This topic is locked
Here are the logs I have so far, let me know what other info that you need, besides MS Windows Vista Home Premium Service Pack 2 (x86) 32 bit?
The Aero theme was missing, until I obtained aero.msstyles from, https://www.pconlife....msstyles-info/and put the file in " C:\Windows\Resources\Themes\Aero\" and "C:\Windows\winsxs\x86_microsoft-windows-aero_31bf3856ad364e35_6.0.6002.18005_none_adce8a97168b6195\"
SFCDETAILS.txt
2018-12-20 16:52:08, Info CSI 00000006 [SR] Verifying 100 (0x00000064) components
2018-12-20 16:52:08, Info CSI 00000007 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:11, Info CSI 00000009 [SR] Verify complete2018-12-20 16:52:11, Info CSI 0000000a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:11, Info CSI 0000000b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:14, Info CSI 0000000d [SR] Verify complete2018-12-20 16:52:14, Info CSI 0000000e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:14, Info CSI 0000000f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:15, Info CSI 00000011 [SR] Verify complete2018-12-20 16:52:16, Info CSI 00000012 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:16, Info CSI 00000013 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:16, Info CSI 00000015 [SR] Verify complete2018-12-20 16:52:17, Info CSI 00000016 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:17, Info CSI 00000017 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:18, Info CSI 00000019 [SR] Verify complete2018-12-20 16:52:18, Info CSI 0000001a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:18, Info CSI 0000001b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:19, Info CSI 0000001d [SR] Verify complete2018-12-20 16:52:19, Info CSI 0000001e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:19, Info CSI 0000001f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:20, Info CSI 00000021 [SR] Verify complete2018-12-20 16:52:20, Info CSI 00000022 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:20, Info CSI 00000023 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:21, Info CSI 00000025 [SR] Verify complete2018-12-20 16:52:21, Info CSI 00000026 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:21, Info CSI 00000027 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:22, Info CSI 00000029 [SR] Verify complete2018-12-20 16:52:22, Info CSI 0000002a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:22, Info CSI 0000002b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:23, Info CSI 0000002d [SR] Verify complete2018-12-20 16:52:23, Info CSI 0000002e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:23, Info CSI 0000002f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:24, Info CSI 00000031 [SR] Verify complete2018-12-20 16:52:24, Info CSI 00000032 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:24, Info CSI 00000033 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:25, Info CSI 00000035 [SR] Verify complete2018-12-20 16:52:25, Info CSI 00000036 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:25, Info CSI 00000037 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:26, Info CSI 00000039 [SR] Verify complete2018-12-20 16:52:26, Info CSI 0000003a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:26, Info CSI 0000003b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:28, Info CSI 0000003d [SR] Verify complete2018-12-20 16:52:28, Info CSI 0000003e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:28, Info CSI 0000003f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:29, Info CSI 00000041 [SR] Verify complete2018-12-20 16:52:29, Info CSI 00000042 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:29, Info CSI 00000043 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:30, Info CSI 00000045 [SR] Verify complete2018-12-20 16:52:30, Info CSI 00000046 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:30, Info CSI 00000047 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:31, Info CSI 00000049 [SR] Verify complete2018-12-20 16:52:31, Info CSI 0000004a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:31, Info CSI 0000004b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:32, Info CSI 0000004d [SR] Verify complete2018-12-20 16:52:32, Info CSI 0000004e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:32, Info CSI 0000004f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:33, Info CSI 00000051 [SR] Verify complete2018-12-20 16:52:33, Info CSI 00000052 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:33, Info CSI 00000053 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:34, Info CSI 00000055 [SR] Verify complete2018-12-20 16:52:34, Info CSI 00000056 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:34, Info CSI 00000057 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:35, Info CSI 00000059 [SR] Verify complete2018-12-20 16:52:35, Info CSI 0000005a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:35, Info CSI 0000005b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:37, Info CSI 0000005d [SR] Verify complete2018-12-20 16:52:37, Info CSI 0000005e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:37, Info CSI 0000005f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:38, Info CSI 00000061 [SR] Verify complete2018-12-20 16:52:38, Info CSI 00000062 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:38, Info CSI 00000063 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:39, Info CSI 00000065 [SR] Verify complete2018-12-20 16:52:39, Info CSI 00000066 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:39, Info CSI 00000067 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:40, Info CSI 00000069 [SR] Verify complete2018-12-20 16:52:40, Info CSI 0000006a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:40, Info CSI 0000006b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:41, Info CSI 0000006d [SR] Verify complete2018-12-20 16:52:41, Info CSI 0000006e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:41, Info CSI 0000006f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:42, Info CSI 00000071 [SR] Verify complete2018-12-20 16:52:42, Info CSI 00000072 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:42, Info CSI 00000073 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:44, Info CSI 00000075 [SR] Verify complete2018-12-20 16:52:44, Info CSI 00000076 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:44, Info CSI 00000077 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:45, Info CSI 00000079 [SR] Verify complete2018-12-20 16:52:45, Info CSI 0000007a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:45, Info CSI 0000007b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:46, Info CSI 0000007d [SR] Verify complete2018-12-20 16:52:46, Info CSI 0000007e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:46, Info CSI 0000007f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:47, Info CSI 00000081 [SR] Verify complete2018-12-20 16:52:47, Info CSI 00000082 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:47, Info CSI 00000083 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:48, Info CSI 00000085 [SR] Verify complete2018-12-20 16:52:48, Info CSI 00000086 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:48, Info CSI 00000087 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:49, Info CSI 00000089 [SR] Verify complete2018-12-20 16:52:50, Info CSI 0000008a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:50, Info CSI 0000008b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:51, Info CSI 0000008d [SR] Verify complete2018-12-20 16:52:51, Info CSI 0000008e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:51, Info CSI 0000008f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:52, Info CSI 00000091 [SR] Verify complete2018-12-20 16:52:52, Info CSI 00000092 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:52, Info CSI 00000093 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:54, Info CSI 00000095 [SR] Verify complete2018-12-20 16:52:54, Info CSI 00000096 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:54, Info CSI 00000097 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:55, Info CSI 00000099 [SR] Verify complete2018-12-20 16:52:55, Info CSI 0000009a [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:55, Info CSI 0000009b [SR] Beginning Verify and Repair transaction2018-12-20 16:52:56, Info CSI 0000009d [SR] Verify complete2018-12-20 16:52:56, Info CSI 0000009e [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:56, Info CSI 0000009f [SR] Beginning Verify and Repair transaction2018-12-20 16:52:57, Info CSI 000000a1 [SR] Verify complete2018-12-20 16:52:57, Info CSI 000000a2 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:57, Info CSI 000000a3 [SR] Beginning Verify and Repair transaction2018-12-20 16:52:58, Info CSI 000000a5 [SR] Verify complete2018-12-20 16:52:58, Info CSI 000000a6 [SR] Verifying 100 (0x00000064) components2018-12-20 16:52:58, Info CSI 000000a7 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:00, Info CSI 000000a9 [SR] Verify complete2018-12-20 16:53:00, Info CSI 000000aa [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:00, Info CSI 000000ab [SR] Beginning Verify and Repair transaction2018-12-20 16:53:03, Info CSI 000000ad [SR] Verify complete2018-12-20 16:53:03, Info CSI 000000ae [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:03, Info CSI 000000af [SR] Beginning Verify and Repair transaction2018-12-20 16:53:04, Info CSI 000000b1 [SR] Cannot repair member file [l:26{13}]"aero.msstyles" of Microsoft-Windows-aero, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:05, Info CSI 000000b3 [SR] Cannot repair member file [l:26{13}]"aero.msstyles" of Microsoft-Windows-aero, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:05, Info CSI 000000b4 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"2018-12-20 16:53:05, Info CSI 000000b7 [SR] Could not reproject corrupted file [ml:520{260},l:72{36}]"\??