Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-01-2017
Ran by Owner (administrator) on OWNER-PC (24-01-2017 13:10:40)
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security Premium\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Max Secure Software) C:\Program Files\Max Registry Cleaner\RCVistaService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe
() C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\HP Webcam Software Suite\Magic-i Visual Effects 2\uCamMonitor.exe
(SparkLabs) C:\Program Files\WiTopia\WiTopiaService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ESET) C:\Program Files\ESET\ESET Smart Security Premium\egui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Max Secure Software) C:\Program Files\Max Registry Cleaner\MaxRCSystemTray.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
() C:\Program Files (x86)\HP Button Manager\BM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe
() C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DeviceAgent.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareTactXMacroController.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Dell Inc.) C:\Program Files (x86)\Alienware Update\DellUpService.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Dell Inc.) C:\Program Files (x86)\Alienware Update\DellUpTray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-04-10] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011312 2013-04-08] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [14056 2014-10-30] (Alienware)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM\...\Run: [RCSystemTray] => C:\Program Files\Max Registry Cleaner\MaxRCSystemTray.exe [2680872 2014-12-24] (Max Secure Software)
HKLM\...\Run: [RCAutoLiveUpdate] => C:\Program Files\Max Registry Cleaner\MaxLURC.exe [1819176 2014-12-24] (Max Secure Software)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-24] (Intel Corporation)
HKLM-x32\...\Run: [DBAgent] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1563424 2016-04-05] (Seagate Technology LLC)
HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [4593968 2013-11-15] ()
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [127816 2016-04-05] (Seagate Technology LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Button Manager.lnk [2017-01-23]
ShortcutTarget: HP Button Manager.lnk -> C:\Program Files (x86)\HP Button Manager\BM.exe ()
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2017-01-19]
ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{A9883C7F-E971-4335-BC1A-A1D52F0A5D58}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.co.uk/
HKU\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
SearchScopes: HKU\S-1-5-21-3090456578-2289362299-1625809071-1000 -> {3F03010E-69A6-4E9E-9B2F-7E94FF5B51BE} URL = hxxps://th.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\TomTom\HOME\Profiles\bq1l63w1.default [2016-03-14]
FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2016-02-17] [not signed]
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 [2017-01-24]
FF NewTab: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> about:newtab
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://www.google.co.uk/
FF Keyword.URL: Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873 -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\6i4yverv.default-1469598597873\Extensions\marcoagpinto@mail.telepac.pt [2017-01-01]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-19] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-19] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2016-05-18] (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-09] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2014-11-28] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-24] (Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2016-02-01] ()

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.co.uk/
CHR StartupUrls: Default -> "hxxps://www.google.co.uk/"
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default [2017-01-24]
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-23]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-23]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-23]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-23]
CHR Extension: (Foxit PDF Creator) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\cifnddnffldieaamihfkhkdgnbhfmaci [2016-12-23]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-23]
CHR Extension: (Google Docs Offline) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-23]
CHR Extension: (Chrome Media Router) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-23]
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-01-12]
CHR HKLM\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\\plugins\Creator\ChromeAddin\ChromeAddin.crx [2016-06-23]
CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\\plugins\Creator\ChromeAddin\ChromeAddin.crx [2016-06-23]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2016-06-23] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2016-06-23] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Alienware Update\DellUpService.exe [230248 2016-09-22] (Dell Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security Premium\ekrn.exe [2836296 2016-12-14] (ESET)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 FoxitPhantomService; C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe [1647808 2016-06-21] (Foxit Software Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-10] (Intel Corporation)
R2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [150256 2015-08-01] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-10-06] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-01-06] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-01-06] (NVIDIA Corporation)
S2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-01-06] (NVIDIA Corporation)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [341504 2013-06-08] (Qualcomm Atheros) [File not signed]
R2 RCVistaSvc; C:\Program Files\Max Registry Cleaner\RCVistaService.exe [2306088 2014-12-24] (Max Secure Software)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16216 2016-04-05] (Seagate Technology LLC)
R2 Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [143656 2016-04-05] (Seagate Technology LLC)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31704 2016-09-09] (Dell Inc.)
R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\HP Webcam Software Suite\Magic-i Visual Effects 2\uCamMonitor.exe [145984 2012-01-18] (ArcSoft, Inc.)
