Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:30-07-2015 Ran by mewtw_000 (administrator) on GAMERPC2 (02-08-2015 03:56:47) Running from C:\Users\mewtw_000\Desktop Loaded Profiles: mewtw_000 & (Available Profiles: mario & mewtw_000 & veronica & alex) Platform: Windows 8.1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe (IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (AOL Inc.) C:\Program Files (x86)\AIM\aim.exe (ooVoo LLC) C:\Program Files (x86)\ooVoo\ooVoo.exe (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTAgent.exe (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe () C:\Users\mewtw_000\AppData\Local\Amazon Music\Amazon Music Helper.exe (Visicom Media Inc.) C:\Program Files (x86)\ManyCam\ManyCam.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (SlySoft, Inc.) C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\main.exe (The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.BrowserSubprocess.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe (Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWXConfigManager.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-25] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.) HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-11-25] (Nullsoft, Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [98256 2015-07-14] (Razer Inc.) HKLM-x32\...\Run: [CloneCDTray] => C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.) HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5887264 2015-06-08] (IObit) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-07-14] (LogMeIn Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2895552 2015-07-23] (Valve Corporation) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [10182440 2015-04-06] (Visicom Media Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Aim] => C:\Program Files (x86)\AIM\aim.exe [4331392 2012-05-30] (AOL Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36207136 2015-02-08] (ooVoo LLC) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-29] (Skype Technologies S.A.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-02-26] (Google Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Aim] => C:\Program Files (x86)\AIM\aim.exe [4331392 2012-05-30] (AOL Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36207136 2015-02-08] (ooVoo LLC) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-29] (Skype Technologies S.A.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Google Update] => C:\Users\mewtw_000\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-02-26] (Google Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [GameCompanion] => C:\Users\mewtw_000\AppData\Roaming\GameCompanion\GameCompanion.exe [484408 2013-10-12] () HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro\DTAgent.exe [4807952 2015-02-27] (Disc Soft Ltd) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit) HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [Amazon Music] => C:\Users\mewtw_000\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] () HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [10182440 2015-04-06] (Visicom Media Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-02-26] (Google Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [10182440 2015-04-06] (Visicom Media Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Aim] => C:\Program Files (x86)\AIM\aim.exe [4331392 2012-05-30] (AOL Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36207136 2015-02-08] (ooVoo LLC) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-29] (Skype Technologies S.A.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-02-26] (Google Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [10182440 2015-04-06] (Visicom Media Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Aim] => C:\Program Files (x86)\AIM\aim.exe [4331392 2012-05-30] (AOL Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36207136 2015-02-08] (ooVoo LLC) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.) HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53288576 2015-06-29] (Skype Technologies S.A.) BootExecute: autocheck autochk /p \??\D:autocheck autochk * ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/ HKU\S-1-5-21-3857839104-3952859072-2417217460-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3857839104-3952859072-2417217460-1004 -> DefaultScope {B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} URL = http://www.baidu.com/s?wd={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&abar=2&tn=49029047_oem_dg&ch=33 SearchScopes: HKU\S-1-5-21-3857839104-3952859072-2417217460-1004 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = SearchScopes: HKU\S-1-5-21-3857839104-3952859072-2417217460-1004 -> {B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2} URL = http://www.baidu.com/s?wd={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&abar=2&tn=49029047_oem_dg&ch=33 BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-02-25] (Eyeo GmbH) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-18] (Google Inc.) Toolbar: HKU\S-1-5-21-3857839104-3952859072-2417217460-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.) Toolbar: HKU\S-1-5-21-3857839104-3952859072-2417217460-1004 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.) Toolbar: HKU\S-1-5-21-3857839104-3952859072-2417217460-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.) Toolbar: HKU\S-1-5-21-3857839104-3952859072-2417217460-1006-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-18] (Google Inc.) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{6A3289C7-BD23-427E-BDC4-302EF88A4A73}: [DhcpNameServer] 192.168.1.1 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer 11\iexplorer.exe FireFox: ======== FF ProfilePath: C:\Users\mewtw_000\AppData\Roaming\Mozilla\Firefox\Profiles\ui2sr9ag.default FF DefaultSearchEngine: Google FF DefaultSearchEngine.US: Google FF SelectedSearchEngine: Google FF Homepage: www.wwe.com FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-05-06] (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] () FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [2012-05-25] (Yahoo! Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin HKU\S-1-5-21-3857839104-3952859072-2417217460-1004: @talk.google.com/GoogleTalkPlugin -> C:\Users\mewtw_000\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-3857839104-3952859072-2417217460-1004: @talk.google.com/O1DPlugin -> C:\Users\mewtw_000\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google) FF Plugin HKU\S-1-5-21-3857839104-3952859072-2417217460-1004: @tools.google.com/Google Update;version=3 -> C:\Users\mewtw_000\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin HKU\S-1-5-21-3857839104-3952859072-2417217460-1004: @tools.google.com/Google Update;version=9 -> C:\Users\mewtw_000\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.) FF Plugin HKU\S-1-5-21-3857839104-3952859072-2417217460-1004: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll No File FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-06-30] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-06-30] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-06-30] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-06-30] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-06-30] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\mewtw_000\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\mewtw_000\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google) FF Extension: Adblock Plus - C:\Users\mewtw_000\AppData\Roaming\Mozilla\Firefox\Profiles\ui2sr9ag.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-28] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-06-09] Chrome: ======= CHR Profile: C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Adblock Plus) - C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-10] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-30] CHR Extension: (Google Wallet) - C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06] CHR Extension: (Google Quick Scroll) - C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-07-30] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R3 Disc Soft Pro Bus Service; C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe [1291024 2015-02-27] (Disc Soft Ltd) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-25] (NVIDIA Corporation) R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [878880 2015-05-12] (IObit) R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-07-14] (LogMeIn, Inc.) S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-25] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5541008 2015-06-25] (NVIDIA Corporation) R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] () R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-07-14] (Razer Inc.) R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-05-07] (IObit) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed] R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2015-02-26] (VIA Technologies, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation) (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 DrvAgent64; C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [13824 2015-04-29] (Phoenix Technologies) [File not signed] R3 dtproscsibus; C:\Windows\System32\drivers\dtproscsibus.sys [30352 2015-03-02] (Disc Soft Ltd) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.) R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit) R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-07-14] (LogMeIn Inc.) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-02-26] (REALiX(tm)) R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49272 2014-12-28] (Visicom Media Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-01] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation) R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35960 2014-12-28] (Visicom Media Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-25] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation) R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com) R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-03-20] (Duplex Secure Ltd.) U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-07-27] () R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation) R3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-28] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-11-21] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-02 03:56 - 2015-08-02 03:57 - 00028256 _____ C:\Users\mewtw_000\Desktop\FRST.txt 2015-07-30 19:10 - 2015-07-30 19:10 - 00001335 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk 2015-07-30 19:10 - 2015-07-30 19:10 - 00000000 ____D C:\ProgramData\YTD Video Downloader 2015-07-30 19:10 - 2015-07-30 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader 2015-07-30 19:10 - 2015-07-30 19:10 - 00000000 ____D C:\Program Files (x86)\GreenTree Applications 2015-07-30 17:24 - 2015-07-30 17:24 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\ManyCam 2015-07-30 17:23 - 2015-07-30 17:23 - 00001007 _____ C:\Users\Public\Desktop\ManyCam.lnk 2015-07-30 17:23 - 2015-07-30 17:23 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\ManyCam 2015-07-30 17:23 - 2015-07-30 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam 2015-07-30 17:23 - 2015-07-30 17:23 - 00000000 ____D C:\ProgramData\ManyCam 2015-07-30 17:23 - 2015-07-30 17:23 - 00000000 ____D C:\Program Files (x86)\ManyCam 2015-07-30 15:29 - 2015-07-30 15:29 - 00001204 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome .lnk 2015-07-30 15:29 - 2015-07-30 15:29 - 00001023 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk 2015-07-30 15:29 - 2015-07-30 15:29 - 00000847 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk 2015-07-30 15:19 - 2015-07-30 15:30 - 00000000 ____D C:\AdwCleaner 2015-07-30 15:06 - 2015-07-30 15:06 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-07-30 14:53 - 2015-07-30 14:53 - 02248704 _____ C:\Users\mewtw_000\Desktop\AdwCleaner.exe 2015-07-30 14:52 - 2015-07-30 14:52 - 00002281 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-07-30 14:52 - 2015-07-30 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-07-30 14:51 - 2015-08-02 03:56 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-30 14:51 - 2015-08-01 14:56 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-30 14:51 - 2015-07-30 14:51 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-30 14:51 - 2015-07-30 14:51 - 00003658 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-30 13:11 - 2015-08-02 03:56 - 00000000 ____D C:\FRST 2015-07-30 13:11 - 2015-07-30 13:11 - 02168832 _____ (Farbar) C:\Users\mewtw_000\Desktop\FRST64.exe 2015-07-30 13:11 - 2015-07-30 13:11 - 00000000 ____D C:\Users\mewtw_000\Desktop\FRST-OlderVersion 2015-07-29 21:58 - 2015-07-29 21:58 - 00002412 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_mewtw_000 2015-07-29 21:58 - 2015-07-29 21:58 - 00000304 _____ C:\Windows\Tasks\Uninstaller_SkipUac_mewtw_000.job 2015-07-29 18:55 - 2015-06-25 14:16 - 01571512 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-07-29 