\C:\Windows\Resources\Themes\aero"\[l:26{13}]"aero.msstyles"; source file in store is also corrupted2018-12-20 16:53:05, Info CSI 000000b9 [SR] Verify complete2018-12-20 16:53:06, Info CSI 000000ba [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:06, Info CSI 000000bb [SR] Beginning Verify and Repair transaction2018-12-20 16:53:07, Info CSI 000000bd [SR] Cannot repair member file [l:22{11}]"azroles.dll" of Microsoft-Windows-AzMan, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:08, Info CSI 000000bf [SR] Cannot repair member file [l:22{11}]"azroles.dll" of Microsoft-Windows-AzMan, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:08, Info CSI 000000c0 [SR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"2018-12-20 16:53:08, Info CSI 000000c3 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"azroles.dll"; source file in store is also corrupted2018-12-20 16:53:09, Info CSI 000000c6 [SR] Verify complete2018-12-20 16:53:09, Info CSI 000000c7 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:09, Info CSI 000000c8 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:12, Info CSI 000000cb [SR] Verify complete2018-12-20 16:53:12, Info CSI 000000cc [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:12, Info CSI 000000cd [SR] Beginning Verify and Repair transaction2018-12-20 16:53:14, Info CSI 000000cf [SR] Verify complete2018-12-20 16:53:15, Info CSI 000000d0 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:15, Info CSI 000000d1 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:18, Info CSI 000000d3 [SR] Verify complete2018-12-20 16:53:18, Info CSI 000000d4 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:18, Info CSI 000000d5 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:24, Info CSI 000000df [SR] Verify complete2018-12-20 16:53:24, Info CSI 000000e0 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:24, Info CSI 000000e1 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:27, Info CSI 000000e3 [SR] Verify complete2018-12-20 16:53:27, Info CSI 000000e4 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:27, Info CSI 000000e5 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:30, Info CSI 000000e7 [SR] Cannot repair member file [l:16{8}]"dfsr.exe" of Microsoft-Windows-DFSR-Core-ClientOnly, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:30, Info CSI 000000e9 [SR] Cannot repair member file [l:16{8}]"dfsr.exe" of Microsoft-Windows-DFSR-Core-ClientOnly, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:30, Info CSI 000000ea [SR] This component was referenced by [l:158{79}]"Package_20_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-53_neutral_GDR"2018-12-20 16:53:30, Info CSI 000000ed [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:16{8}]"dfsr.exe"; source file in store is also corrupted2018-12-20 16:53:30, Info CSI 000000ef [SR] Verify complete2018-12-20 16:53:31, Info CSI 000000f0 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:31, Info CSI 000000f1 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:34, Info CSI 000000f3 [SR] Verify complete2018-12-20 16:53:34, Info CSI 000000f4 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:34, Info CSI 000000f5 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:40, Info CSI 000000f7 [SR] Verify complete2018-12-20 16:53:40, Info CSI 000000f8 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:40, Info CSI 000000f9 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:40, Info CSI 000000fb [SR] Cannot repair member file [l:18{9}]"ehres.dll" of Microsoft-Windows-ehome-ehres, Version = 6.0.6002.18242, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:45, Info CSI 000000ff [SR] Cannot repair member file [l:18{9}]"ehres.dll" of Microsoft-Windows-ehome-ehres, Version = 6.0.6002.18242, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:45, Info CSI 00000100 [SR] This component was referenced by [l:148{74}]"Package_5_for_KB982480~31bf3856ad364e35~x86~~6.0.1.0.982480-55_neutral_GDR"2018-12-20 16:53:45, Info CSI 00000103 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\ehome"\[l:18{9}]"ehres.dll"; source file in store is also corrupted2018-12-20 16:53:46, Info CSI 00000105 [SR] Verify complete2018-12-20 16:53:46, Info CSI 00000106 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:46, Info CSI 00000107 [SR] Beginning Verify and Repair transaction2018-12-20 16:53:48, Info CSI 00000109 [SR] Cannot repair member file [l:16{8}]"msyh.ttf" of Microsoft-Windows-Font-TrueType-MicrosoftYaHei, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:52, Info CSI 0000010b [SR] Cannot repair member file [l:16{8}]"msyh.ttf" of Microsoft-Windows-Font-TrueType-MicrosoftYaHei, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:53:52, Info CSI 0000010c [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:53:52, Info CSI 0000010f [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:16{8}]"msyh.ttf"; source file in store is also corrupted2018-12-20 16:53:53, Info CSI 00000111 [SR] Verify complete2018-12-20 16:53:53, Info CSI 00000112 [SR] Verifying 100 (0x00000064) components2018-12-20 16:53:53, Info CSI 00000113 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:04, Info CSI 00000115 [SR] Verify complete2018-12-20 16:54:04, Info CSI 00000116 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:04, Info CSI 00000117 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:08, Info CSI 00000119 [SR] Verify complete2018-12-20 16:54:08, Info CSI 0000011a [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:08, Info CSI 0000011b [SR] Beginning Verify and Repair transaction2018-12-20 16:54:10, Info CSI 0000011d [SR] Verify complete2018-12-20 16:54:10, Info CSI 0000011e [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:10, Info CSI 0000011f [SR] Beginning Verify and Repair transaction2018-12-20 16:54:12, Info CSI 00000121 [SR] Verify complete2018-12-20 16:54:12, Info CSI 00000122 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:12, Info CSI 00000123 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:18, Info CSI 00000138 [SR] Verify complete2018-12-20 16:54:18, Info CSI 00000139 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:18, Info CSI 0000013a [SR] Beginning Verify and Repair transaction2018-12-20 16:54:22, Info CSI 00000145 [SR] Verify complete2018-12-20 16:54:22, Info CSI 00000146 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:22, Info CSI 00000147 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:22, Info CSI 00000149 [SR] Verify complete2018-12-20 16:54:22, Info CSI 0000014a [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:22, Info CSI 0000014b [SR] Beginning Verify and Repair transaction2018-12-20 16:54:23, Info CSI 0000014d [SR] Cannot repair member file [l:20{10}]"locale.nls" of Microsoft-Windows-International-Core-Locale-NLS, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:24, Info CSI 0000014f [SR] Cannot repair member file [l:22{11}]"C_20127.NLS" of Microsoft-Windows-International-CodePage-20127, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:25, Info CSI 00000151 [SR] Cannot repair member file [l:22{11}]"C_20127.NLS" of Microsoft-Windows-International-CodePage-20127, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:25, Info CSI 00000152 [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:54:25, Info CSI 00000155 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_20127.NLS"; source file in store is also corrupted2018-12-20 16:54:25, Info CSI 00000157 [SR] Cannot repair member file [l:20{10}]"locale.nls" of Microsoft-Windows-International-Core-Locale-NLS, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:25, Info CSI 00000158 [SR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"2018-12-20 16:54:25, Info CSI 0000015b [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"locale.nls"; source file in store is also corrupted2018-12-20 16:54:25, Info CSI 0000015d [SR] Verify complete2018-12-20 16:54:25, Info CSI 0000015e [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:25, Info CSI 0000015f [SR] Beginning Verify and Repair transaction2018-12-20 16:54:25, Info CSI 00000161 [SR] Cannot repair member file [l:22{11}]"C_28591.NLS" of Microsoft-Windows-International-CodePage-28591, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:27, Info CSI 00000163 [SR] Cannot repair member file [l:22{11}]"C_28591.NLS" of Microsoft-Windows-International-CodePage-28591, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:54:27, Info CSI 00000164 [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:54:27, Info CSI 00000167 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_28591.NLS"; source file in store is also corrupted2018-12-20 16:54:28, Info CSI 00000169 [SR] Verify complete2018-12-20 16:54:28, Info CSI 0000016a [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:28, Info CSI 0000016b [SR] Beginning Verify and Repair transaction2018-12-20 16:54:34, Info CSI 0000016e [SR] Verify complete2018-12-20 16:54:34, Info CSI 0000016f [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:34, Info CSI 00000170 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:38, Info CSI 00000172 [SR] Verify complete2018-12-20 16:54:38, Info CSI 00000173 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:38, Info CSI 00000174 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:40, Info CSI 00000176 [SR] Verify complete2018-12-20 16:54:40, Info CSI 00000177 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:40, Info CSI 00000178 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:45, Info CSI 0000017a [SR] Verify complete2018-12-20 16:54:45, Info CSI 0000017b [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:45, Info CSI 0000017c [SR] Beginning Verify and Repair transaction2018-12-20 16:54:48, Info CSI 0000017e [SR] Verify complete2018-12-20 16:54:48, Info CSI 0000017f [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:48, Info CSI 00000180 [SR] Beginning Verify and Repair transaction2018-12-20 16:54:53, Info CSI 00000182 [SR] Verify complete2018-12-20 16:54:53, Info CSI 00000183 [SR] Verifying 100 (0x00000064) components2018-12-20 16:54:53, Info CSI 00000184 [SR] Beginning Verify and Repair transaction2018-12-20 16:55:02, Info CSI 000001a9 [SR] Verify complete2018-12-20 16:55:02, Info CSI 000001aa [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:02, Info CSI 000001ab [SR] Beginning Verify and Repair transaction2018-12-20 16:55:08, Info CSI 000001ad [SR] Verify complete2018-12-20 16:55:08, Info CSI 000001ae [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:08, Info CSI 000001af [SR] Beginning Verify and Repair transaction2018-12-20 16:55:27, Info CSI 000001b1 [SR] Verify complete2018-12-20 16:55:27, Info CSI 000001b2 [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:27, Info CSI 000001b3 [SR] Beginning Verify and Repair transaction2018-12-20 16:55:38, Info CSI 000001b5 [SR] Verify complete2018-12-20 16:55:38, Info CSI 000001b6 [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:38, Info CSI 000001b7 [SR] Beginning Verify and Repair transaction2018-12-20 16:55:45, Info CSI 000001b9 [SR] Verify complete2018-12-20 16:55:45, Info CSI 000001ba [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:45, Info CSI 000001bb [SR] Beginning Verify and Repair transaction2018-12-20 16:55:49, Info CSI 000001bd [SR] Verify complete2018-12-20 16:55:49, Info CSI 000001be [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:49, Info CSI 000001bf [SR] Beginning Verify and Repair transaction2018-12-20 16:55:53, Info CSI 000001c1 [SR] Verify complete2018-12-20 16:55:53, Info CSI 000001c2 [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:53, Info CSI 000001c3 [SR] Beginning Verify and Repair transaction2018-12-20 16:55:57, Info CSI 000001c6 [SR] Verify complete2018-12-20 16:55:57, Info CSI 000001c7 [SR] Verifying 100 (0x00000064) components2018-12-20 16:55:57, Info CSI 000001c8 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:09, Info CSI 000001ca [SR] Verify complete2018-12-20 16:56:09, Info CSI 000001cb [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:09, Info CSI 000001cc [SR] Beginning Verify and Repair transaction2018-12-20 16:56:16, Info CSI 000001ce [SR] Verify complete2018-12-20 16:56:16, Info CSI 000001cf [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:16, Info CSI 000001d0 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:20, Info CSI 000001d2 [SR] Verify complete2018-12-20 16:56:20, Info CSI 000001d3 [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:20, Info CSI 000001d4 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:30, Info CSI 000001d6 [SR] Verify complete2018-12-20 16:56:30, Info CSI 000001d7 [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:30, Info CSI 000001d8 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:35, Info CSI 000001da [SR] Verify complete2018-12-20 16:56:35, Info CSI 000001db [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:35, Info CSI 000001dc [SR] Beginning Verify and Repair transaction2018-12-20 16:56:42, Info CSI 000001de [SR] Verify complete2018-12-20 16:56:42, Info CSI 000001df [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:42, Info CSI 000001e0 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:50, Info CSI 000001e3 [SR] Verify complete2018-12-20 16:56:51, Info CSI 000001e4 [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:51, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:56, Info CSI 000001e7 [SR] Verify complete2018-12-20 16:56:56, Info CSI 000001e8 [SR] Verifying 100 (0x00000064) components2018-12-20 16:56:56, Info CSI 000001e9 [SR] Beginning Verify and Repair transaction2018-12-20 16:56:56, Info CSI 000001eb [SR] Cannot repair member file [l:20{10}]"tbssvc.dll" of Microsoft-Windows-TPM-TBS-Core, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:56:59, Info CSI 000001ed [SR] Cannot repair member file [l:20{10}]"tbssvc.dll" of Microsoft-Windows-TPM-TBS-Core, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:56:59, Info CSI 000001ee [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"2018-12-20 16:56:59, Info CSI 000001f1 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tbssvc.dll"; source file in store is also corrupted2018-12-20 16:57:00, Info CSI 000001f3 [SR] Verify complete2018-12-20 16:57:00, Info CSI 000001f4 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:00, Info CSI 000001f5 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:04, Info CSI 000001f7 [SR] Verify complete2018-12-20 16:57:04, Info CSI 000001f8 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:04, Info CSI 000001f9 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:05, Info CSI 000001fb [SR] Cannot repair member file [l:20{10}]"WsmRes.dll" of Microsoft-Windows-Web-Services-for-Management-Core, Version = 7.0.6001.18181, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:08, Info CSI 000001fd [SR] Cannot repair member file [l:20{10}]"WsmRes.dll" of Microsoft-Windows-Web-Services-for-Management-Core, Version = 7.0.6001.18181, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:08, Info CSI 000001fe [SR] This component was referenced by [l:176{88}]"Package_for_KB950099_client~31bf3856ad364e35~x86~~7.0.6002.18181.WindowsRemoteManagement"2018-12-20 16:57:08, Info CSI 00000201 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"WsmRes.dll"; source file in store is also corrupted2018-12-20 16:57:08, Info CSI 00000206 [SR] Verify complete2018-12-20 16:57:09, Info CSI 00000207 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:09, Info CSI 00000208 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:14, Info CSI 0000020a [SR] Verify complete2018-12-20 16:57:14, Info CSI 0000020b [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:14, Info CSI 0000020c [SR] Beginning Verify and Repair transaction2018-12-20 16:57:21, Info CSI 0000020e [SR] Verify complete2018-12-20 16:57:21, Info CSI 0000020f [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:21, Info CSI 00000210 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:23, Info CSI 00000212 [SR] Verify complete2018-12-20 16:57:24, Info CSI 00000213 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:24, Info CSI 00000214 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:27, Info CSI 00000216 [SR] Verify complete2018-12-20 16:57:27, Info CSI 00000217 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:27, Info CSI 00000218 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:30, Info CSI 0000021a [SR] Verify complete2018-12-20 16:57:30, Info CSI 0000021b [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:30, Info CSI 0000021c [SR] Beginning Verify and Repair transaction2018-12-20 16:57:34, Info CSI 0000021e [SR] Verify complete2018-12-20 16:57:34, Info CSI 0000021f [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:34, Info CSI 00000220 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:38, Info CSI 00000222 [SR] Verify complete2018-12-20 16:57:38, Info CSI 00000223 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:38, Info CSI 00000224 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:49, Info CSI 00000226 [SR] Verify complete2018-12-20 16:57:49, Info CSI 00000227 [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:49, Info CSI 00000228 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:51, Info CSI 0000022a [SR] Verify complete2018-12-20 16:57:52, Info CSI 0000022b [SR] Verifying 100 (0x00000064) components2018-12-20 16:57:52, Info CSI 0000022c [SR] Beginning Verify and Repair transaction2018-12-20 16:57:55, Info CSI 00000231 [SR] Verify complete2018-12-20 16:57:55, Info CSI 00000232 [SR] Verifying 81 (0x00000051) components2018-12-20 16:57:55, Info CSI 00000233 [SR] Beginning Verify and Repair transaction2018-12-20 16:57:58, Info CSI 0000023b [SR] Verify complete2018-12-20 16:57:58, Info CSI 0000023c [SR] Repairing 10 (0x0000000a) components2018-12-20 16:57:58, Info CSI 0000023d [SR] Beginning Verify and Repair transaction2018-12-20 16:57:58, Info CSI 0000023f [SR] Cannot repair member file [l:26{13}]"aero.msstyles" of Microsoft-Windows-aero, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:58, Info CSI 00000241 [SR] Cannot repair member file [l:22{11}]"azroles.dll" of Microsoft-Windows-AzMan, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:58, Info CSI 00000243 [SR] Cannot repair member file [l:16{8}]"dfsr.exe" of Microsoft-Windows-DFSR-Core-ClientOnly, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:58, Info CSI 00000245 [SR] Cannot repair member file [l:18{9}]"ehres.dll" of Microsoft-Windows-ehome-ehres, Version = 6.0.6002.18242, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000247 [SR] Cannot repair member file [l:16{8}]"msyh.ttf" of Microsoft-Windows-Font-TrueType-MicrosoftYaHei, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000249 [SR] Cannot repair member file [l:22{11}]"C_20127.NLS" of Microsoft-Windows-International-CodePage-20127, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 0000024b [SR] Cannot repair member file [l:20{10}]"locale.nls" of Microsoft-Windows-International-Core-Locale-NLS, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 0000024d [SR] Cannot repair member file [l:22{11}]"C_28591.NLS" of Microsoft-Windows-International-CodePage-28591, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 0000024f [SR] Cannot repair member file [l:20{10}]"tbssvc.dll" of Microsoft-Windows-TPM-TBS-Core, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000251 [SR] Cannot repair member file [l:20{10}]"WsmRes.dll" of Microsoft-Windows-Web-Services-for-Management-Core, Version = 7.0.6001.18181, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000253 [SR] Cannot repair member file [l:20{10}]"locale.nls" of Microsoft-Windows-International-Core-Locale-NLS, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000254 [SR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"2018-12-20 16:57:59, Info CSI 00000257 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"locale.nls"; source file in store is also corrupted2018-12-20 16:57:59, Info CSI 00000259 [SR] Cannot repair member file [l:22{11}]"azroles.dll" of Microsoft-Windows-AzMan, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 0000025a [SR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"2018-12-20 16:57:59, Info CSI 0000025d [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"azroles.dll"; source file in store is also corrupted2018-12-20 16:57:59, Info CSI 0000025f [SR] Cannot repair member file [l:18{9}]"ehres.dll" of Microsoft-Windows-ehome-ehres, Version = 6.0.6002.18242, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:57:59, Info CSI 00000260 [SR] This component was referenced by [l:148{74}]"Package_5_for_KB982480~31bf3856ad364e35~x86~~6.0.1.0.982480-55_neutral_GDR"2018-12-20 16:58:00, Info CSI 00000263 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\ehome"\[l:18{9}]"ehres.dll"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 00000265 [SR] Cannot repair member file [l:20{10}]"tbssvc.dll" of Microsoft-Windows-TPM-TBS-Core, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 00000266 [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"2018-12-20 16:58:00, Info CSI 00000269 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tbssvc.dll"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 0000026b [SR] Cannot repair member file [l:22{11}]"C_20127.NLS" of Microsoft-Windows-International-CodePage-20127, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 0000026c [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:58:00, Info CSI 0000026f [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_20127.NLS"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 00000271 [SR] Cannot repair member file [l:20{10}]"WsmRes.dll" of Microsoft-Windows-Web-Services-for-Management-Core, Version = 7.0.6001.18181, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 00000272 [SR] This component was referenced by [l:176{88}]"Package_for_KB950099_client~31bf3856ad364e35~x86~~7.0.6002.18181.WindowsRemoteManagement"2018-12-20 16:58:00, Info CSI 00000275 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"WsmRes.dll"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 00000277 [SR] Cannot repair member file [l:26{13}]"aero.msstyles" of Microsoft-Windows-aero, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 00000278 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"2018-12-20 16:58:00, Info CSI 0000027b [SR] Could not reproject corrupted file [ml:520{260},l:72{36}]"\??