Network Store Interface Service
NVIDIA Display Driver Service
NVIDIA GeForce Experience Service
NVIDIA Network Service
NVIDIA Streamer Service
Plug and Play
Power
Print Spooler
Program Compatibility Assistant Service
Remote Procedure Call (RPC)
RPC Endpoint Mapper
Security Accounts Manager
Security Center
Server
Shell Hardware Detection
SSDP Discovery
State Repository Service
Superfetch
Sync Host_523a7
System Event Notification Service
System Events Broker
Task Scheduler
TCP/IP NetBIOS Helper
Themes
Tile Data model server
Time Broker
Unchecky
User Manager
User Profile Service
Windows Audio
Windows Audio Endpoint Builder
Windows Connection Manager
Windows Driver Foundation - User-mode Driver Framework
Windows Event Log
Windows Firewall
Windows Font Cache Service
Windows Image Acquisition (WIA)
Windows Management Instrumentation
Windows Presentation Foundation Font Cache 3.0.0.0
Windows Push Notifications System Service
Windows Search
WinHTTP Web Proxy Auto-Discovery Service
WLAN AutoConfig
Workstation
ZAM Controller Service
The command completed successfully.
Microsoft Windows [Version 10.0.14393]
Image Name PID Session Name Session# Mem Usage
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 4 K
System 4 Services 0 768 K
smss.exe 464 Services 0 1,156 K
csrss.exe 608 Services 0 4,548 K
wininit.exe 724 Services 0 5,320 K
csrss.exe 736 Console 1 8,120 K
services.exe 804 Services 0 8,388 K
lsass.exe 812 Services 0 13,580 K
svchost.exe 916 Services 0 21,528 K
svchost.exe 972 Services 0 10,296 K
winlogon.exe 420 Console 1 9,640 K
svchost.exe 536 Services 0 18,660 K
dwm.exe 500 Console 1 69,752 K
svchost.exe 1068 Services 0 47,592 K
svchost.exe 1084 Services 0 28,092 K
WUDFHost.exe 1108 Services 0 15,592 K
svchost.exe 1228 Services 0 18,388 K
svchost.exe 1416 Services 0 21,752 K
nvvsvc.exe 1472 Services 0 9,696 K
igfxCUIService.exe 1492 Services 0 8,408 K
nvxdsync.exe 1640 Console 1 21,316 K
nvvsvc.exe 1652 Console 1 15,676 K
svchost.exe 1760 Services 0 8,484 K
svchost.exe 1824 Services 0 11,788 K
svchost.exe 1844 Services 0 17,632 K
svchost.exe 1972 Services 0 15,844 K
AsLdrSrv.exe 2028 Services 0 5,768 K
GFNEXSrv.exe 2036 Services 0 3,456 K
spoolsv.exe 2068 Services 0 16,492 K
wlanext.exe 2160 Services 0 16,440 K
conhost.exe 2168 Services 0 5,320 K
svchost.exe 2344 Services 0 9,256 K
sched.exe 2404 Services 0 6,688 K
avguard.exe 2712 Services 0 77,272 K
svchost.exe 2728 Services 0 17,684 K
CxAudMsg64.exe 2736 Services 0 8,220 K
GfExperienceService.exe 2744 Services 0 13,304 K
EvtEng.exe 2748 Services 0 14,236 K
AppleMobileDeviceService. 2760 Services 0 12,572 K
ibtsiva.exe 2768 Services 0 5,232 K
Memory Compression 2880 Services 0 8 K
NvNetworkService.exe 2908 Services 0 12,848 K
RegSrvc.exe 2936 Services 0 9,264 K
svchost.exe 2944 Services 0 22,560 K
svchost.exe 2952 Services 0 8,744 K
mbae-svc.exe 2960 Services 0 12,552 K
unchecky_svc.exe 3020 Services 0 7,036 K
SASrv.exe 3032 Services 0 6,372 K
nvstreamsvc.exe 3040 Services 0 14,388 K
ZeroConfigService.exe 2124 Services 0 16,952 K
esif_uf.exe 2564 Services 0 6,876 K
Avira.ServiceHost.exe 3132 Services 0 28,604 K
ZAM.exe 3332 Services 0 16,248 K
mbae64.exe 3752 Services 0 5,900 K
conhost.exe 3780 Services 0 5,728 K
unsecapp.exe 4012 Services 0 6,672 K
WmiPrvSE.exe 4256 Services 0 12,464 K
NvStreamNetworkService.ex 4376 Services 0 16,244 K
conhost.exe 4384 Services 0 8,340 K
avshadow.exe 5068 Services 0 5,652 K
HControl.exe 4908 Console 1 9,504 K
nvstreamsvc.exe 4988 Console 1 19,096 K
conhost.exe 4904 Console 1 6,732 K
esif_assist_64.exe 4488 Console 1 4,656 K
unchecky_bg.exe 4932 Console 1 8,752 K