S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WiTopiaService; C:\Program Files\WiTopia\WiTopiaService.exe [106696 2016-10-07] (SparkLabs)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-10-06] (Intel® Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2008-04-24] (ArcSoft, Inc.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [141800 2015-10-13] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1545704 2016-04-27] (Motorola Solutions, Inc.)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [32464 2016-06-23] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2016-06-23] (Dell Computer Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [132272 2016-12-05] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106768 2016-12-05] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [180544 2016-12-05] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [49672 2016-12-05] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [77616 2016-12-05] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [60536 2016-12-05] (ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [96856 2016-12-05] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2017-01-09] (ESET)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-10] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [259312 2015-08-01] (Intel Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-24] (Malwarebytes)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [181304 2016-03-28] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3423496 2016-10-20] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2017-01-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [59448 2017-01-06] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2014-05-06] (BlackBerry Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
R1 RsProxy; C:\Windows\system32\drivers\RsProxy.sys [15976 2017-01-23] ()
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-04-08] (Synaptics Incorporated)
R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [87776 2013-04-11] (STMicroelectronics)
S3 visctap0901; C:\Windows\System32\DRIVERS\visctap0901.sys [50416 2016-08-11] (The OpenVPN Project)
R3 XtuAcpiDriver; C:\Windows\System32\DRIVERS\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation)
S3 aswVmm; \??\C:\Users\Owner\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-24 13:10 - 2017-01-24 13:10 - 00025989 _____ C:\Users\Owner\Desktop\FRST.txt
2017-01-24 13:10 - 2017-01-24 13:10 - 00000000 ____D C:\Users\Owner\Desktop\FRST-OlderVersion
2017-01-24 09:05 - 2017-01-24 09:05 - 00000000 ____D C:\Users\Owner\AppData\Local\{389D8477-C086-4914-B238-0DC89A4A613F}
2017-01-24 08:55 - 2017-01-24 08:55 - 00007075 _____ C:\Users\Owner\Desktop\TCP 9am.txt
2017-01-23 17:12 - 2017-01-23 17:12 - 00000000 ____D C:\swsetup
2017-01-23 17:11 - 2017-01-23 17:12 - 43544408 _____ (HP Inc. ) C:\Users\Owner\Downloads\sp78153.exe
2017-01-23 16:55 - 2017-01-23 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VuRoom
2017-01-23 16:55 - 2017-01-23 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
2017-01-23 16:54 - 2017-01-23 16:54 - 00000000 ____D C:\Program Files (x86)\HP Button Manager
2017-01-23 16:53 - 2017-01-23 16:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Webcam Software Suite
2017-01-23 16:53 - 2017-01-23 16:53 - 00002207 _____ C:\Users\Public\Desktop\HP Webcam Control Center.lnk
2017-01-23 16:53 - 2008-04-24 14:06 - 00019968 _____ (ArcSoft, Inc.) C:\Windows\system32\Drivers\ArcSoftKsUFilter.sys
2017-01-23 16:53 - 2008-03-22 05:51 - 00053560 _____ (ArcSoft, Inc.) C:\Windows\system\ArcSoftKsUFilter.dll
2017-01-23 14:52 - 2017-01-24 08:10 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForOwner.job
2017-01-23 14:52 - 2017-01-23 18:18 - 00003182 _____ C:\Windows\System32\Tasks\HPCeeScheduleForOwner
2017-01-23 14:52 - 2017-01-23 14:52 - 00000000 ____D C:\Users\Owner\AppData\Local\HP_Development_Company,_L
2017-01-23 14:14 - 2017-01-23 16:54 - 00000000 ____D C:\Users\Owner\vivu
2017-01-23 13:59 - 2017-01-23 20:07 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2017-01-23 13:59 - 2017-01-23 13:59 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Hewlett-Packard
