Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01 Ran by Victor (administrator) on VICTOR-PC on 03-07-2015 11:50:47 Running from D:\Downloads Chrome Loaded Profiles: Victor (Available Profiles: Victor) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe (Hi-Rez Studios) D:\Games\Hi-Rez Studios\HiPatchService.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe () C:\ProgramData\Orange Connect\OnlineUpdate\ouc.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe (Perforce Software Inc.) C:\Program Files\Perforce\Server\p4s.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe (Microsoft Corporation) C:\Users\Victor\AppData\Roaming\Microsoft\SystemCertificates\VSSVC.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe (BitTorrent Inc.) C:\Users\Victor\AppData\Roaming\uTorrent\uTorrent.exe (Akamai Technologies, Inc.) C:\Users\Victor\AppData\Local\Akamai\netsession_win.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe (Akamai Technologies, Inc.) C:\Users\Victor\AppData\Local\Akamai\netsession_win.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Valve Corporation) D:\Steam\Steam.exe (Valve Corporation) D:\Steam\bin\steamwebhelper.exe (Valve Corporation) D:\Steam\bin\steamwebhelper.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxcr.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1691112 2015-03-12] (Bitdefender) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-06-18] (Razer Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [110192 2010-05-13] () HKLM-x32\...\Run: [DT PLP] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [121456 2010-05-17] () HKLM-x32\...\Run: [BCSSync] => D:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1 HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\Run: [uTorrent] => C:\Users\Victor\AppData\Roaming\uTorrent\uTorrent.exe [1694560 2015-05-08] (BitTorrent Inc.) HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\Run: [Google Update] => C:\Users\Victor\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-12-17] (Google Inc.) HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Victor\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.) HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-21] (Piriform Ltd) HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\Run: [Agent portofel Bitdefender] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-01-15] (Bitdefender) HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\...\MountPoints2: {6a07308f-b68f-11e4-beff-00241d12922d} - I:\AutoRun.exe ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender) ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Victor\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-31] (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [S-1-5-21-1883889617-3918987694-3591999623-1000] => http=;ftp=;https=; HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1883889617-3918987694-3591999623-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Portofel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-01-28] (Bitdefender) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation) BHO-x32: Portofel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-01-28] (Bitdefender) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation) Toolbar: HKLM - Portofel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-01-28] (Bitdefender) Toolbar: HKLM-x32 - Portofel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-01-28] (Bitdefender) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3937D3BC-FA10-4C3C-ACDE-90CCE2B431C3}: [DhcpNameServer] 93.122.135.198 62.217.213.71 Tcpip\..\Interfaces\{6B5DEA1A-1FC7-4C28-9F62-B49F548E4047}: [DhcpNameServer] 192.168.1.1 StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\tb6lhe0i.default FF NetworkProxy: "gopher", "" FF NetworkProxy: "gopher_port", 0 FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-06-24] () FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-06-24] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll [2014-05-30] (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation) FF Plugin-x32: @ogplanet.com/npOGPPlugin -> C:\Windows\system32\npOGPPlugin.dll No File FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1883889617-3918987694-3591999623-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Victor\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.) FF Plugin HKU\S-1-5-21-1883889617-3918987694-3591999623-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Victor\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.) FF Plugin