Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-02-2016
Ran by Mike (administrator) on MIKE-PC (21-02-2016 12:18:52)
Running from C:\Users\Mike\Desktop\Security
Loaded Profiles: Mike (Available Profiles: Mike)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\The Weather Channel\Desktop Weather\TWC.Win7.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files\Earth Networks\WeatherBug\WeatherBug.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Curse) C:\Users\Mike\AppData\Local\Apps\2.0\HV1G8YBL.R97\MVC16ORJ.TX8\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8781568 2016-02-04] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-25] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [1047536 2013-11-12] (MSI)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (CANON INC.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3800875428-2236599744-3644965068-1000\...\Run: [TWC.Win7] => C:\Program Files (x86)\The Weather Channel\Desktop Weather\TWC.Win7.exe [49152 2016-02-13] ()
HKU\S-1-5-21-3800875428-2236599744-3644965068-1000\...\Run: [WeatherBug] => C:\Program Files\Earth Networks\WeatherBug\WeatherBug.exe [146736 2014-09-23] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-10-15]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{7364C716-1212-4EAE-B0C9-A31D1E797BF8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
Startup: C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2014-11-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
Tcpip\..\Interfaces\{034704CE-5A88-4793-BF3D-628ED4BDD465}: [DhcpNameServer] 209.18.47.61 209.18.47.62

Internet Explorer:
==================
HKU\S-1-5-21-3800875428-2236599744-3644965068-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yahoo.com/
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-20] (Google Inc.)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\x64\IEExt\ie_plugin.dll [2016-02-20] (AO Kaspersky Lab)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-20] (Google Inc.)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\IEExt\ie_plugin.dll [2016-02-20] (AO Kaspersky Lab)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-20] (Google Inc.)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\x64\IEExt\ie_plugin.dll [2016-02-20] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-20] (Google Inc.)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\IEExt\ie_plugin.dll [2016-02-20] (AO Kaspersky Lab)
Toolbar: HKU\S-1-5-21-3800875428-2236599744-3644965068-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-20] (Google Inc.)
Toolbar: HKU\S-1-5-21-3800875428-2236599744-3644965068-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-09] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-09] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3800875428-2236599744-3644965068-1000: jpl.nasa.gov/NASAEyes -> C:\Users\Mike\AppData\Roaming\JPL-NASA-Caltech\NASA's Eyes\npNASAEyes.dll [2015-07-08] (Jet Propulsion Laboratory)
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\FFExt\light_plugin_firefox [2016-02-20]

Chrome: 
=======
CHR HomePage: Profile 2 -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Profile: C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-10]
CHR Extension: (Google Docs) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-10]
CHR Extension: (Google Drive) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-10]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2016-02-21]
CHR Extension: (YouTube) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-10]
CHR Extension: (Adblock Plus) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03]
CHR Extension: (Google Search) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-10]
CHR Extension: (Google Sheets) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-10]
CHR Extension: (Google Docs Offline) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-10]
CHR Extension: (Gmail) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-10]
CHR Extension: (Space Planet) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ppcocpoeoiajndepaaimnnglicichmbb [2016-02-14]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\avp.exe [194000 2016-02-20] (Kaspersky Lab ZAO)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-27] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161776 2013-09-09] (MSI)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [File not signed]
