This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Malware! Oh My!

1 min read

This thread's last reply is from June 4, 2016, 10:57 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Shroomie
June 4, 2016, 9:14 AM UTC
I seem to be having some issues with my computer not wanting to shut down/restart and my internet speed is being killed by something and my ISP promises it's not them. HELP! I am running Win7.
Shroomie
June 4, 2016, 11:17 AM UTC
FRST Log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-06-2016
Ran by [redacted] (administrator) on BOSSSAUCE-PC (04-06-2016 04:16:35)
Running from D:\Downloads
[redacted]
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) D:\Program Files\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Cisco) C:\Users\[redacted]\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe
(Octoshape ApS) C:\Users\[redacted]\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Users\[redacted]\AppData\Local\DIRECTV Player\NDSPCShowServer.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Avast Software s.r.o.) D:\Program Files\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Corsair Components Inc) D:\M95 Mouse\M95Hid.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Corsair Components Inc) D:\M95 Mouse\CorsTra.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(BitTorrent Inc.) C:\Users\[redacted]\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\[redacted]\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(BitTorrent Inc.) C:\Users\[redacted]\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWXUX.exe
(Valve Corporation) D:\Program Files\Steam\Steam.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre1.8.0_72\bin\javaw.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre1.8.0_72\bin\javaw.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-10-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16409496 2016-02-02] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => D:\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => D:\Program Files\Avast\AvastUI.exe [5515496 2015-06-29] (Avast Software s.r.o.)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
HKLM-x32\...\Run: [Corsair Duke] => D:\M95 Mouse\M95Hid.exe [1771520 2013-08-15] (Corsair Components Inc)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\Run: [PCShowServer] => C:\Users\[redacted]\AppData\Local\DIRECTV Player\PCShowServerPMWrapper.exe [1632504 2016-02-14] (Cisco)
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\Run: [Octoshape Streaming Services] => C:\Users\[redacted]\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day0] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day1] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day2] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day3] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day4] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day5] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\RunOnce: [AsrOMG_Day6] => [X]
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\MountPoints2: {79cbe756-cf31-11e3-9b6c-bc5ff4f719ec} - F:\setup.exe
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\MountPoints2: {b13e2418-5a93-11e5-ad86-bc5ff4f719ec} - G:\TL-Bootstrap.exe
HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\MountPoints2: {b13e2580-5a93-11e5-ad86-bc5ff4f719ec} - G:\TL-Bootstrap.exe
HKU\S-1-5-21-430430567-3464497564-661822716-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Program Files\Avast\ashShA64.dll [2015-06-29] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{104B6257-62B4-4913-AE07-33C20EC736DD}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1DDB127B-12E3-402A-BB55-B2031C9D6C31}: [DhcpNameServer] [redacted] [redacted] [redacted]

