Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Gene Tully (administrator) on GENEMTULLY (11-03-2016 15:13:59)
Running from C:\Documents and Settings\Gene Tully\Local Settings\Temporary Internet Files\Content.IE5\C2CFOLNC
Loaded Profiles: Gene Tully (Available Profiles: Gene Tully & Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo) C:\WINDOWS\system32\ibmpmsvc.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Lenovo ) C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo ) C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(CompSoft) C:\Program Files\Howard\Howard.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Lenovo ) C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Farbar) C:\Documents and Settings\Gene Tully\Local Settings\Temporary Internet Files\Content.IE5\C2CFOLNC\FRST[1].exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [CorelDRAW Graphics Suite 11b] => C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe [729088 2003-11-25] (Corel Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7137664 2016-03-09] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
Winlogon\Notify\ACNotify: C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll [2009-01-20] (Lenovo )
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2008-11-10] (ATI Technologies Inc.)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2008-11-21] (UPEK Inc.)
Winlogon\Notify\tpfnf2: C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06] ()
Winlogon\Notify\tphotkey: C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2008-08-08] (Lenovo Group Limited)
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\...\Run: [TClockEx] => C:\Program Files\TClockEx\TCLOCKEX.EXE [89088 2000-03-09] (Dale Nurden)
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\...\MountPoints2: {7655243b-21b0-11df-925b-806d6172696f} - D:\setup.exe
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\...\MountPoints2: {d757e2db-c3f2-11e5-abb8-001641e455dc} - E:\ZTE_Handset_USB_Driver.exe
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssstars.scr [14336 2008-08-21] (Microsoft Corporation)
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll ACGina
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Gene Tully\Application Data\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-02-21] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2005-03-05] (Autodesk)
Startup: C:\Documents and Settings\Gene Tully\Start Menu\Programs\Startup\Howard.lnk [2016-01-10]
ShortcutTarget: Howard.lnk -> C:\Program Files\Howard\Howard.exe (CompSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.3.25
Tcpip\..\Interfaces\{92030FAD-EFFD-4EC5-9C82-893CAB30D145}: [DhcpNameServer] 192.168.0.1 205.171.3.25

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-4039712922-1645441677-4117471849-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-4039712922-1645441677-4117471849-1004 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_74\bin\ssv.dll [2016-02-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-21] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile -> {D5233FCD-D258-4903-89B8-FB1568E7413D} -> C:\WINDOWS\system32\mscoree.dll [2009-11-07] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-21] (Oracle Corporation)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Gene Tully\Application Data\Mozilla\Firefox\Profiles\aotgkeg3.default-1457375260421
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Extension: Grammarly Spell Checker & Grammar Checker - C:\Documents and Settings\Gene Tully\Application Data\Mozilla\Firefox\Profiles\aotgkeg3.default-1457375260421\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2016-03-02]
FF Extension: United States English Spellchecker - C:\Documents and Settings\Gene Tully\Application Data\Mozilla\Firefox\Profiles\aotgkeg3.default-1457375260421\Extensions\en-US@dictionaries.addons.mozilla.org [2016-03-07]
FF Extension: Spanish (Spain) Dictionary - C:\Documents and Settings\Gene Tully\Application Data\Mozilla\Firefox\Profiles\aotgkeg3.default-1457375260421\Extensions\es-es@dictionaries.addons.mozilla.org [2016-03-07]
FF Extension: Dictionnaires français - C:\Documents and Settings\Gene Tully\Application Data\Mozilla\Firefox\Profiles\aotgkeg3.default-1457375260421\Extensions\fr-dicollecte@dictionaries.addons.mozilla.org [2016-03-07]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-08-27] [not signed]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-08-27] [not signed]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-04-25] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-01]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-03-01]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-02-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-21]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 6to4; C:\WINDOWS\System32\6to4svc.dll [100864 2010-02-11] (Microsoft Corporation)
R2 AcPrfMgrSvc; C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [98304 2009-01-20] (Lenovo ) [File not signed]
R2 AcSvc; C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [217088 2009-01-20] (Lenovo ) [File not signed]
S2 ACT! Scheduler; C:\Program Files\ACT\Act for Windows\Act.Scheduler.exe [81920 2009-08-24] (Sage Software, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-21] (AVAST Software)
S2 MBAMService; C:\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MSSQL$ACT7; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [549144 2014-04-21] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 ANC; C:\WINDOWS\System32\drivers\ANC.SYS [11520 2005-09-28] (IBM Corp.) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [32792 2016-02-21] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [91168 2016-03-09] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-02-21] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [58776 2016-02-21] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [816304 2016-03-09] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [447848 2016-02-27] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [171608 2016-02-21] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [67088 2016-02-21] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [221240 2016-02-21] (AVAST Software)
R3 atmeltpm; C:\WINDOWS\System32\DRIVERS\atmeltpm.sys [15872 2005-05-17] (Atmel, Inc.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [242240 2013-04-27] (DT Soft Ltd)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed]
S3 hidkmdf; C:\WINDOWS\System32\DRIVERS\hidkmdf.sys [12088 2014-03-17] (Windows (R) Win 7 DDK provider)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2010-02-01] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2010-02-01] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2010-02-01] (HP)
R3 HSFHWAZL; C:\WINDOWS\System32\DRIVERS\HSFHWAZL.sys [209664 2006-12-21] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\WINDOWS\System32\DRIVERS\HSF_DPV.sys [988800 2006-12-21] (Conexant Systems, Inc.)