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [15888 2013-04-01] (Intel(R) Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-26] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31144 2016-01-27] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [25448 2013-01-07] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2015-05-03] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [125488 2015-12-09] (Qualcomm Atheros, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [181640 2016-02-20] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [227000 2015-07-04] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [940928 2016-02-20] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39096 2015-06-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2016-02-20] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [179456 2015-12-09] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33448 2015-07-15] (Synaptics Incorporated)
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-21 12:11 - 2016-02-21 12:11 - 00007159 _____ C:\VEW-Application.txt
2016-02-21 12:09 - 2016-02-21 12:11 - 00007159 _____ C:\VEW.txt
2016-02-21 12:08 - 2016-02-21 12:08 - 00061440 _____ ( ) C:\Users\Mike\Desktop\VEW.exe
2016-02-21 11:36 - 2016-02-21 11:36 - 00000375 _____ C:\Users\Mike\Downloads\delfix.zip
2016-02-20 23:36 - 2016-02-20 23:36 - 00015376 _____ C:\Users\Mike\Desktop\tcp.txt
2016-02-20 23:35 - 2016-02-20 23:35 - 00300832 _____ (Sysinternals - www.sysinternals.com) C:\Users\Mike\Desktop\Tcpview.exe
2016-02-20 20:52 - 2016-02-20 20:52 - 00002371 _____ C:\Users\Mike\Desktop\Safe Money.lnk
2016-02-20 20:52 - 2016-02-20 20:52 - 00002111 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2016-02-20 20:52 - 2016-02-20 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2016-02-20 20:51 - 2016-02-20 20:51 - 00000000 ____D C:\Windows\ELAMBKUP
2016-02-20 20:51 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2016-02-20 20:50 - 2016-02-21 11:00 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-02-20 20:50 - 2016-02-20 20:55 - 00940928 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2016-02-20 20:50 - 2016-02-20 20:55 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2016-02-20 20:50 - 2016-02-20 20:50 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-02-20 20:50 - 2015-07-04 02:18 - 00227000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2016-02-20 20:47 - 2016-02-20 20:47 - 01742664 _____ (Kaspersky Lab) C:\Users\Mike\Desktop\kts16.0.0.614a bcden_9363.exe
2016-02-19 19:09 - 2016-02-20 19:00 - 00000000 ____D C:\ProgramData\ProductData
2016-02-19 19:09 - 2016-02-19 19:09 - 00000000 ____D C:\Users\Mike\AppData\Roaming\ProductData
2016-02-19 18:45 - 2016-02-21 05:31 - 00001939 _____ C:\Users\Mike\Desktop\WeatherBug®.lnk
2016-02-19 18:45 - 2016-02-21 05:31 - 00001919 _____ C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\WeatherBug®.lnk
2016-02-19 18:45 - 2016-02-19 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeatherBug®
2016-02-19 18:45 - 2016-02-19 18:45 - 00000000 ____D C:\Program Files\Earth Networks
2016-02-19 18:44 - 2016-02-19 18:59 - 00000000 __HDC C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}
2016-02-19 18:44 - 2016-02-19 18:44 - 03390776 _____ (Earth Networks, Inc. ) C:\Users\Mike\Downloads\WeatherBugSetup.exe
2016-02-19 17:55 - 2016-02-19 18:21 - 00000000 ____D C:\AdwCleaner
2016-02-19 11:49 - 2016-02-20 18:56 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Temp
2016-02-18 02:04 - 2016-01-29 23:40 - 00450902 _____ C:\Windows\system32\Drivers\etc\hosts.20160218-020426.backup
2016-02-18 02:03 - 2016-02-18 02:03 - 00000000 ____D C:\Users\Mike\Documents\ProcAlyzer Dumps
2016-02-15 18:35 - 2016-02-21 12:18 - 00000000 ____D C:\FRST
2016-02-15 18:23 - 2016-02-15 18:23 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Other Bookmarks).html
2016-02-15 18:22 - 2016-02-15 18:22 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Imported).html
2016-02-15 18:22 - 2016-02-15 18:22 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Bookmarks 2).html
2016-02-15 18:21 - 2016-02-15 18:21 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Games).html
2016-02-15 18:21 - 2016-02-15 18:21 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Blizzard).html
2016-02-15 18:20 - 2016-02-15 18:20 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Links).html
2016-02-15 18:20 - 2016-02-15 18:20 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (All Todays Picks).html
2016-02-15 18:19 - 2016-02-15 18:19 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Imported From IE).html
2016-02-15 18:18 - 2016-02-15 18:18 - 00231718 _____ C:\Users\Mike\Documents\bookmarks_2_15_16 (Bookmarks).html
2016-02-15 12:33 - 2016-02-15 12:33 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-02-15 12:33 - 2016-02-15 12:33 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-02-15 12:33 - 2016-02-15 12:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-02-15 12:32 - 2016-02-15 12:32 - 14243008 _____ (Microsoft Corporation) C:\Users\Mike\Downloads\mseinstall.exe