sihost.exe 4132 Console 1 27,344 K
svchost.exe 5140 Console 1 18,820 K
taskhostw.exe 5196 Console 1 17,876 K
PresentationFontCache.exe 5212 Services 0 19,652 K
RuntimeBroker.exe 5580 Console 1 38,416 K
explorer.exe 5828 Console 1 1,09,636 K
igfxEM.exe 5012 Console 1 12,880 K
ShellExperienceHost.exe 6088 Console 1 55,584 K
ATKOSD2.exe 5852 Console 1 8,768 K
DMedia.exe 5248 Console 1 7,504 K
SearchIndexer.exe 5592 Services 0 32,144 K
SearchUI.exe 5328 Console 1 87,820 K
SearchProtocolHost.exe 6576 Services 0 10,088 K
NvBackend.exe 6820 Console 1 25,252 K
nvtray.exe 1056 Console 1 13,416 K
smartscreen.exe 4824 Console 1 24,356 K
CAudioFilterAgent64.exe 1500 Console 1 8,452 K
Dashlane.exe 2180 Console 1 36,284 K
DashlanePlugin.exe 1264 Console 1 30,420 K
avgnt.exe 7300 Console 1 3,056 K
Avira.Systray.exe 7364 Console 1 41,940 K
dllhost.exe 7756 Console 1 9,308 K
notepad.exe 7832 Console 1 33,432 K
SmartAudio.exe 8144 Console 1 64,128 K
ApplicationFrameHost.exe 4544 Console 1 22,788 K
Microsoft.Photos.exe 6008 Console 1 1,05,960 K
jhi_service.exe 3704 Services 0 6,424 K
LMS.exe 8076 Services 0 12,212 K
fontdrvhost.exe 8788 Console 1 3,256 K
WMIADAP.exe 9128 Services 0 7,164 K
wireless.exe 3156 Console 1 11,160 K
SearchFilterHost.exe 7584 Services 0 7,412 K
cmd.exe 1780 Console 1 5,272 K
conhost.exe 8160 Console 1 11,396 K
tasklist.exe 8308 Console 1 8,164 K
WmiPrvSE.exe 8244 Services 0 8,644 K
MTU MediaSenseState Bytes In Bytes Out Interface
------ --------------- --------- --------- -------------
1500 5 0 0 Ethernet
1500 1 99482 79977 Wi-Fi
4294967295 1 0 8064 Loopback Pseudo-Interface 1
1500 5 0 0 Local Area Connection* 2
1500 5 0 0 Bluetooth Network Connection
1500 5 0 0 Ethernet 3
Querying active state...
TCP Global Parameters
----------------------------------------------
Receive-Side Scaling State : enabled
Chimney Offload State : disabled
NetDMA State : disabled
Direct Cache Access (DCA) : disabled
Receive Window Auto-Tuning Level : normal
Add-On Congestion Control Provider : none
ECN Capability : disabled
RFC 1323 Timestamps : disabled
Initial RTO : 3000
Receive Segment Coalescing State : disabled
Non Sack Rtt Resiliency : disabled
Max SYN Retransmissions : 2
TCP Fast Open : enabled
===========================================================================
Interface List
9...70 4d 7b 49 58 97 ......Realtek PCIe GBE Family Controller
15...b8 8a 60 a1 63 c4 ......Microsoft Wi-Fi Direct Virtual Adapter
14...00 ff a3 be 0d 6d ......TAP-Windows Adapter V9
10...b8 8a 60 a1 63 c3 ......Intel(R) Dual Band Wireless-AC 8260
12...b8 8a 60 a1 63 c7 ......Bluetooth Device (Personal Area Network)
1...........................Software Loopback Interface 1
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
6...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 50
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.1.0 255.255.255.0 On-link 192.168.1.100 306
192.168.1.100 255.255.255.255 On-link 192.168.1.100 306
192.168.1.255 255.255.255.255 On-link 192.168.1.100 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 192.168.1.100 306
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 192.168.1.100 306
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
6 331 ::/0 On-link
1 331 ::1/128 On-link
6 331 2001::/32 On-link
6 331 2001:0:9d38:90d7:1070:e08f:952f:233b/128
On-link
10 306 fe80::/64 On-link
6 331 fe80::/64 On-link
6 331 fe80::1070:e08f:952f:233b/128
On-link
10 306 fe80::cc4d:d500:a865:1b5b/128
On-link
1 331 ff00::/8 On-link
10 306 ff00::/8 On-link
6 331 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
The requested operation requires elevation.
