Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Joe (administrator) on JOE-PC (29-03-2016 15:14:38)
Running from C:\Users\Joe\Downloads
Loaded Profiles: Joe (Available Profiles: Joe)
Platform: Windows 7 Home Premium (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\British Telecom\British Telecom 802.11 Network Adapter\Driver\CppWindowsService.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Kaspersky Lab ZAO) C:\Users\Joe\AppData\Local\Temp\{75E9C1EB-0513-4E04-B27B-7066F302CA08}\{E3C297FE-F652-44D3-BE1A-7753A31C980E}.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Users\Joe\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Spotify Ltd) C:\Users\Joe\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Hyperdesktop) C:\Program Files (x86)\Hyperdesktop\hyperdesktop.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Unified Intents AB) C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\PresentationHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_19_0_0_245_ActiveX.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [2009952 2013-06-01] (cFos Software GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [6311104 2014-01-19] (FNet Co., Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [377368 2013-12-16] (Power Software Ltd)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-02-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [56592 2016-03-02] (Raptr, Inc)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-03-10] (Plays.tv, LLC)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-28] (AVAST Software)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [ASRock A-Tuning] => [X]
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23260000 2016-02-24] (Google)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [MusicManager] => C:\Users\Joe\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7631872 2014-05-15] (Google Inc.)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7952224 2013-11-27] (Binary Fortress Software)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [Spotify Web Helper] => C:\Users\Joe\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-18] (Spotify Ltd)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [Hyperdesktop] => C:\Program Files (x86)\Hyperdesktop\hyperdesktop.exe [188276 2015-03-03] (Hyperdesktop)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [Unified Remote V3] => C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe [4327120 2016-01-04] (Unified Intents AB)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\...\MountPoints2: {71ba10e1-9b91-11e4-9d36-bc5ff4e7395e} - F:\LaunchU3.exe -a
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-28] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
Startup: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2014-07-18]
ShortcutTarget: Curse.lnk -> C:\Users\Joe\AppData\Roaming\Curse Client\Bin\Curse.exe (No File)
Startup: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2014-01-21]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{AD167331-9524-49E6-B169-87E240987106}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-3655023002-2648474569-3043735959-1000 -> DefaultScope {F5EC73AA-EF12-47D7-8D0D-594E00EACD94} URL = hxxps://uk.search.yahoo.com/search?fr=sp_tr_ie&ei=utf-8&ilc=12&type=711278&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3655023002-2648474569-3043735959-1000 -> {F5EC73AA-EF12-47D7-8D0D-594E00EACD94} URL = hxxps://uk.search.yahoo.com/search?fr=sp_tr_ie&ei=utf-8&ilc=12&type=711278&p={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-28] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-18] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-28] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-18] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-09-07] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-09-07] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-09-07] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-09-07] (Microsoft Corporation)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2013-10-01] (Citrix Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-02-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-02-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-3655023002-2648474569-3043735959-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Joe\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-3655023002-2648474569-3043735959-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Joe\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-29]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxp://google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.facebook.com/","hxxps://twitter.com/","hxxps://mail.google.com/mail/u/0/#inbox","hxxps://elp.northumbria.ac.uk/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_2_1"
CHR Profile: C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Pushbullet) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2016-01-02]
CHR Extension: (Google Docs Offline) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (AdBlock) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-04]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-12-31]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-07-14]
CHR Extension: (Star Gazer) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\mblmlcbknbnfebdfjnolmcapmdofhmme [2015-08-18]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-02]
CHR Profile: C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Docs) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-02]
CHR Extension: (Google Drive) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-02]
CHR Extension: (YouTube) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-02]
CHR Extension: (Google Search) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-02]
CHR Extension: (Google Science Fair 2012) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fjibekncdookhijmkplhapjcfnglelcn [2016-01-02]
CHR Extension: (Google Docs Offline) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-19]
CHR Extension: (Avast Online Security) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-28]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2016-03-17]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-01-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-02]
CHR HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Joe\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-02-11]
CHR HKU\S-1-5-21-3655023002-2648474569-3043735959-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-28]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-02-23] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 ASRockIOMon; C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe [454656 2013-05-29] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-28] (AVAST Software)
R2 BT_WPS_Service; C:\Program Files\British Telecom\British Telecom 802.11 Network Adapter\Driver\CppWindowsService.exe [87552 2014-04-05] () [File not signed]
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [652640 2013-06-01] (cFos Software GmbH)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1375600 2013-11-27] (Binary Fortress Software)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [File not signed]
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-03-10] (Plays.tv, LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-25] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-02-19] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [40200 2013-05-10] (ASRock Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-28] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-28] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2015-04-08] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2014-01-19] (FNet Co., Ltd.)
