (Currently there is no automatic fix for this section.) 　 HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. 　 ==================== MSCONFIG/TASK MANAGER disabled items == 　 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe 　 ==================== FirewallRules (Whitelisted) =============== 　 (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) 　 FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808 FirewallRules: [{A81BE6D1-9FC2-49D4-ABEF-E7CA78D547DE}] => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe FirewallRules: [{2FD0A9CE-980E-4661-ADC0-D07973EAD8A7}] => C:\Program Files (x86)\Hp\Digital Imaging\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}\setup\hpznui40.exe FirewallRules: [{D2D1B519-5DBD-4F8B-8CA5-62BD55E299F6}] => C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe FirewallRules: [{2426393F-F255-46CD-9EC8-CF3A8A57618E}] => C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [{5DAE54BF-4AA2-4FF1-8893-10CB1A807D8B}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{096C0F49-F393-47C5-BC9C-1815C2EEFF17}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{6C078DC6-5AF6-41E6-B9B4-BE32C8150DF4}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{322150F3-C1FA-42AA-BDA8-64BFB51158DD}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{03E99B30-302D-4F03-8B48-576566D9EB0E}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe FirewallRules: [{944C7E56-CD3A-4529-9F47-E56DD16711C3}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe FirewallRules: [{F77EB284-377B-4320-9818-4C40FAD133A6}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{46D98D2B-4A66-4544-BB38-DB0E4FCEB86B}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{D5E943A3-4A55-40C5-9A48-0047AFFAAC89}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe FirewallRules: [{E75DF3F8-FADF-4660-9A78-F934809EAC12}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{6535EA71-42F8-415B-987A-0DF84F8754FF}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{E3C19609-967B-4D90-ACAF-DC4BE5BD9369}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{E1E0DBE9-77DC-489F-B5A6-F85183FCA402}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe FirewallRules: [{7A0C14FC-1305-41BC-B5EF-A431C16AF19D}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe FirewallRules: [{A782FABD-079B-4A74-8E60-EDA87336BDF2}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{C91FCFB3-087D-48FF-90C7-9B55A18C7A97}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{03F22F3A-C91B-4E75-B325-C0A4DBE1E174}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{D665488B-EBFB-4A35-996C-4E1160FDB93A}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{3B7C8279-D99D-4E1F-80CD-1824008F8ACF}] => LPort=1900 FirewallRules: [{53B52E56-D397-4C05-88EF-CCAE1AE63643}] => LPort=2869 FirewallRules: [{AF0D52D7-6AAE-447C-A3A6-E41FACB7381A}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{DFD7E7A2-B708-496E-9D86-F7CDBF438B9A}] => C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe FirewallRules: [{DA5A5D75-D938-4A04-99E8-21CB5247BFB4}] => C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe FirewallRules: [{C9D9E761-EBB1-416E-9669-2E607DEA7DE5}] => C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe FirewallRules: [{D0085E91-5B44-45E4-861B-1543975156E9}] => C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe FirewallRules: [{5E16F775-92FB-46B4-9870-8D63E5655937}] => C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe FirewallRules: [{86879568-8B09-4BDA-BA98-06C955D564FE}] => C:\Program Files (x86)\Hewlett-Packard\MediaSmart\RoxioNow\RNow.exe FirewallRules: [{D2C704D8-F71D-4129-BF28-3ABFEE82A4F9}] => C:\Program Files (x86)\Roxio\RoxioNow Player\RNowShell.exe FirewallRules: [{549735BC-F0C7-4594-BB84-CA86D2BFF562}] => C:\Program Files (x86)\Roxio\RoxioNow Player\RNowShell.exe FirewallRules: [{3CF5FC88-A39D-4F23-8415-C65CEDFB626F}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{945A8407-F877-4D34-BFB1-98146404BA53}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{96397100-2473-47EE-9587-298A64C74CF8}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 　 ==================== Restore Points ========================= 　 15-01-2017 23:40:48 W-10 working good 21-01-2017 18:28:45 Restore Operation 26-01-2017 11:40:08 Windows Update 　 ==================== Faulty Device Manager Devices ============= 　 　 ==================== Event log errors: ========================= 　 Application errors: ================== Error: (02/02/2017 05:49:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: JOHNSON-HP) Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. 　 Error: (02/02/2017 05:13:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: JOHNSON-HP) Description: Package Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe+App was terminated because it took too long to suspend. 　 Error: (02/02/2017 11:08:17 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. 　 