HKU\S-1-5-21-1883889617-3918987694-3591999623-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Victor\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-28] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-1883889617-3918987694-3591999623-1000: ubisoft.com/uplaypc -> D:\Games\Ubisoft\Trials Evolution Gold Edition\datapack\orbit\npuplaypc.dll No File FF user.js: detected! => C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\tb6lhe0i.default\user.js [2015-02-17] FF Extension: Flash Video Downloader - YouTube HD Downloader [4K] - C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\tb6lhe0i.default\Extensions\artur.dubovoy@gmail.com [2015-06-07] FF Extension: Super Hide IP - C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Profiles\tb6lhe0i.default\Extensions\support@super-hide-ip.com.xpi [2015-02-08] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-06-27] FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-06-27] FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext Chrome: ======= CHR Profile: C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (BetterTTV) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-10-08] CHR Extension: (Google Docs) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-17] CHR Extension: (Google Drive) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-17] CHR Extension: (YouTube) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-17] CHR Extension: (Steam inventory helper) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-01-12] CHR Extension: (Google Search) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-17] CHR Extension: (Bitdefender Wallet) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-06-27] CHR Extension: (Reddit Notifier) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikingdipinldcfllekffnlgbojbbpilk [2014-08-17] CHR Extension: (CaptionBot Antenna) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipnkbfghfedbaoojfdbenicffddmobml [2014-07-16] CHR Extension: (ReChat for Twitch™) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipplilmaapjjklilmmaccfemdmhkoacd [2014-08-13] CHR Extension: (Reddit Enhancement Suite) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-10-06] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12] CHR Extension: (Visualizer for YouTube™) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\mggenbbfddbbkpihhkbdamehndejnffj [2015-05-15] CHR Extension: (Google Mail Checker) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-12-17] CHR Extension: (Tiësto) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2014-08-26] CHR Extension: (MuteTab) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkbaaijgpppbokgnhhoakihofedkgcc [2014-12-12] CHR Extension: (Google Wallet) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17] CHR Extension: (Adblock Pro) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2013-12-17] CHR Extension: (Dotabuff Extended) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\oggpckdeaofelnblpijaiijmgfckncdf [2014-03-13] CHR Extension: (Gmail) - C:\Users\Victor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-17] CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - https://clients2.google.com/service/update2/crx StartMenuInternet: Google Chrome.4YY45HXN2YJTKP67DJGEDS67WQ - C:\Users\Victor\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-05-17] () R2 HiPatchService; D:\Games\Hi-Rez Studios\HiPatchService.exe [9216 2015-03-12] (Hi-Rez Studios) [File not signed] R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files\Microsoft Office\Office14\GROOVE.EXE [30963576 2010-01-21] (Microsoft Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3191392 2014-05-15] (INCA Internet Co., Ltd.) S2 Orange Connect. RunOuc; C:\Program Files (x86)\Orange Connect\UpdateDog\ouc.exe [655712 2015-02-17] () R2 Perforce; C:\Program Files\Perforce\Server\p4s.exe [3287168 2012-05-31] (Perforce Software Inc.) S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-03-24] () R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] () R2 RzSurroundVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe [4250624 2015-02-03] (A-Volute) [File not signed] R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender) R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC) R2 VSSS; C:\Users\Victor\AppData\Roaming\Microsoft\SystemCertificates\VSSVC.exe [103809344 2015-06-23] (Microsoft Corporation) [File not signed] <==== ATTENTION ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-01-14] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-01-23] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-01-14] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC) S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-01-09] (BitDefender