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
S3 ZSMC301b; C:\Windows\System32\Drivers\usbVM31b.sys [432512 2006-06-06] (VM)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-29 15:15 - 2016-03-28 16:32 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\asw33EB.tmp
2016-03-29 15:15 - 2016-03-28 16:32 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3FA2.tmp
2016-03-29 15:15 - 2016-03-28 16:31 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\asw486A.tmp
2016-03-29 15:15 - 2016-03-28 16:31 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\asw4A5E.tmp
2016-03-29 15:15 - 2016-03-28 16:30 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-29 15:15 - 2016-03-28 16:30 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\asw4DAA.tmp
2016-03-29 15:15 - 2016-03-28 16:30 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw38BD.tmp
2016-03-29 15:15 - 2016-03-28 16:30 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw4454.tmp
2016-03-29 15:15 - 2016-03-28 16:30 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3B3D.tmp
2016-03-29 15:10 - 2016-03-29 15:10 - 00003934 _____ C:\TDSSKiller.3.1.0.9_29.03.2016_15.10.04_log.txt
2016-03-29 15:08 - 2016-03-29 15:08 - 00000000 ____D C:\TDSSKiller_Quarantine
2016-03-29 15:02 - 2016-03-29 15:08 - 00442158 _____ C:\TDSSKiller.3.1.0.9_29.03.2016_15.02.46_log.txt
2016-03-29 15:00 - 2016-03-29 15:01 - 00002248 _____ C:\TDSSKiller.3.1.0.9_29.03.2016_15.00.52_log.txt
2016-03-29 00:31 - 2016-03-29 00:31 - 00005239 _____ C:\Users\Joe\Downloads\AdwCleaner[C1].txt
2016-03-29 00:22 - 2016-03-29 00:24 - 00000000 ____D C:\AdwCleaner
2016-03-29 00:21 - 2016-03-29 00:21 - 03102208 _____ C:\Users\Joe\Downloads\AdwCleaner.exe
2016-03-28 23:36 - 2016-03-29 00:08 - 00006549 _____ C:\Users\Joe\Downloads\Fixlog.txt
2016-03-28 23:20 - 2016-03-28 23:29 - 00459076 _____ C:\TDSSKiller.3.1.0.9_28.03.2016_23.20.10_log.txt
2016-03-28 23:15 - 2016-03-28 23:16 - 00002248 _____ C:\TDSSKiller.3.1.0.9_28.03.2016_23.15.45_log.txt
2016-03-28 23:15 - 2016-03-28 23:15 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Joe\Downloads\tdsskiller.exe
2016-03-28 19:51 - 2016-03-28 19:58 - 00077921 _____ C:\Users\Joe\Downloads\Addition.txt
2016-03-28 19:50 - 2016-03-29 15:14 - 00030356 _____ C:\Users\Joe\Downloads\FRST.txt
2016-03-28 19:50 - 2016-03-29 15:14 - 00000000 ____D C:\FRST
2016-03-28 19:49 - 2016-03-28 19:49 - 02374144 _____ (Farbar) C:\Users\Joe\Downloads\FRST64.exe
2016-03-28 17:21 - 2016-03-28 17:21 - 00000000 ____D C:\Windows\pss
2016-03-28 16:53 - 2016-03-28 16:53 - 00001242 _____ C:\Windows\SysWOW64\setup.exe
2016-03-28 16:33 - 2016-03-28 16:33 - 00000000 ____D C:\Users\Joe\AppData\Roaming\AVAST Software
2016-03-28 16:32 - 2016-03-28 16:32 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-28 16:32 - 2016-03-28 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-28 16:31 - 2016-03-29 15:15 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-28 16:31 - 2016-03-28 16:32 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-03-28 16:31 - 2016-03-28 16:32 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-03-28 16:31 - 2016-03-28 16:31 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-03-28 16:31 - 2016-03-28 16:31 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-03-28 16:31 - 2016-03-28 16:31 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-03-28 16:31 - 2016-03-28 16:30 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-28 16:31 - 2016-03-28 16:30 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-28 16:31 - 2016-03-28 16:30 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-28 16:31 - 2016-03-28 16:30 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-28 16:30 - 2016-03-28 16:30 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-28 16:28 - 2016-03-28 16:28 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-28 16:27 - 2016-03-28 16:27 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-28 16:25 - 2016-03-28 16:27 - 05066104 _____ (AVAST Software) C:\Users\Joe\Downloads\avast_free_antivirus_setup_online_cnet2.exe