2017-01-23 13:59 - 2017-01-23 13:59 - 00000000 ____D C:\System.sav
2017-01-23 13:58 - 2017-01-23 13:58 - 00000000 ____D C:\Users\Owner\AppData\Roaming\hpqLog
2017-01-23 13:57 - 2017-01-23 13:57 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2017-01-23 13:56 - 2017-01-23 18:20 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2017-01-23 13:55 - 2017-01-23 13:56 - 04057776 _____ (Oleg N. Scherbakov) C:\Users\Owner\Downloads\HPSupportSolutionsFramework-12.5.32.203(1).exe
2017-01-23 13:54 - 2017-01-23 13:55 - 04057776 _____ (Oleg N. Scherbakov) C:\Users\Owner\Downloads\HPSupportSolutionsFramework-12.5.32.203.exe
2017-01-22 09:20 - 2017-01-22 09:20 - 00000000 ____D C:\Users\Owner\AppData\Local\{3269CB73-CE86-419B-B8E7-BABB8DB6E803}
2017-01-22 07:33 - 2017-01-24 11:24 - 00004978 _____ C:\VEW.txt
2017-01-21 14:14 - 2017-01-21 14:14 - 00003706 _____ C:\Windows\System32\Tasks\Owner3
2017-01-21 07:50 - 2017-01-21 07:50 - 00000000 ____D C:\Users\Owner\AppData\Local\{24419DF0-7D9A-4248-943D-242E7E202421}
2017-01-20 08:38 - 2017-01-20 08:38 - 00000000 ____D C:\Users\Owner\AppData\Local\{242A571E-3666-43F6-84DB-723054B8B7D2}
2017-01-19 23:36 - 2017-01-24 12:35 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-19 23:36 - 2017-01-19 23:36 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-19 23:36 - 2017-01-19 23:36 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-19 23:36 - 2017-01-19 23:36 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-19 13:03 - 2017-01-19 13:03 - 00300832 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\Tcpview.exe
2017-01-19 09:42 - 2017-01-19 09:33 - 00561544 _____ (Max Secure Software) C:\Users\Owner\Desktop\MaxRCDM.exe
2017-01-19 09:35 - 2017-01-19 09:35 - 00000907 _____ C:\Users\Public\Desktop\Max Registry Cleaner.lnk
2017-01-19 09:35 - 2017-01-19 09:35 - 00000000 ____D C:\Windows\MaxSecureBackup
2017-01-19 09:35 - 2017-01-19 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Registry Cleaner
2017-01-19 09:33 - 2017-01-19 09:33 - 00561544 _____ (Max Secure Software) C:\Users\Owner\Downloads\MaxRCDM.exe
2017-01-18 06:08 - 2017-01-24 11:04 - 00000819 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-01-18 06:08 - 2017-01-24 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-01-18 06:08 - 2017-01-24 11:04 - 00000000 ____D C:\Program Files\RogueKiller
2017-01-18 06:06 - 2017-01-18 06:07 - 34741672 _____ (Adlice Software ) C:\Users\Owner\Downloads\setup.exe
2017-01-17 14:58 - 2017-01-17 14:58 - 00002044 _____ C:\Users\Public\Desktop\ESET Banking & Payment protection.lnk
2017-01-17 14:57 - 2017-01-17 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-01-17 14:57 - 2017-01-17 14:57 - 00000000 ____D C:\ProgramData\ESET
2017-01-17 14:57 - 2017-01-17 14:57 - 00000000 ____D C:\Program Files\ESET
2017-01-17 14:52 - 2017-01-17 14:55 - 158713472 _____ (ESET) C:\Users\Owner\Desktop\essp_nt64_enu.exe
2017-01-17 13:24 - 2017-01-19 09:03 - 00000000 ____D C:\Users\Owner\AppData\Local\ElevatedDiagnostics
2017-01-17 12:18 - 2017-01-17 13:27 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-17 09:35 - 2017-01-17 09:35 - 01975526 _____ C:\Users\Owner\Downloads\Sperre_Sub-Fighter_Datasheet.pdf
2017-01-16 17:43 - 2017-01-16 17:43 - 00860376 _____ (Ashisoft ) C:\Users\Owner\Downloads\dfsetup.exe
2017-01-16 17:41 - 2017-01-16 17:41 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-16 17:04 - 2017-01-16 17:04 - 00000000 ____D C:\Users\Owner\Documents\EasyDuplicateFinder
2017-01-16 17:04 - 2017-01-16 17:04 - 00000000 ____D C:\Users\Owner\AppData\Roaming\EasyDuplicateFinder
2017-01-16 17:04 - 2017-01-16 17:04 - 00000000 ____D C:\ProgramData\Easy Duplicate Finder
2017-01-16 17:03 - 2017-01-16 17:03 - 01338912 _____ (WebMinds, Inc. ) C:\Users\Owner\Downloads\edfSetup_adword_edf.exe
2017-01-16 12:05 - 2017-01-06 08:10 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-01-16 12:05 - 2017-01-06 08:10 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-01-16 12:05 - 2017-01-06 08:10 - 00059448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-01-16 12:05 - 2017-01-06 08:10 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-01-15 07:27 - 2017-01-15 07:27 - 00000000 ____D C:\Users\Owner\Documents\f6flpy-x64