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Program Files\Avast\aswWebRepIE64.dll [2015-06-29] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_72\bin\ssv.dll [2016-02-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Program Files\Avast\aswWebRepIE.dll [2015-06-29] (Avast Software s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_72\bin\jp2ssv.dll [2016-02-02] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\6oi1l5qn.default
FF NewTab: hxxps://www.google.com
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF Homepage: hxxps://www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.72.2 -> C:\Program Files (x86)\Java\jre1.8.0_72\bin\dtplugin\npDeployJava1.dll [2016-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.72.2 -> C:\Program Files (x86)\Java\jre1.8.0_72\bin\plugin2\npjp2.dll [2016-02-02] (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox -> D:\Games\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [2015-05-04] (Reto-Moto ApS)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-05-27] (Pando Networks)
FF Plugin-x32: @pmang.com/npPMangFX -> C:\Windows\system32\npPMangFX-x86.DLL [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-430430567-3464497564-661822716-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\[redacted]\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1411300-0-npoctoshape.dll [2014-11-30] (Octoshape ApS)
FF Plugin HKU\S-1-5-21-430430567-3464497564-661822716-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\[redacted]\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]
FF Plugin HKU\S-1-5-21-430430567-3464497564-661822716-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-05-27] (Pando Networks)
FF user.js: detected! => C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\6oi1l5qn.default\user.js [2016-02-02]
FF Plugin ProgramFiles/Appdata: C:\Users\[redacted]\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-05-26] (Octoshape ApS)
FF Extension: BetterPrivacy - C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\6oi1l5qn.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-05-04]
FF Extension: New Tab Override (browser.newtab.url replacement) - C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\6oi1l5qn.default\Extensions\[redacted] [2016-02-11]
FF Extension: Adblock Edge - C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\6oi1l5qn.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2016-04-27]
FF HKLM-x32\...\Firefox\Extensions: [[redacted]] - D:\Program Files\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Program Files\Avast\WebRep\FF [2015-12-10]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.5.671\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Battlelog Game Launcher) - C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.670.1) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll => No File
CHR Plugin: (Java(TM) Platform SE 7 U67) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll => No File
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll => No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Unity Player) - C:\Users\[redacted]\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll => No File
CHR Plugin: (Mozilla PMangFX Session Plugin_1.1.0.25) - C:\Windows\system32\npPMangFX-x86.DLL => No File
CHR Plugin: (VLC Web Plugin) - D:\Program Files (x86)\VLC\npvlc.dll => No File
CHR Profile: C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google Search) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Google Docs Offline) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
CHR Extension: (AdBlock) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-03]
CHR Extension: (Avast Online Security) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Gmail) - C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Program Files\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-29]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [446240 2016-01-05] (IObit)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 ASRockIOMon; C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe [454656 2013-05-28] () [File not signed]
R2 avast! Antivirus; D:\Program Files\Avast\AvastSvc.exe [343336 2015-06-29] (Avast Software s.r.o.)
S3 AvastVBoxSvc; D:\Program Files\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-06-29] (Avast Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1314848 2016-01-19] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-09-10] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-10-02] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-03] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182248 2013-03-14] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-10-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-10-02] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files\Origin\OriginClientService.exe [2120712 2016-05-04] (Electronic Arts)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-04] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-04-12] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-10-16] (Realtek Semiconductor)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ArdDrv; no ImagePath
S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2014-02-20] (ASRock Incorporation)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [40200 2013-05-09] (ASRock Inc.)
S3 AsrSetupDrv; no ImagePath
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-29] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-29] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-29] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-29] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-29] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-29] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-28] (Disc Soft Ltd)
R3 DUKEMS; C:\Windows\System32\drivers\DUKEMS.sys [25600 2012-08-16] ( )
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [502256 2015-12-17] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-09] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31144 2015-12-17] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21048 2013-03-14] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21048 2013-03-14] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2015-10-09] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [179456 2015-12-17] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-10-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-10-02] (NVIDIA Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-03] (Anchorfree Inc.)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
R2 VBoxAswDrv; D:\Program Files\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-06-29] (Avast Software)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2016-05-29] ()
S3 xhunter1; no ImagePath
S3 HTCAND64; System32\Drivers\ANDROIDUSB.sys [X]
S3 HtcVCom32; system32\DRIVERS\HtcVComV64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-04 04:16 - 2016-06-04 04:16 - 00000000 ____D C:\FRST
2016-06-03 03:00 - 2016-06-03 03:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-06-03 03:00 - 2016-06-03 03:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-06-01 14:16 - 2016-06-01 14:16 - 00000000 ___HD C:\$WINDOWS.~BT
2016-05-28 04:37 - 2016-05-28 04:37 - 00000000 ____D C:\Users\[redacted]\.oracle_jre_usage
2016-05-28 04:36 - 2016-05-28 23:22 - 00000000 ____D C:\Users\[redacted]\OSBuddy
2016-05-26 05:00 - 2016-05-26 05:00 - 00000000 ____D C:\Users\[redacted]\AppData\Local\Octoshape
2016-05-25 00:46 - 2016-05-25 00:46 - 00000000 ____D C:\Users\[redacted]\AppData\Local\Daybreak Game Company
2016-05-19 19:53 - 2016-05-29 14:28 - 00000000 ____D C:\Users\[redacted]\AppData\LocalLow\uTorrent
2016-05-16 01:23 - 2016-05-20 04:19 - 00000000 ____D C:\Users\[redacted]\AppData\Local\Battle.net
2016-05-16 01:23 - 2016-05-16 01:24 - 00000000 ____D C:\Users\[redacted]\AppData\Roaming\Battle.net
2016-05-16 01:23 - 2016-05-16 01:23 - 00000000 ____D C:\Users\[redacted]\AppData\Local\Blizzard Entertainment
2016-05-15 17:17 - 2016-05-15 17:17 - 00000000 ____D C:\Users\[redacted]\AppData\Local\Fallout4
2016-05-14 11:36 - 2016-05-14 11:36 - 00000000 ____D C:\Windows\rescache
2016-05-13 12:01 - 2016-04-23 10:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-13 12:01 - 2016-04-23 09:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-13 12:01 - 2016-04-22 22:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-13 12:01 - 2016-04-22 22:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-13 12:01 - 2016-04-22 22:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-13 12:01 - 2016-04-22 22:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-13 12:01 - 2016-04-22 22:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-13 12:01 - 2016-04-22 22:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-13 12:01 - 2016-04-22 22:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-13 12:01 - 2016-04-22 22:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-13 12:01 - 2016-04-22 22:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-13 12:01 - 2016-04-22 21:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-13 12:01 - 2016-04-22 21:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-13 12:01 - 2016-04-22 21:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-13 12:01 - 2016-04-22 21:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-13 12:01 - 2016-04-22 21:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-13 12:01 - 2016-04-22 21:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-13 12:01 - 2016-04-22 21:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-13 12:01 - 2016-04-22 21:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-13 12:01 - 2016-04-22 21:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-13 12:01 - 2016-04-22 21:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-13 12:01 - 2016-04-22 21:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-13 12:01 - 2016-04-22 21:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-13 12:01 - 2016-04-22 21:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-13 12:01 - 2016-04-22 21:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-13 12:01 - 2016-04-22 21:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-13 12:01 - 2016-04-22 21:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-13 12:01 - 2016-04-22 21:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-13 12:01 - 2016-04-22 21:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-13 12:01 - 2016-04-22 21:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-13 12:01 - 2016-04-22 21:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-13 12:01 - 2016-04-22 21:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-13 12:01 - 2016-04-22 21:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-13 12:01 - 2016-04-22 21:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-13 12:01 - 2016-04-22 21:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-13 12:01 - 2016-04-22 21:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-13 12:01 - 2016-04-22 21:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-13 12:01 - 2016-04-22 21:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-13 12:01 - 2016-04-22 21:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-13 12:01 - 2016-04-22 21:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-13 12:01 - 2016-04-22 21:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-13 12:01 - 2016-04-22 21:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-13 