Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017 Ran by Owner (administrator) on OWNER-PC (07-01-2017 16:55:08) Running from C:\Users\Owner\Desktop Loaded Profiles: Owner (Available Profiles: Owner) Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Max Secure Software) C:\Program Files\Max Registry Cleaner\RCVistaService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\HP Webcam Software Suite\Magic-i Visual Effects 2\uCamMonitor.exe (SparkLabs) C:\Program Files\WiTopia\WiTopiaService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (IntelĀ® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Max Secure Software) C:\Program Files\Max Registry Cleaner\MaxRCSystemTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe () C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareTactXMacroController.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe () C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe () C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-04-10] (Intel Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011312 2013-04-08] (Synaptics Incorporated) HKLM\...\Run: [] => [X] HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [14056 2014-10-30] (Alienware) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RCAutoLiveUpdate] => C:\Program Files\Max Registry Cleaner\MaxLURC.exe [1819176 2014-12-24] (Max Secure Software) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes) HKLM\...\Run: [RCSystemTray] => C:\Program Files\Max Registry Cleaner\MaxRCSystemTray.exe [2680872 2014-12-24] (Max Secure Software) HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [243216 2008-12-18] (Logitech, Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-24] (Intel Corporation) HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [4434224 2013-08-21] () Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [127816 2016-04-05] (Seagate Technology LLC) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{742E9E9D-C325-4860-8B9E-37AF8EE072A7}: [DhcpNameServer] 10.118.0.1 Tcpip\..\Interfaces\{A9883C7F-E971-4335-BC1A-A1D52F0A5D58}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.co.uk/ HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com SearchScopes: HKU\S-1-5-21-3090456578-2289362299-1625809071-1000 -> {3F03010E-69A6-4E9E-9B2F-7E94FF5B51BE} URL = hxxps://th.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-09] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation) FireFox: ======== FF ProfilePath: C:\Users\Owner\AppData\Roaming\TomTom\HOME\Profiles\bq1l63w1.default [2016-03-14] FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2016-02-17] [not signed] FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 [2017-01-07] FF NewTab: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> about:newtab FF DefaultSearchEngine: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> Avast Search FF DefaultSearchUrl: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://search.avast.com/AV772/search/web?q={searchTerms} FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> Avast Search FF SelectedSearchEngine: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> Avast Search FF Homepage: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://www.google.co.uk/ FF Keyword.URL: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://search.avast.com/AV772/search/web?q={searchTerms} FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873\Extensions\marcoagpinto@mail.telepac.pt [2017-01-01] FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-15] () FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-15] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-13] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-13] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-09] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-12] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-12] (NVIDIA Corporation) FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2014-11-28] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2016-02-01] () Chrome: ======= CHR HomePage: Default -> hxxp://www.google.co.uk/ CHR StartupUrls: Default -> "hxxps://www.google.co.uk/" CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default [2017-01-07] CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-23] CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-23] CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-23] CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-23] CHR Extension: (Foxit PDF Creator) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\cifnddnffldieaamihfkhkdgnbhfmaci [2016-12-23] CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-23] CHR Extension: (Google Docs Offline) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-23] CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-23] CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-23] CHR Extension: (Chrome Media Router) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-23] CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-01-07] CHR HKLM\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\\plugins\Creator\ChromeAddin\ChromeAddin.crx [2016-06-23] CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\\plugins\Creator\ChromeAddin\ChromeAddin.crx [2016-06-23] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2770312 2016-12-27] (ESET) R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] () R2 FoxitPhantomService; C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe [1647808 2016-06-21] (Foxit Software Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-10] (Intel Corporation) R2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [172784 