Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2015 Ran by Aditya at 2015-01-12 10:32:59 Running from C:\Users\Aditya\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Application Insights Tools for Visual Studio 2013 (x32 Version: 2.1 - Microsoft Corporation) Hidden AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender) Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Windows Phone 8.0 (x32 Version: 3.0.30924.0 - Microsoft Corporation) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Box Sync (HKLM\...\{09C53B19-C578-4803-95EF-DDEDF89D080C}) (Version: 4.0.5693.0 - Box, Inc.) Box Sync (x32 Version: 4.0.5078.0 - Box Inc.) Hidden Build Tools - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden Build Tools - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden Build Tools Language Resources - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dropbox (HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) EditPlus 3 (HKLM-x32\...\EditPlus 3) (Version: - ES-Computing) Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation) Evernote v. 5.6.4 (HKLM-x32\...\{DFDF0BE2-2D71-11E4-9454-00163E98E7D6}) (Version: 5.6.4.4632 - Evernote Corp.) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Garena - League of Legends (HKLM-x32\...\LoL) (Version: - Garena Online Pte Ltd.) Garena Plus (HKLM-x32\...\im) (Version: 2011 - Garena Online Pte Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version: - IO Interactive) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) InfiniteCrisis_410193F41CAE (HKLM-x32\...\InfiniteCrisis_410193F41CAE) (Version: - Turbine, Inc) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) Kit SDK de vérification de Visual Studio 2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass) League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games) League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden LocalESPCui for en-us (x32 Version: 8.59.29989 - Microsoft) Hidden LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden Mailbird (HKLM-x32\...\{B05594ED-BA64-40A6-995E-072813EF4E5F}) (Version: 1.7.29 - Mailbird) Malwarebytes Anti-Exploit version 1.05.1.1016 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.05.1.1016 - Malwarebytes) Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Memory Profiler (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Professional 2013 with Update 3 (HKLM-x32\...\{ec85bfda-a752-4fe6-b9ad-f4c42d6ff44b}) (Version: 12.0.30723 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\...\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation) Microsoft Web Platform Installer 5.0 (HKLM\...\{4D84C195-86F0-4B34-8FDE-4A17EB41306A}) (Version: 5.0.50430.0 - Microsoft Corporation) Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla) NVIDIA 3D Vision Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation) NVIDIA Graphics Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts) Python Tools Redirection Template (x32 Version: 1.2 - Microsoft Corporation) Hidden Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.306 - Qualcomm Atheros Communications) Hidden Qualcomm Atheros Killer Wireless-N Drivers (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Network Manager (Version: 1.0.36.1278 - Qualcomm Atheros) Hidden Qualcomm Atheros Performance Suite (HKLM-x32\...\{BB96DF0C-B36B-46E2-B8E4-635773ECD782}) (Version: 1.0.36.1278 - Qualcomm Atheros) Razer Comms (HKLM-x32\...\Razer Comms) (Version: - Razer USA Ltd.) Razer Core (HKLM-x32\...\Razer Core) (Version: 0.01.137 - Razer USA Ltd.) Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.10 - Razer Inc.) Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.18.23036 - Razer Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.14.327.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6895 - Realtek Semiconductor Corp.) RuneScape Launcher 1.2.3 (HKLM-x32\...\{FAE99C85-0732-4C58-9C6B-10B5B12FA2E9}) (Version: 1.2.3 - Jagex Ltd) SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.) SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2477.0 - Hi-Rez Studios) Spotify (HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\Spotify) (Version: 0.9.13.24.g5dbb3103 - Spotify AB) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) SugarSync (HKLM-x32\...\SugarSync) (Version: 3.2.0.5.133203 - SugarSync, Inc.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.12.23 - Synaptics Incorporated) Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer) Todoist (HKLM-x32\...\{B1B3C79A-FFD9-4B28-A456-62B6E55E2A5C}_is1) (Version: 2.6.4.0 - Doist Ltd.) TypeScript Power Tool (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft) Visual Studio 2013 Update 3 (KB2829760) (HKLM-x32\...\{86438e3d-7f83-4dd2-94aa-047e7c3974cb}) (Version: 12.0.30723 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) VLC Streamer 4.99 (HKLM-x32\...\VLC Streamer_is1) (Version: - ) VS Update core components (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation) WD Drive Utilities (HKLM-x32\...\{E61CFDDA-40DD-4400-95CA-12819C50B5C2}) (Version: 1.1.0.51 - Western Digital Technologies, Inc.) WD Quick View (HKLM-x32\...\{79966948-BECF-4CB1-A79F-E76C830A17D2}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.) WD Security (HKLM-x32\...\{0AC340BC-4A62-4D1F-86DB-35C1C3CB66CF}) (Version: 1.1.1.3 - Western Digital Technologies, Inc.) WD SmartWare (HKLM\...