\C:\Windows\Resources\Themes\aero"\[l:26{13}]"aero.msstyles"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 0000027d [SR] Cannot repair member file [l:16{8}]"dfsr.exe" of Microsoft-Windows-DFSR-Core-ClientOnly, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 0000027e [SR] This component was referenced by [l:158{79}]"Package_20_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-53_neutral_GDR"2018-12-20 16:58:00, Info CSI 00000281 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:16{8}]"dfsr.exe"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 00000283 [SR] Cannot repair member file [l:16{8}]"msyh.ttf" of Microsoft-Windows-Font-TrueType-MicrosoftYaHei, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 00000284 [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:58:00, Info CSI 00000287 [SR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:16{8}]"msyh.ttf"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 00000289 [SR] Cannot repair member file [l:22{11}]"C_28591.NLS" of Microsoft-Windows-International-CodePage-28591, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch2018-12-20 16:58:00, Info CSI 0000028a [SR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"2018-12-20 16:58:00, Info CSI 0000028d [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_28591.NLS"; source file in store is also corrupted2018-12-20 16:58:00, Info CSI 0000028f [SR] Repair complete2018-12-20 16:58:01, Info CSI 00000290 [SR] Committing transaction2018-12-20 16:58:01, Info CSI 00000294 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired
SFCFix.txt
SFCFix version 3.0.0.0 by niemiro.
Start time: 2018-12-13 22:12:25.140Microsoft Windows Vista Service Pack 2 - x86Not using a script file.AutoAnalysis::CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-aero_31bf3856ad364e35_6.0.6002.18005_none_adce8a97168b6195\aero.msstylesCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-azman_31bf3856ad364e35_6.0.6002.18005_none_58429241afdb27e5\azroles.dllCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-dfsr-core-clientonly_31bf3856ad364e35_6.0.6002.18005_none_b86505b69725e0c7\dfsr.exeCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6002.18242_none_53c9403f4dbd1575\ehres.dllCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-f..type-microsoftyahei_31bf3856ad364e35_6.0.6000.16386_none_389c8034332e39c5\msyh.ttfCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-i..nal-core-locale-nls_31bf3856ad364e35_6.0.6002.18005_none_6ca3a9e5a6678d1d\locale.nlsCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-i..onal-codepage-20127_31bf3856ad364e35_6.0.6000.16386_none_5004637be9489ce4\C_20127.NLSCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-i..onal-codepage-28591_31bf3856ad364e35_6.0.6000.16386_none_53679c75e712462b\C_28591.NLSCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-tpm-tbs-core_31bf3856ad364e35_6.0.6001.18000_none_e422d83793207cfb\tbssvc.dllCORRUPT: C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WsmRes.dllSUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.CBS & SFC total detected corruption count: 10CBS & SFC total unimportant corruption count: 0CBS & SFC total fixed corruption count: 0SURT total detected corruption count: 0SURT total unimportant corruption count: 0SURT total fixed corruption count: 0AutoAnalysis:: directive completed successfully.Successfully processed all directives.Failed to generate a complete zip file. Upload aborted.SFCFix version 3.0.0.0 by niemiro has completed.Currently storing 0 datablocks.Finish time: 2018-12-13 23:20:03.802----------------------EOF-----------------------
FRST.txt
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20.12.2018
Ran by sue antos (administrator) on SUE-PC (20-12-2018 21:41:50)Running from C:\Users\sue antos\DesktopLoaded Profiles: sue antos (Available Profiles: sue antos & UpdatusUser)Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Language: English (United States)Internet Explorer Version 9 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe(AOMEI Tech Co., Ltd.) C:\Program Files\AOMEI Backupper\ABService.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe(Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfimon.exe(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDExtHost.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDAppHost.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDRuntimeHost.exe(Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDSurrogateHost.exe(IObit) C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe(Hewlett-Packard Company) C:\hp\KBD\kbd.exe(Microsoft Corporation) C:\WINDOWS\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe(Microsoft Corporation) C:\WINDOWS\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe(Microsoft Corporation) C:\WINDOWS\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe(Microsoft Corporation) C:\WINDOWS\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)"Path" (C:\Program Files\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\hp\bin\Python;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\AOMEI Backupper;;C:\Program Files\Process Lasso\; -> %SystemRoot%\System32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SystemRoot%\System32\Wbem;C:\hp\bin\Python;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\AOMEI Backupper;;C:\Program Files\Process Lasso\<==== Repaired successfully
HKLM\...\Run: [hpsysdrv] => c:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)HKLM\...\Run: [KBD] => C:\HP\KBD\KbdStub.EXE [65536 2006-12-08] ()HKLM\...\Run: [OsdMaestro] => C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)HKLM\...\Run: [] => [X]HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)HKLM\...\Run: [BingDesktop] => C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2369240 2015-10-20] (Microsoft Corp.)HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [663552 2007-03-23] (Brother Industries, Ltd.)HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [65536 2007-01-26] (Brother Industries, Ltd.)HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle Corporation)HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-18] (Microsoft Corporation)HKU\S-1-5-21-705346615-1281910294-1584702601-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssBranded.scr [8139264 2008-01-18] (Microsoft Corporation)Startup: C:\Users\sue antos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ReconnectMappedDrive - Shortcut.lnk [2013-01-10]ShortcutTarget: ReconnectMappedDrive - Shortcut.lnk -> C:\Program Files\ReconnectMappedDrive.bat ()GroupPolicy: Restriction - Chrome <==== ATTENTION==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)Tcpip\Parameters: [DhcpNameServer] 167.206.13.180 167.206.13.181 192.168.1.1Tcpip\..\Interfaces\{6AAA3940-67AE-43C7-B6F3-FA29EBEA4B57}: [DhcpNameServer] 167.206.13.180 167.206.13.181 192.168.1.1Internet Explorer:==================HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.comHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.comHKU\S-1-5-21-705346615-1281910294-1584702601-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/SearchScopes: HKLM -> DefaultScope {5ABF78E4-74EB-48B9-BE8D-76D5F01FC795} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdtSearchScopes: HKLM -> {5ABF78E4-74EB-48B9-BE8D-76D5F01FC795} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdtSearchScopes: HKU\S-1-5-21-705346615-1281910294-1584702601-1000 -> DefaultScope {9C1697EE-C762-4D50-BE2B-02F54BAE7B97} URL = hxxp://www.bing.com/search?FORM=BDKTDF&PC=BDT3&q={searchTerms}&src=IE-SearchBoxSearchScopes: HKU\S-1-5-21-705346615-1281910294-1584702601-1000 -> {5ABF78E4-74EB-48B9-BE8D-76D5F01FC795} URL =SearchScopes: HKU\S-1-5-21-705346615-1281910294-1584702601-1000 -> {9C1697EE-C762-4D50-BE2B-02F54BAE7B97} URL = hxxp://www.bing.com/search?FORM=BDKTDF&PC=BDT3&q={searchTerms}&src=IE-SearchBoxBHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-07-19] (IObit)BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_191\bin\ssv.dll [2018-10-17] (Oracle Corporation)BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-17] (Oracle Corporation)BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2017-01-03] (Eyeo GmbH)Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-07] (Microsoft Corporation)FireFox:========FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtensionFF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-12-21] [Legacy] [not signed]FF Plugin: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-10-17] (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-10-17] (Oracle Corporation)FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)FF Plugin HKU\S-1-5-21-705346615-1281910294-1584702601-1000: @citrixonline.com/appdetectorplugin -> C:\Users\sue antos\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-10-07] (Citrix Online)Chrome:=======CHR DefaultProfile: Profile 10CHR HomePage: Profile 10 -> hxxps://www.bing.com/CHR StartupUrls: Profile 10 -> "hxxps://www.bing.com/"CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-12-18]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-12-18]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10 [2018-12-20]CHR Extension: (Slides) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-18]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-18]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-18]CHR Extension: (Sheets) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-18]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-19]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-18]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-10-18]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2 [2018-12-18]CHR Extension: (Slides) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-12]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-12]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-12]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-13]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-13]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-12]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-13]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-13]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-13]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-13]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-13]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-13]CHR