2016-07-23] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-13] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-10-06] () R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation) R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation) S2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2016-12-13] (NVIDIA Corporation) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [341504 2013-06-08] (Qualcomm Atheros) [File not signed] R2 RCVistaSvc; C:\Program Files\Max Registry Cleaner\RCVistaService.exe [2306088 2014-12-24] (Max Secure Software) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor) R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16216 2016-04-05] (Seagate Technology LLC) R2 Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [143656 2016-04-05] (Seagate Technology LLC) R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] () R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\HP Webcam Software Suite\Magic-i Visual Effects 2\uCamMonitor.exe [145984 2012-01-18] (ArcSoft, Inc.) S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WiTopiaService; C:\Program Files\WiTopia\WiTopiaService.exe [106696 2016-10-07] (SparkLabs) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-10-06] (IntelĀ® Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2008-04-24] (ArcSoft, Inc.) R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [141800 2015-10-13] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1545704 2016-04-27] (Motorola Solutions, Inc.) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [262792 2016-12-27] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [197248 2016-12-27] (ESET) R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [153216 2016-12-27] (ESET) R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [208520 2016-12-27] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [61568 2016-12-27] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84616 2016-12-27] (ESET) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77408 2017-01-07] () R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-10] (Intel Corporation) R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [355080 2016-07-31] (Intel Corporation) R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.) R1 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2017-01-03] (Malwarebytes) R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2017-01-07] (Malwarebytes) R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-07] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [250816 2017-01-07] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-01-07] (Malwarebytes) R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3423496 2016-10-20] (Intel Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2014-05-06] (BlackBerry Limited) R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) R1 RsProxy; C:\Windows\system32\drivers\RsProxy.sys [15976 2015-03-19] () R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] () R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-04-08] (Synaptics Incorporated) R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [87776 2013-04-11] (STMicroelectronics) S3 visctap0901; C:\Windows\System32\DRIVERS\visctap0901.sys [50416 2016-08-11] (The OpenVPN Project) R3 XtuAcpiDriver; C:\Windows\System32\DRIVERS\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation) U0 aswVmm; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-01-07 16:55 - 2017-01-07 16:55 - 00024443 _____ C:\Users\Owner\Desktop\FRST.txt 2017-01-07 16:54 - 2017-01-07 16:54 - 00001040 _____ C:\Users\Owner\Desktop\fixlist.txt 2017-01-07 15:58 - 2017-01-07 15:58 - 00318648 _____ C:\Windows\system32\FNTCACHE.DAT 2017-01-07 15:35 - 2017-01-07 15:38 - 00000000 ____D C:\Users\Owner\Downloads\f6flpy-x64 2017-01-07 15:35 - 2017-01-07 15:35 - 00458060 _____ C:\Users\Owner\Downloads\f6flpy-x64.zip 2017-01-07 13:34 - 2017-01-07 13:34 - 00000000 ____D C:\Users\Owner\AppData\Local\{9FFA165A-51B0-4601-A32A-A1EF086D0644} 2017-01-07 13:33 - 2017-01-07 13:33 - 00069456 _____ C:\Users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT 2017-01-07 12:45 - 2017-01-07 12:45 - 03988944 _____ C:\Users\Owner\Desktop\adwcleaner_6.042.exe 2017-01-07 11:49 - 2017-01-07 11:49 - 00000000 ____D C:\Users\Owner\AppData\Local\{292A434E-BEA4-49A6-8B20-169875EE101C} 2017-01-07 10:33 - 2017-01-07 10:33 - 00001794 _____ C:\Users\Public\Desktop\Logitech Mouse and Keyboard Settings.lnk 2017-01-07 10:33 - 2017-01-07 10:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2017-01-07 10:33 - 2009-02-19 00:37 - 00158736 _____ (Logitech, Inc.) C:\Windows\system32\KemWnd.dll 2017-01-07 10:33 - 2009-02-19 00:37 - 00095760 _____ (Logitech, Inc.) C:\Windows\system32\KemXML.dll 2017-01-07 10:33 - 2009-02-19 00:36 - 00235536 _____ (Logitech, Inc.) C:\Windows\system32\kemutb.dll 2017-01-07 10:33 - 2009-02-19 00:36 - 00233488 _____ (Logitech, Inc.) C:\Windows\system32\KemUtil.dll 2017-01-07 10:33 - 2009-02-19 00:35 - 00190992 _____ (Broadcom Corporation.) C:\Windows\system32\BtCoreIf.dll 2017-01-07 10:32 - 2017-01-07 10:35 - 00000000 ____D C:\ProgramData\Logitech 2017-01-07 10:32 - 2017-01-07 10:32 - 00000000 ____D C:\Program Files\Logitech 2017-01-06 14:47 - 2017-01-06 14:47 - 02720928 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\procexp(1).exe 2017-01-06 14:23 - 2017-01-06 14:23 - 00300832 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\Tcpview.exe 2017-01-06 12:39 - 2017-01-06 12:39 - 02720928 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Downloads\procexp.exe 2017-01-06 11:25 - 2017-01-06 11:31 - 00000000 ____D C:\Program Files (x86)\AVS4YOU 2017-01-06 11:25 - 2017-01-06 11:25 - 00000000 ____D C:\Users\Owner\AppData\Roaming\AVS4YOU 2017-01-06 11:25 - 2017-01-06 11:25 - 00000000 ____D C:\ProgramData\AVS4YOU 2017-01-06 11:25 - 2010-05-11 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll 2017-01-06 07:59 - 2017-01-06 07:59 - 00000757 _____ C:\Users\Public\Desktop\Speccy.lnk 2017-01-06 07:59 - 2017-01-06 07:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy 2017-01-06 07:58 - 2017-01-06 07:59 - 00000000 ____D C:\Program Files\Speccy 2017-01-06 07:24 - 2017-01-06 07:24 - 00000000 ____D C:\Users\Owner\AppData\Local\{FDC74355-CEE9-437E-9A1F-25FB745AF1C9} 2017-01-05 13:39 - 2017-01-05 13:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility 2017-01-05 13:38 - 2017-01-05 13:38 - 00003210 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK 2017-01-04 11:36 - 2017-01-04 11:37 - 54199488 _____ (Malwarebytes ) C:\Users\Owner\Downloads\mb3-setup-consumer-3.0.5.1299.exe 2017-01-04 10:48 - 2017-01-06 13:46 - 00010476 _____ C:\VEW.txt 2017-01-04 10:42 - 2017-01-04 10:43 - 00061440 _____ ( ) C:\Users\Owner\Desktop\VEW.exe 2017-01-04 10:11 - 2017-01-04 10:11 - 01663040 _____ (Malwarebytes) C:\Users\Owner\Desktop\JRT.exe 2017-01-03 12:32 - 2017-01-03 12:32 - 00224968 _____ (ESET) C:\Users\Owner\Downloads\ESETPoweliksCleaner.exe 2017-01-03 11:59 - 2017-01-07 16:55 - 00000000 ____D C:\FRST 2017-01-03 11:54 - 2017-01-03 11:54 - 02418176 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe 2017-01-03 11:31 - 2017-01-07 16:13 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-01-03 11:31 - 2017-01-07 16:13 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-01-03 11:31 - 2017-01-07 16:12 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-01-03 11:31 - 2017-01-03 11:31 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys 2017-01-03 11:26 - 2017-01-07 16:12 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-01-03 11:25 - 2017-01-07 12:32 - 00077408 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-01-03 11:25 - 2017-01-03 11:25 - 00001828 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-01-03 11:25 - 2017-01-03 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-01-03 11:25 - 2017-01-03 11:25 - 00000000 ____D C:\Program Files\Malwarebytes 2017-01-02 15:36 - 2017-01-02 15:43 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2017-01-02 15:01 - 2017-01-02 15:01 - 00000000 ____D C:\NPE 2017-01-02 14:59 - 2017-01-02 15:12 - 00000000 ____D C:\Users\Owner\AppData\Local\NPE 2017-01-02 14:59 - 2017-01-02 14:59 - 00000000 ____D C:\ProgramData\Norton 2017-01-01 09:23 - 2017-01-01 09:23 - 00001152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk 2017-01-01 09:23 - 2017-01-01 09:23 - 00001140 _____ C:\Users\Public\Desktop\Security Task Manager.lnk 2017-01-01 09:23 - 2017-01-01 09:23 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2017-01-01 09:22 - 2017-01-01 09:22 - 02840616 _____ C:\Users\Owner\Downloads\SecurityTaskManager_Setup.exe 2016-12-31 12:06 - 2017-01-07 16:10 - 04887096 ____H C:\Users\Owner\AppData\Local\IconCache.db 2016-12-31 11:21 - 2016-12-31 11:21 - 00003704 _____ C:\Windows\System32\Tasks\Owner 2016-12-31 10:48 - 2017-01-07 16:10 - 00810016 _____ C:\Windows\WindowsUpdate.log 2016-12-31 10:17 - 2016-12-31 10:17 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2016-12-31 10:17 - 2016-12-12 01:23 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-12-31 10:17 - 2016-09-10 01:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll 2016-12-31 10:17 - 2016-09-10 01:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll 2016-12-31 10:17 - 2016-09-10 01:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2016-12-31 10:17 - 2016-09-10 01:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe 2016-12-31 10:16 - 2016-12-12 09:37 - 00041334 _____ C:\Windows\system32\nvinfo.pb 2016-12-30 23:15 - 2017-01-06 23:11 - 00000000 ____D C:\Users\Owner\Desktop\Max Registry Cleaner 2016-12-30 12:21 - 2016-12-30 12:21 - 00003120 _____ C:\Windows\System32\Tasks\{A2C39715-CC36-4DBA-B963-4961EFD84C41} 2016-12-30 09:40 - 2017-01-07 10:33 - 00000000 ____D C:\Program Files\Common Files\Logishrd 2016-12-28 18:22 - 2016-12-28 18:22 - 00000000 ____D C:\Users\Owner\AppData\Roaming\ESET 2016-12-28 18:20 - 2017-01-07 14:13 - 00524288 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TMContainer00000000000000000001.regtrans-ms 2016-12-28 18:20 - 2017-01-07 14:13 - 00065536 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TM.blf 2016-12-28 18:20 - 2016-12-28 18:30 - 00524288 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TMContainer00000000000000000002.regtrans-ms 2016-12-27 17:32 - 2016-12-27 17:32 - 00153216 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys 2016-12-27 17:29 - 2016-12-27 17:29 - 00000000 ____D C:\Users\Owner\AppData\Local\ESET 2016-12-27 17:28 - 2016-12-27 17:28 - 00001988 _____ C:\Users\Public\Desktop\ESET Banking & Payment protection.lnk 2016-12-27 17:28 - 2016-12-27 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2016-12-27 17:28 - 2016-12-27 17:28 - 00000000 ____D C:\ProgramData\ESET 2016-12-27 17:28 - 2016-12-27 17:28 - 00000000 ____D C:\Program Files\ESET 2016-12-27 14:46 - 2016-12-27 14:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf 2016-12-27 07:50 - 2016-12-31 11:20 - 00003492 _____ C:\Windows\System32\Tasks\Owner DBAgent 2 0 2016-12-26 13:31 - 2016-12-28 11:01 - 00001064 _____ C:\Users\Public\Desktop\Max Registry Cleaner.lnk 2016-12-26 13:31 - 2016-12-26 13:31 - 00000000 ____D C:\Windows\MaxSecureBackup 2016-12-26 13:31 - 2016-12-26 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Registry Cleaner 2016-12-24 16:42 - 2016-12-24 21:58 - 00003836 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-24 21:58 - 00003832 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-24 21:58 - 00003832 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-24 21:58 - 00003824 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-24 21:58 - 00003648 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-24 21:58 - 00003588 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-12-24 16:42 - 2016-12-12 