12:01 - 2016-04-22 21:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-13 12:01 - 2016-04-22 20:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-13 12:01 - 2016-04-22 20:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-13 12:01 - 2016-04-22 20:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-13 12:01 - 2016-04-22 20:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-13 12:01 - 2016-04-22 20:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-13 12:01 - 2016-04-22 20:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-13 12:01 - 2016-04-22 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-13 12:01 - 2016-04-22 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-13 12:01 - 2016-04-22 20:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-13 12:01 - 2016-04-22 20:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-13 12:01 - 2016-04-22 20:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-13 12:01 - 2016-04-22 20:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-13 12:01 - 2016-04-22 20:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-13 12:01 - 2016-04-22 20:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-13 12:01 - 2016-04-22 20:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-13 12:01 - 2016-04-22 20:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-13 12:01 - 2016-04-22 20:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-13 12:01 - 2016-04-22 20:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-13 12:01 - 2016-04-22 20:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-13 12:01 - 2016-04-22 20:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-13 12:01 - 2016-04-22 20:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-13 12:01 - 2016-04-22 20:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-13 12:01 - 2016-04-22 20:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-13 02:39 - 2016-05-13 02:39 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-11 12:55 - 2016-05-29 04:24 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2016-05-11 00:09 - 2016-04-14 06:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 00:09 - 2016-04-14 06:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 00:09 - 2016-04-09 00:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 00:09 - 2016-04-09 00:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 00:09 - 2016-04-08 23:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 00:09 - 2016-04-08 23:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 00:09 - 2016-04-08 23:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 00:09 - 2016-04-08 23:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 00:09 - 2016-04-08 23:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 00:09 - 2016-04-08 22:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 00:09 - 2016-04-06 08:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 00:09 - 2016-03-09 11:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 00:09 - 2016-03-09 11:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 00:08 - 2016-04-09 00:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 00:08 - 2016-04-09 00:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 00:08 - 2016-04-09 00:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 00:08 - 2016-04-09 00:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 00:08 - 2016-04-09 00:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 00:08 - 2016-04-08 23:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 00:08 - 2016-04-08 23:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 00:08 - 2016-04-08 23:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 00:08 - 2016-04-08 23:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 22:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 00:08 - 2016-04-08 22:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 00:08 - 2016-04-08 22:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 00:08 - 2016-04-08 22:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 00:08 - 2016-04-08 22:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 00:08 - 2016-04-08 22:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 00:08 - 2016-04-08 22:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 00:08 - 2016-04-08 22:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 00:08 - 2016-04-08 22:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 00:08 - 2016-04-08 22:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 00:08 - 2016-04-08 22:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 00:08 - 2016-04-08 22:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 00:08 - 2016-04-08 22:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 00:08 - 2016-04-08 22:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 00:08 - 2016-04-08 22:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 00:08 - 2016-04-08 22:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 00:08 - 2016-04-08 22:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 00:08 - 2016-04-08 22:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 22:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 22:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 22:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 00:08 - 2016-04-08 21:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 00:08 - 2016-04-08 20:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-09 23:09 - 2016-05-09 23:10 - 00002088 _____ C:\Users\[redacted]\Desktop\RuneScape Old School.lnk
2016-05-05 15:19 - 2016-05-05 15:19 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 12.0
2016-05-05 15:19 - 2016-05-05 15:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2016-05-05 15:16 - 2016-05-05 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2016-05-05 15:15 - 2016-05-05 15:15 - 00000000 ____D C:\Windows\symbols
2016-05-05 15:15 - 2016-05-05 15:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2016-05-05 15:14 - 2016-05-05 15:19 - 00000000 ____D C:\Windows\SysWOW64\1033
2016-05-05 15:14 - 2016-05-05 15:14 - 00000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2016-05-05 15:14 - 2016-05-05 15:14 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-05-05 15:14 - 2016-05-05 15:14 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-05-05 15:13 - 2016-05-05 15:14 - 00000000 ____D C:\Windows\system32\1033
2016-05-05 15:12 - 2016-05-05 15:15 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2016-05-05 15:12 - 2016-05-05 15:15 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2016-05-05 15:02 - 2016-05-05 15:02 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-06-04 04:16 - 2014-04-17 21:26 - 00000000 ____D C:\Users\[redacted]\AppData\Roaming\uTorrent
2016-06-04 03:39 - 2014-02-20 23:20 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-04 03:21 - 2014-04-12 12:28 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-04 03:15 - 2009-07-13 21:45 - 00029136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-04 03:15 - 2009-07-13 21:45 - 00029136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-04 02:15 - 2015-09-08 20:19 - 00000023 _____ C:\Users\[redacted]\jagexappletviewer.preferences
2016-06-04 02:04 - 2015-07-16 16:34 - 00000049 _____ C:\Users\[redacted]\jagex_cl_oldschool_LIVE.dat
2016-06-03 17:21 - 2014-04-12 12:28 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-03 03:00 - 2014-04-13 00:12 - 00000000 ____D C:\ProgramData\Skype
2016-06-02 09:47 - 2014-04-19 15:21 - 00000000 ____D C:\Users\[redacted]\AppData\Roaming\vlc
2016-06-01 14:16 - 2014-02-21 12:13 - 00000000 ____D C:\Windows\Panther
2016-05-31 16:55 - 2014-04-29 18:45 - 00000000 ____D C:\Users\[redacted]\AppData\Local\CrashDumps
2016-05-29 15:10 - 2009-07-13 22:13 - 00781790 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-29 15:10 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\inf
2016-05-29 14:48 - 2015-06-20 21:06 - 00000000 ____D C:\Users\[redacted]\AppData\Roaming\TS3Client
2016-05-29 04:27 - 2015-10-09 12:11 - 00003260 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-05-29 04:27 - 2015-10-09 12:11 - 00002892 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC ([redacted])
2016-05-29 04:24 - 2014-04-11 23:08 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2016-05-29 04:24 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-28 23:22 - 2014-04-14 02:59 - 00000024 ____R C:\Users\[redacted]\random.dat
2016-05-28 04:37 - 2014-02-21 09:10 - 00000000 ____D C:\Users\[redacted]
2016-05-28 04:16 - 2014-04-14 02:59 - 00000049 _____ C:\Users\[redacted]\jagex_cl_runescape_LIVE.dat
2016-05-27 10:56 - 2014-06-11 13:20 - 00000000 ____D C:\ProgramData\ProductData
2016-05-26 05:00 - 2016-05-04 22:52 - 00000000 ____D C:\Users\[redacted]\AppData\Roaming\Octoshape
2016-05-26 03:00 - 2015-04-04 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-26 03:00 - 2015-04-04 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-16 01:24 - 2015-06-28 15:35 - 00000000 ____D C:\ProgramData\Battle.net
2016-05-14 09:43 - 2015-10-26 17:30 - 00000000 ____D C:\Users\[redacted]\Documents\My Games
2016-05-13 19:34 - 2015-10-09 12:39 - 00000333 _____ C:\Users\Boss
2016-05-13 17:22 - 2014-07-29 01:17 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-13 17:22 - 2014-04-12 12:29 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-13 02:39 - 2014-02-20 23:20 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-13 02:39 - 2014-02-20 23:20 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-13 02:39 - 2014-02-20 23:20 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-12 03:44 - 2014-04-12 05:32 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-12 03:44 - 2011-04-12 01:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-05-12 03:41 - 2015-06-23 17:52 - 00002922 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Boss_Sauce
2016-05-12 03:01 - 2014-12-10 03:02 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-11 16:23 - 2014-04-12 02:27 - 00000000 ____D C:\ProgramData\Origin
2016-05-11 12:55 - 2011-04-12 01:28 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 12:55 - 2009-07-13 21:45 - 00318792 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-11 03:16 - 2014-04-12 02:25 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 03:11 - 2014-04-12 02:25 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-10 21:10 - 2014-04-12 05:32 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-05-10 17:16 - 2014-04-12 12:28 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-10 17:16 - 2014-04-12 12:28 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-10 16:20 - 2014-04-12 05:32 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-05-10 16:08 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF
2016-05-05 15:15 - 2009-07-13 22:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-05-05 15:13 - 2009-07-13 20:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-05-05 15:11 - 2014-04-12 02:22 - 00773912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-05 01:33 - 2014-02-20 23:19 - 00065632 _____ C:\Users\[redacted]\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2014-06-18 21:17 - 2014-06-18 21:17 - 0000024 _____ () C:\Users\[redacted]\AppData\Roaming\temp.ini
2014-04-29 16:46 - 2016-03-24 00:33 - 0005632 _____ () C:\Users\[redacted]\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-03-01 21:54 - 2016-03-01 21:54 - 0002198 _____ () C:\Users\[redacted]\AppData\Local\recently-used.xbel
2016-02-23 03:35 - 2016-02-23 03:35 - 0000016 _____ () C:\ProgramData\mntemp