2017-01-15 07:23 - 2017-01-15 07:23 - 00614418 _____ C:\Users\Owner\Downloads\f6flpy-x64(2).zip
2017-01-15 07:23 - 2017-01-15 07:23 - 00000000 ____D C:\Users\Owner\Downloads\f6flpy-x64(2)
2017-01-14 16:06 - 2017-01-18 08:55 - 00003708 _____ C:\Windows\System32\Tasks\Owner2
2017-01-14 08:48 - 2017-01-14 08:48 - 00000000 ____D C:\Users\Owner\Downloads\f6flpy-x64(1)
2017-01-14 08:46 - 2017-01-14 08:46 - 00458060 _____ C:\Users\Owner\Downloads\f6flpy-x64(1).zip
2017-01-14 08:30 - 2017-01-14 08:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2017-01-14 08:29 - 2017-01-14 08:29 - 00003210 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC_QUEENCREEK
2017-01-14 08:29 - 2017-01-14 08:29 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2017-01-14 07:55 - 2017-01-14 07:55 - 00752296 _____ C:\Users\Owner\Downloads\Adware Removal Tool by TSA.exe
2017-01-14 07:24 - 2017-01-14 07:24 - 00003646 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification
2017-01-14 07:23 - 2017-01-14 07:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2017-01-14 07:21 - 2017-01-14 07:21 - 00000000 ____D C:\Users\Owner\Downloads\ME_Consumer_Win8.1_10_11.0.6.1194
2017-01-14 07:18 - 2017-01-14 07:20 - 121126086 _____ C:\Users\Owner\Downloads\ME_Consumer_Win8.1_10_11.0.6.1194.zip
2017-01-13 16:02 - 2017-01-13 16:02 - 00000000 ____D C:\Users\Owner\Downloads\f6flpy-x64
2017-01-13 16:01 - 2017-01-13 16:01 - 00458060 _____ C:\Users\Owner\Downloads\f6flpy-x64.zip
2017-01-13 15:50 - 2017-01-14 07:14 - 00000000 ____D C:\Users\Owner\Downloads\Intel Components
2017-01-13 15:45 - 2015-06-17 13:48 - 00937616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2017-01-13 15:45 - 2015-06-17 13:03 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-01-12 13:37 - 2017-01-12 13:37 - 00318648 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-12 13:37 - 2017-01-12 13:37 - 00069456 _____ C:\Users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-12 11:21 - 2017-01-24 11:05 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-01-12 11:20 - 2017-01-12 12:44 - 00000000 ____D C:\ProgramData\RogueKiller
2017-01-12 10:34 - 2017-01-12 10:34 - 05200384 _____ (AVAST Software) C:\Users\Owner\Desktop\aswmbr.exe
2017-01-12 09:30 - 2017-01-19 09:35 - 00000000 ____D C:\Program Files\Max Registry Cleaner
2017-01-11 13:43 - 2017-01-13 18:08 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-11 13:43 - 2017-01-13 18:08 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-11 13:43 - 2017-01-13 18:08 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-11 13:43 - 2017-01-11 13:43 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-11 13:41 - 2017-01-24 08:10 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-11 13:41 - 2017-01-11 13:41 - 00001828 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-11 13:41 - 2017-01-11 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-11 13:41 - 2017-01-11 13:41 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-11 13:41 - 2016-12-14 12:55 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-01-11 13:34 - 2017-01-11 13:34 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2017-01-11 10:43 - 2017-01-11 10:43 - 02135712 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\Procmon.exe
2017-01-11 10:22 - 2017-01-11 10:23 - 00706703 _____ C:\Users\Owner\Desktop\Bennett.zip
2017-01-11 08:52 - 2017-01-06 01:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 08:52 - 2017-01-06 01:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 08:52 - 2017-01-06 01:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 08:52 - 2017-01-06 01:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-11 08:52 - 2017-01-06 00:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-11 08:52 - 2017-01-06 00:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-11 08:52 - 2017-01-06 00:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 08:52 - 2017-01-06 00:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 08:52 - 2017-01-06 00:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 08:52 - 2017-01-06 00:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 08:52 - 2017-01-06 00:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 08:52 - 2017-01-06 00:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-11 08:52 - 2017-01-06 00:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-11 08:33 - 2017-01-11 08:33 - 00061440 _____ ( ) C:\Users\Owner\Desktop\VEW(1).exe