01:47 - 00001951 _____ C:\Windows\NvContainerRecovery.bat 2016-12-24 09:10 - 2016-12-24 09:11 - 00000000 ____D C:\Users\Owner\AppData\Local\AvastSupport 2016-12-24 06:18 - 2016-12-24 06:18 - 00000000 ____D C:\Users\Owner\AppData\Roaming\NVIDIA 2016-12-23 11:16 - 2016-12-23 11:16 - 00388608 _____ (Trend Micro Inc.) C:\Users\Owner\Desktop\HijackThis.exe 2016-12-23 05:58 - 2016-12-23 05:58 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-12-23 05:58 - 2016-12-23 05:58 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-12-21 13:57 - 2016-07-20 02:19 - 00715424 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\Autoruns.exe 2016-12-21 13:57 - 2006-06-26 04:05 - 00442368 _____ (Steven R. Gould) C:\Users\Owner\Desktop\Cleanup.exe 2016-12-21 10:35 - 2016-12-21 13:29 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-12-21 10:35 - 2016-12-21 10:35 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk 2016-12-21 10:35 - 2016-12-21 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-12-21 10:18 - 2017-01-07 12:47 - 00000000 ____D C:\AdwCleaner 2016-12-21 09:53 - 2016-12-27 16:57 - 00000000 ____D C:\Users\Owner\AppData\Roaming\TeamViewer 2016-12-21 08:56 - 2016-12-28 11:57 - 00524288 ___SH C:\Windows\system32\config\components{3ff5b424-c720-11e6-b8cc-d823ae52fd8d}.TMContainer00000000000000000001.regtrans-ms 2016-12-21 08:56 - 2016-12-28 11:57 - 00065536 ___SH C:\Windows\system32\config\components{3ff5b424-c720-11e6-b8cc-d823ae52fd8d}.TM.blf 2016-12-21 08:56 - 2016-12-21 08:56 - 00524288 ___SH C:\Windows\system32\config\components{3ff5b424-c720-11e6-b8cc-d823ae52fd8d}.TMContainer00000000000000000002.regtrans-ms 2016-12-20 01:38 - 2017-01-07 16:12 - 4218486784 ___SH C:\pagefile.sys 2016-12-19 19:37 - 2016-12-19 19:37 - 00000000 ____D C:\Program Files (x86)\Windows Installer Clean Up 2016-12-19 19:36 - 2016-12-19 19:36 - 00003114 _____ C:\Windows\System32\Tasks\{62D5BDD0-602B-4C6C-AAB8-469CB87A0460} 2016-12-19 19:36 - 2016-12-19 19:36 - 00000000 ____D C:\Program Files (x86)\MSECACHE 2016-12-19 07:18 - 2016-12-12 09:37 - 40125496 _____ C:\Windows\system32\nvcompiler.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 35222976 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 34703416 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 28138432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 14073400 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-12-19 07:18 - 2016-12-12 09:37 - 10912744 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 10795312 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 10345696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 09151216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 08753832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 03640376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 03206080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437633.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437633.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 01036224 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00975416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00944184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00896056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00521096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00435904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-12-19 07:18 - 2016-12-12 09:37 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-12-19 06:27 - 2016-12-24 21:58 - 00001417 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2016-12-19 06:27 - 2016-12-12 21:36 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat 2016-12-18 07:56 - 2016-12-18 09:01 - 00524288 ___SH C:\Users\Owner\ntuser.dat{1f2ac3cd-c4bc-11e6-bced-ab41cb59da8c}.TMContainer00000000000000000002.regtrans-ms 2016-12-18 07:56 - 2016-12-18 09:01 - 00524288 ___SH C:\Users\Owner\ntuser.dat{1f2ac3cd-c4bc-11e6-bced-ab41cb59da8c}.TMContainer00000000000000000001.regtrans-ms 2016-12-18 07:56 - 2016-12-18 09:01 - 00065536 ___SH C:\Users\Owner\ntuser.dat{1f2ac3cd-c4bc-11e6-bced-ab41cb59da8c}.TM.blf 2016-12-17 17:47 - 2017-01-07 16:12 - 00003320 _____ C:\ProgramData\NvTelemetryContainer.log 2016-12-17 17:47 - 2017-01-07 16:11 - 00003320 _____ C:\ProgramData\NvTelemetryContainer.log_backup1 2016-12-17 17:47 - 2016-12-17 17:47 - 00000000 ____D C:\Users\Owner\AppData\Local\Chromium 2016-12-17 17:46 - 2016-12-13 06:30 - 00156096 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-12-17 17:46 - 2016-12-13 06:30 - 00123840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-12-17 17:46 - 2016-12-13 06:30 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-12-15 07:04 - 2016-12-15 07:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_XtuAcpiDriver_01011.Wdf 2016-12-15 07:03 - 2016-11-22 01:16 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-12-15 07:03 - 2016-11-22 01:16 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-12-15 07:03 - 2016-11-22 01:12 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-12-15 07:03 - 2016-11-22 01:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-12-15 07:03 - 2016-11-20 23:20 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-12-15 07:03 - 2016-11-20 23:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-12-15 07:03 - 2016-11-20 23:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-12-15 07:03 - 2016-11-20 23:20 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2016-12-15 07:03 - 2016-11-20 23:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-12-15 07:03 - 2016-11-20 23:19 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-12-15 07:03 - 2016-11-20 23:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-12-15 07:03 - 2016-11-20 22:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-12-15 07:03 - 2016-11-20 22:57 