SRL) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender) S3 DrvAgent64; C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [13824 2015-03-23] (Phoenix Technologies) [File not signed] S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-09-19] (Sony Mobile Communications) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-02-24] (BitDefender LLC) S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [107736 2015-06-23] (Malwarebytes Corporation) S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [121416 2012-05-12] (MotioninJoy) [File not signed] R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.) R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc) S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-06-09] (Windows (R) Win 7 DDK provider) R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.) R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2014-11-18] (Razer, Inc.) R3 RZSURROUNDVADService; C:\Windows\System32\drivers\RzSurroundVAD.sys [40640 2015-02-09] (Windows (R) Win 7 DDK provider) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.) R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 Tcpz-x64; \??\C:\Users\Victor\AppData\Local\Temp\Tcpz-x64.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-03 11:50 - 2015-07-03 11:50 - 00000000 ____D C:\FRST 2015-07-01 22:21 - 2015-07-01 22:21 - 00000000 ____D C:\Users\Victor\Documents\Supernova 2015-07-01 17:21 - 2015-06-18 23:25 - 06656393 _____ C:\Users\Victor\Desktop\MG (2).zip 2015-06-30 13:53 - 2015-06-30 13:53 - 00000000 ____D C:\Users\Victor\AppData\Roaming\esportal 2015-06-30 13:53 - 2015-06-30 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Esportal 2015-06-28 06:09 - 2015-06-28 06:09 - 00000000 ____D C:\Users\Victor\AppData\Local\Chromium 2015-06-27 21:35 - 2015-06-27 21:35 - 00000659 _____ C:\Users\Victor\Desktop\CABAL2.lnk 2015-06-27 21:35 - 2015-06-27 21:35 - 00000000 ____D C:\Users\Victor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CABAL2 (US) 2015-06-27 03:55 - 2015-06-27 03:55 - 00599988 _____ C:\ProgramData\1435366204.bdinstall.bin 2015-06-27 03:55 - 2015-06-27 03:55 - 00002126 _____ C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk 2015-06-27 03:55 - 2015-06-27 03:55 - 00000684 ____H C:\bdr-cf01 2015-06-27 03:55 - 2015-06-27 03:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-06-27 03:55 - 2015-06-27 03:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015 2015-06-27 03:54 - 2015-06-27 04:21 - 00000000 ____D C:\Users\Victor\AppData\Roaming\Bitdefender 2015-06-27 03:54 - 2015-06-27 04:15 - 00000000 ____D C:\ProgramData\BDLogging 2015-06-27 03:54 - 2015-06-27 03:55 - 00253404 ____H C:\bdr-ld01 2015-06-27 03:54 - 2015-06-27 03:55 - 00009216 ____H C:\bdr-ld01.mbr 2015-06-27 03:54 - 2015-01-23 16:30 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys 2015-06-27 03:54 - 2015-01-14 13:13 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2015-06-27 03:54 - 2015-01-14 13:07 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2015-06-27 03:54 - 2015-01-09 11:59 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys 2015-06-27 03:54 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll 2015-06-27 03:54 - 2014-12-15 18:04 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys 2015-06-27 03:54 - 2014-07-04 17:49 - 49563064 ____H C:\bdr-im01.gz 2015-06-27 03:54 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01 2015-06-27 03:54 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2015-06-27 03:54 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2015-06-27 03:50 - 2015-06-27 03:56 - 00000000 ____D C:\ProgramData\Bitdefender 2015-06-27 03:50 - 2015-06-27 03:54 - 00000000 ____D C:\Program Files\Bitdefender 2015-06-27 03:50 - 2015-06-27 03:50 - 00000000 ____D C:\Users\Victor\AppData\Roaming\QuickScan 2015-06-27 03:50 - 2015-06-27 03:50 - 00000000 _____ C:\Windows\system32\BDSandBoxUISkin32.dll 2015-06-27 03:50 - 2015-02-24 17:52 - 00160544 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2015-06-27 03:50 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll 2015-06-27 03:50 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll 2015-06-27 03:50 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2015-06-26 23:14 - 2015-06-27 03:50 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-06-26 12:44 - 2015-06-26 12:44 - 01415680 _____ (wj32) C:\Program Files\FSVYCFIU.exe 2015-06-25 11:44 - 2015-06-25 11:44 - 01415680 _____ (wj32) C:\Program Files\KN036KNZ.exe 