2017-01-10 13:42 - 2011-06-26 13:45 - 00256000 _____ C:\Windows\PEV.exe
2017-01-10 13:42 - 2010-11-08 00:20 - 00208896 _____ C:\Windows\MBR.exe
2017-01-10 13:42 - 2009-04-20 11:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-01-10 13:42 - 2000-08-31 07:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-01-10 13:42 - 2000-08-31 07:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-01-10 13:42 - 2000-08-31 07:00 - 00098816 _____ C:\Windows\sed.exe
2017-01-10 13:42 - 2000-08-31 07:00 - 00080412 _____ C:\Windows\grep.exe
2017-01-10 13:42 - 2000-08-31 07:00 - 00068096 _____ C:\Windows\zip.exe
2017-01-10 13:40 - 2017-01-10 13:42 - 00000000 ____D C:\Qoobox
2017-01-10 13:40 - 2017-01-10 13:40 - 00000000 ____D C:\Windows\erdnt
2017-01-09 21:17 - 2017-01-09 21:17 - 00181160 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2017-01-09 14:51 - 2017-01-09 14:51 - 00003190 _____ C:\Windows\System32\Tasks\{BE589D42-41FC-4BBA-9543-457203414B75}
2017-01-09 14:51 - 2017-01-09 14:51 - 00000000 ____D C:\Users\Owner\Intel
2017-01-09 12:23 - 2017-01-14 07:23 - 00000000 ____D C:\Users\Owner\AppData\LocalLow\Intel
2017-01-09 11:46 - 2017-01-09 14:05 - 00000000 ____D C:\Program Files (x86)\Alienware Update
2017-01-09 11:44 - 2017-01-09 11:44 - 00000000 ____D C:\Program Files (x86)\Dell Digital Delivery
2017-01-08 21:46 - 2017-01-08 21:46 - 00003816 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2017-01-08 21:46 - 2017-01-08 21:46 - 00000000 __HDC C:\ProgramData\{A328A61B-C332-4C8C-A740-42F7F71DC398}
2017-01-08 21:46 - 2017-01-08 21:46 - 00000000 ____D C:\ProgramData\SupportAssistAgent
2017-01-08 21:46 - 2017-01-08 21:46 - 00000000 ____D C:\Program Files\Dell
2017-01-08 21:46 - 2017-01-08 21:46 - 00000000 ____D C:\Program Files (x86)\Dell
2017-01-08 18:11 - 2017-01-08 18:11 - 00000000 ____D C:\ProgramData\PC-Doctor, Inc
2017-01-08 17:53 - 2013-02-28 03:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2017-01-08 17:13 - 2017-01-08 17:13 - 00013560 _____ C:\Users\Owner\Desktop\DellSystemDetectLauncher(1).Application
2017-01-08 11:19 - 2017-01-18 08:23 - 00000000 ____D C:\Users\Owner\Desktop\BA Returning Flight to UK 09.02.2017
2017-01-07 18:50 - 2017-01-18 08:55 - 00003708 _____ C:\Windows\System32\Tasks\Owner1
2017-01-07 12:45 - 2017-01-07 12:45 - 03988944 _____ C:\Users\Owner\Desktop\adwcleaner_6.042.exe
2017-01-06 14:47 - 2017-01-06 14:47 - 02720928 _____ (Sysinternals - www.sysinternals.com) C:\Users\Owner\Desktop\procexp(1).exe
2017-01-06 11:25 - 2017-01-06 11:31 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2017-01-06 11:25 - 2017-01-06 11:25 - 00000000 ____D C:\Users\Owner\AppData\Roaming\AVS4YOU
2017-01-06 11:25 - 2017-01-06 11:25 - 00000000 ____D C:\ProgramData\AVS4YOU
2017-01-06 11:25 - 2010-05-11 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2017-01-06 07:59 - 2017-01-14 11:04 - 00000757 _____ C:\Users\Public\Desktop\Speccy.lnk
2017-01-06 07:59 - 2017-01-06 07:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2017-01-06 07:58 - 2017-01-06 07:59 - 00000000 ____D C:\Program Files\Speccy
2017-01-04 10:11 - 2017-01-04 10:11 - 01663040 _____ (Malwarebytes) C:\Users\Owner\Desktop\JRT.exe
2017-01-03 11:59 - 2017-01-24 13:10 - 00000000 ____D C:\FRST
2017-01-03 11:54 - 2017-01-24 13:10 - 02420736 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2017-01-02 15:36 - 2017-01-02 15:43 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-02 14:59 - 2017-01-02 15:12 - 00000000 ____D C:\Users\Owner\AppData\Local\NPE
2017-01-02 14:59 - 2017-01-02 14:59 - 00000000 ____D C:\ProgramData\Norton
2016-12-31 12:06 - 2017-01-23 23:21 - 16398860 ____H C:\Users\Owner\AppData\Local\IconCache.db
2016-12-31 11:21 - 2017-01-18 08:55 - 00003706 _____ C:\Windows\System32\Tasks\Owner
2016-12-31 10:48 - 2017-01-24 08:38 - 01825144 _____ C:\Windows\WindowsUpdate.log