Process ID: 2aec 　 Start Time: 01d27d76ab733f3d 　 Termination Time: 15 　 Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe 　 Report Id: 2d929a74-e96a-11e6-9fde-3860779ec705 　 Faulting package full name: 　 Faulting package-relative application ID: 　 Error: (02/01/2017 01:02:51 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Enumerating user sessions to generate filter pools failed. 　 Details: (HRESULT : 0x80040210) (0x80040210) 　 Error: (01/29/2017 03:18:57 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Enumerating user sessions to generate filter pools failed. 　 Details: (HRESULT : 0x80040210) (0x80040210) 　 Error: (01/29/2017 03:18:57 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Enumerating user sessions to generate filter pools failed. 　 Details: (HRESULT : 0x80040210) (0x80040210) 　 Error: (01/29/2017 03:12:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Faulting module name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Exception code: 0xc0000417 Fault offset: 0x0001280a Faulting process id: 0x554 Faulting application start time: 0x01d27a747104934a Faulting application path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Faulting module path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Report Id: 9ccf4a3f-f151-4dc0-b1bd-2f4dd2b8ea08 Faulting package full name: Faulting package-relative application ID: 　 Error: (01/28/2017 02:45:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Faulting module name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Exception code: 0xc0000417 Fault offset: 0x0001280a Faulting process id: 0x564 Faulting application start time: 0x01d279a77d174219 Faulting application path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Faulting module path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Report Id: 835da7d8-1473-4bb4-9cfa-f7e780c66dda Faulting package full name: Faulting package-relative application ID: 　 Error: (01/28/2017 01:39:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Faulting module name: TrueSuiteService.exe, version: 5.3.0.194, time stamp: 0x4df09290 Exception code: 0xc0000417 Fault offset: 0x0001280a Faulting process id: 0x534 Faulting application start time: 0x01d2799e40b27a92 Faulting application path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Faulting module path: C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe Report Id: 28b7e621-c935-4683-9a0f-37bf8c157b94 Faulting package full name: Faulting package-relative application ID: 　 Error: (01/28/2017 12:42:23 PM) (Source: Perflib) (EventID: 1023) (User: ) Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code. 　 　 System errors: ============= Error: (02/02/2017 05:49:14 PM) (Source: DCOM) (EventID: 10010) (User: JOHNSON-HP) Description: The server App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca did not register with DCOM within the required timeout. 　 Error: (02/02/2017 01:01:19 PM) (Source: DCOM) (EventID: 10016) (User: JOHNSON-HP) Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user johnson-HP\johnson SID (S-1-5-21-1299748725-2840673240-3181589748-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe SID (S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157). This security permission can be modified using the Component Services administrative tool. 　 Error: (02/02/2017 10:05:12 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 　 Error: (02/02/2017 12:16:47 AM) (Source: DCOM) (EventID: 10010) (User: JOHNSON-HP) Description: The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. 　 Error: (02/01/2017 05:18:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 　 Error: (02/01/2017 01:49:35 PM) (Source: DCOM) (EventID: 10010) (User: JOHNSON-HP) Description: The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. 　 Error: (02/01/2017 01:03:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 　 Error: (01/29/2017 11:09:42 PM) (Source: DCOM) (EventID: 10010) (User: JOHNSON-HP) Description: The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. 　 Error: (01/29/2017 03:32:40 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 　 Error: (01/29/2017 03:31:08 PM) (Source: DCOM) (EventID: 10016) (User: johnson-HP) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {9E175B6D-F52A-11D8-B9A5-505054503030} and APPID {9E175B9C-F52A-11D8-B9A5-505054503030} to the user johnson-HP\norman SID (S-1-5-21-1299748725-2840673240-3181589748-1004) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool. 　 　 CodeIntegrity: =================================== Date: 2017-01-23 13:02:38.027 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:38.024 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:38.020 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:38.011 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.992 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.771 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.768 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.764 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.751 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 Date: 2017-01-23 13:02:37.729 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. 　 　 ==================== Memory info =========================== 　 Processor: Intel® Core i3-2120 CPU @ 3.30GHz Percentage of memory in use: 61% Total physical RAM: 4002.51 MB Available physical RAM: 1548.29 MB Total Virtual: 8098.51 MB Available Virtual: 4811.26 MB 　 ==================== Drives ================================ 　 Drive c: (OS) (Fixed) (Total:919.45 GB) (Free:870.62 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:11.52 GB) (Free:1.4 GB) NTFS ==>[system with boot components (obtained from drive)] 　 ==================== MBR & Partition Table ================== 　 ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3D85BFBF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=919.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=11.5 GB) - (Type=07 NTFS) 　 ==================== End of Addition.txt ============================

chrom don't work Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017 Ran by johnson (administrator) on JOHNSON-HP (02-02-2017 18:09:20) Running from C:\Users\johnson\Desktop Loaded Profiles: johnson (Available Profiles: johnson & norman) Platform: Windows 10 Home Version 1607 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ 　 ==================== Processes (Whitelisted) ================= 　 (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) 　 (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (PC Drivers Headquarters LP) C:\Program Files (x86)\Driver Support\DriverSupport.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAOsvc.exe (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAO.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\11361JustinChase.Clipboard_1.6.0.18_neutral__aahkhnxzpwnc4\Clipboard.exe (Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe 　 ==================== Registry (Whitelisted) ==================== 　 (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) 　 HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard) HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239672 2017-01-09] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-05] (PDF Complete Inc) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe [9523496 2017-01-27] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\Run: [Google Update] => C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2017-02-02] (Google Inc.) ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File 　 ==================== Internet (Whitelisted) ==================== 　 (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) 　 Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{fd14d3f5-d522-41a4-b3a1-b81b8aaf5e44}: [DhcpNameServer] 192.168.2.1 　 Internet Explorer: ================== HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPDSK/1 HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK/1 SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-06-09] (HP) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-08-28] (Google Inc.) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-08-23] (HP Inc.) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.) BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-06-09] (HP) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-08-28] (Google Inc.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-08-23] (HP Inc.) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-08-28] (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-08-28] (Google Inc.) Toolbar: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File 　 FireFox: ======== FF DefaultProfile: 51bsi5gn.default FF ProfilePath: C:\Users\johnson\AppData\Roaming\Mozilla\Firefox\Profiles\51bsi5gn.default [2017-02-02] FF Extension: (Search for Fire Fox) - C:\Users\johnson\AppData\Roaming\Mozilla\Firefox\Profiles\51bsi5gn.default\Extensions\{58f9a1bb-0635-4b79-bb41-166c3e810329}.xpi [2017-01-26] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-11-06] [not signed] FF HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] () FF Plugin HKU\S-1-5-21-1299748725-2840673240-3181589748-1001: @tools.google.com/Google Update;version=3 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-02] (Google Inc.) FF Plugin HKU\S-1-5-21-1299748725-2840673240-3181589748-1001: @tools.google.com/Google Update;version=9 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-02] (Google Inc.) 　 