2016-02-15 12:16 - 2016-02-15 12:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-02-15 10:02 - 2016-02-15 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-02-15 10:02 - 2016-02-15 10:02 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Sun
2016-02-15 10:02 - 2016-02-15 10:02 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Sun
2016-02-15 10:02 - 2016-02-15 10:02 - 00000000 ____D C:\Users\Mike\.oracle_jre_usage
2016-02-15 10:02 - 2016-02-15 10:02 - 00000000 ____D C:\ProgramData\Oracle
2016-02-15 10:02 - 2016-02-15 10:02 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-07 00:44 - 2016-02-07 00:44 - 00000000 ____H C:\asc_rdflag
2016-02-06 20:04 - 2016-02-06 20:04 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-06 20:04 - 2016-02-06 20:04 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-06 20:04 - 2016-02-06 20:04 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-02-06 20:04 - 2016-02-06 20:04 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-02-06 20:04 - 2016-02-06 20:04 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-06 20:04 - 2016-02-06 20:04 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-02-06 20:04 - 2016-02-06 20:04 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-06 20:04 - 2016-02-06 20:04 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-06 20:03 - 2016-02-06 20:03 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-06 20:03 - 2016-02-06 20:03 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-06 20:03 - 2016-02-06 20:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-06 20:03 - 2016-02-06 20:03 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 04686592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-02-04 23:15 - 2016-02-04 23:15 - 04307112 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-02-04 23:15 - 2016-02-04 23:15 - 03282032 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 03271912 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 03195648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 03040488 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 02893568 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-02-04 23:15 - 2016-02-04 23:15 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 02030208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 01976560 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 01743080 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 01356512 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00410040 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00214840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00209544 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00110992 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-02-04 23:15 - 2016-02-04 23:15 - 00041088 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2016-02-04 23:15 - 2016-02-04 23:15 - 00023704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-01-29 23:40 - 2009-06-10 16:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20160129-234016.backup
2016-01-27 08:48 - 2016-01-27 08:48 - 01462720 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys
2016-01-27 08:48 - 2016-01-27 08:48 - 00031144 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-21 11:58 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-21 11:58 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-21 11:48 - 2014-11-01 19:11 - 00000000 ____D C:\Users\Mike\AppData\Local\Deployment
2016-02-21 11:47 - 2014-10-15 04:57 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-21 11:45 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-21 11:43 - 2014-11-12 20:38 - 00000000 ____D C:\Users\Mike\Desktop\Security
2016-02-21 11:42 - 2014-10-15 11:15 - 00000000 ____D C:\Users\Mike\AppData\Local\Battle.net
2016-02-21 11:26 - 2014-10-15 04:57 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-21 11:23 - 2014-10-15 05:13 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-21 09:59 - 2014-10-15 08:43 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{EA08D899-2CF5-4DA5-85F2-D9456F2FE642}
2016-02-21 05:32 - 2014-10-15 11:15 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-02-21 05:31 - 2016-01-09 08:57 - 00000840 _____ C:\Users\Mike\Desktop\Speccy.lnk
2016-02-20 20:55 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys
2016-02-20 20:52 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf
2016-02-20 12:38 - 2015-06-21 21:47 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2016-02-20 10:50 - 2014-10-15 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2016-02-19 18:31 - 2014-10-15 04:57 - 00002212 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-19 18:31 - 2014-10-15 04:57 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-19 18:22 - 2014-10-15 04:48 - 00000000 ____D C:\Users\Mike