2016-12-31 10:17 - 2016-12-31 10:17 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-31 10:17 - 2016-09-10 01:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-12-31 10:17 - 2016-09-10 01:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-12-31 10:17 - 2016-09-10 01:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-12-31 10:17 - 2016-09-10 01:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-12-31 10:16 - 2015-06-17 16:10 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2016-12-30 23:15 - 2017-01-12 16:55 - 00000000 ____D C:\Users\Owner\Desktop\Max Registry CleanerB
2016-12-30 12:21 - 2016-12-30 12:21 - 00003120 _____ C:\Windows\System32\Tasks\{A2C39715-CC36-4DBA-B963-4961EFD84C41}
2016-12-30 09:40 - 2017-01-19 09:00 - 00000000 ____D C:\Program Files\Common Files\Logishrd
2016-12-28 18:22 - 2017-01-18 06:38 - 00000000 ____D C:\Users\Owner\AppData\Roaming\ESET
2016-12-28 18:20 - 2017-01-14 08:01 - 00524288 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TMContainer00000000000000000001.regtrans-ms
2016-12-28 18:20 - 2017-01-14 08:01 - 00065536 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TM.blf
2016-12-28 18:20 - 2016-12-28 18:30 - 00524288 ___SH C:\Windows\system32\config\components{2418c57f-ccef-11e6-ab8f-a0a8cde36c96}.TMContainer00000000000000000002.regtrans-ms
2016-12-27 17:29 - 2017-01-17 15:03 - 00000000 ____D C:\Users\Owner\AppData\Local\ESET
2016-12-27 14:46 - 2016-12-27 14:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ICCWDT_01009.Wdf
2016-12-27 07:50 - 2017-01-18 08:55 - 00003494 _____ C:\Windows\System32\Tasks\Owner DBAgent 2 0

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-24 13:10 - 2015-02-20 18:12 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Skype
2017-01-24 11:23 - 2015-03-20 16:53 - 00000000 ____D C:\Users\Owner\Desktop\mis
2017-01-24 09:06 - 2015-02-20 17:58 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{049A4847-1101-44F8-B703-1DAD425BE0FA}
2017-01-24 09:04 - 2015-03-19 04:38 - 00000000 ____D C:\Users\Owner\Documents\WebCam Media
2017-01-24 08:42 - 2009-07-14 11:45 - 00026928 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-24 08:42 - 2009-07-14 11:45 - 00026928 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-24 08:39 - 2016-11-19 07:53 - 00000000 ____D C:\Users\Owner\AppData\LocalLow\Mozilla
2017-01-24 08:13 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-24 08:10 - 2016-07-04 18:26 - 00000000 ____D C:\ProgramData\Foxit Software
2017-01-24 08:10 - 2009-07-14 12:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-23 17:13 - 2015-02-10 16:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-23 16:56 - 2015-03-19 04:26 - 00015976 _____ C:\Windows\system32\Drivers\RsProxy.sys
2017-01-23 16:56 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system
2017-01-23 16:49 - 2015-03-19 03:46 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2017-01-23 16:19 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-23 15:46 - 2015-03-19 03:46 - 00000000 ___HD C:\ProgramData\ArcSoft
2017-01-23 15:44 - 2015-03-19 03:57 - 00000000 ____D C:\Users\Owner\AppData\Roaming\ArcSoft
2017-01-23 15:18 - 2015-02-20 04:12 - 00000000 ____D C:\Users\Owner\AppData\Local\Deployment
2017-01-23 14:14 - 2015-02-19 17:08 - 00000000 ____D C:\Users\Owner
2017-01-23 13:59 - 2015-03-19 04:09 - 00000000 ____D C:\Users\Owner\AppData\Local\Hewlett-Packard
2017-01-23 12:52 - 2016-12-21 10:18 - 00000000 ____D C:\AdwCleaner
2017-01-21 14:16 - 2009-07-14 12:13 - 00784286 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-21 14:16 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\inf
2017-01-19 23:36 - 2015-02-28 05:46 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-19 23:36 - 2015-02-28 05:46 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-19 23:35 - 2015-02-21 01:33 - 00000000 ____D C:\Users\Owner\AppData\Local\Adobe
2017-01-19 20:05 - 2015-11-01 07:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 08:59 - 2015-11-13 10:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Logitech
2017-01-19 08:18 - 2015-03-19 21:56 - 00000000 ____D C:\Users\Owner\Desktop\ROV
