Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-09-2016
Ran by king (administrator) on KINGQUIAMBAO (20-09-2016 18:55:20)
Running from C:\Users\king\Favorites\Desktop
Loaded Profiles: king (Available Profiles: king)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dropbox, Inc.) C:\Users\king\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\king\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSGPlusBTServer64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [186368 2009-07-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [863960 2015-03-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-07-25] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [Dropbox Update] => C:\Users\king\AppData\Local\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-08] (Dropbox, Inc.)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [uTorrent] => C:\Users\king\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-07] (BitTorrent Inc.)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [PCLink] => C:\Program Files (x86)\ASUS\PC Link\PCLink.exe [640272 2015-10-29] (ASUSTek Computer Inc.)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [Uhvxmedia] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\king\AppData\Local\UZTmedia\jdkreswm.dll
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-27] (Piriform Ltd)
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\MountPoints2: {5837479b-b4eb-11e5-97ae-78843cfa6d00} - "E:\Setup.exe" 
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\king\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-20] (Dropbox, Inc.)
Startup: C:\Users\king\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-09-20]
ShortcutTarget: Dropbox.lnk -> C:\Users\king\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{3bcd186c-de8f-4ffd-8539-af3a1a74bd79}: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{c05002e6-f675-4baa-a53b-4b7bc5240bbe}: [DhcpNameServer] 192.168.254.254
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2013-07-10] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-26] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2013-07-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-26] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-16] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-04] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2012-07-26] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2013-07-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-04] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\king\AppData\Roaming\Mozilla\Firefox\Profiles\idoi84rd.default
FF SearchEngineOrder.3: Bing 
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll [2012-09-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-09-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll [2013-02-18] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [No File]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-07] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-10-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-04] (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [2012-02-23] (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2013-07-10] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @Roozz.com/RoozzPlugin -> C:\Program Files (x86)\Roozz\nproozz.dll [No File]
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2015-01-16] ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-1625786293-3034445564-3463336212-1005: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\king\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF user.js: detected! => C:\Users\king\AppData\Roaming\Mozilla\Firefox\Profiles\idoi84rd.default\user.js [2016-08-20]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013-07-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-03-25] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-03-25] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-03-25] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-03-25] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-03-25] (Apple Inc.)
FF SearchPlugin: C:\Users\king\AppData\Roaming\Mozilla\Firefox\Profiles\idoi84rd.default\searchplugins\yahoo! powered.xml [2016-09-18]
FF Extension: (Avira Browser Safety) - C:\Users\king\AppData\Roaming\Mozilla\Firefox\Profiles\idoi84rd.default\Extensions\abs@avira.com [2015-11-07] [not signed]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\king\AppData\Local\Google\Chrome\User Data\Default [2016-09-20]
CHR Extension: (Docs) - C:\Users\king\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-18]
CHR Extension: (Google Drive) - C:\Users\king\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-18]
CHR Extension: (YouTube) - C:\Users\king\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-18]
CHR Extension: (Gmail) - C:\Users\king\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-18]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-19] (ArcSoft Inc.)
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [319648 2016-07-25] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433880 2015-03-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2015-03-24] (BlueStack Systems, Inc.)
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [798424 2015-03-24] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
S2 Ds3Service; C:\Program Files\Scarlet.Crush Production\bin\ScpService.exe [388352 2013-05-05] (Scarlet.Crush Productions)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
S4 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2361344 2011-03-29] (Realsil Microelectronics Inc.) [File not signed]
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
S2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation)
S4 Sun_Philippines Wave Modem Device Helper; C:\Program Files (x86)\Sun Broadband Wireless\BackgroundService\ServiceManager.exe [49752 2011-06-21] () [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-24] (ArcSoft, Inc.)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-21] (Sony Corporation)
S3 Visual Studio Analyzer RPC bridge; C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe [34036 1998-06-06] (Microsoft Corporation) [File not signed]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1021112 2011-03-31] (Sony Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-27] (ArcSoft, Inc.)