Some files in TEMP:
====================
C:\Users\[redacted]\AppData\Local\Temp\DeleteInstall.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-05-28 00:30

==================== End of FRST.txt ============================
Shroomie
June 4, 2016, 11:18 AM UTC
Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:03-06-2016
Ran by [redacted] (2016-06-04 04:16:52)
Running from D:\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2014-02-21 16:10:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-430430567-3464497564-661822716-500 - Administrator - Disabled)
[redacted] (S-1-5-21-430430567-3464497564-661822716-1000 - Administrator - Enabled) => C:\Users\[redacted]
Guest (S-1-5-21-430430567-3464497564-661822716-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Advanced SystemCare 9 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 9.1.0 - IObit)
Apple Application Support (32-bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asoftech Data Recovery (HKLM-x32\...\{1AED6EB7-8FEA-4021-B8FD-EBAA6B21679F}) (Version: 1.00 - )
ASRock XFast RAM v3.0.2 (HKLM\...\ASRock XFast RAM_is1) (Version: - ASRock Inc.)
A-Tuning v2.0.47 (HKLM-x32\...\A-Tuning_is1) (Version: 2.0.47 - )
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Corsair M95 Gaming Mouse Driver V1.0 (HKLM-x32\...\{9C9EA6B0-2138-4111-BF26-9D0D40D12C0F}_is1) (Version: 1.00.00.14 - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DIRECTV GenieGO (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\InstallShield_{DE341F3E-280F-4DC1-896D-A9483EFBBCD6}) (Version: 2.4.2.10 - DIRECTV, LLC)
DIRECTV GenieGO (x32 Version: 2.4.2.10 - DIRECTV, LLC) Hidden
DIRECTV Player (HKLM-x32\...\{4a5ad61d-1fe9-48b9-87a8-9235f71120f3}) (Version: 12.1 - DIRECTV)
Dirty Bomb (HKLM-x32\...\Steam App 333930) (Version: - Splash Damage®)
Driver Booster 3.2 (HKLM-x32\...\Driver Booster_is1) (Version: 3.2 - IObit)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
FonePaw Android Data Recovery 1.2.0 (HKLM-x32\...\{10E7BD57-C5FE-484f-A3F2-A1755286C0A7}_is1) (Version: 1.2.0 - FonePaw)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Game Dev Tycoon version 1.4.5 (HKLM-x32\...\{5BBB8682-1335-410F-A79F-8E5611A54BD0}_is1) (Version: 1.4.5 - Greenheart Games Pty. Ltd.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
H1Z1 (HKLM-x32\...\Steam App 295110) (Version: - Daybreak Games)
H1Z1: King of the Kill (HKLM-x32\...\Steam App 433850) (Version: - Daybreak Game Company)
Half-Life Dedicated Server Update Tool (HKLM-x32\...\Half-Life Dedicated Server Update Tool) (Version: - )
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.6.1 - Reto-Moto)
Infinite HD™ App (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\Octoshape Streaming Services) (Version: - Octoshape ApS)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel)
Intel(R) Smart Connect Technology 4.1 x64 (HKLM\...\{405EF630-AF8C-4A69-9CAF-6D5B8C1C005B}) (Version: 4.1.40.2143 - Intel)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
IObit Malware Fighter 3 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 3.3 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.2.1.126 - IObit)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Java 8 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218072F0}) (Version: 8.0.720.15 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 46.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 en-US)) (Version: 46.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7673 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
RuneScape Launcher 1.2.7 (HKLM-x32\...\{FA52A2D0-298E-4D40-8BB7-39928627EA6A}) (Version: 1.2.7 - Jagex Ltd)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.3 - IObit)
Smartflix (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\smartflix) (Version: 1.3.1 - Smartflix)
SoulseekQt (HKLM-x32\...\SoulseekQt) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Stellar Phoenix Photo Recovery (HKLM-x32\...\Stellar Phoenix Photo Recovery_is1) (Version: 6.0.0.1 - Stellar Information Technology Pvt Ltd.)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
System Requirements Lab CYRI (HKLM-x32\...\{19B0831B-0C18-4103-86E4-90FCD04CD3B9}) (Version: 6.0.12.5 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft)
Unity Web Player (HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\UnityWebPlayer) (Version: 5.3.1f1 - Unity Technologies ApS)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
Virtual Audio Cable 4.13 (HKLM\...\Virtual Audio Cable 4.13) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
Wondershare Data Recovery(Build 4.8.2.1) (HKLM-x32\...\{FEA3976F-D621-45F3-AFBD-E812A1F2F00D}_is1) (Version: 4.8.2.1 - Wondershare Software Co.,Ltd.)
Wondershare Dr.Fone for Android(Build 5.4.2.1) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 5.4.2.1 - Wondershare Software Co.,Ltd.)
XSplit Broadcaster (HKLM-x32\...\{19F00CA3-338D-497C-BA31-0507101F2BBB}) (Version: 1.3.1403.1202 - SplitmediaLabs)
刷机大师 (HKLM-x32\...\{CA45824C-E9D5-4C22-9CEF-9746A8992E15}_is1) (Version: 4.1.2.15288 - 深圳信壹网络有限公司)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1B9A05FD-DDCE-4ECE-A08C-C9B9E82B4CBB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2568BA9E-BC5C-4253-BA30-7EBF9FD605DD} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-08-21] (IObit)
Task: {2D316F70-AE10-46B6-AFE0-CD5A660AE5F1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {421D2303-D17F-47C2-B821-D3C953A303A5} - System32\Tasks\SmartDefrag4_Startup => C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe [2015-10-27] (IObit)
Task: {4720FDE1-AE95-401C-BD1E-E15940CECEB4} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {548C0883-4AF9-4470-BF3E-A735CBDD318B} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {56902E6F-8C6C-406A-B14B-D36D34C00C4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {63CB5BCF-C699-4100-9BA6-863A9B9456FB} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-03] (AVAST Software)
Task: {672BEEA0-9FFC-4412-A1AA-2BC55E28BFAD} - System32\Tasks\Uninstaller_SkipUac_Boss_Sauce => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-01-12] (IObit)
Task: {68E4CB43-725F-44E9-A93B-ECC55846E8B9} - System32\Tasks\{A62B78E9-50B0-459B-BDE8-76B06FF5FEF3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/en/a ... rogressBar
Task: {6D0FB988-44BD-41D7-8336-D773507FB6E8} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-01-12] (IObit)
Task: {742B07D9-7F49-4294-A2F2-46A3725532A1} - System32\Tasks\ASC9_SkipUac_[redacted] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2016-01-18] (IObit)
Task: {761D2B15-72EC-4BFE-8556-7796984AAB42} - System32\Tasks\Driver Booster SkipUAC ([redacted]) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2016-01-18] (IObit)
Task: {7CD4C479-D842-4219-994E-E463B8DEDCFC} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => D:\VB\Common7\IDE\VSIXAutoUpdate.exe [2016-03-22] (Microsoft Corporation)
Task: {9DC1713D-6497-47FF-AA35-397C9CD2955D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {B2878D08-D3B0-473A-AC14-636B71DF5BCD} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {B4389F4A-D077-4163-99E8-14D6EC714E20} - System32\Tasks\{D6384B3B-8256-474B-B8D0-3B40898E8FE2} => pcalua.exe -a F:\autorun.exe -d F:\