\{7AE43D6C-B3F1-448D-AD84-1CDC7AC6EBC7}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.) WD SmartWare Installer (HKLM-x32\...\{1891b882-48f7-442d-98d0-c1ce533f25bd}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.) Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{940596e5-652a-4970-8a5a-492e73ed0fbb}) (Version: 12.0.30501.0 - Microsoft Corporation) WinRAR 5.10 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.3 - win.rar GmbH) Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.40326.0 - Microsoft Corporation) Hidden World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) XChat 2 (remove only) (HKLM-x32\...\xchat) (Version: - ) Xilinx Design Tools ISE WebPACK 14.7 (C:\Xilinx\14.7\ISE_DS) (HKLM\...\Xilinx Design Tools ISE WebPACK 14.7) (Version: - Xilinx, Inc.) Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Aditya\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2792414257-871753559-3026284368-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Aditya\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 03-01-2015 22:58:18 Scheduled Checkpoint 09-01-2015 17:33:34 Removed Private Internet Access Support Files 11-01-2015 11:51:13 Restore Point Created by FRST ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0BE47100-15D9-466E-AFE4-BBA51EB978F9} - System32\Tasks\gg_uac_daemon_Aditya => C:\Program Files (x86)\Garena Plus\ggdllhost.exe [2014-04-29] () Task: {0C7D93CF-4CFF-4C87-B7BF-2A69F0699C4E} - System32\Tasks\{BB2E667E-376C-4E57-AAF9-D98CB72E3F1E} => pcalua.exe -a C:\Xilinx\.xinstall\Vivado_2014.3\xsetup.exe -c -Uninstall Task: {0D6DE18C-505D-45E8-848A-239CE0E098D9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-12-11] (Microsoft Corporation) Task: {114833F4-0541-4B61-A420-F4FA91E9E74F} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2792414257-871753559-3026284368-1002 Task: {340BBA94-984B-4786-8040-DA01FFDB0BE3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-05] (Google Inc.) Task: {75E45598-B0B9-42B7-AD78-6799B1624368} - System32\Tasks\Microsoft Office 15 Sync Maintenance for RAZERBLADEPRO-Aditya RazerBladePro => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation) Task: {846B02E9-CE06-40A7-8C4D-539CF1CF104A} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [2014-10-18] () Task: {84D3D9A8-5BE0-4A8B-800F-4BEDD88755E2} - System32\Tasks\Dolby Selector => c:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.) Task: {87EBB376-C695-4B6F-B103-9B6780768BDF} - System32\Tasks\BaronReplays => C:\Users\Aditya\Desktop\Games\BaronReplays\BaronReplays.exe [2014-12-02] (Ahri.tw) Task: {A43E437A-8799-4D0F-9E6D-37C8F70A8143} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-11] (Adobe Systems Incorporated) Task: {BEAD21D6-553A-4CE8-9405-815F46B941C7} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe Task: {BF204645-7A90-44A3-AB4D-E5577DCA52C8} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2792414257-871753559-3026284368-1002 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe Task: {CA155EAD-6C83-49E4-8E44-D2768612B3D8} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/uninstall.html?aaa=KICMJMOJJMJMKJPMNMOJCNHMNJNJPMCNLMHMLJLMCNOJKMIMGMCNIMNJNMKMMMJMJJKJNJOMKJNMJNJICMIMCNGMCNOMPMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMOMFMFMNMLMJMJNHICMEKMICNJJCKJNBJCMOLLJGJLIGIOJPNMKGJBJIJHJJNKJCMOJLJGJLIGIOJBNMMOMGMLMPLDJGJJIKJBNMJAJCJJNNICMJNDJCMKJBJJNMJCMPMFMPMFMPMJNFICMNIJJIIGJPIKJAJKILIBNKJHIKJ" Task: {CF74A409-D044-4F05-BCB0-66A23461033D} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] () Task: {E02241A2-9B3E-4BDD-B60C-C2D66B6B4FDF} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-10-03] (Synaptics Incorporated) Task: {E6F8A789-F63C-4326-A45C-50F63E435C0C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-11] (Microsoft Corporation) Task: {EA73CBC2-B14A-40D1-96DE-E123DBE853F5} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/test-pass.html?aaa=KICMJMOJJMJMKJPMNMOJCNHMNJNJPMCNLMHMLJLMCNOJKMIMGMCNIMNJNMKMMMJMJJKJNJOMKJNMJNJICMJMCNGMCNGMNMFMGMCNOMOMCNGMJMPMPMFMJMCNNMCNGMNMPMPMCNNMJNPICMPMFMEKMICNJJCKFMOMJMMMJNHICMEKMICNJJCKJNBJCMOLLJGJLIGIOJJNKJCMJNNICMJNDJCMKJBJ" Task: {EB11F5E6-8F1C-4CD7-9EE1-6EF25EC7E12A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-05] (Google Inc.) Task: {EF73692C-9DD8-4F37-91CC-69C8CB7DE86A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {F12B5576-B8BA-48F2-9099-AEC1D3A86C6E} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-07-03] () Task: {F3B29A25-F7DA-4697-9D9A-3EE33721488E} - System32\Tasks\update-S-1-5-21-2792414257-871753559-3026284368-1002 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] () Task: {FE4235EC-1049-4005-B024-3B3D2BB0A320} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\update-S-1-5-21-2792414257-871753559-3026284368-1002.