18:55 - 2015-06-25 14:16 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-07-29 18:18 - 2015-07-29 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-07-29 18:17 - 2015-07-14 14:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-07-29 18:17 - 2015-07-14 14:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-07-29 18:17 - 2015-07-14 14:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-07-29 18:17 - 2015-01-05 20:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2015-07-29 18:17 - 2015-01-05 19:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2015-07-29 18:17 - 2015-01-05 18:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll 2015-07-29 18:17 - 2015-01-05 18:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll 2015-07-29 14:27 - 2015-07-29 14:27 - 00000020 _____ C:\Windows\SysWOW64\pub_store.dat 2015-07-29 14:26 - 2015-07-29 14:26 - 00655872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr90.dll 2015-07-29 14:26 - 2015-07-29 14:26 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp90.dll 2015-07-29 14:26 - 2015-07-29 14:26 - 00159032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl90.dll 2015-07-29 14:26 - 2015-07-29 14:26 - 00001857 _____ C:\Windows\SysWOW64\Microsoft.VC90.CRT.manifest 2015-07-29 14:26 - 2015-07-29 14:26 - 00000466 _____ C:\Windows\SysWOW64\Microsoft.VC90.ATL.manifest 2015-07-28 03:56 - 2015-08-01 12:51 - 00009718 _____ C:\Windows\setupact.log 2015-07-28 03:56 - 2015-07-28 03:56 - 00000000 _____ C:\Windows\setuperr.log 2015-07-28 03:55 - 2015-07-30 15:05 - 00014490 _____ C:\Windows\PFRO.log 2015-07-28 03:55 - 2015-07-28 03:55 - 00000000 ____H C:\asc_rdflag 2015-07-28 00:23 - 2015-07-25 06:34 - 01084928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-07-27 18:07 - 2015-07-27 18:18 - 00000000 ____D C:\ProgramData\RogueKiller 2015-07-27 18:07 - 2015-07-27 18:07 - 00035064 _____ C:\Windows\system32\Drivers\TrueSight.sys 2015-07-27 14:54 - 2015-07-27 14:54 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\Anvisoft 2015-07-27 14:53 - 2015-07-27 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft 2015-07-27 14:53 - 2015-07-27 15:01 - 00000000 ____D C:\Program Files (x86)\Anvisoft 2015-07-27 13:12 - 2015-07-27 13:12 - 00000000 ____D C:\Program Files\Adblock Plus for IE 2015-07-27 02:39 - 2015-07-27 02:39 - 00000000 _____ C:\Users\mewtw_000\AppData\Local\Temp.dat 2015-07-26 23:53 - 2015-07-26 23:53 - 00000229 _____ C:\Users\mewtw_000\.swfinfo 2015-07-26 23:23 - 2015-07-26 23:26 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Opera Software 2015-07-26 23:23 - 2015-07-26 23:26 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\Opera Software 2015-07-26 23:03 - 2015-07-26 23:05 - 00000000 ____D C:\Windows\System32\Tasks\FlipBoards 2015-07-26 22:59 - 2013-08-22 06:25 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-07-26 22:58 - 2015-07-26 22:58 - 00001332 _____ C:\Users\mewtw_000\AppData\Local\Chrome .lnk 2015-07-26 22:58 - 2015-07-26 22:58 - 00001153 _____ C:\Users\mewtw_000\AppData\Local\Firefox .lnk 2015-07-26 22:58 - 2015-07-26 22:58 - 00000977 _____ C:\Users\mewtw_000\AppData\Local\Iexplore .lnk 2015-07-26 22:58 - 2015-06-13 05:59 - 08368732 ____N C:\Users\Public\Documents\windows.exe 2015-07-25 20:20 - 2015-07-25 20:20 - 00000222 _____ C:\Users\mewtw_000\Desktop\Five Nights at Freddy's 4.url 2015-07-23 23:11 - 2015-07-26 02:45 - 00000378 _____ C:\Windows\SMB2ed.ini 2015-07-23 05:08 - 2015-07-23 05:08 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-07-23 05:08 - 2015-07-23 05:08 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-07-23 05:08 - 2015-07-23 05:08 - 00411133 _____ C:\Windows\system32\ApnDatabase.xml 2015-07-23 05:07 - 2015-07-23 05:07 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-07-23 05:07 - 2015-07-23 05:07 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-07-22 16:09 - 2015-07-22 16:09 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\CEF 2015-07-22 10:53 - 2015-07-22 10:53 - 00002396 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_mario 2015-07-22 10:53 - 2015-07-22 10:53 - 00000296 _____ C:\Windows\Tasks\Uninstaller_SkipUac_mario.job 2015-07-22 09:39 - 2015-07-22 09:39 - 00000000 ____D C:\Users\mario\AppData\Local\CEF 2015-07-21 20:11 - 2015-07-21 20:11 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\MaskMyIP 2015-07-21 20:11 - 2015-07-21 20:11 - 00000000 ____D C:\ProgramData\MaskMyIP 2015-07-21 11:03 - 2015-07-28 10:59 - 00000024 _____ C:\Users\mario\AppData\Roaming\appdataFr25.bin 2015-07-21 01:54 - 2015-07-27 14:52 - 00000024 _____ C:\Users\mewtw_000\AppData\Roaming\appdataFr25.bin 2015-07-21 01:24 - 2015-07-21 01:25 - 00000000 ____D C:\Program Files (x86)\Steam Trader Helper 2015-07-20 18:04 - 2015-07-20 18:04 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-07-20 18:04 - 2015-07-20 18:04 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-07-20 18:04 - 2015-07-20 18:04 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-07-20 18:04 - 2015-07-20 18:04 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-07-16 23:38 - 2015-07-16 23:38 - 00000000 ____D C:\Program Files\Microsoft Xbox One Controller for Windows 2015-07-16 22:13 - 2015-07-16 22:14 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\BetterDS3 2015-07-16 12:45 - 2015-07-13 14:10 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-16 12:45 - 2015-07-13 14:10 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-15 13:38 - 2015-07-26 22:59 - 00001296 _____ C:\Users\Public\Desktop\Razer Cortex.lnk 2015-07-15 13:36 - 2015-08-01 13:41 - 00000890 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004Core.job 2015-07-15 13:36 - 2015-07-30 14:41 - 00000942 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004UA.job 2015-07-15 13:36 - 2015-06-12 08:51 - 00037184 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpmgrk.sys 2015-07-14 21:34 - 2015-07-26 22:59 - 00001795 _____ C:\Users\Public\Desktop\iTunes.lnk 2015-07-14 21:34 - 2015-07-14 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-07-14 21:34 - 2015-07-14 21:34 - 00000000 ____D C:\Program Files\iTunes 2015-07-14 21:34 - 2015-07-14 21:34 - 00000000 ____D C:\Program Files\iPod 2015-07-14 21:34 - 2015-07-14 21:34 - 00000000 ____D C:\Program Files (x86)\iTunes 2015-07-14 16:37 - 2015-07-09 12:51 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-07-14 16:37 - 2015-07-09 11:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-14 16:37 - 2015-07-09 09:03 - 03701760 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-07-14 16:37 - 2015-07-09 08:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-07-14 16:37 - 2015-07-09 08:53 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-07-14 16:37 - 2015-07-09 08:50 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-07-14 16:37 - 2015-07-09 08:50 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-07-14 16:37 - 2015-07-09 08:48 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-07-14 16:37 - 2015-07-09 08:46 - 02229248 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-07-14 16:37 - 2015-07-09 08:38 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-07-14 16:37 - 2015-07-09 08:37 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-07-14 16:37 - 2015-07-09 08:35 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-07-14 16:37 - 2015-07-09 08:34 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-07-14 16:37 - 2015-07-01 15:08 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-07-14 16:37 - 2015-07-01 14:14 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-07-14 16:37 - 2015-06-29 15:43 - 00026288 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-07-14 16:37 - 2015-06-29 08:07 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-07-14 16:37 - 2015-06-29 08:07 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-07-14 16:37 - 2015-06-29 08:07 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-07-14 16:37 - 2015-06-29 08:07 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-07-14 16:37 - 2015-06-27 22:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-14 16:37 - 2015-06-27 22:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-14 16:37 - 2015-06-27 22:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-14 16:37 - 2015-06-27 22:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-14 16:37 - 2015-06-27 09:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-14 16:37 - 2015-06-26 20:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-14 16:37 - 2015-06-26 20:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-14 16:37 - 2015-06-26 20:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-14 16:37 - 2015-06-26 19:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-07-14 16:37 - 2015-06-26 19:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-14 16:37 - 2015-06-26 19:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-14 16:37 - 2015-06-26 18:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-07-14 16:37 - 2015-06-26 18:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-14 16:37 - 2015-06-26 16:21 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-07-14 16:37 - 2015-06-26 16:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-14 16:37 - 2015-06-24 19:31 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-07-14 16:37 - 2015-06-15 15:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-14 16:37 - 2015-06-15 15:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-14 16:37 - 2015-06-15 14:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-14 16:37 - 2015-06-15 14:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-14 16:37 - 2015-06-15 13:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-14 16:37 - 2015-06-15 12:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-14 16:37 - 2015-05-30 14:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-07-14 16:37 - 2015-05-30 12:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-07-14 16:37 - 2015-05-30 12:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-07-14 16:36 - 2015-07-02 14:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-07-14 16:36 - 2015-07-02 13:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-07-14 16:36 - 2015-07-02 13:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-07-14 16:36 - 2015-07-02 13:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-07-14 16:36 - 2015-07-02 13:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-07-14 16:36 - 2015-07-02 12:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-07-14 16:36 - 2015-07-02 12:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-07-14 16:36 - 2015-07-02 11:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-07-14 16:35 - 2015-06-15 22:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-07-14 16:35 - 2015-06-15 22:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2015-07-14 16:35 - 2015-06-15 15:39 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-07-14 16:35 - 2015-06-15 15:38 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-07-14 16:35 - 2015-06-15 15:26 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-07-14 16:35 - 2015-06-15 15:24 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-07-14 16:35 - 2015-06-15 15:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-07-14 16:35 - 2015-06-15 14:58 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-07-14 16:35 - 2015-06-15 14:57 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-07-14 16:35 - 2015-06-15 14:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-07-14 16:35 - 2015-06-15 14:55 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-07-14 16:35 - 2015-06-15 14:49 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-07-14 16:35 - 2015-06-15 14:41 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-07-14 16:35 - 2015-06-15 14:38 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-07-14 16:35 - 2015-06-15 14:36 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-07-14 16:35 - 2015-06-15 14:17 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-07-14 16:35 - 2015-06-15 14:16 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-07-14 16:35 - 2015-06-15 14:15 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-07-14 16:35 - 2015-06-15 14:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-07-14 16:35 - 2015-06-15 14:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-07-14 16:35 - 2015-06-15 14:03 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-07-14 16:35 - 2015-06-15 13:52 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-07-14 16:35 - 2015-06-15 13:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2015-07-14 16:35 - 2015-06-15 13:44 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-07-14 16:35 - 2015-06-15 13:43 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-07-14 16:35 - 2015-06-15 13:42 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-07-14 16:35 - 2015-06-15 13:41 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-07-14 16:35 - 2015-06-15 13:37 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-07-14 16:35 - 2015-06-15 13:32 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-07-14 16:35 - 2015-06-15 13:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-07-14 16:35 - 2015-06-15 13:30 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-07-14 16:35 - 2015-06-15 13:30 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-07-14 16:35 - 2015-06-15 13:17 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-07-14 16:35 - 2015-06-15 13:07 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-07-14 16:35 - 2015-06-15 13:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-07-14 16:35 - 2015-06-10 20:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-07-14 16:35 - 2015-06-10 09:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-07-14 11:44 - 2015-07-14 11:44 - 00045680 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys 2015-07-14 09:36 - 2015-07-26 22:59 - 00000966 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2015-07-14 09:36 - 2015-07-14 09:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2015-07-14 09:36 - 2015-07-14 09:36 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2015-07-13 12:51 - 2015-08-01 12:51 - 00002882 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (mewtw_000) 2015-07-13 12:51 - 2015-07-26 22:59 - 00002188 _____ C:\Users\Public\Desktop\Driver Booster 2.lnk 2015-07-13 12:51 - 2015-07-13 12:51 - 00003240 _____ C:\Windows\System32\Tasks\Driver Booster Scan 2015-07-13 12:51 - 2015-07-13 12:51 - 00003184 _____ C:\Windows\System32\Tasks\Driver Booster Update 2015-07-12 17:38 - 2015-07-12 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-12 17:38 - 2015-07-12 17:38 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-12 17:38 - 2015-07-12 17:38 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-11 17:32 - 2015-07-22 00:37 - 00000000 ____D C:\Users\mewtw_000\Desktop\World Wrestling Mpire 2014 HD 2015-07-11 17:12 - 2015-07-26 22:59 - 00001182 _____ C:\Users\veronica\Desktop\TWC4 Fight!.lnk 2015-07-11 17:12 - 2015-07-12 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TWC4 Fight! 2015-07-11 16:52 - 2015-07-26 22:59 - 00001487 _____ C:\Users\mewtw_000\Desktop\Wrestling MPire Remix (Windowed).exe - Shortcut.lnk 2015-07-11 16:38 - 2015-07-26 22:59 - 00001499 _____ C:\Users\veronica\Desktop\Wrestling MPire Remix (Career).lnk 2015-07-11 16:38 - 2015-07-26 22:59 - 00001499 _____ C:\Users\mario\Desktop\Wrestling MPire Remix (Career).lnk 2015-07-11 16:38 - 2015-07-26 22:59 - 00001499 _____ C:\Users\alex\Desktop\Wrestling MPire Remix (Career).lnk 2015-07-11 16:38 - 2015-07-11 17:11 - 00000000 ____D C:\Program Files (x86)\MDickie 2015-07-11 16:38 - 2015-07-11 16:38 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wrestling MPire Remix (Career) 2015-07-11 16:38 - 2015-07-11 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wrestling MPire Remix (Career) 2015-07-11 04:05 - 2015-07-11 04:05 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wrestling Encore 2015-07-11 04:04 - 2015-07-26 22:59 - 00000870 _____ C:\Users\mewtw_000\Desktop\Wrestling Encore.lnk 2015-07-11 04:04 - 2015-07-11 04:04 - 00000000 ____D C:\MDickie 2015-07-10 06:39 - 2015-07-28 04:47 - 00000000 ___HD C:\$Windows.~BT 2015-07-09 08:37 - 2015-07-09 08:37 - 00000000 ____D C:\Users\mario\AppData\Local\openvr 2015-07-09 01:32 - 2015-07-09 01:32 - 30810805 _____ C:\Users\mewtw_000\Desktop\CHAR_Raiden_B MK2.rar 2015-07-06 14:03 - 2015-07-26 22:59 - 00001152 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-07-06 14:02 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-07-06 14:02 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-07-06 14:02 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-07-06 12:11 - 2015-07-06 12:11 - 00014040 _____ C:\Windows\system32\Drivers\wsfd_vw_1_10_0_20.sys ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-02 03:51 - 2015-02-26 02:21 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Skype 2015-08-02 03:17 - 2015-03-06 21:49 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\LogMeIn Hamachi 2015-08-02 03:07 - 2015-02-26 21:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-02 03:00 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\system32\sru 2015-08-02 01:16 - 2015-02-26 00:57 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3AA3E72E-62AD-49C2-84DE-DDBC88CD9C80} 2015-08-01 17:07 - 2015-06-02 02:35 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\CrashDumps 2015-08-01 17:07 - 2015-04-15 15:41 - 00000000 ____D C:\Users\mewtw_000\Desktop\Mortal Kombat X V1.00 Trainer +9 MrAntiFun 2015-08-01 16:25 - 2015-02-26 03:17 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-01 14:17 - 2015-02-26 00:21 - 01654704 _____ C:\Windows\WindowsUpdate.log 2015-08-01 13:33 - 2015-02-26 00:56 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3857839104-3952859072-2417217460-1004 2015-08-01 12:51 - 2015-02-26 00:52 - 00000000 ___DO C:\Users\mewtw_000\OneDrive 2015-08-01 12:49 - 2013-08-22 07:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-01 04:10 - 2013-08-22 06:25 - 00786432 ___SH C:\Windows\system32\config\BBI 2015-07-31 23:00 - 2015-02-26 02:34 - 00000000 ____D C:\Users\mewtw_000\Desktop\mugen 2015-07-31 18:52 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\AppReadiness 2015-07-31 18:47 - 2015-02-28 08:44 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3857839104-3952859072-2417217460-1006 2015-07-31 18:28 - 2015-03-09 05:06 - 00000000 ____D C:\Users\alex\AppData\Local\LogMeIn Hamachi 2015-07-31 18:28 - 2015-02-27 13:00 - 00000000 ___RD C:\Users\alex\OneDrive 2015-07-31 16:11 - 2015-03-15 03:53 - 00000000 ____D C:\Users\mewtw_000\Desktop\Sai 1.1.0 2nd 2015-07-31 14:03 - 2015-02-26 14:43 - 00000000 ____D C:\Users\mewtw_000\Desktop\Emulators 2015-07-31 14:02 - 2015-02-26 04:41 - 00000000 ____D C:\Users\mewtw_000\Powersaves3DS 2015-07-31 14:00 - 2015-02-26 04:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Action Replay PowerSaves 3DS 2015-07-31 14:00 - 2015-02-26 04:41 - 00000000 ____D C:\Program Files (x86)\Action Replay PowerSaves 3DS 2015-07-31 11:14 - 2015-02-26 00:38 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E71B592E-7987-47A0-AF09-57000680948F} 2015-07-31 11:08 - 2015-02-26 00:29 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3857839104-3952859072-2417217460-1001 2015-07-31 10:54 - 2015-02-26 00:26 - 00000000 ___DO C:\Users\mario\OneDrive 2015-07-31 10:53 - 2015-03-07 11:57 - 00000000 ____D C:\Users\mario\AppData\Local\LogMeIn Hamachi 2015-07-31 10:53 - 2015-02-26 01:06 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-31 02:11 - 2015-04-02 11:30 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-31 00:23 - 