2015-06-24 12:22 - 2015-06-24 12:22 - 01415680 _____ (wj32) C:\Program Files\47AOR47J.exe 2015-06-24 12:21 - 2015-07-03 10:15 - 00000971 _____ C:\Windows\setupact.log 2015-06-24 12:21 - 2015-06-24 12:21 - 00000350 _____ C:\Windows\PFRO.log 2015-06-24 12:21 - 2015-06-24 12:21 - 00000000 _____ C:\Windows\setuperr.log 2015-06-24 03:42 - 2015-06-24 03:42 - 00002751 _____ C:\Users\Public\Desktop\Supernova.lnk 2015-06-24 03:42 - 2015-06-24 03:42 - 00000000 ____D C:\Users\Victor\AppData\Local\Solid State Networks 2015-06-24 03:42 - 2015-06-24 03:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BANDAI NAMCO Entertainment America 2015-06-24 03:42 - 2015-06-24 03:42 - 00000000 ____D C:\BANDAI NAMCO Games America 2015-06-24 03:39 - 2015-06-24 03:39 - 00018511 _____ C:\Windows\DirectX.log 2015-06-23 22:09 - 2015-06-23 22:09 - 01415680 _____ (wj32) C:\Program Files\TUWXZ02K.exe 2015-06-23 22:02 - 2015-06-23 22:11 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-23 21:59 - 2015-06-23 21:59 - 01415680 _____ (wj32) C:\Program Files\GJMP258K.exe 2015-06-23 21:58 - 2014-05-14 19:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-06-23 21:58 - 2014-05-14 19:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-06-23 21:58 - 2014-05-14 19:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-06-23 21:58 - 2014-05-14 19:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-06-23 21:57 - 2014-05-14 19:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-06-23 21:57 - 2014-05-14 19:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-06-23 21:57 - 2014-05-14 19:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-06-23 21:57 - 2014-05-14 19:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-06-23 21:57 - 2014-05-14 19:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-06-23 21:57 - 2014-05-14 19:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-06-23 21:57 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-06-23 21:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-06-23 21:57 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-06-23 21:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-06-23 21:54 - 2015-06-23 22:02 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-06-23 21:54 - 2015-06-23 21:54 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-06-23 21:54 - 2015-06-23 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-06-23 21:54 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-06-23 21:54 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-06-23 20:43 - 2015-06-23 20:43 - 00000000 ____D C:\Program Files (x86)\ESET 2015-06-23 20:42 - 2015-06-23 20:42 - 140135120 _____ C:\Windows\system32\MRT.exe 2015-06-23 20:38 - 2015-06-23 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-06-23 12:50 - 2015-06-23 12:50 - 01415680 _____ (wj32) C:\Program Files\578ABDEY.exe 2015-06-19 03:12 - 2015-06-19 03:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm 2015-06-16 05:42 - 2015-06-16 15:31 - 00000000 ____D C:\Users\Victor\Documents\NCSOFT 2015-06-15 07:21 - 2015-06-15 07:21 - 00000000 ____D C:\Users\Victor\AppData\Local\Fallout3 2015-06-14 03:25 - 2015-06-14 03:25 - 00000968 _____ C:\Users\Public\Desktop\MK.lnk 2015-06-12 21:47 - 2015-06-12 21:47 - 00000813 _____ C:\Users\Public\Desktop\Smite.lnk 2015-06-12 21:47 - 2015-06-12 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2015-06-06 16:20 - 2015-06-06 16:20 - 00000000 ____D C:\Users\Victor\AppData\Local\BigHugeEngine 2015-06-05 11:18 - 2015-06-05 11:18 - 00089600 _____ (Razer Inc) C:\Windows\SysWOW64\rzdevinfo.dll 2015-06-04 21:18 - 2015-06-04 21:18 - 00000000 ____D C:\Users\Victor\AppData\Local\Aeria Games 2015-06-04 21:17 - 2015-06-04 21:17 - 00000000 ____D C:\ProgramData\Aeria Games 2015-06-04 21:02 - 2015-06-16 15:31 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2015-06-04 19:37 - 2015-06-04 19:37 - 00000000 ____D C:\Users\Victor\AppData\Roaming\ParadoxInteractive ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-03 11:48 - 2013-12-17 16:34 - 00000000 ____D C:\Users\Victor\AppData\Roaming\uTorrent 2015-07-03 11:34 - 2013-12-18 01:53 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-07-03 11:31 - 2013-12-17 16:27 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1883889617-3918987694-3591999623-1000UA.job 2015-07-03 10:23 - 2009-07-14 07:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-03 10:23 - 2009-07-14 07:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-03 10:19 - 2013-12-17 16:18 - 01635680 _____ C:\Windows\WindowsUpdate.log 2015-07-03 10:15 - 2009-07-14 08:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-03 04:31 - 2013-12-17 16:27 - 00000860 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1883889617-3918987694-3591999623-1000Core.job 2015-07-03 03:03 - 2013-12-20 18:06 - 00000000 ____D C:\Users\Victor\AppData\Roaming\vlc 2015-07-03 02:01 - 2013-12-17 17:27 - 00000000 ____D C:\Users\Victor\AppData\Local\Battle.net 2015-07-01 11:28 - 2009-07-14 07:45 - 00430544 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-30 20:37 - 2013-12-17 16:26 - 00109288 _____ C:\Users\Victor\AppData\Local\GDIPFONTCACHEV1.DAT 2015-06-26 23:15 - 2014-07-28 02:03 - 00001945 _____ C:\Windows\epplauncher.mif 2015-06-25 01:24 - 2014-06-27 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2015-06-25 01:24 - 2009-07-14 08:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-06-24 16:04 - 2014-12-24 17:19 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-06-24 15:27 - 2013-12-23 04:24 - 00000000 ____D C:\Users\Victor\Documents\My Games 2015-06-24 13:09 - 2009-07-14 06:20 - 00000000 ____D C:\Windows\rescache 2015-06-24 04:35 - 2013-12-18 01:53 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-06-24 04:35 - 2013-12-18 01:53 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-06-24 04:35 - 2013-12-18 01:53 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-06-23 22:30 - 2009-07-14 06:20 - 00000000 __RSD C:\Windows\Media 2015-06-23 21:42 - 2013-12-26 18:35 - 00000000 ____D C:\Users\Victor\AppData\Local\genienext 2015-06-22 02:09 - 2009-07-14 08:13 - 00785794 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-16 15:31 - 2014-04-16 04:56 - 00000000 ____D C:\Users\Victor\AppData\Local\NCSOFT 2015-06-16 02:05 - 2014-05-28 19:32 - 00000000 ____D C:\Users\Victor\AppData\Roaming\WizardWars 2015-06-14 13:51 - 2014-08-27 01:48 - 00000000 ____D C:\Users\Victor\AppData\Local\Adobe 2015-06-12 21:47 - 2014-01-14 15:18 - 00000000 ____D C:\ProgramData\Hi-Rez Studios 2015-06-12 21:47 - 2013-12-17 17:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-06-11 16:46 - 2014-05-27 00:44 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2015-06-09 04:51 - 2014-03-13 13:35 - 00000000 ____D C:\Users\Victor\AppData\Roaming\Skype 2015-06-06 20:53 - 2014-10-20 23:07 - 00000000 ____D C:\Users\Victor\AppData\Roaming\TS3Client 2015-06-06 16:20 - 2013-12-23 04:36 - 00000000 ____D C:\Users\Victor\AppData\Local\SKIDROW 2015-06-05 22:31 - 2014-01-14 00:50 - 00000000 ____D C:\Users\Victor\Desktop\fac ==================== Files in the root of some directories ======= 2015-06-24 12:22 - 2015-06-24 12:22 - 1415680 _____ (wj32) C:\Program Files\47AOR47J.exe 2015-06-23 12:50 - 2015-06-23 12:50 - 1415680 _____ (wj32) C:\Program Files\578ABDEY.exe 2015-06-26 12:44 - 2015-06-26 12:44 - 1415680 _____ (wj32) C:\Program Files\FSVYCFIU.exe 2015-06-23 21:59 - 2015-06-23 21:59 - 1415680 _____ (wj32) C:\Program Files\GJMP258K.exe 2015-06-25 11:44 - 2015-06-25 11:44 - 1415680 _____ (wj32) C:\Program Files\KN036KNZ.exe 2015-06-23 22:09 - 2015-06-23 22:09 - 1415680 _____ (wj32) C:\Program Files\TUWXZ02K.exe 2014-06-04 14:19 - 2014-06-04 17:37 - 0000099 _____ () C:\Users\Victor\AppData\Roaming\LauncherSettings_live.cfg 2015-02-09 01:24 - 2015-02-09 01:25 - 0001752 _____ () C:\Users\Victor\AppData\Roaming\SpeedRunnersLog.txt 2014-06-04 13:16 - 2014-06-04 13:16 - 0008144 _____ () C:\Users\Victor\AppData\Roaming\TheHunterSettings_live.bin 2014-06-04 13:15 - 2014-06-04 17:09 - 0000040 _____ () C:\Users\Victor\AppData\Roaming\TheHunterSettings_steam_live.cfg 2014-09-02 00:33 - 2015-02-13 06:00 - 0006656 _____ () C:\Users\Victor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-11 19:49 - 2014-01-11 19:49 - 0000000 ___SH () C:\Users\Victor\AppData\Local\LumaEmu 2015-01-20 15:36 - 2015-01-20 15:36 - 0007609 _____ () C:\Users\Victor\AppData\Local\Resmon.ResmonCfg 2015-06-27 03:55 - 2015-06-27 03:55 - 0599988 _____ () C:\ProgramData\1435366204.bdinstall.bin Some files in TEMP: ==================== C:\Users\Victor\AppData\Local\Temp\27fff54a706caf16275619fa9b79269c.dll C:\Users\Victor\AppData\Local\Temp\31d6e07d87ca5eaf6b2447c07a6c1365.dll C:\Users\Victor\AppData\Local\Temp\9548fa13909cf8b38a4dcc1cc6ef6f03.dll C:\Users\Victor\AppData\Local\Temp\cdo1829421226.dll C:\Users\Victor\AppData\Local\Temp\cdo1935762995.dll C:\Users\Victor\AppData\Local\Temp\cdo3012384463.dll C:\Users\Victor\AppData\Local\Temp\cdo3047789197.dll Some zero byte size files/folders: ========================== C:\Windows\System32\BDSandBoxUISkin32.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-23 17:54 ==================== End of log ============================