Server: UnKnown
Address: 192.168.1.1
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Name: portal.plus.net
Addresses: 212.159.9.2
212.159.8.2
Aliases:
Plusnet Reliable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Malwarebytes Anti-Exploit REG_SZ C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
Avira SystrayStartTrigger REG_SZ "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
avgnt REG_SZ "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Dashlane REG_SZ "C:\Users\Rebecca Valentine\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup
DashlanePlugin REG_SZ "C:\Users\Rebecca Valentine\AppData\Roaming\Dashlane\DashlanePlugin.exe" ws
[-] Repaired ->> File ->> C:\Users\Rebecca Valentine\AppData\Local\Google\Chrome\User Data\Default\Preferences
09 Apr 2017 21:10:22 [2038] - **********************************************************
09 Apr 2017 21:10:22 [2038] - MWAV - eScanAV AntiVirus Toolkit.
09 Apr 2017 21:10:22 [2038] - Copyright © MicroWorld Technologies
09 Apr 2017 21:10:22 [2038] - **********************************************************
09 Apr 2017 21:10:22 [2038] - Source: C:\Users\REBECC~1\DOWNLO~1\mwav.exe
09 Apr 2017 21:10:22 [2038] - Version 14.0.270 (C:\USERS\REBECCA VALENTINE\APPDATA\LOCAL\TEMP\MEXE.COM)
09 Apr 2017 21:10:22 [2038] - Log File: C:\Users\Rebecca Valentine\AppData\Local\Temp\MWAV.LOG
09 Apr 2017 21:10:22 [2038] - MWAV Registered: TRUE
09 Apr 2017 21:10:22 [2038] - User Account: Rebecca Valentine (Administrator Mode)
09 Apr 2017 21:10:22 [2038] - OS Type: Windows Workstation [InstallType: Client]
09 Apr 2017 21:10:22 [2038] - OS: Windows 10 64-Bit [OS Install Date: 18 Jan 2017 16:43:28]
09 Apr 2017 21:10:22 [2038] - Ver: Personal Build 14393
09 Apr 2017 21:10:22 [2038] - System Up Time: 6 Minutes, 58 Seconds
09 Apr 2017 21:10:22 [2038] - Parent Process Name : C:\Users\Rebecca Valentine\Downloads\mwav.exe
09 Apr 2017 21:10:22 [2038] - Windows Root Folder: C:\WINDOWS
09 Apr 2017 21:10:22 [2038] - Windows Sys32 Folder: C:\WINDOWS\system32
09 Apr 2017 21:10:22 [2038] - DHCP NameServer: 192.168.1.1 192.168.1.1
09 Apr 2017 21:10:22 [2038] - Interface0 DHCPNameServer: 10.66.104.1
09 Apr 2017 21:10:22 [2038] - Interface1 DHCPNameServer: 192.168.1.1 192.168.1.1
09 Apr 2017 21:10:22 [2038] - Interface2 DHCPNameServer: 192.168.224.1
09 Apr 2017 21:10:22 [2038] - Local Fixed Drives: c:\,d:\
09 Apr 2017 21:10:22 [2038] - MWAV Mode(A): Scan and Clean files
09 Apr 2017 21:10:22 [2038] - [CREATED ZIP FILE: C:\Users\Rebecca Valentine\AppData\Local\Temp\pinfect.zip]
09 Apr 2017 21:10:22 [2038] - Latest Date of files inside MWAV: Mon Feb 6 15:39:43 2017.
09 Apr 2017 21:10:24 [2038] - ** Changed Value of "Path"
09 Apr 2017 21:10:25 [2038] - Loading/Creating FileScan Cache Database C:\ProgramData\MicroWorld\MWAV\ESCANDBY.MDB [Log: C:\Users\Rebecca Valentine\AppData\Local\Temp\ESCANDB.LOG]