2016-03-28 16:14 - 2016-03-28 16:14 - 04301994 _____ (AVAST Software) C:\Users\Joe\Downloads\Unconfirmed 812144.crdownload
2016-03-28 16:06 - 2016-03-28 16:06 - 00000000 ____D C:\Users\Joe\AppData\Local\Avg2015
2016-03-28 16:05 - 2016-03-28 16:05 - 05051824 _____ (AVG Technologies) C:\Users\Joe\Downloads\avg_free_stb_all_2015_ltst_176.exe
2016-03-14 23:01 - 2016-03-14 23:01 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-14 23:01 - 2016-03-14 23:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-03-14 22:58 - 2016-03-14 22:58 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Joe\Downloads\SkypeSetup (3).exe
2016-03-13 15:09 - 2016-03-13 15:09 - 04391709 _____ C:\Users\Joe\Downloads\VID_20160214_144018.mp4
2016-03-13 15:09 - 2016-03-13 15:09 - 03348981 _____ C:\Users\Joe\Downloads\VID_20160214_144130.mp4
2016-03-10 01:49 - 2016-03-10 01:49 - 00113664 _____ C:\Users\Joe\Downloads\lecture task(1).ppt
2016-03-09 14:26 - 2016-03-29 15:10 - 00000000 ____D C:\Users\Joe\AppData\Roaming\PlaysTV
2016-03-09 14:25 - 2016-03-09 14:26 - 00000000 ____D C:\Program Files (x86)\Raptr Inc
2016-03-04 01:23 - 2016-03-04 01:23 - 00002037 _____ C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2016-03-04 01:23 - 2016-03-04 01:23 - 00002030 _____ C:\Users\Public\Desktop\Paladins.lnk
2016-03-04 01:22 - 2016-03-04 01:22 - 51542728 _____ (Hi-Rez Studios) C:\Users\Joe\Downloads\InstallPaladins.exe
2016-03-02 02:52 - 2016-03-02 02:53 - 11247201 _____ C:\Users\Joe\Downloads\VID_20160301_212744.mp4

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-29 15:15 - 2009-07-14 06:13 - 00782250 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-29 15:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-29 15:12 - 2014-01-19 13:29 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Skype
2016-03-29 15:12 - 2014-01-19 13:29 - 00000000 ____D C:\Users\Joe\AppData\Local\CrashDumps
2016-03-29 15:10 - 2015-12-01 18:52 - 00000000 ____D C:\ProgramData\Unified Remote
2016-03-29 15:10 - 2014-02-11 03:38 - 00000000 ___RD C:\Users\Joe\Google Drive
2016-03-29 15:09 - 2014-09-25 20:28 - 00000258 __RSH C:\ProgramData\ntuser.pol
2016-03-29 15:09 - 2014-01-19 11:38 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-29 15:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-29 15:08 - 2009-07-14 05:45 - 00019488 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-29 15:08 - 2009-07-14 05:45 - 00019488 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-29 14:53 - 2014-01-19 11:38 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-29 14:36 - 2015-12-21 23:40 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-29 14:31 - 2014-02-14 01:57 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3655023002-2648474569-3043735959-1000UA.job
2016-03-29 00:24 - 2014-01-19 11:35 - 00000000 ____D C:\Users\Joe
2016-03-28 23:16 - 2014-10-17 14:32 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Spotify
2016-03-28 23:14 - 2014-10-17 14:32 - 00000000 ____D C:\Users\Joe\AppData\Local\Spotify