Extension: (Sheets) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-12]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-13]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-13]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-13]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-09-13]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-09-13]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-13]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-13]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-13]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-13]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-13]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-13]CHR Extension: (Webroot Filtering Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kjeghcllfecehndceplomkocgfbklffd [2018-09-13]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-13]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-13]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-13]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-13]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-12]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-13]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-13]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-12]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3 [2018-12-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-14]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-14]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-15]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-15]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-14]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-15]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-15]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-15]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-15]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-15]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-15]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-15]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-14]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-15]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-09-15]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-09-15]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-15]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-15]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-15]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-15]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-15]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-15]CHR Extension: (Webroot Filtering Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kjeghcllfecehndceplomkocgfbklffd [2018-09-15]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-15]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-15]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-15]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-15]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-14]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-15]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-15]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-14]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4 [2018-12-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-16]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-16]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-17]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-17]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-17]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-17]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-17]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-17]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-17]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-17]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-17]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-16]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-17]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-09-17]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-09-17]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-17]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-17]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-17]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-17]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-17]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-17]CHR Extension: (Webroot Filtering Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\kjeghcllfecehndceplomkocgfbklffd [2018-09-17]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-17]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-17]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-17]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-17]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-16]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-17]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-17]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-16]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5 [2018-12-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-17]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-17]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-17]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-17]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-17]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-17]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-17]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-17]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-17]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-17]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-17]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-17]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-17]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-18]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-09-17]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-09-17]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-17]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-17]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-17]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-17]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-17]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-17]CHR Extension: (Webroot Filtering Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\kjeghcllfecehndceplomkocgfbklffd [2018-09-17]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-17]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-17]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-17]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-17]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-17]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-17]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-17]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-17]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 6 [2018-12-18]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7 [2018-12-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-20]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-20]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-20]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-20]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-20]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-20]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-20]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-20]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-20]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-20]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-20]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-20]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-20]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-20]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-09-20]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-09-20]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-20]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-20]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-20]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-20]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-20]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-20]CHR Extension: (Webroot Filtering Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\kjeghcllfecehndceplomkocgfbklffd [2018-09-20]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-20]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-20]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-20]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-20]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-20]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-20]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-20]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-20]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8 [2018-12-18]CHR Extension: (Docs) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-21]CHR Extension: (Google Drive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-21]CHR Extension: (meemore) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\bekieiehhbhcgjccdoiabcickjjpfklo [2018-09-21]CHR Extension: (AdGuard AdBlocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-09-21]CHR Extension: (YouTube) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-21]CHR Extension: (Sticky Password extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2018-09-21]CHR Extension: (OneTab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2018-09-21]CHR Extension: (Do Not Track) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ckdcpbflcbeillmamogkpmdhnbeggfja [2018-09-21]CHR Extension: (Tampermonkey) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2018-09-21]CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2018-09-21]CHR Extension: (Google+) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2018-09-21]CHR Extension: (EditThisCookie) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-09-21]CHR Extension: (Google Docs Offline) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-21]CHR Extension: (AdBlock) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-09-21]CHR Extension: (Betternet Unlimited Free VPN Proxy) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gjknjjomckknofjidppipffbpoekiipm [2018-10-09]CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2018-10-08]CHR