R1 IBMTPCHK; C:\WINDOWS\system32\Drivers\IBMBLDID.sys [4224 2008-05-12] () [File not signed]
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NETwLx32; C:\WINDOWS\System32\DRIVERS\NETwLx32.sys [6609920 2010-10-07] (Intel Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2008-08-21] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2008-08-21] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2008-08-21] (Microsoft Corporation)
R3 Rasirda; C:\WINDOWS\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
R2 smihlp; C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [12560 2008-11-21] (UPEK Inc.)
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R1 Tcpip6; C:\WINDOWS\System32\DRIVERS\tcpip6.sys [226880 2010-02-11] (Microsoft Corporation)
R1 TPHKDRV; C:\WINDOWS\System32\DRIVERS\TPHKDRV.sys [17844 2008-05-12] (Lenovo Group Limited)
R1 TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [4608 2009-01-07] () [File not signed]
S3 WacHidRouter; C:\WINDOWS\System32\DRIVERS\wachidrouter.sys [80696 2014-03-17] (Wacom Technology)
S3 wacomrouterfilter; C:\WINDOWS\System32\DRIVERS\wacomrouterfilter.sys [13112 2014-03-17] (Wacom Technology)
S4 IntelIde; no ImagePath
S3 NETw5x32; system32\DRIVERS\NETw5x32.sys [X]
S3 PcdrNdisuio; system32\DRIVERS\pcdrndisuio.sys [X]
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-11 15:11 - 2016-03-11 15:13 - 00000000 ____D C:\FRST
2016-03-10 11:01 - 2016-03-10 11:01 - 00356952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-09 18:58 - 2016-03-09 18:58 - 00606208 _____ C:\Documents and Settings\Gene Tully\Desktop\SXCU.exe
2016-03-08 22:37 - 2016-03-08 23:18 - 00193933 _____ C:\Documents and Settings\Gene Tully\Desktop\box 2.dwg
2016-03-08 00:22 - 2016-03-08 00:22 - 00103504 _____ C:\Documents and Settings\Gene Tully\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2016-03-08 00:16 - 2016-03-08 23:24 - 00172972 _____ C:\Documents and Settings\Gene Tully\Desktop\base.dwg
2016-03-08 00:08 - 2016-03-09 18:10 - 00369437 _____ C:\Documents and Settings\Gene Tully\Desktop\Section 2.dwg
2016-03-07 12:27 - 2016-03-07 12:27 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\Anciennes données de Firefox
2016-02-29 19:40 - 2016-03-09 18:10 - 00131991 _____ C:\Documents and Settings\Gene Tully\Desktop\section.dwg
2016-02-29 12:51 - 2016-02-28 12:50 - 02627350 ____N C:\Documents and Settings\Gene Tully\Desktop\VM OUV Los Angeles.pdf
2016-02-24 12:52 - 2016-02-24 12:52 - 00000000 ____D C:\Program Files\Common Files\Skype
2016-02-24 12:52 - 2016-02-24 12:52 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Skype
2016-02-21 14:09 - 2016-02-21 14:09 - 00000000 ____D C:\Program Files\Common Files\Java
2016-02-21 13:39 - 2016-02-21 13:38 - 00334280 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-02-21 13:38 - 2016-02-21 13:38 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-02-17 12:55 - 2016-02-17 12:55 - 00029366 ____R C:\Documents and Settings\Gene Tully\Desktop\01311__CDDM015213_NOOT_263307.PDF
2016-02-17 12:52 - 2016-02-17 12:52 - 00118479 ____R C:\Documents and Settings\Gene Tully\Desktop\Dissolution de Mariage.PDF
2016-02-16 20:59 - 2016-02-16 18:52 - 00084016 ____N C:\Documents and Settings\Gene Tully\Desktop\image1[2].jpeg
2016-02-10 15:57 - 2016-02-10 13:56 - 00201812 ____N C:\Documents and Settings\Gene Tully\Desktop\SharpM453N@hsjlegal.com_20160210_154028.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-11 15:15 - 2010-03-29 12:12 - 00000000 ____D C:\Documents and Settings\Gene Tully\Local Settings\Temp
2016-03-11 14:53 - 2015-12-27 12:38 - 00000000 ____D C:\Documents and Settings\Gene Tully\My Documents\Téléchargements