Task: {B653BF18-577D-49CF-817D-27BF0957163F} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2016-01-13] (IObit)
Task: {C3A8CA63-860C-4BDA-85CD-65D318CAC72E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {D1149ED3-F06E-42C1-8D77-349B4B6876FA} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {D5E6201D-6092-44ED-A00E-2ABC15924466} - System32\Tasks\avast! Emergency Update => D:\Program Files\Avast\AvastEmUpdate.exe [2016-03-17] (Avast Software s.r.o.)
Task: {DCB33E66-13D6-4830-AA1E-F4850F772E76} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {F1AB2EE7-D689-48C0-909B-66FE145EF9A3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {F9A1A400-9307-4AA6-8924-C029F46F853F} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-08 16:39 - 2015-12-16 07:53 - 00126072 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 01384168 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\NDSPCShowServer.exe
2014-02-20 23:19 - 2013-05-28 17:58 - 00454656 _____ () C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe
2013-03-14 14:42 - 2013-03-14 14:42 - 00182248 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-03-14 14:42 - 2013-03-14 14:42 - 00059880 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2014-04-12 05:32 - 2016-04-12 01:31 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-06-29 07:17 - 2015-06-29 07:17 - 00104400 _____ () D:\Program Files\Avast\log.dll
2015-06-29 07:17 - 2015-06-29 07:17 - 00081728 _____ () D:\Program Files\Avast\JsonRpcServer.dll
2016-05-29 03:04 - 2016-05-29 03:04 - 02982040 _____ () D:\Program Files\Avast\defs\16052900\algo.dll
2016-06-03 12:24 - 2016-06-03 12:24 - 02923008 _____ () D:\Program Files\Avast\defs\16060301\algo.dll
2015-10-08 16:39 - 2015-10-02 22:06 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 11423968 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\PCShowServer.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 03301088 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\DrmSingleton.dll
2016-02-14 09:15 - 2016-02-14 09:15 - 00340192 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\ndsLogStore.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 02100968 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\DiscoveryManager.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 08346848 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\gsttspplugin.dll
2016-02-14 09:14 - 2016-02-14 09:14 - 00689904 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\libgstreamer-0.10.dll
2016-02-14 09:15 - 2016-02-14 09:15 - 01404128 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\libxml2-2.dll
2016-02-14 09:15 - 2016-02-14 09:15 - 00092880 _____ () C:\Users\[redacted]\AppData\Local\DIRECTV Player\z.dll
2015-11-18 18:36 - 2015-01-09 18:46 - 00517408 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\sqlite3.dll
2015-06-29 07:17 - 2015-06-29 07:17 - 40540672 _____ () D:\Program Files\Avast\libcef.dll
2015-12-18 22:47 - 2013-05-26 14:40 - 00054272 _____ () D:\M95 Mouse\hidGetKey.dll
2015-11-18 18:36 - 2015-03-27 15:39 - 00182080 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll
2015-11-18 18:36 - 2015-01-09 18:46 - 00145184 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
2015-11-18 18:36 - 2014-10-16 10:26 - 00622880 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\ProductStatistics.dll
2016-02-02 00:22 - 2015-12-23 18:32 - 00355616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2016-02-02 00:22 - 2015-12-23 18:32 - 00190240 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2016-02-02 00:22 - 2015-12-23 18:32 - 00057632 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2014-02-20 23:14 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-04-12 02:28 - 2016-04-29 13:10 - 00785920 _____ () D:\Program Files\Steam\SDL2.dll
2015-01-19 15:27 - 2015-07-03 09:12 - 04962816 _____ () D:\Program Files\Steam\v8.dll
2015-01-19 15:27 - 2015-07-03 09:12 - 01556992 _____ () D:\Program Files\Steam\icui18n.dll
2015-01-19 15:27 - 2015-07-03 09:12 - 01187840 _____ () D:\Program Files\Steam\icuuc.dll
2014-05-29 18:31 - 2016-04-29 17:10 - 02549840 _____ () D:\Program Files\Steam\video.dll
2014-09-06 21:54 - 2016-02-08 16:14 - 02549760 _____ () D:\Program Files\Steam\libavcodec-56.dll
2014-09-06 21:54 - 2016-02-08 16:14 - 00442880 _____ () D:\Program Files\Steam\libavutil-54.dll
2014-09-06 21:54 - 2016-02-08 16:14 - 00491008 _____ () D:\Program Files\Steam\libavformat-56.dll
2014-09-06 21:54 - 2016-02-08 16:14 - 00332800 _____ () D:\Program Files\Steam\libavresample-2.dll
2014-09-06 21:54 - 2016-02-08 16:14 - 00485888 _____ () D:\Program Files\Steam\libswscale-3.dll
2014-04-12 02:28 - 2016-04-29 17:10 - 00829008 _____ () D:\Program Files\Steam\bin\chromehtml.DLL
2016-03-10 01:15 - 2016-02-17 15:25 - 00281088 _____ () D:\Program Files\Steam\openvr_api.dll
2014-04-12 02:28 - 2016-04-27 18:00 - 49825056 _____ () D:\Program Files\Steam\bin\libcef.dll
2015-01-19 15:27 - 2015-09-24 16:56 - 00119208 _____ () D:\Program Files\Steam\winh264.dll
2014-01-03 04:03 - 2014-01-03 04:03 - 07816192 _____ () D:\Program Files (x86)\XSplit\avcodec-54.dll
2014-01-03 04:03 - 2014-01-03 04:03 - 00188416 _____ () D:\Program Files (x86)\XSplit\avutil-52.dll
2014-01-03 04:03 - 2014-01-03 04:03 - 01425920 _____ () D:\Program Files (x86)\XSplit\avformat-54.dll
2014-01-03 04:03 - 2014-01-03 04:03 - 00336896 _____ () D:\Program Files (x86)\XSplit\swscale-2.dll
2014-01-03 04:03 - 2014-01-03 04:03 - 00096256 _____ () D:\Program Files (x86)\XSplit\swresample-0.dll
2016-05-13 17:22 - 2016-05-11 04:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll
2016-05-13 17:22 - 2016-05-11 04:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:F0D7EE30 [138]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\aeriagames.com -> hxxp://aeriagames.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\sony.com -> sony.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-430430567-3464497564-661822716-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:34 - 2016-02-23 03:35 - 00002058 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
119.59.103.94 http://www.Undergroundgaming.org
119.59.103.94 Undergroundgaming.org
119.59.103.94 http://www.ge-sys.net
119.59.103.94 ge-sys.net
119.59.103.94 http://www.systemcheats.net
119.59.103.94 systemcheats.net
119.59.103.94 http://www.dxtgaming.com
119.59.103.94 dxtgaming.com
119.59.103.94 http://www.vipmods.com
119.59.103.94 vipmods.com
119.59.103.94 http://www.gameanarchy.net
119.59.103.94 gameanarchy.net
119.59.103.94 http://www.asiangamerz.net
119.59.103.94 asiangamerz.net
119.59.103.94 http://www.descipe.net
119.59.103.94 descipe.net
119.59.103.94 http://www.fpscheats.net
119.59.103.94 fpscheats.net
119.59.103.94 http://www.fpscheats.com
119.59.103.94 fpscheats.com
119.59.103.94 http://www.fpshack.com
119.59.103.94 fpshack.com
119.59.103.94 http://www.ramleague.net
119.59.103.94 ramleague.net
119.59.103.94 http://www.pinoyhideout.com
119.59.103.94 pinoyhideout.com
119.59.103.94 http://www.blacklistgaming.us
119.59.103.94 blacklistgaming.us
119.59.103.94 http://www.sf-cheats.net