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe ==================== Loaded Modules (whitelisted) ============= 2014-12-31 11:14 - 2014-08-27 16:31 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll 2014-12-31 11:14 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll 2014-12-31 11:15 - 2014-12-17 14:34 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui 2014-12-31 11:15 - 2012-10-29 14:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll 2014-12-31 11:14 - 2014-07-24 09:44 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpbr.mdl 2014-12-31 11:14 - 2014-07-24 09:44 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpdsp.mdl 2014-12-31 11:14 - 2014-07-24 09:44 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttpph.mdl 2014-12-31 11:14 - 2014-07-24 09:44 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_001_001\ashttprbl.mdl 2014-05-06 00:35 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-12-09 17:22 - 2014-12-09 17:22 - 00186048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe 2014-05-06 13:51 - 2014-12-13 05:08 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2014-05-06 13:52 - 2014-12-13 03:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 08817966 _____ () C:\Program Files\pia_manager\pia_manager.exe 2014-04-29 04:28 - 2014-04-29 04:28 - 00049456 _____ () C:\Program Files (x86)\Garena Plus\ggdllhost.exe 2014-11-20 16:11 - 2014-09-23 08:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2014-11-25 11:11 - 2014-11-25 11:11 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\ErrorReporting.dll 2013-09-25 02:04 - 2013-09-25 02:04 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-09-25 02:01 - 2013-09-25 02:01 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-09-25 02:08 - 2013-09-25 02:08 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2014-12-18 22:22 - 2014-12-18 22:22 - 00290816 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe 2014-05-06 01:54 - 2014-10-18 14:35 - 00184320 _____ () C:\Program Files\pia_manager\pia_tray\pia_tray.exe 2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-05-29 02:02 - 2013-05-02 06:16 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-04-29 04:28 - 2014-04-29 04:28 - 00553776 _____ () C:\Program Files (x86)\Garena Plus\ggspawn.dll 2014-05-06 13:51 - 2014-12-13 05:08 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2014-10-21 19:22 - 2014-10-21 19:22 - 00750080 _____ () C:\Users\Aditya\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00043008 _____ () c:\users\aditya\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmppqffb9.dll 2014-10-21 19:22 - 2014-10-21 19:22 - 00047616 _____ () C:\Users\Aditya\AppData\Roaming\Dropbox\bin\libEGL.dll 2014-10-21 19:22 - 2014-10-21 19:22 - 00863744 _____ () C:\Users\Aditya\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2014-10-21 19:22 - 2014-10-21 19:22 - 00200704 _____ () C:\Users\Aditya\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00012800 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00009728 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00014848 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00094208 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\src\rgloader\rgloader193.mswin.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00009216 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00094208 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00126976 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00087552 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00016384 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00127316 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\bin\libffi-6.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00008704 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00013312 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00095744 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00026624 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr3D43.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so 2014-11-20 14:55 - 2014-11-25 21:12 - 40622592 _____ () C:\Users\Aditya\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll 2014-12-18 22:22 - 2014-12-18 22:22 - 00192512 _____ () C:\ProgramData\Razer\Synapse\RzStats\RigWrapper.dll 2014-11-20 14:55 - 2014-11-25 21:12 - 00911360 _____ () C:\Users\Aditya\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll 2014-11-20 14:55 - 2014-11-25 21:12 - 00134144 _____ () C:\Users\Aditya\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll 2013-10-22 03:24 - 2013-10-22 03:24 - 24978944 _____ () C:\ProgramData\Razer\SwitchBlade\Resources\CEF1\libcef.dll 2013-10-22 03:24 - 2013-10-22 03:24 - 00736256 _____ () C:\ProgramData\Razer\SwitchBlade\Resources\CEF1\libglesv2.dll 2013-10-22 03:24 - 2013-10-22 03:24 - 00130048 _____ () C:\ProgramData\Razer\SwitchBlade\Resources\CEF1\libegl.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00012800 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00009728 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00014848 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00094208 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\src\rgloader\rgloader193.mswin.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00094208 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00118784 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\socket.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00069120 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\zlib.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00083968 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\bin\zlib1.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00026624 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00275968 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\openssl.