09 Apr 2017 21:10:25 [2038] - Loaded/Created FileScan Cache Database...
09 Apr 2017 21:10:25 [2038] - Loading AV Library [DB][TC:08]...
09 Apr 2017 21:10:54 [2038] - ArchiveScan: DISABLED
09 Apr 2017 21:10:54 [2038] - AV Library Loaded - MultiThreaded - 8 : [DB-DIRECT].
09 Apr 2017 21:10:54 [2038] - MWAV doing self scanning...
09 Apr 2017 21:10:54 [2038] - MWAV files are clean.
09 Apr 2017 21:10:59 [2038] - ArchiveScan: DISABLED
09 Apr 2017 21:10:59 [2038] - Virus Database Date: 06 Feb 2017
09 Apr 2017 21:10:59 [2038] - Virus Database Count: 8243318
09 Apr 2017 21:10:59 [2038] - Sign Version: 7.69509 [462725]
09 Apr 2017 21:11:18 [2038] - Downloading AntiVirus and Anti-Spyware Databases...
09 Apr 2017 21:21:17 [2038] - Update Successful...
09 Apr 2017 21:21:19 [2038] - Old Sign Version: 7.69509 New Sign Version: 7.70717
09 Apr 2017 21:21:26 [2038] - Reload of AntiVirus Signatures successfully done.
09 Apr 2017 21:21:26 [2038] - Virus Database Date: 09 Apr 2017
09 Apr 2017 21:21:26 [2038] - Virus Database Count: 8336221
09 Apr 2017 21:21:26 [2038] - Sign Version: 7.70717 [463933]
09 Apr 2017 21:24:38 [2038] - **********************************************************
09 Apr 2017 21:24:38 [2038] - MWAV - eScanAV AntiVirus Toolkit.
09 Apr 2017 21:24:38 [2038] - Copyright © MicroWorld Technologies
09 Apr 2017 21:24:38 [2038] -
09 Apr 2017 21:24:38 [2038] - Support:
[email protected]
09 Apr 2017 21:24:38 [2038] - Web:
eScan Antivirus | Best Protection from Viruses
09 Apr 2017 21:24:38 [2038] - **********************************************************
09 Apr 2017 21:24:38 [2038] - Version 14.0.270[DB] (C:\USERS\REBECCA VALENTINE\APPDATA\LOCAL\TEMP\MEXE.COM)
09 Apr 2017 21:24:38 [2038] - Log File: C:\Users\Rebecca Valentine\AppData\Local\Temp\MWAV.LOG
09 Apr 2017 21:24:38 [2038] - User Account: Rebecca Valentine (Administrator Mode)
09 Apr 2017 21:24:38 [2038] - Parent Process Name : C:\Users\Rebecca Valentine\Downloads\mwav.exe
09 Apr 2017 21:24:38 [2038] - Windows Root Folder: C:\WINDOWS
09 Apr 2017 21:24:38 [2038] - Windows Sys32 Folder: C:\WINDOWS\system32
09 Apr 2017 21:24:38 [2038] - OS: Windows 10 64-Bit [OS Install Date: 18 Jan 2017 16:43:28]
09 Apr 2017 21:24:38 [2038] - Ver: Personal Build 14393
09 Apr 2017 21:24:38 [2038] - Latest Date of files inside MWAV: Mon Feb 6 15:39:43 2017.
09 Apr 2017 21:24:38 [2038] - Priority: NORMAL
09 Apr 2017 21:24:38 [0cd8] - Options Selected by User:
09 Apr 2017 21:24:38 [0cd8] - Memory Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - Registry Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - StartUp Folder Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - System Folder Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - Services Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - Scan Archives: Disabled
09 Apr 2017 21:24:38 [0cd8] - Drive Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - All Drive Check