2016-03-28 20:17 - 2016-02-01 14:20 - 00000351 _____ C:\Windows\wininit.ini
2016-03-28 19:58 - 2014-01-21 22:12 - 00000000 ____D C:\Users\Joe\Documents\. UNIVERSITY
2016-03-28 17:11 - 2009-07-14 06:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-28 16:54 - 2014-02-01 02:41 - 00000000 ____D C:\Program Files (x86)\OpenAL
2016-03-28 16:54 - 2014-01-19 11:51 - 00000000 ____D C:\Program Files\Google
2016-03-28 16:54 - 2014-01-19 11:38 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-28 16:50 - 2014-01-19 11:38 - 00000000 ____D C:\Users\Joe\AppData\Local\Google
2016-03-28 16:31 - 2016-01-02 12:38 - 00000000 ____D C:\Program Files (x86)\AVG
2016-03-28 16:31 - 2015-12-26 15:23 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-28 16:30 - 2016-01-02 12:38 - 00000000 ____D C:\ProgramData\Avg
2016-03-28 16:30 - 2016-01-02 12:36 - 00000000 ____D C:\Users\Joe\AppData\Local\AvgSetupLog
2016-03-28 16:15 - 2016-01-02 12:41 - 00000000 ____D C:\ProgramData\MFAData
2016-03-28 16:15 - 2016-01-02 12:36 - 00000000 ____D C:\Users\Joe\AppData\Local\Avg
2016-03-28 15:48 - 2015-09-20 13:08 - 00000000 ____D C:\Users\Joe\AppData\Local\Windows Live
2016-03-28 15:05 - 2016-02-07 20:05 - 00000000 ___SD C:\Users\Joe\AppData\LocalLow\Temp
2016-03-24 12:31 - 2014-02-14 01:57 - 00000848 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3655023002-2648474569-3043735959-1000Core.job
2016-03-23 23:43 - 2015-12-22 02:13 - 00000000 ___HD C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
2016-03-19 03:13 - 2014-02-26 16:04 - 00000000 ____D C:\Users\Joe\AppData\Roaming\DisplayFusion
2016-03-16 02:12 - 2014-02-26 16:34 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Raptr
2016-03-15 03:18 - 2015-08-01 17:40 - 00000003 _____ C:\Windows\SysWOW64\HRUPPROG.TXT
2016-03-15 03:18 - 2014-06-05 11:23 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2016-03-14 23:54 - 2015-07-14 10:07 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-14 23:01 - 2014-07-29 22:56 - 00000000 ____D C:\Users\Joe\AppData\Local\Skype
2016-03-14 23:01 - 2014-01-19 13:29 - 00000000 ____D C:\ProgramData\Skype
2016-03-13 04:31 - 2014-01-19 12:47 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-10 01:57 - 2014-01-23 11:20 - 00000000 ____D C:\Users\Joe\AppData\Local\Microsoft Help
2016-03-04 02:07 - 2014-01-19 13:13 - 00000000 ____D C:\Users\Joe\Documents\my games
2016-03-04 01:54 - 2014-02-11 03:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-03-04 01:23 - 2014-06-05 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios

==================== Files in the root of some directories =======

2014-03-02 17:41 - 2014-03-02 17:22 - 0012005 _____ () C:\Users\Joe\AppData\Roaming\alsoft.ini
2014-01-19 15:27 - 2014-03-20 01:28 - 0000167 _____ () C:\Users\Joe\AppData\Roaming\WB.CFG
2014-04-14 11:17 - 2014-04-14 11:57 - 0217841 _____ () C:\Users\Joe\AppData\Local\debuggee.mdmp
2015-01-12 14:11 - 2015-01-12 14:11 - 0000218 _____ () C:\Users\Joe\AppData\Local\recently-used.xbel
2014-05-27 16:11 - 2014-05-27 16:11 - 0007631 _____ () C:\Users\Joe\AppData\Local\Resmon.ResmonCfg
2014-09-30 02:27 - 2014-09-30 02:27 - 0000460 _____ () C:\ProgramData\HirezPipeError.txt

Some files in TEMP:
====================
C:\Users\Joe\AppData\Local\Temp\libeay32.dll
C:\Users\Joe\AppData\Local\Temp\msvcr120.dll
C:\Users\Joe\AppData\Local\Temp\sqlite3.dll
C:\Users\Joe\AppData\Local\Temp\update.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <===== ATTENTION


LastRegBack: 2016-03-23 20:56

==================== End of FRST.txt ============================