2015-02-26 14:42 - 00000000 ____D C:\Users\mewtw_000\Desktop\gzdoom-bin-1-4-08 2015-07-30 15:29 - 2013-08-22 08:36 - 00000000 ____D C:\Program Files\Common Files\System 2015-07-30 14:55 - 2015-04-21 10:21 - 00000000 ____D C:\Windows\System32\Tasks\Games 2015-07-30 14:54 - 2013-08-22 08:36 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-07-30 14:54 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-07-30 13:24 - 2015-02-26 13:35 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\join.me 2015-07-30 09:38 - 2015-02-27 10:27 - 00000000 ____D C:\Users\mario\AppData\Roaming\Skype 2015-07-30 04:19 - 2015-02-26 15:22 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\SingularityViewer64 2015-07-29 21:59 - 2014-11-21 01:44 - 00863592 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-29 19:01 - 2015-06-25 14:24 - 00002201 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk 2015-07-29 18:55 - 2015-06-25 15:00 - 00001423 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2015-07-29 18:54 - 2015-02-26 00:31 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-07-29 18:18 - 2015-05-31 23:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-07-29 18:18 - 2015-05-31 23:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-07-29 18:17 - 2013-08-22 08:20 - 00000000 ____D C:\Windows\CbsTemp 2015-07-29 16:51 - 2015-06-03 03:03 - 00000000 ____D C:\Program Files (x86)\Mortal Kombat X 2015-07-29 04:05 - 2015-03-10 22:36 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\FirestormOS_x64 2015-07-28 11:31 - 2013-08-22 08:36 - 00000000 ___HD C:\Windows\ELAMBKUP 2015-07-28 11:04 - 2015-06-29 10:28 - 00032768 ___SH C:\Users\mario\Downloads\Thumbs.db 2015-07-28 04:49 - 2015-02-26 00:18 - 00000000 ____D C:\Windows\Panther 2015-07-28 03:55 - 2015-03-02 10:56 - 94093312 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak 2015-07-28 03:55 - 2015-03-02 10:56 - 00901120 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak 2015-07-28 03:55 - 2015-03-02 10:56 - 00151552 _____ C:\Windows\system32\config\SAM.iodefrag.bak 2015-07-28 03:55 - 2015-03-02 10:56 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak 2015-07-28 03:54 - 2015-06-25 14:24 - 00000268 _____ C:\Windows\Tasks\ASC8_SkipUac_mewtw_000.job 2015-07-27 16:53 - 2015-02-26 00:24 - 00000000 ____D C:\Users\mario 2015-07-27 05:01 - 2015-02-28 08:47 - 02305024 ___SH C:\Users\alex\Desktop\Thumbs.db 2015-07-27 05:01 - 2015-02-26 01:29 - 00000000 ____D C:\ProgramData\ProductData 2015-07-26 23:53 - 2015-02-26 00:50 - 00000000 ____D C:\Users\mewtw_000 2015-07-26 23:09 - 2015-02-26 01:14 - 00003574 _____ C:\Windows\SysWOW64\${LOGFILE} 2015-07-26 22:59 - 2015-06-30 21:28 - 00001881 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2015-07-26 22:59 - 2015-06-27 21:37 - 00002762 _____ C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk 2015-07-26 22:59 - 2015-06-25 15:46 - 00002245 _____ C:\Users\mewtw_000\Desktop\Ragnos1997 Client.lnk 2015-07-26 22:59 - 2015-06-25 14:24 - 00001276 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk 2015-07-26 22:59 - 2015-06-16 23:10 - 00000930 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2015-07-26 22:59 - 2015-06-14 23:17 - 00001223 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2015-07-26 22:59 - 2015-06-08 18:08 - 00001723 _____ C:\Users\mewtw_000\Desktop\PowerSaves3DS.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-06-05 17:01 - 00001151 _____ C:\Users\Public\Desktop\CloneCD.lnk 2015-07-26 22:59 - 2015-06-05 16:24 - 00001243 _____ C:\Users\Public\Desktop\CloneDVD2.lnk 2015-07-26 22:59 - 2015-06-03 03:03 - 00001090 _____ C:\Users\Public\Desktop\Mortal Kombat X.lnk 2015-07-26 22:59 - 2015-06-02 22:28 - 00001216 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk 2015-07-26 22:59 - 2015-05-20 20:57 - 00001282 _____ C:\Users\Public\Desktop\Amazon Music Importer.lnk 2015-07-26 22:59 - 2015-05-20 20:28 - 00001276 _____ C:\Users\mewtw_000\Desktop\Amazon Music.lnk 2015-07-26 22:59 - 2015-05-14 03:23 - 00002093 _____ C:\Users\mewtw_000\Desktop\jasp.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-05-14 03:23 - 00001459 _____ C:\Users\mewtw_000\Desktop\jk2sp.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-05-14 02:46 - 00001323 _____ C:\Users\Public\Desktop\Start Menu 8.lnk 2015-07-26 22:59 - 2015-05-06 00:40 - 00001037 _____ C:\Users\Public\Desktop\Firestorm-Betax64.lnk 2015-07-26 22:59 - 2015-04-30 19:04 - 00001002 _____ C:\Users\mewtw_000\Desktop\WBFS Manager 3.0.lnk 2015-07-26 22:59 - 2015-04-30 04:07 - 00001027 _____ C:\Users\Public\Desktop\WinImage (administrator).lnk 2015-07-26 22:59 - 2015-04-30 04:07 - 00000995 _____ C:\Users\Public\Desktop\WinImage.lnk 2015-07-26 22:59 - 2015-04-11 21:54 - 00001146 _____ C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk 2015-07-26 22:59 - 2015-04-05 03:58 - 00000666 _____ C:\Users\mewtw_000\Desktop\Zelda Classic 1.92 beta 183.lnk 2015-07-26 22:59 - 2015-04-05 03:58 - 00000652 _____ C:\Users\veronica\Desktop\Zelda Classic 1.92 beta 183.lnk 2015-07-26 22:59 - 2015-04-05 03:58 - 00000652 _____ C:\Users\mario\Desktop\Zelda Classic 1.92 beta 183.lnk 2015-07-26 22:59 - 2015-04-05 03:58 - 00000652 _____ C:\Users\alex\Desktop\Zelda Classic 1.92 beta 183.lnk 2015-07-26 22:59 - 2015-03-21 00:58 - 00002285 _____ C:\Users\mewtw_000\Desktop\JDownloader 2.lnk 2015-07-26 22:59 - 2015-03-19 10:39 - 00001041 _____ C:\Users\Public\Desktop\Audacity.lnk 2015-07-26 22:59 - 2015-03-16 20:31 - 00001129 _____ C:\Users\mewtw_000\Desktop\Cheat Engine.lnk 2015-07-26 22:59 - 2015-03-15 03:57 - 00000605 _____ C:\Users\mewtw_000\Desktop\sai.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-03-10 11:00 - 00001988 _____ C:\Users\Public\Desktop\PrintProjects.lnk 2015-07-26 22:59 - 2015-03-02 02:29 - 00001763 _____ C:\Users\Public\Desktop\DAEMON Tools Pro.lnk 2015-07-26 22:59 - 2015-03-02 00:38 - 00001536 _____ C:\Users\mewtw_000\Desktop\Project64.