Extension: (Tabs to the Front) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\hiembaoomcehoiehhdldabfgnmphappc [2018-09-21]CHR Extension: (Referer Control) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\hnkcfpcejkafcihlgbojoidoihckciin [2018-09-21]CHR Extension: (Kindle Cloud Reader) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2018-09-21]CHR Extension: (ZbigZ - Official Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ifchggdfkdbkpolgmclfhdlodpjciejl [2018-09-21]CHR Extension: (Bing New Tab) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\jfpjdnlnlfohijjdaedloghlehphncoo [2018-09-21]CHR Extension: (Extensity) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\jjmflmamggggndanpgfnpelongoepncg [2018-09-21]CHR Extension: (Disable Extensions Temporarily) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2018-09-21]CHR Extension: (TorrentSafe Right-Click Extension) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lokbhemjpeifblfhlmbbojahimbmdmai [2018-09-21]CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-09-21]CHR Extension: (OneDrive) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2018-09-21]CHR Extension: (Chrome Web Store Payments) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-20]CHR Extension: (news-readrr) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nobbiddnjpljaljnmhekbnmdpglgfogi [2018-09-21]CHR Extension: (Bing) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ofgaflfnfknmefgjhlgkohmpekighhdi [2018-09-21]CHR Extension: (Gmail) - C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-09-21]CHR Profile: C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\System Profile [2018-12-18]==================== Services (Whitelisted) ====================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-12-13] (Adobe Systems Incorporated) [File not signed]R2 Backupper Service; C:\Program Files\AOMEI Backupper\ABService.exe [122728 2018-04-09] (AOMEI Tech Co., Ltd.)R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2015-10-20] (Microsoft Corp.)S3 DFSR; C:\Windows\system32\DFSR.exe [2093056 2009-04-10] (Microsoft Corporation) [File not signed]R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [387616 2009-08-10] ()S2 IObitUnSvr; C:\Program Files\IObit\IObit Uninstaller\IUService.exe [153360 2018-09-25] (IObit)R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [178720 2009-08-10] ()R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [203848 2013-02-19] (Realtek Semiconductor)S2 TBS; C:\Windows\System32\tbssvc.dll [57344 2008-01-18] (Microsoft Corporation) [File not signed]R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [11660528 2018-12-07] (TeamViewer GmbH)R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-18] (Microsoft Corporation)===================== Drivers (Whitelisted) ======================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [46896 2016-12-21] ()R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [150192 2016-12-21] ()R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [34864 2017-09-01] ()R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-02-13] (REALiX™)R3 IUProcessFilter; C:\Program Files\IObit\IObit Uninstaller\drivers\win7_x86\IUProcessFilter.sys [17264 2018-10-16] (IObit)R3 IURegistryFilter; C:\Program Files\IObit\IObit Uninstaller\drivers\win7_x86\IURegistryFilter.sys [23440 2018-10-16] (IObit)S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]S3 cpuz138; \??\C:\Users\SUEANT~1\AppData\Local\Temp\cpuz138\cpuz138_x32.sys [X] <==== ATTENTIONS3 IpInIp; system32\DRIVERS\ipinip.sys [X]S4 IUFileFilter; \??\C:\Program Files\IObit\IObit Uninstaller\drivers\win7_x86\IUFileFilter.sys [X]S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]S3 PcdrNdisuio; system32\DRIVERS\pcdrndisuio.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2018-12-20 21:41 - 2018-12-20 21:43 - 000045799 _____ C:\Users\sue antos\Desktop\FRST.txt2018-12-20 21:41 - 2018-12-20 21:41 - 000000000 ____D C:\FRST2018-12-20 21:40 - 2018-12-20 21:33 - 001778176 _____ (Farbar) C:\Users\sue antos\Desktop\FRST.exe2018-12-20 21:34 - 2018-12-20 21:34 - 000201728 _____ (OldTimer Tools) C:\Users\sue antos\Downloads\OTC.exe2018-12-20 21:33 - 2018-12-20 21:33 - 001778176 _____ (Farbar) C:\Users\sue antos\Downloads\FRST.exe2018-12-20 20:27 - 2018-12-20 20:27 - 004002104 _____ (Secunia) C:\Users\sue antos\Downloads\PSISetup.exe2018-12-20 19:07 - 2018-12-20 19:07 - 000003157 _____ C:\Users\sue antos\Downloads\fixlist.txt2018-12-20 18:26 - 2018-12-20 18:26 - 000000000 ____D C:\Program Files\HashTab Shell Extension2018-12-20 18:25 - 2018-12-20 18:25 - 001169944 _____ C:\Users\sue antos\Downloads\HashTab_v6.0.0.34_Setup.exe2018-12-20 17:32 - 2018-12-20 17:31 - 001250448 _____ (Microsoft Corporation) C:\Users\sue antos\Downloads\aero (From PConLIFE.com).msstyles2018-12-20 17:31 - 2018-12-20 17:31 - 000958337 _____ C:\Users\sue antos\Downloads\aero.msstyles.zip2018-12-20 16:58 - 2018-12-20 18:47 - 000052312 _____ C:\Users\sue antos\Desktop\sfcdetails.txt2018-12-18 16:32 - 2018-12-18 16:32 - 000000000 ___HD C:\Windows\PIF2018-12-18 14:39 - 2018-12-18 14:39 - 000000814 _____ C:\Users\sue antos\Downloads\CCEnhancer-4.5.3 - Shortcut.lnk2018-12-13 23:38 - 2018-12-13 23:38 - 007321808 _____ (Malwarebytes) C:\Users\sue antos\Downloads\adwcleaner_7.2.5.0.exe2018-12-13 23:20 - 2018-12-13 23:20 - 000004506 _____ C:\Users\sue antos\Desktop\SFCFix.txt2018-12-13 23:20 - 2018-12-13 23:20 - 000000000 ____D C:\SFCFix2018-12-13 22:12 - 2018-12-13 23:20 - 000000000 ____D C:\Users\sue antos\AppData\Local\niemiro2018-12-13 21:30 - 2018-12-13 21:31 - 154546261 _____ C:\Users\sue antos\Downloads\Windows6.0-KB947821-v35-x86.msu2018-12-13 21:18 - 2018-12-13 21:18 - 002884096 _____ (niemiro) C:\Users\sue antos\Downloads\SFCFix.exe2018-12-13 20:13 - 2018-12-13 20:13 - 000000083 _____ C:\Users\sue antos\Desktop\New Text Document.txt==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2018-12-20 20:54 - 2006-11-02 07:47 - 000003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A02018-12-20 20:54 - 2006-11-02 07:47 - 000003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A02018-12-20 18:47 - 2017-04-13 19:55 - 000063008 _____ C:\Users\sue2018-12-19 17:55 - 2013-02-27 19:58 - 000000000 ____D C:\Program Files\TeamViewer2018-12-19 17:24 - 2017-04-15 21:16 - 000000000 ____D C:\Users\sue antos\AppData\LocalLow\Adblock Plus for IE2018-12-18 16:23 - 2007-11-08 04:54 - 000000000 ____D C:\Windows\Panther2018-12-18 16:23 - 2006-11-02 06:18 - 000000000 ____D C:\Windows\inf2018-12-18 15:55 - 2013-07-07 13:55 - 000000000 ____D C:\Users\sue antos\AppData\Roaming\TeamViewer2018-12-18 15:33 - 2012-12-23 18:18 - 000000000 ____D C:\Users\sue antos\AppData\Local\Adobe2018-12-18 14:56 - 2012-12-23 18:00 - 000000000 ____D C:\Program Files\CCleaner2018-12-18 14:18 - 2018-04-29 18:54 - 000000000 ____D C:\Program Files\AOMEI Backupper2018-12-18 14:06 - 2018-04-29 18:54 - 000001024 ____H C:\SYSTAG.BIN2018-12-18 14:06 - 2018-04-29 18:54 - 000000082 _____ C:\Windows\system32\winsevr.dat2018-12-18 13:12 - 2018-04-29 18:49 - 000000000 ____D C:\Users\sue antos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR2018-12-18 13:12 - 2018-04-29 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR2018-12-18 13:12 - 2018-04-29 18:49 - 000000000 ____D C:\Program Files\WinRAR2018-12-18 13:01 - 2006-11-02 05:33 - 000759542 _____ C:\Windows\system32\PerfStringBackup.INI2018-12-18 12:54 - 2006-11-02 08:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT2018-12-15 13:52 - 2006-11-02 08:01 - 000032650 _____ C:\Windows\Tasks\SCHEDLGU.TXT2018-12-14 02:16 - 2017-09-03 15:29 - 000277096 _____ C:\Windows\system32\FNTCACHE.DAT2018-12-13 20:18 - 2015-03-26 18:30 - 000000680 _____ C:\Users\sue antos\AppData\Local\d3d9caps.dat2018-12-13 20:11 - 2014-11-18 09:07 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll2018-12-13 20:11 - 2012-12-20 23:07 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll2018-12-13 20:11 - 2006-11-02 01:25 - 000196642 _____ C:\Windows\system32\C_950.NLS2018-12-13 20:11 - 2006-11-02 01:25 - 000066082 _____ C:\Windows\system32\C_1253.NLS2018-12-13 20:11 - 2006-11-02 01:25 - 000066082 _____ C:\Windows\system32\C_1250.NLS2018-12-13 20:10 - 2006-11-02 02:26 - 015821312 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll2018-12-13 20:10 - 2006-11-02 01:58 - 000045794 _____ C:\Windows\system32\normnfc.nls2018-12-13 20:10 - 2006-11-02 01:25 - 000196642 _____ C:\Windows\system32\C_936.NLS2018-12-13 20:10 - 2006-11-02 01:25 - 000066082 _____ C:\Windows\system32\C_1256.NLS2018-12-13 20:10 - 2006-11-02 01:25 - 000066082 _____ C:\Windows\system32\C_1251.NLS2018-12-13 19:10 - 2018-04-14 12:41 - 000001890 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk2018-12-13 19:10 - 2017-06-11 16:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller2018-12-13 19:10 - 2016-03-16 08:07 - 000001902 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk2018-12-13 16:40 - 2013-02-27 20:05 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe2018-12-13 16:40 - 2013-02-27 20:05 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl2018-12-13 16:40 - 2007-11-08 05:37 - 000000000 ____D C:\Windows\system32\Macromed2018-12-13 16:18 - 2018-10-23 18:03 - 000000804 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk2018-12-13 16:15 - 2015-09-15 20:02 - 000000000 ____D C:\ProgramData\ProductData2018-12-10 17:04 - 2012-12-21 00:37 - 000499424 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe2018-11-26 12:10 - 2013-01-10 18:04 - 000000000 ____D C:\Program Files\Process Lasso==================== Files in the root of some directories =======2013-01-10 18:52 - 2017-06-14 20:04 - 000000070 _____ () C:\Program Files\ReconnectMappedDrive.bat2017-04-10 16:09 - 2013-01-10 04:58 - 000471848 _____ (Bitsum Technologies) C:\Users\sue antos\AppData\Roaming\ProcessLassopl_rsrc_temp.dll2014-06-19 13:00 - 2014-06-19 13:00 - 000000024 _____ () C:\Users\sue antos\AppData\Roaming\temp.ini2013-06-21 15:45 - 2013-06-21 15:45 - 000024206 _____ () C:\Users\sue antos\AppData\Roaming\UserTile.png2013-09-25 17:59 - 2014-09-29 18:39 - 000000434 _____ () C:\Users\sue antos\AppData\Roaming\wklnhst.dat2015-03-26 18:30 - 2018-12-13 20:18 - 000000680 _____ () C:\Users\sue antos\AppData\Local\d3d9caps.dat2012-12-21 20:56 - 2018-06-05 22:52 - 000005632 _____ () C:\Users\sue antos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini==================== Bamital & volsnap ======================(There is no automatic fix for files that do not pass verification.)C:\Windows\explorer.exe => File is digitally signedC:\Windows\system32\winlogon.exe => File is digitally signedC:\Windows\system32\wininit.exe => File is digitally signedC:\Windows\system32\svchost.exe => File is digitally signedC:\Windows\system32\services.exe => File is digitally signedC:\Windows\system32\User32.dll => File is digitally signedC:\Windows\system32\userinit.exe => File is digitally signedC:\Windows\system32\rpcss.dll => File is digitally signedC:\Windows\system32\dnsapi.dll => File is digitally signedC:\Windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2018-12-20 13:25==================== End of FRST.txt ============================