isabled
09 Apr 2017 21:24:38 [0cd8] - Drive Selected = C:\
09 Apr 2017 21:24:38 [0cd8] - Folder Check: Enabled
09 Apr 2017 21:24:38 [0cd8] - Folder Selected = D:\
09 Apr 2017 21:24:38 [0cd8] - SCAN: All_Files [ANSI]
09 Apr 2017 21:24:38 [0cd8] - MWAV Mode(B): Scan and Clean files
09 Apr 2017 21:24:38 [0cd8] - Scanning DNS Records...
09 Apr 2017 21:24:38 [0cd8] - Scanning Master Boot Record (User)...
09 Apr 2017 21:24:38 [0cd8] - Scanning Logical Boot Records...
09 Apr 2017 21:24:39 [0cd8] - ***** Scanning For Hidden Rootkit Processes *****
09 Apr 2017 21:24:39 [0cd8] - ***** Scanning For Hidden Rootkit Services *****
09 Apr 2017 21:24:40 [0cd8] - ***** Scanning Memory Files *****
09 Apr 2017 21:24:46 [0cd8] - ***** Scanning Registry Files *****
09 Apr 2017 21:24:48 [0cd8] - ***** Scanning StartUp Folders *****
09 Apr 2017 21:24:57 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Rebecca Valentine\AppData\Roaming\Intel\Wireless\Settings
09 Apr 2017 21:24:57 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Rebecca Valentine\AppData\Roaming\Intel\Wireless\WLANProfiles
09 Apr 2017 21:24:58 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\ProgramData\Apple Computer\iTunes\SC Info
09 Apr 2017 21:25:00 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\ProgramData\Intel\Wireless\WLANProfiles
09 Apr 2017 21:25:03 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\ProgramData\Microsoft\Windows\RetailDemo
09 Apr 2017 21:25:06 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\ProgramData\Roaming\Intel\Wireless\Settings
09 Apr 2017 21:25:06 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\ProgramData\..\Intel
09 Apr 2017 21:25:06 [0cd8] - ***** Scanning Service Files *****
09 Apr 2017 21:25:12 [0cd8] - ERROR(2)!!! Invalid Entry \??\C:\WINDOWS\system32\drivers\farflt.sys. Action Taken: Removing HKLM64\SYSTEM\CurrentControlSet\Services\MBAMFarflt.
09 Apr 2017 21:25:15 [0cd8] - ***** Scanning System32 Folders *****
09 Apr 2017 21:25:26 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\WINDOWS\system32\WLANProfiles
09 Apr 2017 21:25:31 [0cd8] - ***** Scanning Drive C:\ *****
09 Apr 2017 21:25:49 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Program Files\Intel\WiFi\bin\WLANProfiles
09 Apr 2017 21:26:39 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Program Files (x86)\InstallShield Installation Information
09 Apr 2017 21:27:01 [23cc] - Scanning File C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
09 Apr 2017 21:27:01 [0924] - Scanning File C:\System Volume Information\{46ac55da-1d1d-11e7-a749-b88a60a163c7}{3808876b-c176-4e48-b7ae-04046e6cc752}
09 Apr 2017 21:27:01 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Public\Roaming\Intel\Wireless\Settings
09 Apr 2017 21:27:16 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Rebecca Valentine\AppData\Local\Microsoft\Media Player\Art Cache
09 Apr 2017 21:27:22 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Rebecca Valentine\AppData\Local\NVIDIA Corporation\Shield Apps\StreamingAssets
09 Apr 2017 21:28:04 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Users\Rebecca Valentine\Roaming\Intel\Wireless\Settings
09 Apr 2017 21:29:36 [0cd8] - Setting NORMAL Attributes for Folder(B): C:\Windows\System32\config\systemprofile\AppData\Roaming\Intel\Wireless\Settings
09 Apr 2017 21:32:12 [0cd8] - ***** Checking for specific ITW Viruses *****
09 Apr 2017 21:32:12 [0cd8] - ***** Scanning complete. *****
09 Apr 2017 21:32:12 [0cd8] - Total Objects Scanned: 228503
09 Apr 2017 21:32:12 [0cd8] - Total Critical Objects: 0
09 Apr 2017 21:32:12 [0cd8] - Total Disinfected Objects: 0
09 Apr 2017 21:32:12 [0cd8] - Total Objects Renamed: 0
09 Apr 2017 21:32:12 [0cd8] - Total Deleted Objects: 0
09 Apr 2017 21:32:12 [0cd8] - Total Errors: 1
09 Apr 2017 21:32:12 [0cd8] - Time Elapsed: 00:07:34
09 Apr 2017 21:32:12 [0cd8] - Virus Database Date: 09 Apr 2017
09 Apr 2017 21:32:12 [0cd8] - Virus Database Count: 8336221
09 Apr 2017 21:32:12 [0cd8] - Sign Version: 7.70717 [463933]
09 Apr 2017 21:32:12 [0cd8] - Scan Completed.