2016-02-19 00:01 - 2015-12-13 08:11 - 00000000 ____D C:\Users\Mike\AppData\Roaming\vlc
2016-02-18 23:59 - 2015-12-13 08:09 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-02-18 17:55 - 2015-06-21 08:37 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2016-02-18 02:04 - 2009-07-13 21:34 - 00450954 ____R C:\Windows\system32\Drivers\etc\hosts.20160220-185054.backup
2016-02-16 09:30 - 2015-10-31 15:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-15 13:12 - 2014-10-15 08:57 - 00000566 _____ C:\Users\Mike\Documents\wow pw.txt
2016-02-15 12:33 - 2014-12-22 20:59 - 00001945 _____ C:\Windows\epplauncher.mif
2016-02-15 11:55 - 2016-01-09 08:57 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Speccy
2016-02-15 11:55 - 2015-12-13 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-02-15 11:55 - 2015-12-05 04:19 - 00000000 ____D C:\Windows\en
2016-02-15 11:55 - 2015-12-05 04:18 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-02-15 11:55 - 2015-10-14 19:19 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Sony Online Entertainment
2016-02-15 11:55 - 2015-10-14 18:11 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Daybreak Game Company
2016-02-15 11:55 - 2015-10-11 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2016-02-15 11:55 - 2015-08-19 05:19 - 00000000 ___RD C:\Users\Mike\OneDrive
2016-02-15 11:55 - 2015-07-11 18:03 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NASA's Eyes
2016-02-15 11:55 - 2015-07-03 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-02-15 11:55 - 2015-06-25 13:11 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-02-15 11:55 - 2015-06-21 21:47 - 00000000 ____D C:\Users\Mike\Documents\StarCraft II
2016-02-15 11:55 - 2015-06-21 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2016-02-15 11:55 - 2015-06-21 11:32 - 00000000 ____D C:\Users\Mike\Documents\Heroes of the Storm
2016-02-15 11:55 - 2015-06-21 08:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2016-02-15 11:55 - 2015-04-07 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Golden Cherry Casino
2016-02-15 11:55 - 2015-04-04 12:20 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-15 11:55 - 2015-04-02 20:50 - 00000000 ____D C:\Users\Mike\AppData\Roaming\RIFT
2016-02-15 11:55 - 2015-04-02 20:10 - 00000000 ____D C:\Users\Mike\AppData\Local\Glyph
2016-02-15 11:55 - 2015-04-02 20:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph
2016-02-15 11:55 - 2015-04-02 20:10 - 00000000 ____D C:\ProgramData\Glyph
2016-02-15 11:55 - 2015-02-21 01:11 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Ventrilo
2016-02-15 11:55 - 2015-02-21 01:11 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ventrilo
2016-02-15 11:55 - 2015-01-15 16:44 - 00000000 ___HD C:\ProgramData\CanonIJEGV
2016-02-15 11:55 - 2015-01-15 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2500 series
2016-02-15 11:55 - 2015-01-15 16:15 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\Canon Easy-WebPrint EX
2016-02-15 11:55 - 2015-01-15 16:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2500 series User Registration
2016-02-15 11:55 - 2015-01-15 16:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2500 series Manual
2016-02-15 11:55 - 2014-12-12 18:39 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Enigma Software Group
2016-02-15 11:55 - 2014-11-18 19:17 - 00000000 ____D C:\Users\Mike\AppData\LocalLow\ADSRemoval
2016-02-15 11:55 - 2014-11-12 20:40 - 00000000 ____D C:\Users\Mike\Desktop\Games
2016-02-15 11:55 - 2014-11-01 19:52 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-15 11:55 - 2014-11-01 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-15 11:55 - 2014-11-01 19:11 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2016-02-15 11:55 - 2014-10-24 21:44 - 00000000 ____D C:\Users\Mike\AppData\Roaming\dvdcss
2016-02-15 11:55 - 2014-10-16 00:24 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Azureus
2016-02-15 11:55 - 2014-10-15 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2016-02-15 11:55 - 2014-10-15 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-02-15 11:55 - 2014-10-15 11:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2016-02-15 11:55 - 2014-10-15 11:15 - 00000000 ____D C:\Users\Mike\AppData\Roaming\Battle.net
2016-02-15 11:55 - 2014-10-15 11:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-02-15 11:55 - 2014-10-15 08:52 - 00000000 ____D C:\Users\Mike\Documents\MediaSDK
2016-02-15 11:55 - 2014-10-15 08:52 - 00000000 ____D C:\Users\Mike\Documents\IIPS
2016-02-15 11:55 - 2014-10-15 08:52 - 00000000 ____D C:\Users\Mike\Documents\ibxHDMI
2016-02-15 11:55 - 2014-10-15 08:52 - 00000000 ____D C:\Users\Mike\Documents\HDMI
2016-02-15 11:55 - 2014-10-15 08:52 - 00000000 ____D C:\Users\Mike\Documents\Graphics