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-12-15 07:03 - 2016-11-20 22:57 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-12-15 07:03 - 2016-11-20 22:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-12-15 07:03 - 2016-11-20 22:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-12-15 07:03 - 2016-11-20 22:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-12-15 07:03 - 2016-11-20 21:07 - 00467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-12-15 07:03 - 2016-11-17 23:41 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2016-12-15 07:03 - 2016-11-15 06:27 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-12-15 07:03 - 2016-11-15 05:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-12-15 07:03 - 2016-11-13 02:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-12-15 07:03 - 2016-11-13 02:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-12-15 07:03 - 2016-11-13 02:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-12-15 07:03 - 2016-11-13 02:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-12-15 07:03 - 2016-11-13 02:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-12-15 07:03 - 2016-11-13 02:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-12-15 07:03 - 2016-11-13 02:25 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-12-15 07:03 - 2016-11-13 02:21 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-12-15 07:03 - 2016-11-13 02:15 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-12-15 07:03 - 2016-11-13 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-12-15 07:03 - 2016-11-13 02:09 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-12-15 07:03 - 2016-11-13 02:08 - 25759744 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-12-15 07:03 - 2016-11-13 02:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-12-15 07:03 - 2016-11-13 02:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-12-15 07:03 - 2016-11-13 02:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-12-15 07:03 - 2016-11-13 02:07 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-12-15 07:03 - 2016-11-13 01:56 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-12-15 07:03 - 2016-11-13 01:53 - 06049280 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-12-15 07:03 - 2016-11-13 01:52 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-12-15 07:03 - 2016-11-13 01:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-12-15 07:03 - 2016-11-13 01:41 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-12-15 07:03 - 2016-11-13 01:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-12-15 07:03 - 2016-11-13 01:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-12-15 07:03 - 2016-11-13 01:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-12-15 07:03 - 2016-11-13 01:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-12-15 07:03 - 2016-11-13 01:30 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-12-15 07:03 - 2016-11-13 01:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-12-15 07:03 - 2016-11-13 01:29 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-12-15 07:03 - 2016-11-13 01:29 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-12-15 07:03 - 2016-11-13 01:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-12-15 07:03 - 2016-11-13 01:27 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-12-15 07:03 - 2016-11-13 01:20 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-12-15 07:03 - 2016-11-13 01:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-12-15 07:03 - 2016-11-13 01:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-12-15 07:03 - 2016-11-13 01:17 - 20302848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-12-15 07:03 - 2016-11-13 01:15 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-12-15 07:03 - 2016-11-13 01:14 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-12-15 07:03 - 2016-11-13 01:14 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-12-15 07:03 - 2016-11-13 01:14 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-12-15 07:03 - 2016-11-13 01:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-12-15 07:03 - 2016-11-13 01:11 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-12-15 07:03 - 2016-11-13 01:10 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-12-15 07:03 - 2016-11-13 01:08 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-12-15 07:03 - 2016-11-13 01:08 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-12-15 07:03 - 2016-11-13 01:03 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-12-15 07:03 - 2016-11-13 00:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-12-15 07:03 - 2016-11-13 00:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-12-15 07:03 - 2016-11-13 00:52 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-12-15 07:03 - 2016-11-13 00:51 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-12-15 07:03 - 2016-11-13 00:49 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-12-15 07:03 - 2016-11-13 00:47 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-12-15 07:03 - 2016-11-13 00:41 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-12-15 07:03 - 2016-11-13 00:40 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-12-15 07:03 - 2016-11-13 00:38 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-12-15 07:03 - 2016-11-13 00:37 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-12-15 07:03 - 2016-11-13 00:36 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-12-15 07:03 - 2016-11-13 00:36 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-12-15 07:03 - 2016-11-13 00:35 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-12-15 07:03 - 2016-11-13 00:21 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-12-15 07:03 - 2016-11-13 00:20 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-12-15 07:03 - 2016-11-13 00:11 