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00015360 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\digest.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00008192 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\fcntl.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00009216 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00023552 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\parser.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00008704 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16be.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00008704 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00008704 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32be.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00008704 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32le.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00036352 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\generator.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00126976 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00087552 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00016384 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00127316 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\bin\libffi-6.dll 2015-01-12 10:29 - 2015-01-12 10:29 - 00013312 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so 2015-01-12 10:29 - 2015-01-12 10:29 - 00095744 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so 2015-01-12 10:30 - 2015-01-12 10:30 - 00026624 _____ () C:\Users\Aditya\AppData\Local\Temp\ocr899E.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so 2014-05-06 01:54 - 2014-10-18 14:35 - 00815104 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\khost.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 01198592 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoFoundation.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00745472 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 01234944 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\libxml2.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00059904 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\zlib1.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00200704 _____ () C:\Program Files\pia_manager\pia_tray\modules\tiapp\1.2.0.RC6d\tiappmodule.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00290816 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoUtil.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00511488 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoXML.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00180224 _____ () C:\Program Files\pia_manager\pia_tray\modules\tifilesystem\1.2.0.RC6d\tifilesystemmodule.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00344064 _____ () C:\Program Files\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\tiuimodule.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00368640 _____ () C:\Program Files\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00642048 _____ () C:\Program Files\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoNet.dll 2014-05-06 01:54 - 2014-10-18 14:35 - 00217088 _____ () C:\Program Files\pia_manager\pia_tray\modules\tiprocess\1.2.0.RC6d\tiprocessmodule.dll 2014-06-02 06:33 - 2014-06-02 12:02 - 00567296 _____ () C:\Program Files (x86)\Skillbrains\Updater\1.7.2.0\Updater.exe ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Aditya\OneDrive:ms-properties AlternateDataStreams: C:\Users\Aditya\Desktop\mbar-1.08.2.1001.exe:BDU ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "RazerFPSStartup.lnk" HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk" HKLM\...\StartupApproved\StartupFolder: => "Killer Network Manager.lnk" HKLM\...\StartupApproved\StartupFolder: => "Install LastPass FF RunOnce.lnk" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run: => "IAStorIcon" HKLM\...\StartupApproved\Run: => "RtHDVBg_Dolby" HKLM\...\StartupApproved\Run: => "RtHDVCpl" HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run: => "BoxSync" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "Adobe ARM" HKLM\...\StartupApproved\Run32: => "RzSBHelper" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "Mailbird" HKLM\...\StartupApproved\Run32: => "WD Drive Unlocker" HKLM\...\StartupApproved\Run32: => "DriveUtilitiesHelper" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\StartupFolder: => "Todoist.lnk" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\StartupFolder: => "Curse.lnk" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "RoboForm" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "LightShot" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "Gyazo" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "GarenaPlus" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "Mailbird" HKU\S-1-5-21-2792414257-871753559-3026284368-1002\...