R3 AsusVBus; C:\Windows\System32\drivers\AsusVBus.sys [39704 2015-10-07] (Windows (R) Win 7 DDK provider)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [75584 2015-10-07] (ASUS Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [144600 2015-03-24] (BlueStack Systems)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 GGSAFERDriver; C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [27744 2015-10-10] ()
R3 gkernel; C:\Users\king\AppData\Local\Temp\gkernel.sys [50888 2016-09-20] ()
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R1 XQHDrv; C:\Windows\System32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
U3 aspnet_state; no ImagePath
U0 aswVmm; no ImagePath
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-20 18:27 - 2016-09-20 18:55 - 00000000 ___DC C:\FRST
2016-09-20 16:06 - 2016-09-20 16:06 - 00000000 ____D C:\Users\king\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-09-19 22:43 - 2016-09-19 22:43 - 00000000 ____D C:\Users\king\AppData\Local\ESET
2016-09-19 22:40 - 2016-09-19 22:41 - 06761600 _____ (ESET spol. s r.o.) C:\Users\king\Downloads\esetonlinescanner_enu.exe
2016-09-19 22:31 - 2016-09-19 22:31 - 03861056 _____ C:\Users\king\Downloads\AdwCleaner.exe
2016-09-19 21:40 - 2016-09-19 21:41 - 01195904 _____ C:\Users\king\Pictures\Documents\cc_20160919_214027.reg
2016-09-19 21:38 - 2016-09-19 21:38 - 00002862 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-09-19 21:38 - 2016-09-19 21:38 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-09-19 21:38 - 2016-09-19 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-19 21:38 - 2016-09-19 21:38 - 00000000 ____D C:\Program Files\CCleaner
2016-09-19 21:37 - 2016-09-19 21:38 - 08244656 _____ (Piriform Ltd) C:\Users\king\Downloads\ccsetup522.exe
2016-09-19 20:23 - 2016-09-19 20:23 - 144199024 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-09-19 20:00 - 2016-09-19 20:01 - 00604960 _____ (Reimage) C:\Users\king\Downloads\ReimageRepair (1).exe
2016-09-19 19:45 - 2016-09-19 19:48 - 00604928 _____ (Reimage) C:\Users\king\Downloads\ReimageRepair.exe
2016-09-19 19:31 - 2016-09-20 14:03 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C92C4803-032C-4DD8-BD00-FF69F2C7899F}
2016-09-18 22:29 - 2016-09-18 22:29 - 00002348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-18 22:29 - 2016-09-18 22:29 - 00002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-18 22:21 - 2016-09-18 22:21 - 01065376 _____ (Google Inc.) C:\Users\king\Downloads\ChromeSetup.exe
2016-09-18 20:36 - 2016-09-20 18:34 - 00003608 _____ C:\WINDOWS\System32\Tasks\Garena+ Plugin Host Service
2016-09-18 20:27 - 2016-09-18 20:27 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-09-18 20:26 - 2016-09-20 18:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-18 19:02 - 2016-09-18 21:55 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-18 19:02 - 2016-09-18 20:21 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-18 19:02 - 2016-09-18 20:20 - 00000000 ____D C:\Users\king\AppData\Roaming\opera_helper
2016-09-18 19:02 - 2016-09-18 19:31 - 00000000 ____D C:\Users\king\AppData\Roaming\{32A4041F-17F6-6969-7CC0-4EBBA012B385}