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-12-15 07:03 - 2016-11-13 00:05 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-12-15 07:03 - 2016-11-13 00:02 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-12-15 07:03 - 2016-11-13 00:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-12-15 07:03 - 2016-11-10 23:32 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-12-15 07:03 - 2016-11-10 23:19 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2016-12-15 07:03 - 2016-11-09 23:41 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2016-12-15 07:03 - 2016-11-09 23:33 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-12-15 07:03 - 2016-11-09 23:33 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-12-15 07:03 - 2016-11-09 23:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2016-12-15 07:03 - 2016-11-09 23:33 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2016-12-15 07:03 - 2016-11-09 23:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2016-12-15 07:03 - 2016-11-09 23:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-12-15 07:03 - 2016-11-09 23:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2016-12-15 07:03 - 2016-11-09 23:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2016-12-15 07:03 - 2016-11-09 23:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2016-12-15 07:03 - 2016-11-09 23:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll 2016-12-15 07:03 - 2016-11-09 23:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-12-15 07:03 - 2016-11-09 23:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2016-12-15 07:03 - 2016-11-09 22:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2016-12-15 07:03 - 2016-11-06 23:33 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-12-15 07:03 - 2016-11-06 23:16 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-12-15 07:03 - 2016-11-06 23:01 - 03219456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-12-15 07:03 - 2016-10-27 22:33 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2016-12-15 07:03 - 2016-10-27 22:20 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2016-12-14 20:10 - 2016-12-15 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-12-14 10:10 - 2016-12-14 10:10 - 00010054 _____ C:\Windows\SysWOW64\test.bmp 2016-12-14 06:43 - 2016-12-14 06:48 - 00524288 ___SH C:\Users\Owner\ntuser.dat{beb5abc2-c185-11e6-b5ff-e4d146d3197f}.TMContainer00000000000000000002.regtrans-ms 2016-12-14 06:43 - 2016-12-14 06:48 - 00524288 ___SH C:\Users\Owner\ntuser.dat{beb5abc2-c185-11e6-b5ff-e4d146d3197f}.TMContainer00000000000000000001.regtrans-ms 2016-12-14 06:43 - 2016-12-14 06:48 - 00065536 ___SH C:\Users\Owner\ntuser.dat{beb5abc2-c185-11e6-b5ff-e4d146d3197f}.TM.blf 2016-12-13 10:12 - 2016-12-14 06:43 - 00000000 ____D C:\Program Files (x86)\Innovative Solutions 2016-12-12 15:18 - 2016-12-12 09:37 - 17376896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-12-12 15:18 - 2016-12-12 09:37 - 14410472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-12-12 15:18 - 2016-12-03 03:42 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-12-12 15:18 - 2016-12-03 03:42 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-12-12 15:18 - 2016-12-02 02:52 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437619.dll 2016-12-12 15:18 - 2016-12-02 02:52 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437619.dll 2016-12-12 15:18 - 2016-12-02 02:52 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json 2016-12-12 15:18 - 2016-12-02 02:52 - 00000669 _____ C:\Windows\system32\nv-vk64.json 2016-12-12 14:55 - 2016-12-21 08:44 - 00524288 ___SH C:\Windows\system32\config\components{e0733e4a-c036-11e6-b068-d4b2c5db6a7a}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 14:55 - 2016-12-21 08:44 - 00065536 ___SH C:\Windows\system32\config\components{e0733e4a-c036-11e6-b068-d4b2c5db6a7a}.TM.blf 2016-12-12 14:55 - 2016-12-12 14:56 - 00524288 ___SH C:\Windows\system32\config\components{e0733e4a-c036-11e6-b068-d4b2c5db6a7a}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 12:46 - 2016-12-12 13:46 - 00524288 ___SH C:\Users\Owner\ntuser.dat{b14be9c5-c02c-11e6-a112-a0a8cde36c96}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 12:46 - 2016-12-12 13:46 - 00524288 ___SH C:\Users\Owner\ntuser.dat{b14be9c5-c02c-11e6-a112-a0a8cde36c96}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 12:46 - 2016-12-12 13:46 - 00065536 ___SH C:\Users\Owner\ntuser.dat{b14be9c5-c02c-11e6-a112-a0a8cde36c96}.TM.blf 2016-12-12 12:35 - 2016-12-12 12:44 - 00524288 ___SH C:\Users\Owner\ntuser.dat{9d057f09-c027-11e6-9c74-87b9a3541b26}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 12:35 - 2016-12-12 12:44 - 00524288 ___SH C:\Users\Owner\ntuser.dat{9d057f09-c027-11e6-9c74-87b9a3541b26}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 12:35 - 2016-12-12 12:44 - 00065536 ___SH C:\Users\Owner\ntuser.dat{9d057f09-c027-11e6-9c74-87b9a3541b26}.TM.blf 2016-12-10 23:48 - 2016-12-10 23:48 - 00000000 ____D C:\ProgramData\VS Revo Group 2016-12-10 22:10 - 2016-12-12 11:19 - 00524288 ___SH C:\Windows\system32\config\components{4f6dfd67-beea-11e6-8b9a-8f0855889368}.TMContainer00000000000000000001.regtrans-ms 2016-12-10 22:10 - 2016-12-12 11:19 - 00065536 ___SH C:\Windows\system32\config\components{4f6dfd67-beea-11e6-8b9a-8f0855889368}.TM.blf 2016-12-10 22:10 - 2016-12-10 22:20 - 00524288 ___SH C:\Windows\system32\config\components{4f6dfd67-beea-11e6-8b9a-8f0855889368}.TMContainer00000000000000000002.regtrans-ms 2016-12-10 21:56 - 2016-12-10 21:56 - 00000000 ____D C:\Program Files\Intel Driver Update Utility ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-01-07 16:54 - 2016-11-19 07:53 - 00000000 ____D C:\Users\Owner\AppData\LocalLow\Mozilla 2017-01-07 16:20 - 2009-07-14 11:45 - 00026928 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-01-07 