2016-02-15 11:55 - 2014-10-15 08:17 - 00000000 ____D C:\ProgramData\{E1ED556E-3EA0-4F44-8BE7-CC5FB0F4B424}
2016-02-15 11:55 - 2014-10-15 08:17 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2016-02-15 11:55 - 2014-10-15 05:13 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-02-15 11:55 - 2014-10-15 05:13 - 00000000 ____D C:\Windows\system32\Macromed
2016-02-15 11:55 - 2014-10-15 05:01 - 00000000 ____D C:\uninstall
2016-02-15 11:55 - 2014-10-15 05:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Intel Extreme Tuning Utility
2016-02-15 11:55 - 2014-10-15 05:00 - 00000000 ___HD C:\SuperChargerProfile
2016-02-15 11:55 - 2014-10-15 04:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-02-15 11:55 - 2014-10-15 04:55 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-02-15 11:55 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-02-15 11:55 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\Offline Web Pages
2016-02-15 11:55 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-02-15 11:55 - 2009-07-14 00:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-02-15 11:55 - 2009-07-14 00:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 __RSD C:\Windows\Media
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\TAPI
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\Msdtc
2016-02-15 11:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\AppCompat
2016-02-15 11:54 - 2016-01-09 08:57 - 00000000 ____D C:\Program Files\Speccy
2016-02-15 11:54 - 2015-12-05 04:17 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-02-15 11:54 - 2015-08-19 05:19 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-02-15 11:54 - 2015-07-03 13:40 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-02-15 11:54 - 2015-07-03 13:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-02-15 11:54 - 2015-04-07 17:58 - 00000000 ____D C:\Program Files (x86)\GoldenCherryCasino
2016-02-15 11:54 - 2015-04-02 20:10 - 00000000 ____D C:\Program Files (x86)\Glyph
2016-02-15 11:54 - 2015-02-21 01:11 - 00000000 ____D C:\Program Files\Ventrilo
2016-02-15 11:54 - 2014-12-03 18:09 - 00000000 ____D C:\Program Files (x86)\PopCap Games
2016-02-15 11:54 - 2014-11-01 19:51 - 00000000 ____D C:\Program Files\WinRAR
2016-02-15 11:54 - 2014-10-16 00:24 - 00000000 ____D C:\Program Files\Vuze
2016-02-15 11:54 - 2014-10-15 13:50 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-02-15 11:54 - 2014-10-15 12:47 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-02-15 11:54 - 2014-10-15 08:26 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-02-15 11:54 - 2014-10-15 08:26 - 00000000 ____D C:\Program Files\AMD
2016-02-15 11:52 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration
2016-02-15 07:38 - 2014-10-31 11:25 - 10244344 _____ C:\Users\Mike\AppData\Local\census.cache
2016-02-15 07:12 - 2014-10-31 11:25 - 00139948 _____ C:\Users\Mike\AppData\Local\ars.cache
2016-02-13 19:36 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-02-09 22:23 - 2014-10-15 05:13 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-09 22:23 - 2014-10-15 05:13 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-09 22:23 - 2014-10-15 05:13 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-07 14:51 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
2016-02-07 00:44 - 2015-06-10 15:19 - 44212224 _____ C:\Windows\system32\config\components.iodefrag.bak
2016-02-07 00:44 - 2014-10-16 16:22 - 84086784 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2016-02-07 00:44 - 2014-10-16 16:22 - 05029888 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2016-02-07 00:44 - 2014-10-16 16:22 - 00061440 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2016-02-07 00:44 - 2014-10-16 16:22 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2016-02-04 23:00 - 2009-07-14 00:08 - 00032536 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-02 00:21 - 2014-10-15 04:57 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-02 00:21 - 2014-10-15 04:57 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Files in the root of some directories =======

2014-10-31 11:25 - 2016-02-15 07:12 - 0139948 _____ () C:\Users\Mike\AppData\Local\ars.cache
2014-10-31 11:25 - 2016-02-15 07:38 - 10244344 _____ () C:\Users\Mike\AppData\Local\census.cache
2014-10-15 05:01 - 2014-10-15 05:01 - 0000000 _____ () C:\Users\Mike\AppData\Local\Driver_LOM_8161Present.flag
2014-10-31 11:06 - 2014-10-31 11:06 - 0000036 _____ () C:\Users\Mike\AppData\Local\housecall.guid.cache
2014-10-31 11:11 - 2014-10-31 11:11 - 0000010 _____ () C:\Users\Mike\AppData\Local\sponge.last.runtime.cache

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-15 14:14

==================== End of FRST.txt ============================