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001146 _____ C:\Users\alex\Desktop\throwback oldies vol.5 d1-2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001146 _____ C:\Users\alex\Desktop\throwback oldies vol.3 d1-3 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001139 _____ C:\Users\alex\Desktop\throwback oldies vol4 d1-2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001139 _____ C:\Users\alex\Desktop\throwback oldies vol2 d1-2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001129 _____ C:\Users\alex\Desktop\Lost Soul Oldies Vol.13r - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001125 _____ C:\Users\alex\Desktop\throwback oldies v1 d1-2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001116 _____ C:\Users\alex\Desktop\Lost Soul Oldies Vol.15 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001116 _____ C:\Users\alex\Desktop\Lost soul Oldies Vol.12 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001116 _____ C:\Users\alex\Desktop\Lost soul Oldies Vol.11 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001116 _____ C:\Users\alex\Desktop\Lost soul oldies Vol.10 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost Soul Oldies Vol.9 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost soul oldies Vol.7 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost soul oldies vol.6 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost soul oldies vol.5 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost Soul Oldies vol.4 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost Soul Oldies Vol.3 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost soul oldies vol.2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001113 _____ C:\Users\alex\Desktop\Lost soul oldies vol.1 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001097 _____ C:\Users\alex\Desktop\God bless the barrio - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001086 _____ C:\Users\alex\Desktop\Gangster soul girls - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001083 _____ C:\Users\alex\Desktop\Sly,Slick & Wicked - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001072 _____ C:\Users\alex\Desktop\Hermanas Padillas - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001069 _____ C:\Users\alex\Desktop\Veterano Story 2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001069 _____ C:\Users\alex\Desktop\Veterano Soul 10 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001069 _____ C:\Users\alex\Desktop\Veterano Layback - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001060 _____ C:\Users\alex\Desktop\Lost Soul vol.8 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001058 _____ C:\Users\alex\Desktop\Veterano Motown - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001058 _____ C:\Users\alex\Desktop\Veterano Love 9 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001058 _____ C:\Users\alex\Desktop\gangster oldies - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001058 _____ C:\Users\alex\Desktop\Back in the Day - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001055 _____ C:\Users\alex\Desktop\Queens of soul - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001055 _____ C:\Users\alex\Desktop\New folder (2) - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001055 _____ C:\Users\alex\Desktop\Linda Ronstadt - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001055 _____ C:\Users\alex\Desktop\Hello Stranger - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001044 _____ C:\Users\alex\Desktop\The Dramatics - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001044 _____ C:\Users\alex\Desktop\Kiss and tell - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001044 _____ C:\Users\alex\Desktop\Cinco De Mayo - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001044 _____ C:\Users\alex\Desktop\Barbara Mason - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001041 _____ C:\Users\alex\Desktop\Latin Soul 3 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001041 _____ C:\Users\alex\Desktop\Latin Soul 2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001030 _____ C:\Users\alex\Desktop\underground - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001030 _____ C:\Users\alex\Desktop\Firme Rolas - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\veteranas - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\Phat Jams - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\New Songs - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\Mex Mix 2 - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\mas music - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001016 _____ C:\Users\alex\Desktop\Jack's CD - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001013 _____ C:\Users\alex\Desktop\the jams - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001013 _____ C:\Users\alex\Desktop\Cruising - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001013 _____ C:\Users\alex\Desktop\Cornelio - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00001000 _____ C:\Users\alex\Desktop\Navidad - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000997 _____ C:\Users\alex\Desktop\Queens - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000997 _____ C:\Users\alex\Desktop\Mix CD - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000984 _____ C:\Users\alex\Desktop\music - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000984 _____ C:\Users\alex\Desktop\Celso - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000981 _____ C:\Users\alex\Desktop\funk - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 08:47 - 00000968 _____ C:\Users\alex\Desktop\LSG - Shortcut.lnk 2015-07-26 22:59 - 2015-02-28 02:48 - 00001134 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameCompanion.lnk 2015-07-26 22:59 - 2015-02-28 02:48 - 00001128 _____ C:\Users\mewtw_000\Desktop\Game Companion.lnk 2015-07-26 22:59 - 2015-02-27 23:50 - 00001472 _____ C:\Users\mewtw_000\Desktop\Oblivion Mod Manager.lnk 2015-07-26 22:59 - 2015-02-27 20:38 - 00000985 _____ C:\Users\mewtw_000\Desktop\Fallout Mod Manager.lnk 2015-07-26 22:59 - 2015-02-27 00:21 - 00001285 _____ C:\Users\mewtw_000\Desktop\Photoshop.exe - Shortcut.lnk 2015-07-26 22:59 - 2015-02-26 22:18 - 00001945 _____ C:\Users\Public\Desktop\AIM.lnk 2015-07-26 22:59 - 2015-02-26 15:19 - 00001090 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk 2015-07-26 22:59 - 2015-02-26 14:56 - 00001203 _____ C:\Users\Public\Desktop\Second Life Viewer.lnk 2015-07-26 22:59 - 2015-02-26 13:36 - 00001210 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\join.me.lnk 2015-07-26 22:59 - 2015-02-26 13:36 - 00001204 _____ C:\Users\mewtw_000\Desktop\join.me.lnk 2015-07-26 22:59 - 2015-02-26 04:53 - 00001021 _____ C:\Users\Public\Desktop\WinRAR.lnk 2015-07-26 22:59 - 2015-02-26 04:06 - 00002761 _____ C:\Users\Public\Desktop\Skype.lnk 2015-07-26 22:59 - 2015-02-26 03:51 - 00001013 _____ C:\Users\Public\Desktop\Winamp.lnk 2015-07-26 22:59 - 2015-02-26 03:05 - 00001181 _____ C:\Users\Public\Desktop\Yahoo! Messenger.lnk 2015-07-26 22:59 - 2015-02-26 02:51 - 00001887 _____ C:\Users\Public\Desktop\ooVoo.lnk 2015-07-26 22:59 - 2015-02-26 02:40 - 00001042 _____ C:\Users\mewtw_000\Desktop\pec.exe - Shortcut (2).lnk 2015-07-26 22:59 - 2015-02-26 01:06 - 00000997 _____ C:\Users\Public\Desktop\Steam.lnk 2015-07-26 22:59 - 2015-02-26 00:50 - 00001502 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-07-26 22:59 - 2015-02-26 00:50 - 00000551 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2015-02-26 00:50 - 00000549 _____ C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-26 22:59 - 2015-02-26 00:39 - 00001187 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-07-26 22:59 - 2015-02-26 00:36 - 00000551 _____ C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2015-02-26 00:36 - 00000549 _____ C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-26 22:59 - 2015-02-26 00:31 - 00000551 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2015-02-26 00:31 - 00000549 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-26 22:59 - 2015-02-26 00:24 - 00000551 _____ C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2015-02-26 00:24 - 00000549 _____ C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-26 22:59 - 2014-11-21 01:52 - 00000551 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2014-11-21 01:52 - 00000551 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-07-26 22:59 - 2014-11-21 01:52 - 00000549 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-26 22:59 - 2014-11-21 01:52 - 00000549 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-07-25 23:40 - 2015-06-22 00:54 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\MMFApplications 2015-07-25 20:20 - 2015-02-26 04:09 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-07-25 00:29 - 2015-03-11 23:14 - 01527296 ___SH C:\Users\mewtw_000\Desktop\Thumbs.db 2015-07-22 10:52 - 2015-03-27 11:05 - 00000000 ____D C:\Users\mario\AppData\Local\Sony 2015-07-22 10:51 - 2015-06-05 11:04 - 00000000 ____D C:\Users\mario\Documents\Movie Studio Platinum 13.0 Projects 2015-07-22 01:59 - 2015-02-26 04:37 - 13752320 ___SH C:\Users\mewtw_000\Documents\Thumbs.db 2015-07-21 20:26 - 2015-03-10 22:36 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Firestorm_x64 2015-07-21 11:46 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\Resources 2015-07-21 05:08 - 2015-02-27 13:00 - 00000000 ____D C:\Users\alex\AppData\Local\Google 2015-07-21 05:03 - 2015-02-27 13:00 - 00000000 ____D C:\Users\alex\AppData\Roaming\Apple Computer 2015-07-21 04:59 - 2013-08-22 07:44 - 04977288 _____ C:\Windows\system32\FNTCACHE.DAT 2015-07-21 02:31 - 2015-06-09 23:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-07-21 01:52 - 2015-02-26 00:50 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\Google 2015-07-18 14:35 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\rescache 2015-07-16 13:07 - 2015-03-02 00:40 - 00000000 ____D C:\Users\mewtw_000\Desktop\Dolphin-x64 2015-07-15 13:38 - 2015-02-26 15:02 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-15 13:36 - 2015-02-27 23:50 - 00003516 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004Core 2015-07-15 04:07 - 2015-02-26 21:45 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-15 02:54 - 2015-02-28 05:00 - 00000000 ____D C:\Windows\system32\appraiser 2015-07-15 02:54 - 2015-02-28 04:19 - 00000000 ____D C:\Windows\system32\MRT 2015-07-15 02:54 - 2014-11-21 08:56 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-07-14 21:34 - 2015-02-26 00:44 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-07-14 10:50 - 2015-02-26 01:29 - 00000260 _____ C:\Windows\Tasks\ASC8_SkipUac_mario.job 2015-07-13 12:51 - 2015-02-26 01:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2 2015-07-10 22:38 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\system32\NDF 2015-07-10 12:49 - 2015-04-02 11:30 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-07-08 11:30 - 2015-02-26 00:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-07 19:49 - 2015-03-21 00:57 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\JDownloader 2.0 2015-07-06 14:03 - 2015-02-26 03:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-07-06 14:03 - 2015-02-26 03:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-07-06 05:03 - 2015-02-27 13:00 - 00000000 ____D C:\Users\alex\AppData\Roaming\Skype 2015-07-04 08:53 - 2015-02-26 04:06 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-07-03 08:43 - 2015-02-28 04:19 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Files in the root of some directories ======= 2015-04-03 02:18 - 2015-04-03 02:18 - 0000132 _____ () C:\Users\mewtw_000\AppData\Roaming\Adobe BMP Format CS6 Prefs 2015-03-18 04:18 - 2015-06-26 22:44 - 0000132 _____ () C:\Users\mewtw_000\AppData\Roaming\Adobe PNG Format CS6 Prefs 2015-03-31 22:17 - 2015-04-28 00:06 - 0000132 _____ () C:\Users\mewtw_000\AppData\Roaming\Adobe Targa Format CS6 Prefs 2015-04-19 05:20 - 2015-04-19 05:20 - 0005872 _____ () C:\Users\mewtw_000\AppData\Roaming\AFbWqr51tde5uBDG35a1Ib3 2015-07-21 01:54 - 2015-07-27 14:52 - 0000024 _____ () C:\Users\mewtw_000\AppData\Roaming\appdataFr25.bin 2015-04-19 05:20 - 2015-04-19 05:20 - 0005872 _____ () C:\Users\mewtw_000\AppData\Roaming\BhsNkuK2CRRkTE4YK7 2015-04-06 17:16 - 2015-04-06 17:16 - 0000107 _____ () C:\Users\mewtw_000\AppData\Roaming\Editroid.config 2015-04-14 09:28 - 2015-04-14 09:28 - 0004387 _____ () C:\Users\mewtw_000\AppData\Roaming\EXRoEAwr3fCGeUPmQC 2015-04-14 09:28 - 2015-04-14 09:28 - 0004387 _____ () C:\Users\mewtw_000\AppData\Roaming\fdeKe5p 2015-04-19 05:20 - 2015-04-19 05:20 - 0005872 _____ () C:\Users\mewtw_000\AppData\Roaming\QNjCoy1nBI46ZHQvVrS0S2M1 2015-04-14 09:28 - 2015-04-14 09:28 - 0004387 _____ () C:\Users\mewtw_000\AppData\Roaming\r7MsgNtm46xoVTew 2015-04-14 09:28 - 2015-04-14 09:28 - 0004387 _____ () C:\Users\mewtw_000\AppData\Roaming\W6Tv1eQMIyJWgWGh5iWLBuCnE 2015-07-26 22:58 - 2015-07-26 22:58 - 0001332 _____ () C:\Users\mewtw_000\AppData\Local\Chrome .lnk 2015-07-26 22:58 - 2015-07-26 22:58 - 0001153 _____ () C:\Users\mewtw_000\AppData\Local\Firefox .lnk 2015-07-26 22:58 - 2015-07-26 22:58 - 0000977 _____ () C:\Users\mewtw_000\AppData\Local\Iexplore .lnk 2015-07-27 02:39 - 2015-07-27 02:39 - 0000000 _____ () C:\Users\mewtw_000\AppData\Local\Temp.dat 2015-06-05 16:24 - 2015-06-05 16:24 - 0000085 ___SH () C:\ProgramData\.zreglib 2015-02-26 01:20 - 2015-02-26 01:20 - 0001665 _____ () C:\ProgramData\tempimage.bmp Some files in TEMP: ==================== C:\Users\mewtw_000\AppData\Local\Temp\Quarantine.exe C:\Users\mewtw_000\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-01 13:33 ==================== End of log ============================