16:20 - 2009-07-14 11:45 - 00026928 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-01-07 16:18 - 2009-07-14 12:13 - 00784286 _____ C:\Windows\system32\PerfStringBackup.INI 2017-01-07 16:18 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\inf 2017-01-07 16:14 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\NVIDIA 2017-01-07 16:12 - 2009-07-14 12:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-01-07 13:30 - 2016-06-27 01:09 - 00000000 ____D C:\Windows\pss 2017-01-07 13:28 - 2016-02-01 10:31 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps 2017-01-07 11:50 - 2015-02-20 17:58 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{049A4847-1101-44F8-B703-1DAD425BE0FA} 2017-01-07 10:34 - 2015-11-13 10:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Logitech 2017-01-07 10:32 - 2015-02-10 16:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-01-07 10:25 - 2015-03-20 16:53 - 00000000 ____D C:\Users\Owner\Desktop\mis 2017-01-07 08:00 - 2016-07-04 18:26 - 00000000 ____D C:\ProgramData\Foxit Software 2017-01-06 22:17 - 2015-02-20 18:12 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Skype 2017-01-06 21:01 - 2015-03-19 04:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-06 21:01 - 2015-03-19 04:45 - 00000000 ____D C:\Program Files (x86)\Java 2017-01-06 13:32 - 2015-02-20 23:21 - 00000000 ____D C:\Users\Owner\Desktop\Winword 2017-01-05 19:01 - 2016-06-26 00:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2017-01-05 13:55 - 2015-02-10 16:43 - 00000000 ____D C:\ProgramData\Intel 2017-01-05 13:49 - 2015-02-10 16:56 - 00000000 ____D C:\ProgramData\Package Cache 2017-01-05 13:44 - 2015-02-10 16:43 - 00000000 ____D C:\Program Files (x86)\Intel 2017-01-05 13:43 - 2015-02-10 16:43 - 00000000 ____D C:\Program Files\Intel 2017-01-05 13:41 - 2016-06-24 13:04 - 00000000 ____D C:\Users\Owner\Downloads\Intel Components 2017-01-05 13:39 - 2016-06-24 13:03 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility 2017-01-05 13:38 - 2016-06-24 13:03 - 00000000 ____D C:\Windows\System32\Tasks\Intel 2017-01-04 11:16 - 2016-04-11 09:00 - 00000000 ____D C:\Users\Owner\Desktop\Bike Lift 2017-01-02 15:36 - 2015-04-12 00:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-01-02 11:29 - 2015-03-19 21:56 - 00000000 ____D C:\Users\Owner\Desktop\ROV 2017-01-02 05:42 - 2016-03-10 16:45 - 00000000 ____D C:\Users\Owner\Desktop\2016 - 2017 O2 Phone Bill 2017-01-02 05:33 - 2009-07-14 12:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2016-12-31 10:58 - 2015-04-02 22:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-12-31 10:56 - 2015-08-12 21:44 - 00004235 _____ C:\Users\Owner\AppData\Roaming\Rim.DesktopHelper.Exception.log 2016-12-31 10:56 - 2015-08-12 21:44 - 00004081 _____ C:\Users\Owner\AppData\Roaming\Rim.Desktop.Exception.log 2016-12-31 10:48 - 2015-02-10 16:41 - 00000000 ____D C:\Windows\SoftwareDistribution 2016-12-31 10:43 - 2009-07-14 11:45 - 00012288 _____ C:\Windows\system32\umstartup.etl 2016-12-31 10:18 - 2015-08-22 07:24 - 00000000 ____D C:\temp 2016-12-31 10:18 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-12-31 10:18 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-12-31 10:16 - 2015-02-19 17:08 - 00000442 ___SH C:\Users\Owner\Desktop\desktop.ini 2016-12-31 10:16 - 2009-07-14 11:54 - 00000174 ___SH C:\Users\Public\Desktop\desktop.ini 2016-12-31 10:16 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\catroot2 2016-12-31 10:04 - 2009-07-14 11:45 - 00021504 _____ C:\Windows\system32\umstartup000.etl 2016-12-30 09:41 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\winsxs 2016-12-30 09:40 - 2009-07-14 10:20 - 00000000 ____D C:\Program Files\Common Files 2016-12-30 09:34 - 2015-11-13 12:11 - 00000000 ____D C:\ProgramData\Logishrd 2016-12-29 22:43 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\NDF 2016-12-28 18:49 - 2015-11-13 12:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2016-12-28 18:12 - 2015-11-13 10:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Logishrd 2016-12-28 10:55 - 2015-02-19 17:08 - 00000000 ___RD C:\Users\Owner\Pictures 2016-12-28 10:11 - 2009-07-14 12:32 - 00000000 ____D C:\Windows\SysWOW64\LogFiles 2016-12-27 17:32 - 2016-06-23 14:31 - 00262792 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys 2016-12-27 17:32 - 2016-06-23 14:31 - 00208520 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys 2016-12-27 17:32 - 2016-06-23 14:31 - 00197248 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys 2016-12-27 17:32 - 2016-06-23 14:31 - 00084616 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys 2016-12-27 17:32 - 2016-06-23 14:31 - 00061568 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys 2016-12-27 17:29 - 2009-07-14 11:45 - 00000000 ___SD C:\Windows\system32\Microsoft 2016-12-27 17:23 - 2015-02-28 03:46 - 00000966 _____ C:\Users\Owner\Documents\2FBA5EFE-0000002F.eml 2016-12-27 17:13 - 2015-02-20 17:48 - 00000000 ____D C:\ProgramData\AVAST Software 2016-12-26 13:31 - 2016-11-07 08:42 - 00000000 ____D C:\Program Files\Max Registry Cleaner 2016-12-24 21:58 - 2015-02-12 19:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-12-24 21:58 - 2015-02-12 19:41 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-12-23 05:58 - 2015-02-12 19:34 - 00000000 ____D C:\Program Files (x86)\Google 2016-12-22 09:38 - 2016-08-16 06:48 - 00011866 _____ C:\Windows\SysWOW64\swhealthex.log 2016-12-21 14:03 - 2015-12-03 22:17 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2016-12-21 14:03 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\Tasks 2016-12-21 13:29 - 2015-02-20 18:12 - 00000000 ____D C:\ProgramData\Skype 2016-12-19 06:27 - 2015-02-19 17:08 - 00000000 ____D C:\Users\Owner\AppData\Local\NVIDIA Corporation 2016-12-18 09:39 - 2015-03-19 23:04 - 00000000 ____D