Chrome: ======= CHR Profile: C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default [2017-02-02] CHR Extension: (Google Slides) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-06] CHR Extension: (Google Docs) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-06] CHR Extension: (Google Drive) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-28] CHR Extension: (YouTube) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-28] CHR Extension: (Google Sheets) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-06] CHR Extension: (Google Docs Offline) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-06] CHR Extension: (FromDocToPDF) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hchmmhlbahnilgeflhdciiobdnmjgiag [2016-09-17] CHR Extension: (Website Logon) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlaglaciobe [2016-11-06] CHR Extension: (Chrome Web Store Payments) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-21] CHR Extension: (Gmail) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-28] CHR Extension: (Chrome Media Router) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-26] CHR Profile: C:\Users\johnson\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-03] CHR HKLM-x32\...\Chrome\Extension: [jpgfhihjicjofdejkbjgnjlaglaciobe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-06-03] 　 ==================== Services (Whitelisted) ==================== 　 (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) 　 R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [260080 2017-01-27] (AVG Technologies CZ, s.r.o.) R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [6183576 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1255272 2017-01-09] (AVG Technologies CZ, s.r.o.) R2 DSAO; C:\Program Files (x86)\driver support\svc\DriverSupportAOsvc.exe [2033104 2016-10-22] (PC Drivers HeadQuarters LP) S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [923136 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2016-11-12] (Microsoft Corporation) [File not signed] S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-05] (PDF Complete Inc) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) 　 ===================== Drivers (Whitelisted) ====================== 　 (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) 　 R1 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [165624 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [311592 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [192096 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [336920 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [50848 2017-01-27] (AVG Technologies CZ, s.r.o.) S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [39288 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [127072 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [101624 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [75664 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [992488 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [555152 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgStm; C:\WINDOWS\system32\drivers\avgStm.sys [163512 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [311472 2017-01-27] (AVG Technologies CZ, s.r.o.) R3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider) R3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2016-08-28] () R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath 　 ==================== NetSvcs (Whitelisted) =================== 　 (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017 Ran by johnson (administrator) on JOHNSON-HP (02-02-2017 18:09:20) Running from C:\Users\johnson\Desktop Loaded Profiles: johnson (Available Profiles: johnson & norman) Platform: Windows 10 Home Version 1607 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (PC Drivers Headquarters LP) C:\Program Files (x86)\Driver Support\DriverSupport.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAOsvc.exe (PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAO.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\11361JustinChase.Clipboard_1.6.0.18_neutral__aahkhnxzpwnc4\Clipboard.exe (Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard) HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239672 2017-01-09] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-05] (PDF Complete Inc) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe [9523496 2017-01-27] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\Run: [Google Update] => C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2017-02-02] (Google Inc.) ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{fd14d3f5-d522-41a4-b3a1-b81b8aaf5e44}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPDSK/1 HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK/1 SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {6B1C1C7C-C622-41F0-A32A-55162A248E22} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-06-09] (HP) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-08-28] (Google Inc.) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-08-23] (HP Inc.) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.) BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-06-09] (HP) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-08-28] (Google Inc.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-08-23] (HP Inc.) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-08-28] (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-08-28] (Google Inc.) Toolbar: HKU\S-1-5-21-1299748725-2840673240-3181589748-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FireFox: ======== FF DefaultProfile: 51bsi5gn.default FF ProfilePath: C:\Users\johnson\AppData\Roaming\Mozilla\Firefox\Profiles\51bsi5gn.default [2017-02-02] FF Extension: (Search for Fire Fox) - C:\Users\johnson\AppData\Roaming\Mozilla\Firefox\Profiles\51bsi5gn.default\Extensions\{58f9a1bb-0635-4b79-bb41-166c3e810329}.xpi [2017-01-26] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-11-06] [not signed] FF HKU\S-1-5-21-1299748725-2840673240-3181589748-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] () FF Plugin HKU\S-1-5-21-1299748725-2840673240-3181589748-1001: @tools.google.com/Google Update;version=3 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-02] (Google Inc.) FF Plugin HKU\S-1-5-21-1299748725-2840673240-3181589748-1001: @tools.google.com/Google Update;version=9 -> C:\Users\johnson\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-02] (Google Inc.) Chrome: ======= CHR Profile: C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default [2017-02-02] CHR Extension: (Google Slides) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-06] CHR Extension: (Google Docs) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-06] CHR Extension: (Google Drive) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-28] CHR Extension: (YouTube) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-28] CHR Extension: (Google Sheets) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-06] CHR Extension: (Google Docs Offline) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-06] CHR Extension: (FromDocToPDF) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\hchmmhlbahnilgeflhdciiobdnmjgiag [2016-09-17] CHR Extension: (Website Logon) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlaglaciobe [2016-11-06] CHR Extension: (Chrome Web Store Payments) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-21] CHR Extension: (Gmail) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-28] CHR Extension: (Chrome Media Router) - C:\Users\johnson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-26] CHR Profile: C:\Users\johnson\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-03] CHR HKLM-x32\...\Chrome\Extension: [jpgfhihjicjofdejkbjgnjlaglaciobe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-06-03] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [260080 2017-01-27] (AVG Technologies CZ, s.r.o.) R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [6183576 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1255272 2017-01-09] (AVG Technologies CZ, s.r.o.) R2 DSAO; C:\Program Files (x86)\driver support\svc\DriverSupportAOsvc.exe [2033104 2016-10-22] (PC Drivers HeadQuarters LP) S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [923136 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2016-11-12] (Microsoft Corporation) [File not signed] S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-05] (PDF Complete Inc) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [165624 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [311592 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [192096 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [336920 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [50848 2017-01-27] (AVG Technologies CZ, s.r.o.) S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [39288 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [127072 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [101624 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [75664 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [992488 2017-01-27] (AVG Technologies CZ, s.r.o.) R1 avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [555152 2017-01-27] (AVG Technologies CZ, s.r.o.) R2 avgStm; C:\WINDOWS\system32\drivers\avgStm.sys [163512 2017-01-27] (AVG Technologies CZ, s.r.o.) R0 avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [311472 2017-01-27] (AVG Technologies CZ, s.r.o.) R3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider) R3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2016-08-28] () R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved

chrome don't work Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29 (If an entry is included in the fixlist, the file/folder will be moved.) 　 2017-02-02 15:43 - 2016-08-29 14:17 - 00000462 _____ C:\Users\johnson\Desktop\Ixquick Search Engine.website 2017-02-02 14:56 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-02 13:02 - 2016-07-16 05:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-02 11:34 - 2016-08-31 10:40 - 00000497 _____ C:\Users\johnson\Desktop\Midwest Auctions - Your Online Auction Guide auctions in Minnesota, North Dakota, South Dakota, Iowa and Wisconsin.website 2017-02-02 11:02 - 2016-09-01 10:01 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-02-02 10:54 - 2016-08-28 20:32 - 00000000 ____D C:\Users\johnson\AppData\Local\Google 2017-02-02 10:23 - 2016-08-28 20:32 - 00000000 ____D C:\Program Files (x86)\Google 2017-02-01 13:18 - 2016-08-28 20:39 - 00000000 ____D C:\ProgramData\PDFC 2017-02-01 13:09 - 2016-09-20 14:55 - 00000362 _____ C:\WINDOWS\Tasks\HPCeeScheduleForjohnson.job 2017-02-01 13:04 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-29 15:12 - 2016-08-30 10:21 - 00000000 ____D C:\WINDOWS\hpoj4500g510g-m 2017-01-29 15:12 - 2016-08-28 20:44 - 00000000 ____D C:\ProgramData\truesuite 2017-01-29 15:12 - 2016-07-16 00:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-01-28 12:41 - 2016-08-28 19:54 - 00000000 ____D C:\Users\johnson\AppData\LocalLow\AuthenTec 2017-01-28 10:27 - 2016-10-31 09:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-01-28 10:25 - 2016-08-30 10:24 - 00000000 ____D C:\Users\johnson\AppData\Roaming\Yahoo! 