2016-09-18 19:01 - 2016-09-19 22:28 - 00000000 ____D C:\Users\king\AppData\Local\UZTmedia
2016-09-18 18:59 - 2016-09-18 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2016-09-18 18:53 - 2016-09-18 18:54 - 05183488 _____ C:\Users\king\Downloads\Unconfirmed 546702.crdownload
2016-09-15 22:34 - 2016-09-15 22:34 - 00175565 _____ C:\Users\king\Downloads\Using-Hyperlinks.odp
2016-09-13 22:44 - 2016-09-15 22:44 - 00097169 _____ C:\Users\king\Downloads\Using_Hyperlinks.odp
2016-09-13 22:28 - 2016-09-13 22:28 - 00035346 _____ C:\Users\king\Downloads\Activity 3.odt
2016-09-11 22:23 - 2016-09-11 22:23 - 00003664 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-king.quiambao@yahoo.com
2016-09-06 21:43 - 2016-09-06 21:43 - 00001082 _____ C:\Users\king\Downloads\Rebuild_Icon_Cache.bat
2016-09-04 17:05 - 2016-09-04 17:19 - 00010629 _____ C:\Users\king\Downloads\RIGHTS-SCHED.xlsx
2016-09-04 14:11 - 2016-09-04 14:12 - 00110360 _____ () C:\Users\king\Downloads\FacebookGamesArcadeSetup.exe
2016-09-01 19:29 - 2016-09-01 19:29 - 00271461 _____ C:\Users\king\Downloads\ICT-PPT.odp
2016-09-01 16:00 - 2016-09-01 16:00 - 15377790 _____ C:\Users\king\Downloads\FIL - Medium (1).mov
2016-09-01 15:53 - 2016-09-01 15:53 - 15377790 _____ C:\Users\king\Downloads\FIL - Medium.mov
2016-08-31 21:13 - 2016-08-31 21:13 - 00175565 _____ C:\Users\king\Downloads\Using Hyperlinks.odp
2016-08-30 07:10 - 2016-08-30 07:10 - 00086812 _____ C:\WINDOWS\system32\s000000.dat
2016-08-30 07:04 - 2016-08-30 07:04 - 00000040 _____ C:\WINDOWS\system32\sstate_prev.sdt
2016-08-30 07:04 - 2016-08-30 07:04 - 00000000 _____ C:\WINDOWS\system32\sstates.sdt
2016-08-28 20:49 - 2016-08-28 20:50 - 01174761 _____ C:\Users\king\Downloads\OJT-samples.rar
2016-08-28 13:33 - 2016-08-28 13:33 - 00000000 __HDC C:\$WINDOWS.~BT
2016-08-26 11:56 - 2016-08-26 11:56 - 01205598 _____ C:\Users\king\Downloads\Digital-Distortion-Template.zip
2016-08-26 11:55 - 2016-08-26 11:55 - 00400891 _____ C:\Users\king\Downloads\Countdown-by-RocketStock.zip
2016-08-26 11:54 - 2016-08-26 12:02 - 542027098 _____ C:\Users\king\Downloads\RS-Ribbon-Typeface.zip
2016-08-26 11:54 - 2016-08-26 11:55 - 57628563 _____ C:\Users\king\Downloads\Shapes-by-RocketStock.zip
2016-08-21 19:46 - 2016-08-21 19:46 - 00865258 _____ C:\Users\king\Downloads\319084069-Comelec-certificate-of-Candidacy.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-20 18:33 - 2012-10-25 10:54 - 00000000 ___RD C:\Users\king\Dropbox
2016-09-20 18:31 - 2016-04-11 05:40 - 00000000 ____D C:\Users\king
2016-09-20 16:06 - 2012-10-25 10:49 - 00000000 ____D C:\Users\king\AppData\Roaming\Dropbox
2016-09-20 15:52 - 2015-10-30 15:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-20 15:52 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-20 07:08 - 2012-05-29 03:58 - 00000946 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1625786293-3034445564-3463336212-1007Core.job
2016-09-20 06:44 - 2015-10-30 14:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-09-20 06:38 - 2016-04-11 06:16 - 00859298 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-20 06:38 - 2015-10-30 15:21 - 00000000 ____D C:\WINDOWS\INF
2016-09-20 06:23 - 2015-03-12 21:33 - 00000000 ____D C:\Users\king\Pictures\Documents\Visual Studio 2012