2017-01-18 05:51 - 2015-12-03 22:17 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-17 12:19 - 2016-06-26 00:16 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-01-16 17:36 - 2015-03-19 22:53 - 00000000 ____D C:\Windows\Minidump
2017-01-16 12:05 - 2016-12-24 16:42 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-24 16:42 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-24 16:42 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-24 16:42 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-24 16:42 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-24 16:42 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-16 12:05 - 2016-12-19 06:27 - 00001417 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-01-16 12:05 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-16 12:05 - 2015-02-12 19:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-16 12:05 - 2015-02-12 19:41 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-16 05:31 - 2016-12-17 17:47 - 00003320 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-01-15 12:55 - 2015-02-20 23:21 - 00000000 ____D C:\Users\Owner\Desktop\Winword
2017-01-14 08:57 - 2015-11-13 12:11 - 00000000 ____D C:\ProgramData\Logishrd
2017-01-14 08:30 - 2016-06-24 13:03 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
2017-01-14 08:29 - 2015-02-10 16:56 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-14 07:23 - 2015-02-10 16:43 - 00000000 ____D C:\ProgramData\Intel
2017-01-14 07:23 - 2015-02-10 16:43 - 00000000 ____D C:\Program Files\Intel
2017-01-14 07:23 - 2015-02-10 16:43 - 00000000 ____D C:\Program Files (x86)\Intel
2017-01-13 15:45 - 2015-08-22 07:24 - 00000000 ____D C:\temp
2017-01-13 15:45 - 2015-02-12 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-13 11:58 - 2009-07-14 10:20 - 00000000 ____D C:\Windows\rescache
2017-01-13 11:03 - 2016-06-11 07:41 - 00007623 _____ C:\Users\Owner\AppData\Local\resmon.resmoncfg
2017-01-12 13:09 - 2016-02-01 10:31 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps
2017-01-11 17:52 - 2016-03-10 16:45 - 00000000 ____D C:\Users\Owner\Desktop\2016 - 2017 O2 Phone Bill
2017-01-11 17:51 - 2015-04-02 22:22 - 00000952 _____ C:\Users\Owner\Desktop\CCleaner.lnk
2017-01-11 13:41 - 2015-04-12 00:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-11 13:37 - 2015-02-12 20:12 - 00000000 ____D C:\ProgramData\iolo
2017-01-11 08:55 - 2015-02-19 17:35 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 08:53 - 2015-02-19 17:35 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 22:34 - 2009-07-14 12:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-09 14:51 - 2015-02-10 16:46 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-01-09 14:09 - 2015-02-12 20:32 - 00000000 ____D C:\Program Files (x86)\Alienware On-Screen Display
2017-01-09 14:06 - 2015-08-13 06:46 - 00000000 ____D C:\Users\Owner\AppData\Local\Downloaded Installations
2017-01-09 14:05 - 2015-02-12 20:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware
2017-01-09 12:56 - 2015-02-12 20:32 - 00000000 ____D C:\Windows\Downloaded Installations
2017-01-09 12:22 - 2015-02-12 20:04 - 00000000 ____D C:\Windows\SysWOW64\sda
2017-01-09 12:22 - 2015-02-10 16:48 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-01-09 11:46 - 2015-02-10 16:43 - 00000000 ____D C:\ProgramData\Dell
2017-01-09 11:38 - 2016-01-29 21:42 - 00000000 ____D C:\Users\Owner\Documents\Dell Downloads
2017-01-09 10:36 - 2016-12-24 06:18 - 00000000 ____D C:\Users\Owner\AppData\Roaming\NVIDIA
2017-01-08 21:46 - 2016-11-07 11:29 - 00000000 ____D C:\Users\Owner\AppData\Roaming\PCDr
2017-01-08 21:41 - 2015-02-20 04:13 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2017-01-07 13:30 - 2016-06-27 01:09 - 00000000 ____D C:\Windows\pss
2017-01-06 21:01 - 2015-03-19 04:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-06 21:01 - 2015-03-19 04:45 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-06 08:10 - 2016-10-07 19:25 - 01855544 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-06 08:10 - 2016-10-07 19:25 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-06 08:10 - 2016-10-07 19:25 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-06 08:10 - 2016-10-07 19:25 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-06 08:10 - 2016-10-07 19:25 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-06 07:09 - 2016-12-19 06:27 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-01-06 06:42 - 2016-12-24 16:42 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-01-04 11:16 - 2016-04-11 09:00 - 00000000 ____D C:\Users\Owner\Desktop\Bike Lift