2016-03-11 14:36 - 2016-01-19 01:47 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-11 14:24 - 2014-11-13 12:07 - 00000886 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-11 14:24 - 2009-04-28 13:31 - 00012598 ____C C:\WINDOWS\system32\wpa.dbl
2016-03-11 13:41 - 2015-06-07 00:11 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-03-11 02:39 - 2013-04-20 18:55 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\Utilitaires
2016-03-10 22:24 - 2010-04-11 12:18 - 00000882 ____C C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-10 18:47 - 2013-07-11 20:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-10 18:40 - 2010-05-29 08:52 - 141270216 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-10 18:39 - 2013-03-31 22:41 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Microsoft Help
2016-03-10 16:43 - 2015-08-06 17:47 - 00000452 ____C C:\WINDOWS\Tasks\Driver Detective-RTMRules.job
2016-03-10 14:24 - 2009-04-28 13:44 - 00032492 _____ C:\WINDOWS\SchedLgU.Txt
2016-03-10 11:02 - 2015-08-06 17:47 - 00000392 ____C C:\WINDOWS\Tasks\Driver Detective.job
2016-03-10 11:02 - 2014-04-10 10:00 - 00000232 ____C C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
2016-03-10 11:02 - 2009-04-28 13:44 - 00000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2016-03-10 11:01 - 2013-05-09 09:48 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-03-10 11:01 - 2008-08-27 17:42 - 00045668 ____C C:\WINDOWS\system32\ativvaxx.cap
2016-03-10 11:00 - 2014-06-11 22:52 - 00000836 ____C C:\WINDOWS\bthservsdp.dat
2016-03-10 10:59 - 2010-03-29 12:12 - 00000178 __SHC C:\Documents and Settings\Gene Tully\ntuser.ini
2016-03-09 18:49 - 2013-05-09 09:48 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
2016-03-09 18:10 - 2015-12-10 11:54 - 00300023 _____ C:\Documents and Settings\Gene Tully\Desktop\Box.dwg
2016-03-09 14:37 - 2015-08-06 17:47 - 00000462 ____C C:\WINDOWS\Tasks\Driver Detective-RTMUpdater.job
2016-03-09 13:41 - 2015-06-07 00:11 - 00816304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-03-09 13:41 - 2015-06-07 00:11 - 00091168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2016-03-08 21:53 - 2015-12-06 11:13 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\Box
2016-03-08 15:00 - 2014-04-10 10:00 - 00000226 ____C C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
2016-03-07 15:00 - 2015-06-22 13:16 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-07 14:48 - 2010-03-29 12:12 - 00000000 ____D C:\Documents and Settings\Gene Tully
2016-03-07 13:59 - 2014-06-13 11:42 - 00170200 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2016-03-07 11:35 - 2009-04-28 13:31 - 00000617 ____C C:\WINDOWS\win.ini
2016-03-07 11:35 - 2009-04-28 13:31 - 00000227 ____C C:\WINDOWS\system.ini
2016-03-07 11:35 - 2009-04-28 13:31 - 00000211 __RSH C:\boot.ini
2016-03-06 19:50 - 2015-08-06 17:47 - 00000464 ____C C:\WINDOWS\Tasks\Driver Detective-RTMScan.job
2016-03-05 11:02 - 2013-03-31 06:14 - 00000000 ____D C:\Documents and Settings\Gene Tully\Application Data\Skype
2016-03-04 03:01 - 2015-08-27 21:38 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-03-02 12:15 - 2013-04-01 15:40 - 00000000 ____D C:\Documents and Settings\Gene Tully\Application Data\vlc
2016-03-01 09:38 - 2015-12-19 16:01 - 00244556 _____ C:\Documents and Settings\Gene Tully\Desktop\blanc.dwg
2016-02-29 19:06 - 2015-11-17 13:21 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\L.A
2016-02-27 13:41 - 2015-06-07 00:11 - 00447848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-02-25 18:02 - 2015-11-29 03:43 - 00000724 ____C C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
2016-02-24 12:52 - 2014-03-02 20:06 - 00000000 ____D C:\Documents and Settings\Gene Tully\Local Settings\Application Data\Skype
2016-02-24 12:52 - 2013-03-31 06:14 - 00000000 ___RD C:\Program Files\Skype
2016-02-24 12:52 - 2013-03-31 06:14 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype
2016-02-21 14:09 - 2015-09-17 11:27 - 00000000 ____D C:\Documents and Settings\Gene Tully\.oracle_jre_usage
2016-02-21 14:08 - 2014-10-20 07:10 - 00095840 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2016-02-21 14:08 - 2014-10-20 07:10 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Java
2016-02-21 14:07 - 2014-10-20 07:11 - 00153088 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2016-02-21 14:06 - 2014-10-20 07:10 - 00000000 ____D C:\Program Files\Java
2016-02-21 13:47 - 2009-04-28 06:32 - 00000000 ___HD C:\WINDOWS\inf
2016-02-21 13:42 - 2015-06-07 00:11 - 00221240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-02-21 13:38 - 2015-07-20 18:18 - 00171608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-02-21 13:38 - 2015-06-07 00:11 - 00067088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-02-21 13:38 - 2015-06-07 00:11 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-02-21 13:38 - 2015-06-07 00:11 - 00058776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-02-21 13:38 - 2015-06-07 00:11 - 00032792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-02-20 10:17 - 2015-10-08 23:04 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\Irene and I
2016-02-17 20:51 - 2013-06-03 12:57 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2016-02-17 19:32 - 2009-04-28 06:37 - 00006928 ____C C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-14 21:50 - 2015-01-19 18:17 - 00000000 ____D C:\Documents and Settings\Gene Tully\Desktop\Marianne
2016-02-10 01:37 - 2016-01-19 01:47 - 00796864 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-02-10 01:37 - 2016-01-19 01:47 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-02-10 01:36 - 2015-10-13 20:15 - 08817344 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== Files in the root of some directories =======

2014-07-23 10:00 - 2014-07-23 10:05 - 0000000 ____C () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2010-04-11 09:43 - 2010-04-11 09:43 - 0000000 ___HC () C:\Documents and Settings\Gene Tully\Application Data\ActUpdate.log
2014-12-11 19:40 - 2014-12-12 08:37 - 0001832 ____C () C:\Documents and Settings\Gene Tully\Application Data\ConvAPIPlugin.log
2010-04-11 09:42 - 2010-04-11 09:42 - 0030528 ____C () C:\Documents and Settings\Gene Tully\Application Data\NGEN_AppLog_Install.txt
2013-04-27 16:23 - 2013-05-10 19:31 - 0186347 ____C () C:\Documents and Settings\Gene Tully\Local Settings\Application Data\ars.cache
2013-04-27 16:24 - 2013-05-10 19:31 - 0799603 ____C () C:\Documents and Settings\Gene Tully\Local Settings\Application Data\census.cache
2010-08-17 21:24 - 2015-01-02 10:01 - 0147968 ____C () C:\Documents and Settings\Gene Tully\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-04-27 16:12 - 2013-04-27 16:12 - 0000036 ____C () C:\Documents and Settings\Gene Tully\Local Settings\Application Data\housecall.guid.cache
2014-06-12 10:37 - 2015-04-28 23:28 - 0000088 _RSHC () C:\Documents and Settings\All Users\Application Data\571A839DB2.sys
2013-04-20 16:10 - 2013-04-20 16:10 - 0000057 ____C () C:\Documents and Settings\All Users\Application Data\Ament.ini
2010-05-19 17:35 - 2015-05-01 18:31 - 0010200 ____C () C:\Documents and Settings\All Users\Application Data\hpzinstall.log
2010-04-11 09:43 - 2015-04-28 23:28 - 0001004 __SHC () C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys

Files to move or delete:
====================
C:\Documents and Settings\Gene Tully\g2ax_customer_downloadhelper_win32_x86.exe


Some files in TEMP:
====================
C:\Documents and Settings\Gene Tully\Local Settings\Temp\jre-8u74-windows-au.exe
C:\Documents and Settings\Gene Tully\Local Settings\Temp\ntdll_dump.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================