There are 2 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-430430567-3464497564-661822716-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^iSCTsysTray.lnk => C:\Windows\pss\iSCTsysTray.lnk.CommonStartup
MSCONFIG\startupreg: DAEMON Tools Lite => "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: uTorrent => "C:\Users\[redacted]\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{74029C44-D699-4B37-ABF1-51542EB27851}] => (Allow) D:\Program Files\Steam\Steam.exe
FirewallRules: [{66018DD9-91DD-4995-9743-387EC6860C98}] => (Allow) D:\Program Files\Steam\Steam.exe
FirewallRules: [{DA8EC013-A8BD-4BF0-92DD-DDBC1FCB3147}] => (Allow) D:\Program Files\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{FF95F080-0D8C-469F-9DCC-4E5070271B93}] => (Allow) D:\Program Files\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{1C517B02-236A-4585-A26E-A79786ABB457}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{21C097BD-7648-49AF-B493-D91D1246C21D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{5D2542B5-498F-4FB4-9546-A96C8DFFB3E8}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{22C8DD37-1922-421D-BD24-9E7F3119A5CF}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{566E1CC5-D6A4-46AA-82D7-F321B9E32644}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{CC86116D-E6EB-49D5-8214-F2C307E562DB}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{EC55F300-654C-4FB6-B63A-23ED85BF7960}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{A101C49D-3270-4D5C-890C-9146BA61C638}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{B25E2C1B-77C9-4A63-A9A1-020FA8DF994D}] => (Allow) C:\Users\[redacted]\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0B924AF2-CC88-4B5F-8E8C-9D192E844CFE}] => (Allow) C:\Users\[redacted]\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{FF8F4CA1-AF27-49D5-B42B-65C5383DFD36}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{69BC3E5C-2F2E-49A9-866E-37D113842519}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{763478AC-EEC1-4D35-8CD7-713785C15294}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{4D8FF16D-A920-4FE5-B485-C5993F620D49}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{5DC62EAD-BD6F-4769-9CCA-5EFDDDEB5A1D}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{61571067-C8C5-4689-9CBC-CB3D5BBEDCE9}] => (Allow) D:\Program Files\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{43921F92-1085-4E60-B9F2-EB4BE9379D4F}] => (Allow) D:\Program Files\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{2E26EA77-1300-4F9F-BA33-D9ACF4468121}] => (Allow) D:\Program Files\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1EF73D18-6F3C-400B-BDB7-EB076D5304F0}] => (Allow) D:\Program Files\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{03C960DF-9998-462A-8D94-486E3FB36D7D}D:\cstrike\srcds.exe] => (Allow) D:\cstrike\srcds.exe
FirewallRules: [UDP Query User{F1B1163F-FB8E-4DA5-9F74-ED59F2ABB703}D:\cstrike\srcds.exe] => (Allow) D:\cstrike\srcds.exe
FirewallRules: [{417D4F03-474C-4F14-881B-C85C7EADEC7F}] => (Allow) D:\Program Files\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{236F2616-6BD2-454C-BB29-93A89244FC77}] => (Allow) D:\Program Files\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{5AD8F842-654A-4134-A718-57389B070D76}D:\program files\java\bin\javaw.exe] => (Allow) D:\program files\java\bin\javaw.exe
FirewallRules: [UDP Query User{3C7C741E-1A4A-4994-9667-DC2CA0F91B2F}D:\program files\java\bin\javaw.exe] => (Allow) D:\program files\java\bin\javaw.exe
FirewallRules: [{6F97B0CD-7396-4F08-9A86-6F22E0B93397}] => (Allow) D:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{DADEC26B-BDC3-4CE1-9A60-C7D13B0F6F22}] => (Allow) D:\Program Files\Steam\bin\steamwebhelper.exe
FirewallRules: [{8C34A3C9-063C-418B-8193-F931E6C4BC38}] => (Block) D:\Programs\Sony Vegas\vegas130.exe
FirewallRules: [{371BF151-430F-423C-A1E2-89214F3113C3}] => (Block) D:\Programs\Sony Vegas\ApplicationRegistration.exe
FirewallRules: [{E82B67AC-BD02-47BD-940A-C6FE537EF1A5}] => (Block) D:\Programs\Sony Vegas\NGenTool.exe
FirewallRules: [{68D32E8D-33C0-4860-A724-8422A02EF2ED}] => (Block) D:\Programs\Sony Vegas\vidcap60.exe
FirewallRules: [{D1554734-2677-4781-B1FC-3A675DA9FBCD}] => (Block) D:\Programs\Sony Vegas\CreateMinidumpx64.exe
FirewallRules: [{676767BD-3DB2-45E7-984A-D47F14E281FE}] => (Allow) D:\Program Files\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{B9E2998A-BB7F-44EA-B8AB-83565EE2A5E8}] => (Allow) D:\Program Files\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{DD3BB217-5A79-4469-A5DE-E718C1FB361C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{F3021385-3544-44C7-9391-59809F21D594}] => (Allow) LPort=2869
FirewallRules: [{181861DD-47FE-4A80-84E4-87C15FA3256A}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{EE40BC85-3BA5-4142-ABBD-70909321635E}D:\soulseekqt\soulseekqt.exe] => (Allow) D:\soulseekqt\soulseekqt.exe
FirewallRules: [UDP Query User{78B7BBAB-7AED-43B1-ABD7-645864768E8E}D:\soulseekqt\soulseekqt.exe] => (Allow) D:\soulseekqt\soulseekqt.exe
FirewallRules: [{B81A093D-F0DA-4211-A7FD-5DE4C32F9F35}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A836BF5E-F9F0-4E66-AA3F-DC9A6BB26BF4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{961E78D6-8447-47C0-8AF4-2C889EFCF343}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{19A6D6BF-EF22-4CB6-AA69-E8468D6007A0}] => (Allow) D:\Games\Heroes & Generals\live\hng.exe
FirewallRules: [{4F369CF5-FAAE-48AF-BFFB-33663D046EF4}] => (Allow) D:\Program Files\Steam\SteamApps\common\H1Z1\LaunchPad.exe
FirewallRules: [{2587FEEC-6D8A-4231-8C06-30764E2CE552}] => (Allow) D:\Program Files\Steam\SteamApps\common\H1Z1\LaunchPad.exe
FirewallRules: [TCP Query User{E6D666AF-3C73-4DAE-9C9D-AD0044CDAE15}D:\program files\steam\steamapps\common\h1z1\h1z1.exe] => (Allow) D:\program files\steam\steamapps\common\h1z1\h1z1.exe
FirewallRules: [UDP Query User{9CB82126-FCDA-48C5-96E7-13FDE8720045}D:\program files\steam\steamapps\common\h1z1\h1z1.exe] => (Allow) D:\program files\steam\steamapps\common\h1z1\h1z1.exe
FirewallRules: [{889EAE0B-68C9-4E11-AF49-04CEC28AFF7B}] => (Allow) D:\Program Files\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{745C7415-3836-4B78-997A-25D8D1560128}] => (Allow) D:\Program Files\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{05B63E5E-2DB9-40F9-8453-C98272674BB7}] => (Allow) D:\Program Files\Steam\SteamApps\common\rust\Rust.exe
FirewallRules: [{4EE408AB-926E-4B10-8DFB-12B8F54643B0}] => (Allow) D:\Program Files\Steam\SteamApps\common\rust\Rust.exe
FirewallRules: [{F95C91F7-011F-4870-99AA-81191572ECA1}] => (Allow) D:\Games\Battle.net\Battle.net.exe
FirewallRules: [{A2FC2723-D5B6-4DF5-A366-24C30F5C217F}] => (Allow) D:\Games\Battle.net\Battle.net.exe
FirewallRules: [{2761E355-FE05-45B8-9E2F-2CB0834B7321}] => (Allow) D:\Program Files\Avast\ng\vbox\aswFe.exe
FirewallRules: [{FA325FE2-7490-465E-8338-E468FDFBA725}] => (Allow) D:\Program Files\Avast\ng\vbox\aswFe.exe
FirewallRules: [{112EFC73-C9FF-498C-9CD6-7C434BAEA748}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{C24CC219-FEDF-427A-88CE-AA75FE2D2B65}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{B907449E-823A-4020-9E4B-0F2ECA082401}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{19CED8F2-E54E-40D6-A328-90A00A42AA64}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{A704B333-A363-4D64-B141-23E9AD377253}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{E58B0FAD-B230-40D9-ABC5-A08B58A02BC0}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{1B2C21DF-FF5F-41A8-9F55-0C28FEB2B7C9}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E9856AA3-361A-4A32-9997-71DCE2EE98AF}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{48FE4041-FFFF-4915-8764-9807BC5EE18E}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\131\tencentdl.exe