C:\Users\Owner\AppData\Local\Diagnostics 2016-12-18 07:56 - 2015-02-19 17:08 - 00000000 ____D C:\Users\Owner\AppData\Local\NVIDIA 2016-12-18 07:55 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\wfp 2016-12-18 07:55 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\wbem 2016-12-18 07:55 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\config\TxR 2016-12-18 07:54 - 2015-02-10 16:57 - 00000000 ___HD C:\Windows\system32\WLANProfiles 2016-12-18 07:54 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\config\systemprofile 2016-12-18 07:54 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\security 2016-12-18 07:54 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\registration 2016-12-18 07:54 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\Help 2016-12-17 17:10 - 2015-04-02 22:22 - 00000801 _____ C:\Users\Owner\Desktop\CCleaner.lnk 2016-12-15 23:08 - 2015-02-20 04:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-12-15 13:42 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\rescache 2016-12-15 07:57 - 2015-02-28 05:46 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-12-15 07:57 - 2015-02-28 05:46 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-12-15 07:57 - 2015-02-28 05:46 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2016-12-15 07:57 - 2015-02-28 05:46 - 00000000 ____D C:\Windows\system32\Macromed 2016-12-15 07:42 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\Microsoft.NET 2016-12-15 07:41 - 2009-07-14 10:20 - 00000000 __RSD C:\Windows\assembly 2016-12-15 07:22 - 2009-07-14 11:45 - 00000000 ____D C:\Windows\debug 2016-12-15 07:09 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\SysWOW64\en-US 2016-12-15 07:09 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\en-US 2016-12-15 07:09 - 2009-07-14 10:20 - 00000000 ____D C:\Program Files\Internet Explorer 2016-12-15 07:09 - 2009-07-14 10:20 - 00000000 ____D C:\Program Files (x86)\Internet Explorer 2016-12-15 07:08 - 2015-02-20 21:41 - 00000000 ____D C:\ProgramData\Microsoft Help 2016-12-15 07:08 - 2015-02-19 17:35 - 00000000 ____D C:\Windows\system32\MRT 2016-12-15 07:07 - 2015-02-19 17:35 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-12-15 07:05 - 2015-02-10 16:46 - 00768596 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-12-15 07:02 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\Logs 2016-12-14 06:43 - 2016-06-27 07:41 - 00000000 ____D C:\ProgramData\Innovative Solutions 2016-12-14 06:43 - 2015-03-19 04:32 - 00000000 ____D C:\Program Files (x86)\HP Button Manager 2016-12-13 06:30 - 2016-10-07 19:25 - 01853376 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2016-12-13 06:30 - 2016-10-07 19:25 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2016-12-13 06:30 - 2016-10-07 19:25 - 01452480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2016-12-13 06:30 - 2016-10-07 19:25 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2016-12-13 06:30 - 2016-10-07 19:25 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-12-12 12:45 - 2015-03-19 03:57 - 00000000 ____D C:\Users\Owner\AppData\Roaming\ArcSoft 2016-12-12 12:45 - 2015-02-21 01:06 - 00000000 ____D C:\Users\Owner\AppData\LocalLow\Google 2016-12-12 12:45 - 2015-02-20 21:21 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Eusing 2016-12-12 09:37 - 2015-08-22 07:23 - 17436808 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-12-12 09:37 - 2015-03-31 19:15 - 03479744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-12-12 09:37 - 2015-02-12 19:41 - 19947472 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2016-12-12 09:37 - 2015-02-12 19:41 - 03941536 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2016-12-12 01:47 - 2016-09-22 23:03 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-12-12 01:47 - 2016-09-22 23:03 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-12-12 01:47 - 2015-02-12 19:42 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2016-12-12 01:47 - 2015-02-12 19:42 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2016-12-12 01:47 - 2015-02-12 19:42 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2016-12-12 01:47 - 2015-02-12 19:42 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2016-12-12 01:47 - 2015-02-12 19:42 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2016-12-10 21:54 - 2016-09-23 07:39 - 00524288 ___SH C:\Windows\system32\config\components{bd139d52-8125-11e6-8974-a0a8cde36c9a}.TMContainer00000000000000000002.regtrans-ms 2016-12-10 21:54 - 2016-09-23 07:39 - 00065536 ___SH C:\Windows\system32\config\components{bd139d52-8125-11e6-8974-a0a8cde36c9a}.TM.blf 2016-12-09 15:52 - 2015-02-12 19:42 - 07639617 _____ C:\Windows\system32\nvcoproc.bin ==================== Files in the root of some directories ======= 2015-08-12 21:44 - 2016-12-31 10:56 - 0004081 _____ () C:\Users\Owner\AppData\Roaming\Rim.Desktop.Exception.log 2015-08-12 21:43 - 2015-08-12 21:43 - 0001153 _____ () C:\Users\Owner\AppData\Roaming\Rim.Desktop.HttpServerSetup.log 2015-08-12 21:44 - 2016-12-31 10:56 - 0004235 _____ () C:\Users\Owner\AppData\Roaming\Rim.DesktopHelper.Exception.log 2016-06-11 07:41 - 2016-06-26 23:20 - 0007606 _____ () C:\Users\Owner\AppData\Local\resmon.resmoncfg 2015-06-25 11:34 - 2015-06-25 11:34 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-02-10 16:49 - 2015-02-10 16:49 - 0000000 ___HC () C:\ProgramData\DP45977C.lfl 2016-12-17 17:47 - 2017-01-07 16:12 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-17 17:47 - 2017-01-07 16:11 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 Some files in TEMP: ==================== C:\Users\Owner\AppData\Local\Temp\libeay32.dll C:\Users\Owner\AppData\Local\Temp\msvcr120.dll C:\Users\Owner\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-01-04 14:19 ==================== End of FRST.txt ============================