\StartupApproved\Run: => "SugarSync" ========================= Accounts: ========================== Aditya (S-1-5-21-2792414257-871753559-3026284368-1002 - Administrator - Enabled) => C:\Users\Aditya Administrator (S-1-5-21-2792414257-871753559-3026284368-500 - Administrator - Disabled) Guest (S-1-5-21-2792414257-871753559-3026284368-501 - Limited - Disabled) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/12/2015 09:34:57 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (01/12/2015 03:04:38 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (01/11/2015 11:53:55 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll4 Error: (01/11/2015 11:51:37 AM) (Source: Perflib) (EventID: 1023) (User: ) Description: rdyboost4 Error: (01/11/2015 11:51:12 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {0c2f0635-89a6-4c6e-86e2-b65b82bda15b} Error: (01/11/2015 11:50:29 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2005) (User: NT AUTHORITY) Description: There was an error communicating to the Orion DCS server Error: (01/11/2015 04:52:33 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT AUTHORITY) Description: There was an error communicating to the Orion inference server Error: (01/11/2015 04:17:17 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: Activation context generation failed for "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1".Error in manifest or policy file "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" on line C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest. Component 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest. Error: (01/10/2015 07:30:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: Explorer.EXE Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: exception code c0000005, exception address 00007FF8B364A02F Error: (01/09/2015 10:49:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: RAZERBLADEPRO) Description: Package 4DF9E0F8.Netflix_2.9.0.29_x64__mcm4njqhnhss8+App was terminated because it took too long to suspend. System errors: ============= Error: (01/12/2015 09:52:12 AM) (Source: DCOM) (EventID: 10010) (User: RAZERBLADEPRO) Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (01/11/2015 00:10:30 PM) (Source: DCOM) (EventID: 10010) (User: RAZERBLADEPRO) Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (01/11/2015 00:10:30 PM) (Source: DCOM) (EventID: 10010) (User: RAZERBLADEPRO) Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} Error: (01/11/2015 11:52:00 AM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: %%1056 Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s). Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) ME Service service terminated unexpectedly. It has done this 1 time(s). Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Management and Security Application Local Management Service service terminated unexpectedly. It has done this 1 time(s). Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s). Error: (01/11/2015 11:51:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. Microsoft Office Sessions: ========================= Error: (01/12/2015 09:34:57 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (01/12/2015 03:04:38 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (01/11/2015 11:53:55 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll4 Error: (01/11/2015 11:51:37 AM) (Source: Perflib) (EventID: 1023) (User: ) Description: rdyboost4 Error: (01/11/2015 11:51:12 AM) (Source: VSS) (EventID: 8194) (User: ) Description: 0x80070005, Access is denied. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {0c2f0635-89a6-4c6e-86e2-b65b82bda15b} Error: (01/11/2015 11:50:29 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2005) (User: NT AUTHORITY) Description: -2147012894 Error: (01/11/2015 04:52:33 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT AUTHORITY) Description: -2143485946 Error: (01/11/2015 04:17:17 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\Adobe\Adobe Creative Cloud_2.7.1.418\Utils\Creative Cloud Uninstaller.exe Error: (01/10/2015 07:30:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: Explorer.EXE Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: exception code c0000005, exception address 00007FF8B364A02F Error: (01/09/2015 10:49:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: RAZERBLADEPRO) Description: 4DF9E0F8.Netflix_2.9.0.29_x64__mcm4njqhnhss8+App CodeIntegrity Errors: =================================== Date: 2015-01-10 01:31:21.224 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\d3d10_1.dll because the set of per-page image hashes could not be found on the system. Date: 2015-01-10 01:31:21.176 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\d3d10_1.dll because the set of per-page image hashes could not be found on the system. Date: 2015-01-10 01:31:21.122 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\d3d10_1.dll because the set of per-page image hashes could not be found on the system. Date: 2015-01-10 01:31:21.075 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\d3d10_1.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4700HQ CPU @ 2.40GHz Percentage of memory in use: 29% Total physical RAM: 8110.18 MB Available physical RAM: 5678.49 MB Total Pagefile: 11566.18 MB Available Pagefile: 8538.43 MB Total Virtual: 131072 MB Available Virtual: 131071.76 MB ==================== Drives ================================ Drive c: (Razer Blade Pro) (Fixed) (Total:459.74 GB) (Free:230.53 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 476.9 GB) (Disk ID: C5AEBD62) Partition: GPT Partition Type. ==================== End Of Log ============================