2017-01-28 10:25 - 2016-08-30 10:24 - 00000000 ____D C:\Program Files (x86)\Yahoo! 2017-01-27 12:44 - 2016-10-30 15:57 - 00000000 ____D C:\ProgramData\Avg 2017-01-27 10:48 - 2016-10-30 16:50 - 00000000 ____D C:\Users\johnson\AppData\Roaming\AVG 2017-01-27 10:47 - 2016-10-30 15:57 - 00000000 ____D C:\Users\johnson\AppData\Local\AvgSetupLog 2017-01-27 10:45 - 2016-10-30 16:12 - 00000000 ____D C:\Program Files (x86)\AVG 2017-01-26 11:40 - 2016-07-16 05:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-26 10:02 - 2016-07-16 05:45 - 00000000 ____D C:\WINDOWS\INF 2017-01-24 18:02 - 2016-10-30 15:57 - 00000000 ____D C:\Users\johnson\AppData\Local\Avg 2017-01-21 18:50 - 2016-07-16 05:47 - 00000000 __RSD C:\WINDOWS\Media 2017-01-21 18:49 - 2016-08-28 20:33 - 00000000 ____D C:\ProgramData\RoxioNow 2017-01-21 18:35 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\registration 2017-01-15 11:00 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-15 00:04 - 2016-07-16 05:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-15 00:04 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-15 00:04 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-15 00:04 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-15 00:04 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-14 11:41 - 2016-09-08 09:14 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-14 11:36 - 2016-09-08 09:12 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-07 09:45 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\appcompat 2017-01-06 17:47 - 2017-01-02 17:57 - 00000000 ____D C:\Users\johnson\Documents\jan.3 electronics + osciioscopes 2017-01-06 10:20 - 2016-08-28 20:24 - 00000000 ____D C:\Program Files (x86)\Intel 2017-01-06 07:30 - 2016-07-16 05:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-01-06 07:24 - 2016-07-16 05:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ___RD C:\Program Files\Windows Defender 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\setup 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-01-06 07:24 - 2016-07-16 05:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-01-06 07:24 - 2016-07-16 00:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-01-06 07:24 - 2016-07-16 00:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-01-06 07:24 - 2016-07-16 00:04 - 00000000 ____D C:\WINDOWS\servicing 2017-01-06 07:09 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-01-06 07:08 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2017-01-06 07:08 - 2016-07-16 05:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb 2017-01-06 07:08 - 2016-07-16 05:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb 2017-01-06 07:08 - 2016-07-16 05:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb 2017-01-06 07:08 - 2016-07-16 05:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb 2017-01-06 07:08 - 2016-07-16 05:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe 2017-01-06 07:08 - 2016-07-16 05:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll 2017-01-06 07:08 - 2016-07-16 05:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof 2017-01-06 07:08 - 2016-07-16 05:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys 2017-01-06 07:08 - 2016-07-16 05:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb 2017-01-06 07:08 - 2016-07-16 05:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb 2017-01-06 07:08 - 2016-07-16 05:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb 2017-01-06 07:08 - 2016-07-16 05:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe 2017-01-06 07:08 - 2016-07-16 05:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb 2017-01-06 07:08 - 2016-07-16 05:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe 2017-01-06 07:08 - 2016-07-16 05:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe 2017-01-06 07:08 - 2016-07-16 05:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll 2017-01-06 07:08 - 2016-07-16 05:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof 2017-01-06 05:47 - 2016-07-16 05:47 - 00000000 ____D C:\ProgramData\USOPrivate 2017-01-06 05:47 - 2016-07-16 05:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-01-06 05:46 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-01-06 05:46 - 2016-07-16 00:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-01-06 