FirewallRules: [{889E7641-C255-49C4-A6BF-9697A4F07325}] => (Allow) D:\Program Files\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{3B5A3EDC-C037-4C1D-9817-7811E1B912AD}] => (Allow) D:\Program Files\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{3D0A4726-778B-4703-94C8-4D8C211E3E84}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{6CFB44F8-24C1-4D20-9B8E-16B6D774A8C7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5AE56E21-1B38-4524-A293-CDBC0A68AD10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{329B7213-2DD9-4A85-8A68-4ED36E3E7174}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6C6C35AF-DE74-4D8A-B5A5-03D33A43B261}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{08675462-C04E-4330-8363-DDB3AB2D66F1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F07ECC30-A871-4318-91D4-6ECBB18BB58E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{750D0A6C-66ED-4980-A659-C6307DCC0B0B}] => (Allow) D:\Program Files\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{0976A2E7-6AD9-4C75-A66D-1D3DF371738C}] => (Allow) D:\Program Files\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{2EA3AC77-DDCE-45D2-8E20-0A287AAB4F41}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9FAD7BAF-EA06-4950-99D7-0070E633997E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D7CC52DF-B76E-43A2-B7A6-B2359A676BED}D:\myphoneexplorer\myphoneexplorer portable.exe] => (Allow) D:\myphoneexplorer\myphoneexplorer portable.exe
FirewallRules: [UDP Query User{A56F4B2B-9470-4DAB-A229-1F92988D703F}D:\myphoneexplorer\myphoneexplorer portable.exe] => (Allow) D:\myphoneexplorer\myphoneexplorer portable.exe
FirewallRules: [{563FB301-58D4-46C6-AAD2-07D3003EA490}] => (Block) D:\myphoneexplorer\myphoneexplorer portable.exe
FirewallRules: [{CA7F2787-D99A-4213-8BA2-78C38004D056}] => (Block) D:\myphoneexplorer\myphoneexplorer portable.exe
FirewallRules: [{DFF1EE9E-6D86-43C4-8EEB-A47C659B3D9D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{56BDA26A-99B1-43C8-B499-F479F8121042}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2705193F-0479-4CF0-B28B-9B5100244EF6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BC937260-1679-44E6-92AF-31FCB31F5C9A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{30846B86-63EF-409D-9260-7EDFD5C5C2BB}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{E7E826D2-6C64-4FC0-B28D-700B6E6DAE6C}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{3416FCDA-E5D9-4EB5-A460-714564967C46}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{81610B89-3565-48D0-B81C-E1541142F236}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{22586BCF-368A-4041-9453-06C0D7E9179E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{E46ED078-A4EE-4177-9A1A-10E03EA8718A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{5977AE59-24D6-42F2-A282-FB7F250CEAD5}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{FFA8D17E-ED94-408E-8E32-D6DFC150818E}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E4F746E3-1D88-4182-9EAD-8F8917014E89}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{BC7EF2A4-82AA-47A9-B12F-8DC173981606}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{DA279036-041C-4F26-A14E-087E30116160}] => (Allow) D:\Program Files (x86)\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{5E6C8300-43E3-492B-A523-9D941166966D}] => (Allow) D:\Program Files (x86)\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{1C48701D-E97C-4E69-81C4-F1D8EBE1631A}] => (Allow) D:\Program Files\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{B2EFC7B0-D273-4A36-BBEF-7AE76E36BCFC}] => (Allow) D:\Program Files\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{9FAABAF1-D484-42C2-BB49-403E4F9AED36}] => (Allow) D:\Program Files\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{0420453A-22E6-49A2-9D3E-FC4093B9D358}] => (Allow) D:\Program Files\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [TCP Query User{21C7135F-E490-48C2-8A99-D7B674905C2D}D:\program files (x86)\ubisoft game launcher\games\tom clancy's rainbow six siege\rainbowsix.exe] => (Allow) D:\program files (x86)\ubisoft game launcher\games\tom clancy's rainbow six siege\rainbowsix.exe
FirewallRules: [UDP Query User{83603A2E-2E63-4A57-8257-9C6345314A37}D:\program files (x86)\ubisoft game launcher\games\tom clancy's rainbow six siege\rainbowsix.exe] => (Allow) D:\program files (x86)\ubisoft game launcher\games\tom clancy's rainbow six siege\rainbowsix.exe
FirewallRules: [TCP Query User{12663072-5B4D-492F-B468-7BA8CA42A0EC}D:\program files\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) D:\program files\steam\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [UDP Query User{DD6C5D09-8D50-428E-B4ED-252D27AE2AF7}D:\program files\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) D:\program files\steam\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [{20A00C17-01F4-4C2C-9693-8FFB2F56724E}] => (Allow) D:\iTunes\iTunes.exe
FirewallRules: [{058DAB98-CE06-47B1-92F0-F7F409C3B358}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6C54CD66-70A0-42FC-A5BB-0D9FA94DBF9A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0BD3B59F-711F-460B-B915-AB89AC6EDDDE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{3D9C5D5F-2518-47E0-A573-9F1C6D9F21A5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2E3B77A0-E516-4990-8BEE-1E35A85642A8}] => (Allow) D:\VB\Common7\IDE\devenv.exe
FirewallRules: [{4658E288-F7F6-4CB0-8167-D8354800D232}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{EA213706-A9CE-4CEA-98FE-933EFFFBBD8B}] => (Allow) D:\Program Files\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{43FFBB6C-E44E-4E19-8362-8A20BEEF4809}] => (Allow) D:\Program Files\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{3B093827-4076-4B13-BE3C-760D16E794AD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2016 04:55:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18345, time stamp: 0x573de6e7
Faulting module name: RPCRT4.dll, version: 6.1.7601.23418, time stamp: 0x5708a801
Exception code: 0xc0000005
Fault offset: 0x00000000000475b8
Faulting process id: 0x6f8
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (05/29/2016 08:47:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18345, time stamp: 0x573de6e7
Faulting module name: RPCRT4.dll, version: 6.1.7601.23418, time stamp: 0x5708a801
Exception code: 0xc0000005
Fault offset: 0x00000000000475b8
Faulting process id: 0x25e8
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (05/29/2016 04:24:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/28/2016 10:59:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/28/2016 10:48:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/27/2016 11:03:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18345, time stamp: 0x573de6e7
Faulting module name: RPCRT4.dll, version: 6.1.7601.23418, time stamp: 0x5708a801
Exception code: 0xc0000005
Fault offset: 0x00000000000475b8
Faulting process id: 0x1c1c
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (05/27/2016 10:55:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/27/2016 09:07:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18345, time stamp: 0x573de6e7
Faulting module name: RPCRT4.dll, version: 6.1.7601.23418, time stamp: 0x5708a801
Exception code: 0xc0000005
Fault offset: 0x00000000000475b8
Faulting process id: 0xabf0
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (05/26/2016 09:33:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18345, time stamp: 0x573de6e7
Faulting module name: RPCRT4.dll, version: 6.1.7601.23418, time stamp: 0x5708a801
Exception code: 0xc0000005
Fault offset: 0x00000000000475b8
Faulting process id: 0xc4f8
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (05/25/2016 12:46:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: hl2.exe, version: 0.0.0.0, time stamp: 0x56130448
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0xa9b0
Faulting application start time: 0xhl2.exe0
Faulting application path: hl2.exe1
Faulting module path: hl2.exe2
Report Id: hl2.exe3