ADDITION.txt
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20.12.2018
Ran by sue antos (20-12-2018 21:43:27)Running from C:\Users\sue antos\DesktopMicrosoft® Windows Vista™ Home Premium Service Pack 2 (X86) (2012-12-15 22:09:27)Boot Mode: Normal============================================================================== Accounts: =============================Administrator (S-1-5-21-705346615-1281910294-1584702601-500 - Administrator - Disabled)Guest (S-1-5-21-705346615-1281910294-1584702601-501 - Limited - Enabled)sue antos (S-1-5-21-705346615-1281910294-1584702601-1000 - Administrator - Enabled) => C:\Users\sue antosUpdatusUser (S-1-5-21-705346615-1281910294-1584702601-1001 - Limited - Enabled) => C:\Users\UpdatusUser==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)Adblock Plus for IE (32-bit) (HKLM\...\{FE4694A5-33AF-4F10-B2C0-8F2750A5ED05}) (Version: 1.6 - Eyeo GmbH)Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.101 - Adobe Systems Incorporated)Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)AOMEI Backupper Professional (HKLM\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: - AOMEI Technology Co., Ltd.)Auslogics Disk Defrag (HKLM\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 8.0.18.0 - Auslogics Labs Pty Ltd)Bing Desktop (HKLM\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.478.0 - Microsoft Corporation)Brother MFL-Pro Suite (HKLM\...\{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}) (Version: 1.00 - Brother Industries, Ltd.)CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)Defraggler (HKLM\...\Defraggler) (Version: 2.22 - Piriform)Enhanced Multimedia Keyboard Solution (HKLM\...\KBD) (Version: - Hewlett-Packard)FileHippo App Manager (HKLM\...\FileHippo.com) (Version: - FileHippo.com)Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) HiddenHashTab 6.0.0.34 (HKLM\...\HashTab) (Version: 6.0.0.34 - Implbits Software)Hewlett-Packard Active Check (HKLM\...\{254C37AA-6B72-4300-84F6-98A82419187E}) (Version: 1.1.11.0 - Hewlett-Packard) HiddenHewlett-Packard Asset Agent for Health Check (HKLM\...\{669D4A35-146B-4314-89F1-1AC3D7B88367}) (Version: 2.0.62.5 - HP) HiddenHP On-Screen Cap/Num/Scroll Lock Indicator (HKLM\...\OsdMaestro) (Version: - Hewlett-Packard)HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)IObit Uninstaller 8 (HKLM\...\IObitUninstall) (Version: 8.2.0.14 - IObit)Java 8 Update 191 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180191F0}) (Version: 8.0.1910.12 - Oracle Corporation)Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.8 - NVIDIA Corporation)NVIDIA ForceWare Network Access Manager (HKLM\...\InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7316 - NVIDIA Corporation)NVIDIA Graphics Driver 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)Process Lasso (HKLM\...\ProcessLasso) (Version: 9.0.0.538 - Bitsum)Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1) (Version: 7.74.00 - Conexant Systems)SolSuite 2013 v13.8 (HKLM\...\SolSuite_is1) (Version: 13.8 - TreeCardGames)SpywareBlaster 5.5 (HKLM\...\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC)TeamViewer 14 (HKLM\...\TeamViewer) (Version: 14.1.3399 - TeamViewer)Tweaking.com - Windows Repair (HKLM\...\Tweaking.com - Windows Repair) (Version: 4.0.13 - Tweaking.com)WeatherBug Gadget (HKLM\...\{209CDA54-D390-46A2-A97C-7BF61734418D}) (Version: 1.0.0.6 - AWS Convergence Technologies) HiddenWinRAR 5.61 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell.dll [2018-05-02] (Piriform Ltd)ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files\IObit\IObit Uninstaller\IUMenuRight.dll [2018-07-21] (IObit)ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (Alexander Roshal)ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files\IObit\IObit Uninstaller\IUMenuRight.dll [2018-07-21] (IObit)ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2013-01-31] (NVIDIA Corporation)ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell.dll [2018-05-02] (Piriform Ltd)ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files\IObit\IObit Uninstaller\IUMenuRight.dll [2018-07-21] (IObit)ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (Alexander Roshal)==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {163B4774-1A06-40DD-AF30-454909BA70E5} - \Uninstaller_SkipUac_Administrator -> No File <==== ATTENTIONTask: {1FCE5CED-19B9-470D-B8F8-A8686D74B6B9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)Task: {40C29874-9944-4022-A904-BCFD77C4FCEF} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)Task: {4148A705-68AC-415D-BA5A-78C8A91A0309} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-09-05] ()Task: {4B7CC609-2A2C-4A15-822A-70DDDEC4278A} - System32\Tasks\Uninstaller_SkipUac_sue_antos => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2018-11-27] (IObit)Task: {6AF7EAE7-88D9-4CAC-97C7-85D83E580EE2} - \RecoveryCD -> No File <==== ATTENTIONTask: {6C513944-2A25-4D08-93D0-1EFC14A21536} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-17] (Google Inc.)Task: {6CD26B65-3820-402D-AA0B-D0B57AEB32C0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)Task: {703D8805-DF2F-42AD-9623-5BFEB99AC106} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2018-11-21] (Bitsum LLC)Task: {772EEBE3-ADE8-4211-8396-282FAD91718A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-13] (Adobe Systems Incorporated)Task: {7BE7EAFD-B7A2-4363-94B4-598D1A19638F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-17] (Google Inc.)Task: {81AB828F-C0DF-47C6-AE4E-4DAD5D75E6C5} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2018-11-21] (Bitsum LLC)Task: {8944ABAF-352D-47FC-9321-083EB258EF0E} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => Command(1): C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation)Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => %windir%\system32\rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries <==== ATTENTIONTask: {B98ED3BF-A952-40C5-9806-0CB976CC0956} - System32\Tasks\JavaUpdateAdministrator => C:\Windows\system32\jusched.exeTask: {EC4429A5-8E69-4335-BD25-E52B92AC899F} - System32\Tasks\JavaUpdatesue antos => C:\Windows\system32\jusched.exe(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)==================== Shortcuts & WMI ========================(The entries could be listed to be restored or removed.)Shortcut: C:\Users\sue antos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ReconnectMappedDrive - Shortcut.lnk -> C:\Program Files\ReconnectMappedDrive.bat ()==================== Loaded Modules (Whitelisted) ==============2018-04-29 18:54 - 2018-04-09 19:24 - 000966512 _____ () C:\Program Files\AOMEI Backupper\UiLogic.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000266096 _____ () C:\Program Files\AOMEI Backupper\diskmgr.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000343912 _____ () C:\Program Files\AOMEI Backupper\Comn.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000089968 _____ () C:\Program Files\AOMEI Backupper\Ldm.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000073576 _____ () C:\Program Files\AOMEI Backupper\Device.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000298864 _____ () C:\Program Files\AOMEI Backupper\BrFat.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000978800 _____ () C:\Program Files\AOMEI Backupper\BrNtfs.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000139120 _____ () C:\Program Files\AOMEI Backupper\FuncLogic.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000339816 _____ () C:\Program Files\AOMEI Backupper\Clone.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000360304 _____ () C:\Program Files\AOMEI Backupper\ImgFile.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000040816 _____ () C:\Program Files\AOMEI Backupper\Encrypt.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000081768 _____ () C:\Program Files\AOMEI Backupper\Compress.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000114544 _____ () C:\Program Files\AOMEI Backupper\BrVol.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000266096 _____ () C:\Program Files\AOMEI Backupper\GptBcd.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000175984 _____ () C:\Program Files\AOMEI Backupper\FlBackup.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000499568 _____ () C:\Program Files\AOMEI Backupper\EnumFolder.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000188272 _____ () C:\Program Files\AOMEI Backupper\DeviceMgr.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000126824 _____ () C:\Program Files\AOMEI Backupper\Backup.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000724848 _____ () C:\Program Files\AOMEI Backupper\Sync.dll2018-04-29 18:54 - 2018-04-09 19:24 - 000114536 _____ () C:\Program Files\AOMEI Backupper\BrLog.dll2018-04-29 18:54 - 2015-05-21 13:32 - 002403504 _____ () C:\Program Files\AOMEI Backupper\QtCore4.dll2009-08-10 15:59 - 2009-08-10 15:59 - 000387616 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe2009-08-10 15:59 - 2009-08-10 15:59 - 000068128 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll2009-08-10 15:59 - 2009-08-10 15:59 - 000436768 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll2013-06-03 17:04 - 2002-11-26 12:43 - 000106496 _____ () C:\Windows\system32\BrMuSNMP.dll2009-08-10 15:59 - 2009-08-10 15:59 - 000178720 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe2014-09-07 15:16 - 2014-09-05 10:55 - 000132808 _____ () C:\Users\sue antos\AppData\Local\Microsoft\BingDesktop\en-US\Apps\Wallpaper_5386c77076d04cf9a8b5d619b4cba48e\1.4.82\wallpaper.dll2016-03-16 08:07 - 2018-05-02 17:42 - 000442128 _____ () C:\Program Files\IObit\IObit Uninstaller\madExcept_.bpl2016-03-16 08:07 - 2018-05-02 17:42 - 000210704 _____ () C:\Program Files\IObit\IObit Uninstaller\madBasic_.bpl2016-03-16 08:07 - 2018-05-02 17:42 - 000059664 _____ () C:\Program Files\IObit\IObit Uninstaller\madDisAsm_.bpl2016-10-27 13:59 - 2016-09-06 11:00 - 005197312 _____ () C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll2016-10-27 13:59 - 2016-09-06 11:00 - 000147456 _____ () C:\Users\sue antos\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125]AlternateDataStreams: C:\ProgramData\TEMP:9A2B2B2D [122]==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"==================== Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)IE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\download.microsoft.com -> hxxp://download.