05:46 - 2009-07-13 21:20 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-01-06 05:45 - 2016-07-16 05:47 - 00000000 ___RD C:\Users\Public\Libraries 2017-01-06 05:43 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\spool 2017-01-06 05:43 - 2009-07-13 21:20 - 00000000 ____D C:\Users\Default.migrated 2017-01-06 05:41 - 2016-11-01 09:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2017-01-06 05:41 - 2016-09-08 02:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-01-06 05:41 - 2016-09-01 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2017-01-06 05:41 - 2016-08-28 21:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services 2017-01-06 05:41 - 2016-08-28 20:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support 2017-01-06 05:41 - 2016-08-28 20:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2017-01-06 05:41 - 2016-08-28 20:41 - 00000000 ____D C:\WINDOWS\en 2017-01-06 05:41 - 2016-08-28 20:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eReaders and Document Viewers 2017-01-06 05:41 - 2016-08-28 20:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos 2017-01-06 05:41 - 2016-08-28 20:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager 2017-01-06 05:41 - 2016-08-28 20:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2017-01-06 05:41 - 2016-08-28 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2017-01-06 05:41 - 2016-08-28 20:28 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools 2017-01-06 05:41 - 2016-08-28 20:14 - 00000000 ____D C:\WINDOWS\SysWOW64\%COREALLUSERPATH% 2017-01-06 05:41 - 2016-08-28 19:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services 2017-01-06 05:41 - 2016-08-28 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics 2017-01-06 05:41 - 2016-08-28 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP User Manuals 2017-01-06 05:41 - 2009-07-13 23:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-01-06 05:38 - 2016-09-13 14:47 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information 2017-01-06 05:38 - 2016-08-30 10:22 - 00000000 ____D C:\WINDOWS\SysWOW64\spool 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\system32\IME 2017-01-06 05:38 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\schemas 2017-01-06 05:37 - 2016-09-21 08:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP4700 series 2017-01-06 05:37 - 2016-08-28 20:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools 2017-01-06 05:37 - 2016-08-28 20:35 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat 2017-01-06 05:37 - 2016-07-16 05:47 - 00000000 __SHD C:\Program Files\Windows Sidebar 2017-01-06 05:37 - 2016-07-16 05:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-01-06 05:37 - 2016-07-16 05:47 - 00000000 ____D C:\WINDOWS\Help 2017-01-06 05:37 - 2016-07-16 05:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-01-06 05:37 - 2009-07-13 23:32 - 00000000 ____D C:\Program Files\Microsoft Games 2017-01-06 05:37 - 2009-07-13 23:32 - 00000000 ____D C:\Program Files\DVD Maker 2017-01-06 05:37 - 2009-07-13 21:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-01-06 05:35 - 2016-07-16 00:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-01-06 05:34 - 2016-07-16 05:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-01-06 05:34 - 2016-07-16 05:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-01-06 04:55 - 2009-07-13 22:45 - 00016976 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-01-06 04:55 - 2009-07-13 22:45 - 00016976 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-01-06 04:34 - 2016-10-14 12:22 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-01-05 17:44 - 2016-09-17 14:57 - 00000000 ____D C:\Users\johnson\AppData\Local\CrashDumps 　 ==================== Files in the root of some directories ======= 　 2016-08-28 20:43 - 2011-06-09 17:44 - 0002792 _____ () C:\Program Files\HP SimplePass 2011 　 Some files in TEMP: ==================== 2017-01-29 10:22 - 2017-01-29 10:22 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\-j61psnc.dll 2017-01-26 10:01 - 2017-01-26 10:02 - 6187064 _____ (PC Drivers HeadQuarters LP) C:\Users\johnson\AppData\Local\Temp\DriverSupport.exe 2017-02-02 10:06 - 2017-02-02 10:06 - 0094208 _____ () C:\Users\johnson\AppData\Local\Temp\fjy9bice.dll 2017-02-02 10:06 - 2017-02-02 10:06 - 0006144 _____ () C:\Users\johnson\AppData\Local\Temp\iid-exne.dll 2017-01-28 10:13 - 2017-01-28 10:13 - 0010752 _____ () C:\Users\johnson\AppData\Local\Temp\vim9tu59.dll 　 ==================== Bamital & volsnap ====================== 　 (There is no automatic fix for files that do not pass verification.) 　 C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed 　 LastRegBack: 2017-01-26 14:29 　 ==================== End of FRST.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29 I've been having trouble sending my scan .I thought I sent it a couple times but didn't go. sent this1st pat now with advanced I thought. Should I us quick reply If his works I'll send the last half of the scan.