System errors:
=============
Error: (06/04/2016 02:31:03 AM) (Source: volsnap) (EventID: 35) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (06/04/2016 02:06:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home, version 1511, 10586.

Error: (06/03/2016 05:02:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home, version 1511, 10586.

Error: (06/03/2016 01:43:57 AM) (Source: volsnap) (EventID: 35) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (06/02/2016 10:14:26 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home, version 1511, 10586.

Error: (06/01/2016 02:16:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0xc190020c: Upgrade to Windows 10 Home, version 1511, 10586.

Error: (06/01/2016 04:07:49 AM) (Source: volsnap) (EventID: 35) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (05/31/2016 05:43:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070070: Upgrade to Windows 10 Home, version 1511, 10586.

Error: (05/31/2016 05:23:24 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070070: Definition Update for Windows Defender - KB915597 (Definition 1.223.251.0).

Error: (05/31/2016 04:08:37 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.223.251.0).


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Percentage of memory in use: 65%
Total physical RAM: 8122.59 MB
Available physical RAM: 2780.61 MB
Total Virtual: 16243.36 MB
Available Virtual: 11235.03 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:55.8 GB) (Free:0.55 GB) NTFS
Drive d: (WD 1TB HD) (Fixed) (Total:931.51 GB) (Free:105.25 GB) NTFS
Drive e: (Rainbow Six Siege Disc 3) (CDROM) (Total:3.13 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 1413FF4A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6FA2B4E0)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
NonSuch Administrator
June 4, 2016, 10:57 PM UTC
Unfortunately, you have posted replies to your own topic prior to receiving a response from a helper. As a result we must close this topic.

May I draw your attention to THIS topic, which you should have read before posting for help.

THIS is the section that tells you why you should not reply to your own topic.

This topic will now be closed

If you still require help, please start a new thread and wait for assistance. Please do not add additional posts to your topic until you have received a response from a helper.