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\download.windowsupdate.com -> hxxp://download.windowsupdate.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\download.windowsupdate.com -> hxxps://download.windowsupdate.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\microsoft.com -> hxxp://ntservicepack.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\ntservicepack.microsoft.com -> hxxp://ntservicepack.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\update.microsoft.com -> hxxp://update.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\update.microsoft.com -> hxxps://update.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\windows.com -> hxxp://wustat.windows.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\windowsupdate.com -> hxxp://download.windowsupdate.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\windowsupdate.com -> hxxps://download.windowsupdate.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\windowsupdate.microsoft.com -> hxxp://windowsupdate.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\ws.microsoft.com -> hxxp://ws.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\ws.microsoft.com -> hxxps://ws.microsoft.comIE trusted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\wustat.windows.com -> hxxp://wustat.windows.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\008i.com -> 008i.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\008k.com -> 008k.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\00hq.com -> 00hq.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0190-dialers.com -> 0190-dialers.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\01i.info -> 01i.infoIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0411dd.com -> 0411dd.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0511zfhl.com -> 0511zfhl.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\05p.com -> 05p.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0632qyw.com -> 0632qyw.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0calories.net -> 0calories.netIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0cj.net -> 0cj.netIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\0scan.com -> 0scan.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\1-domains-registrations.com -> 1-domains-registrations.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\1-se.com -> 1-se.comIE restricted site: HKU\S-1-5-21-705346615-1281910294-1584702601-1000\...\1001movie.com -> 1001movie.comThere are 6091 more sites.==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2006-11-02 05:23 - 2018-01-30 19:50 - 000000855 _____ C:\Windows\system32\Drivers\etc\hosts127.0.0.1 localhost==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-705346615-1281910294-1584702601-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\sue antos\AppData\Local\Microsoft\BingDesktop\en-US\Apps\Wallpaper_5386c77076d04cf9a8b5d619b4cba48e\VersionIndependent\images\60037.jpgDNS Servers: 167.206.13.180 - 167.206.13.181HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==If an entry is included in the fixlist, it will be removed.==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exeFirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exeFirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exeFirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exeFirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exeFirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exeFirewallRules: [WMPNSS-WMP-Out-TCP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMPNSS-WMP-Out-UDP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMPNSS-WMP-In-UDP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMPNSS-WMP-Out-TCP-NoScope-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMPNSS-WMP-Out-UDP-NoScope-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMPNSS-WMP-In-UDP-NoScope-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMP-Out-TCP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMP-Out-UDP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [WMP-In-UDP-x86] => (Allow) %ProgramFiles(x86)%\Windows Media Player\wmplayer.exeFirewallRules: [{7B0956BD-F3D2-483D-B46D-8A8571258DC6}] => (Allow) LPort=80FirewallRules: [{8AB470CC-8166-471A-8F5F-8CF24CBF9CE7}] => (Allow) LPort=80FirewallRules: [{E72885C9-C635-4DBF-9775-C607C77F0F91}] => (Allow) LPort=80FirewallRules: [TCP Query User{118B96CC-4DDB-4352-9F73-58A8A273B9B5}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exeFirewallRules: [UDP Query User{AA088097-0E52-47B2-91AF-33C3351F64C9}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exeFirewallRules: [{586E2038-469A-4947-8BD3-1A768B43B85B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exeFirewallRules: [{F0CFB3D0-C684-4DC6-8F19-782489BE04AF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exeFirewallRules: [{81FD193F-5250-4C29-B9FA-C22BB6E01299}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exeFirewallRules: [{FAFD3509-C412-4041-BFB9-7506AA622847}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exeFirewallRules: [{3C068719-DDF6-42CA-B55A-0EDCF0F7BC2F}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exeFirewallRules: [{72AF771B-1764-49A3-9C79-7990F0147EA9}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exeStandardProfile\AuthorizedApplications: [C:\Program Files\EarthLink TotalAccess\TaskPanl.exe] => Enabled:Earthlink==================== Restore Points =========================20-12-2018 04:24:19 Scheduled Checkpoint==================== Faulty Device Manager Devices ================================= Event log errors: =========================Application errors:==================Error: (12/18/2018 03:29:25 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application explorer.exe, version 6.0.6002.18005, time stamp 0x49e01da5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000096, fault offset 0x0011fa25,process id 0x13d8, application start time 0x01d4971057cb8bb3.Error: (12/15/2018 12:36:49 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0x178c, application start time 0x01d4949c9dc90deb.Error: (12/15/2018 12:35:41 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0xdfc, application start time 0x01d49492ee5a408b.Error: (12/13/2018 09:02:40 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0xf8c, application start time 0x01d4934aec15eb3d.Error: (12/13/2018 07:29:42 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0xf98, application start time 0x01d493426c941361.Error: (12/13/2018 07:13:13 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0x11f0, application start time 0x01d493411a95316b.Error: (12/13/2018 05:39:00 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0x924, application start time 0x01d4932855a1036b.Error: (10/25/2018 02:59:01 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application sidebar.exe, version 6.0.6002.18005, time stamp 0x49e02551, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000,process id 0xa8c, application start time 0x01d46c365a961ff4.System errors:=============Error: (12/19/2018 08:51:33 PM) (Source: volsnap) (EventID: 36) (User: )Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.Error: (12/18/2018 12:56:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The NVIDIA Update Service Daemon service failed to start due to the following error:The service did not start due to a logon failure.Error: (12/18/2018 12:56:31 PM) (Source: Service Control Manager) (EventID: 7038) (User: )Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:Logon failure: the specified account password has expired.To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).Error: (12/18/2018 12:55:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Parallel port driver service failed to start due to the following error:The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.Error: (12/15/2018 11:29:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The NVIDIA Update Service Daemon service failed to start due to the following error:The service did not start due to a logon failure.Error: (12/15/2018 11:29:04 AM) (Source: Service Control Manager) (EventID: 7038) (User: )Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:Logon failure: the specified account password has expired.To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).Error: (12/15/2018 11:29:04 AM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service.Error: (12/15/2018 11:27:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The Parallel port driver service failed to start due to the following error:The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.CodeIntegrity:===================================Date: 2013-08-04 17:31:22.481Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:31:22.277Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:31:22.038Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:31:21.839Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:30:54.114Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:30:53.872Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:30:53.655Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.Date: 2013-08-04 17:30:53.454Description:Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.==================== Memory info ===========================Processor: AMD Athlon™ 64 X2 Dual Core Processor 5600+Percentage of memory in use: 70%Total physical RAM: 2941.82 MBAvailable physical RAM: 871.42 MBTotal Virtual: 6119.67 MBAvailable Virtual: 3862.75 MB==================== Drives ================================Drive c: (HP) (Fixed) (Total:456.26 GB) (Free:180.7 GB) NTFS ==>[drive with boot components (obtained from BCD)]Drive d: (FACTORY_IMAGE) (Fixed) (Total:9.5 GB) (Free:1.23 GB) NTFS ==>[system with boot components (obtained from drive)]Drive z: () (Network) (Total:7.48 GB) (Free:3.72 GB)==================== MBR & Partition Table ==========================================================================Disk: 0 (Size: 465.8 GB) (Disk ID: 1549F232)Partition 1: (Active) - (Size=456.3 GB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=9.5 GB) - (Type=07 NTFS)==================== End of Addition.txt ============================
Thanks in advance,
Don
Edited by front360, 21 December 2018 - 05:48 AM.
![Help w/FRST logs...NEWBIE [Closed] - last post by DR M](https://www.geekstogo.com/forum/uploads/profile/photo-418842.gif?_r=1578338641)
Sign In
Create Account