2016-12-31 10:58 - 2015-04-02 22:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-31 10:56 - 2015-08-12 21:44 - 00004235 _____ C:\Users\Owner\AppData\Roaming\Rim.DesktopHelper.Exception.log
2016-12-31 10:56 - 2015-08-12 21:44 - 00004081 _____ C:\Users\Owner\AppData\Roaming\Rim.Desktop.Exception.log
2016-12-31 10:48 - 2015-02-10 16:41 - 00000000 ____D C:\Windows\SoftwareDistribution
2016-12-31 10:43 - 2009-07-14 11:45 - 00012288 _____ C:\Windows\system32\umstartup.etl
2016-12-31 10:16 - 2015-02-19 17:08 - 00000442 ___SH C:\Users\Owner\Desktop\desktop.ini
2016-12-31 10:04 - 2009-07-14 11:45 - 00021504 _____ C:\Windows\system32\umstartup000.etl
2016-12-30 09:40 - 2009-07-14 10:20 - 00000000 ____D C:\Program Files\Common Files
2016-12-28 18:49 - 2015-11-13 12:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2016-12-28 18:12 - 2015-11-13 10:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Logishrd
2016-12-28 11:57 - 2016-12-21 08:56 - 00524288 ___SH C:\Windows\system32\config\components{3ff5b424-c720-11e6-b8cc-d823ae52fd8d}.TMContainer00000000000000000001.regtrans-ms
2016-12-28 11:57 - 2016-12-21 08:56 - 00065536 ___SH C:\Windows\system32\config\components{3ff5b424-c720-11e6-b8cc-d823ae52fd8d}.TM.blf
2016-12-28 10:55 - 2015-02-19 17:08 - 00000000 ___RD C:\Users\Owner\Pictures
2016-12-28 10:11 - 2009-07-14 12:32 - 00000000 ____D C:\Windows\SysWOW64\LogFiles
2016-12-27 17:29 - 2009-07-14 11:45 - 00000000 ___SD C:\Windows\system32\Microsoft
2016-12-27 17:23 - 2015-02-28 03:46 - 00000966 _____ C:\Users\Owner\Documents\2FBA5EFE-0000002F.eml
2016-12-27 17:13 - 2015-02-20 17:48 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-27 16:57 - 2016-12-21 09:53 - 00000000 ____D C:\Users\Owner\AppData\Roaming\TeamViewer

==================== Files in the root of some directories =======

2015-08-12 21:44 - 2016-12-31 10:56 - 0004081 _____ () C:\Users\Owner\AppData\Roaming\Rim.Desktop.Exception.log
2015-08-12 21:43 - 2015-08-12 21:43 - 0001153 _____ () C:\Users\Owner\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2015-08-12 21:44 - 2016-12-31 10:56 - 0004235 _____ () C:\Users\Owner\AppData\Roaming\Rim.DesktopHelper.Exception.log
2016-06-11 07:41 - 2017-01-13 11:03 - 0007623 _____ () C:\Users\Owner\AppData\Local\resmon.resmoncfg
2015-06-25 11:34 - 2015-06-25 11:34 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-02-10 16:49 - 2015-02-10 16:49 - 0000000 ___HC () C:\ProgramData\DP45977C.lfl
2016-12-17 17:47 - 2017-01-16 05:34 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-17 17:47 - 2017-01-16 05:31 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Some files in TEMP:
====================
2017-01-23 10:28 - 2016-10-11 22:34 - 1732864 _____ (Microsoft Corporation) C:\Users\Owner\AppData\Local\Temp\dllnt_dump.dll
2017-01-23 16:16 - 2017-01-23 16:16 - 0043520 _____ () C:\Users\Owner\AppData\Local\Temp\proxy_vole1744692884274508296.dll
2017-01-23 17:56 - 2017-01-23 17:56 - 0043520 ____N () C:\Users\Owner\AppData\Local\Temp\proxy_vole2428346634425665723.dll
2017-01-23 14:14 - 2017-01-23 14:14 - 0043520 ____N () C:\Users\Owner\AppData\Local\Temp\proxy_vole2865977650022956558.dll
2017-01-23 15:30 - 2017-01-23 15:30 - 0043520 ____N () C:\Users\Owner\AppData\Local\Temp\proxy_vole3804407533624922830.dll
2017-01-23 14:14 - 2017-01-23 14:14 - 0043520 ____N () C:\Users\Owner\AppData\Local\Temp\proxy_vole5365838994720620064.dll
2017-01-23 17:56 - 2017-01-23 17:56 - 0043520 _____ () C:\Users\Owner\AppData\Local\Temp\proxy_vole6446048714506234152.dll
2017-01-23 15:30 - 2017-01-23 15:30 - 0043520 _____ () C:\Users\Owner\AppData\Local\Temp\proxy_vole8370131078106003290.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-23 07:59

==================== End of FRST.txt ============================