2016-09-20 05:10 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\rescache
2016-09-20 04:33 - 2016-06-10 10:20 - 00005226 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for KINGQUIAMBAO-king KingQuiambao
2016-09-20 03:44 - 2014-08-29 21:48 - 00000000 ____D C:\WINDOWS\AutoKMS
2016-09-20 01:54 - 2016-05-05 21:26 - 00000000 ____D C:\Users\king\Downloads\HP Downloads
2016-09-20 00:52 - 2012-07-02 09:12 - 00000000 ____D C:\Program Files (x86)\uTorrent
2016-09-19 23:43 - 2014-11-22 13:24 - 00000000 ____D C:\Program Files\Counter-Strike
2016-09-19 22:35 - 2016-08-20 18:18 - 00000000 ___DC C:\AdwCleaner
2016-09-19 21:52 - 2016-08-20 18:46 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-09-19 21:47 - 2016-02-13 21:11 - 04991456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-09-19 21:24 - 2015-06-28 22:49 - 00000862 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1625786293-3034445564-3463336212-1005Core.job
2016-09-19 20:56 - 2016-04-26 20:20 - 00000000 ____D C:\Users\king\AppData\Local\Adobe
2016-09-19 20:55 - 2016-04-11 07:46 - 00000000 ____D C:\Users\king\AppData\Local\Packages
2016-09-19 20:31 - 2016-04-10 11:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-09-18 21:52 - 2012-07-12 12:23 - 00007597 _____ C:\Users\king\AppData\Local\resmon.resmoncfg
2016-09-18 21:42 - 2013-08-18 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-18 21:42 - 2012-05-28 22:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-18 20:32 - 2016-04-11 07:45 - 00000008 __RSH C:\Users\king\ntuser.pol
2016-09-18 20:22 - 2014-11-13 18:07 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-18 20:22 - 2014-11-09 16:19 - 00000000 ____D C:\Users\king\AppData\Roaming\.minecraft
2016-09-18 20:22 - 2011-12-07 12:42 - 00000000 ____D C:\ProgramData\Sony Corporation
2016-09-18 20:21 - 2016-02-13 21:03 - 00000000 ____D C:\Program Files\Windows Journal
2016-09-18 20:21 - 2015-05-18 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NSS
2016-09-18 20:20 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-09-18 20:20 - 2015-10-30 14:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-09-18 20:20 - 2015-10-30 14:28 - 00000000 ____D C:\WINDOWS\servicing
2016-09-18 20:00 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\registration
2016-09-18 19:56 - 2012-04-15 04:43 - 00000000 ____D C:\Users\king\AppData\Local\Google
2016-09-18 19:55 - 2012-08-05 12:27 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-18 18:33 - 2015-10-30 15:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-18 18:07 - 2016-02-13 21:03 - 00000000 ____D C:\WINDOWS\ShellNew
2016-09-18 08:53 - 2016-02-13 21:12 - 00067584 ____S C:\WINDOWS\bootstat(38).dat
2016-09-15 23:12 - 2016-06-10 21:06 - 00000000 ____D C:\Users\king\AppData\Local\Deployment
2016-09-13 22:42 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-09-13 22:42 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-09-12 13:02 - 2012-09-06 11:24 - 00000000 ____D C:\Users\king\AppData\Local\Windows Live
2016-09-11 22:23 - 2016-04-26 20:20 - 00000000 ____D C:\Users\king\AppData\Roaming\Adobe
2016-09-11 22:23 - 2015-05-01 22:04 - 00000000 ____D C:\Users\king\AppData\Roaming\PACE Anti-Piracy
2016-09-11 22:23 - 2015-05-01 22:04 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2016-09-06 22:03 - 2015-03-25 23:10 - 00001765 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-09-06 21:59 - 2015-04-08 06:15 - 00001677 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-09-04 17:04 - 2014-11-30 21:13 - 00000000 ____D C:\Users\king\JURIS
2016-08-30 07:04 - 2012-04-15 05:53 - 00000000 ____D C:\Users\king\AppData\Roaming\Skype
2016-08-28 13:33 - 2016-04-11 21:31 - 00000000 ___DC C:\WINDOWS\Panther
2016-08-23 16:53 - 2012-04-02 15:13 - 00000000 ____D C:\Users\king\AppData\Roaming\vlc
2016-08-21 19:03 - 2015-10-30 15:24 - 00000000 ____D C:\WINDOWS\system32\NDF

==================== Files in the root of some directories =======

2012-04-02 15:06 - 2011-04-25 22:36 - 20533281 _____ () C:\Program Files\vlc-1.1.9-win32.exe
2015-04-08 22:33 - 2013-09-04 21:39 - 0000082 _____ () C:\Program Files (x86)\update-Outlast.bat
2015-04-08 22:33 - 2012-06-15 18:24 - 0003153 _____ () C:\Program Files (x86)\visit-www.nosteam.ro.html
2014-11-02 16:32 - 2016-03-15 18:43 - 0000132 _____ () C:\Users\king\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-06-17 14:54 - 2016-06-17 14:54 - 0001318 _____ () C:\Users\king\AppData\Roaming\article.appendix.title.properties.xml
2015-03-09 21:04 - 2015-03-09 21:27 - 0000112 _____ () C:\Users\king\AppData\Roaming\Camdata.ini
2015-03-09 21:04 - 2015-03-09 21:27 - 0000408 _____ () C:\Users\king\AppData\Roaming\CamLayout.ini
2015-03-09 21:04 - 2015-03-09 21:27 - 0000408 _____ () C:\Users\king\AppData\Roaming\CamShapes.ini
2015-03-09 21:04 - 2015-03-09 21:27 - 0004508 _____ () C:\Users\king\AppData\Roaming\CamStudio.cfg
2016-06-17 14:53 - 2016-06-17 14:53 - 0004049 _____ () C:\Users\king\AppData\Roaming\dsc_firewall_tile.png
2016-06-17 14:53 - 2016-06-17 14:53 - 0002744 _____ () C:\Users\king\AppData\Roaming\Fighter5 Flight Path.mesh
2016-06-30 14:12 - 2016-07-16 13:01 - 0000230 _____ () C:\Users\king\AppData\Roaming\nuvotonISP.lua
2013-07-15 09:48 - 2013-07-15 09:48 - 0045270 _____ () C:\Users\king\AppData\Roaming\room_v3.dat
1990-08-12 15:00 - 1990-08-12 15:00 - 0133221 _____ () C:\Users\king\AppData\Roaming\WearStoplight.8
2012-12-10 14:53 - 2012-12-10 14:53 - 0003584 _____ () C:\Users\king\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-03-13 17:30 - 2016-03-13 17:30 - 0000000 ___SH () C:\Users\king\AppData\Local\LumaEmu
2014-03-12 14:31 - 2014-03-12 14:31 - 0001566 _____ () C:\Users\king\AppData\Local\PDLSetup.20140312.143153.txt
2012-07-12 12:23 - 2016-09-18 21:52 - 0007597 _____ () C:\Users\king\AppData\Local\resmon.resmoncfg
2015-07-18 18:37 - 2015-07-18 18:37 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-04-02 15:40 - 2013-05-14 02:21 - 0000952 ___SH () C:\ProgramData\KGyGaAvL.sys
2011-12-07 12:05 - 2011-12-07 12:05 - 0000226 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Users\king\AppData\Local\Temp\libeay32.dll
C:\Users\king\AppData\Local\Temp\msvcr120.dll
C:\Users\king\AppData\Local\Temp\ReimagePackage.exe
C:\Users\king\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-09-18 21:33

==================== End of FRST.txt ============================