Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017 Ran by user (administrator) on USER-PC (04-08-2017 09:23:58) Running from C:\Users\user\Desktop Loaded Profiles: user (Available Profiles: user) Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (American Megatrends Inc.) C:\Program Files\AMI\DuOS\AndServMgr.exe (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe () C:\Program Files (x86)\MMX353G 3G USB Manager\Driver\ChgService.exe (Avid Technology, Inc.) C:\Program Files\Avid\Pro Tools\MMERefresh.exe (Comodo) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe () C:\xampp\mysql\bin\mysqld.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (SDL) C:\Program Files (x86)\Common Files\SDL\Telemetrics\Sdl.Desktop.ProductTelemetrics.Host.Windows.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Memeo) C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe () C:\Program Files (x86)\D-Link\DWA-131 revA\WlanWpsSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\NETGEAR\WNA1000M\WPSService.exe (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Apple Inc.) C:\Program Files (x86)\AirPrint\airprint.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (eVenture Limited) C:\Program Files (x86)\hide.me VPN\hidemesvc.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.2\bin\postgres.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CS6 (64 Bit)\Photoshop.exe (Adobe Systems Incorporated ) C:\Program Files (x86)\Common Files\Adobe\dynamiclink\CS6\dynamiclinkmanager.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Skype Technologies S.A.) C:\Users\user\Downloads\SkypePortable\App\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (None) C:\Program Files (x86)\Classic PDF Editor\PDFVPrinter.exe (Red Software) C:\Program Files\PDFescape Desktop\creator-ws.exe (Red Software) C:\Program Files\PDFescape Desktop\ws.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-20] (AVAST Software) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2016-02-03] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4514304 2014-08-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [144184 2016-12-13] (Check Point Software Technologies Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation) HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5779232 2017-07-18] (IObit) HKLM-x32\...\Run: [PDFVPrinter] => C:\Program Files (x86)\Classic PDF Editor\PDFVPrinter.exe [28672 2011-07-26] (None) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {11cf0da2-bcb9-11e3-b981-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {1b83ef7b-1a9f-11e3-91f2-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {255175e2-6afa-11e2-9860-50465d8d7f0d} - F:\.\ShowModem.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {26b46e00-6a2c-11e2-9ce3-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {3893a4d8-a14d-11e3-a18f-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {6637c49b-c839-11e6-9296-50465d8d7f0d} - F:\Lenovo_Suite.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {6b0e6f57-890b-11e3-907a-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {933163ad-827c-11e4-984b-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {a7a86924-9cf9-11e6-b52c-50465d8d7f0d} - F:\.\Setup.exe AUTORUN=1 HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {a7a86936-9cf9-11e6-b52c-50465d8d7f0d} - F:\.\Setup.exe AUTORUN=1 HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {a7a86944-9cf9-11e6-b52c-50465d8d7f0d} - F:\.\Setup.exe AUTORUN=1 HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {abcb8a2a-6783-11e2-83dd-806e6f6e6963} - E:\shellexec.exe rom\index.html HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {b9c07f58-215e-11e4-b017-50465d8d7f0d} - I:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {bdb0f44e-695a-11e2-904f-806e6f6e6963} - E:\Setup.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {d9e665ff-5044-11e3-9820-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {de5f0cb2-8935-11e4-b215-50465d8d7f0d} - F:\AutoRun.exe HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\MountPoints2: {e34c13ef-6aa8-11e2-97c4-50465d8d7f0d} - G:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-02-20] (Microsoft Corporation) CHR HKU\S-1-5-21-3599117210-139940529-1983179741-1000\SOFTWARE\Policies\Google: Restriction <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{B1D85646-49F0-4752-A37A-94AD17479C8B}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{E7E8DB1C-03DA-469C-9FB7-7C2A3F641AD7}: [DhcpNameServer] 192.168.9.1 192.168.9.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3599117210-139940529-1983179741-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://us.yahoo.com/?fr=fp-comodo&type=19_25050030005_52.15.25.664_u_hp SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3599117210-139940529-1983179741-1000 -> DefaultScope {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL = hxxps://search.yahoo.com/yhs/search?hspart=comodo&hsimp=yhs-com_chrome&type=19_25050030005_52.15.25.664_u_ds&p={searchTerms}&rlz=1I7SAVJ_enIN527 SearchScopes: HKU\S-1-5-21-3599117210-139940529-1983179741-1000 -> {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL = hxxps://search.yahoo.com/yhs/search?hspart=comodo&hsimp=yhs-com_chrome&type=19_25050030005_52.15.25.664_u_ds&p={searchTerms}&rlz=1I7SAVJ_enIN527 BHO: No Name -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> No File BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-07-04] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-22] (Google Inc.) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2015-09-24] (Adobe Systems Incorporated) BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-15] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-07-04] (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: PDFescape Desktop Helper -> {9AF15867-1D90-423B-9853-E99761714165} -> C:\Program Files (x86)\PDFescape Desktop\creator-ie-helper.dll [2017-07-13] (Red Software) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-22] (Google Inc.) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-15] (Oracle Corporation) BHO-x32: Aimersoft YouTube Downloader 4.9.0 -> {DED5B67D-3E39-4432-BD75-6A1434E09472} -> C:\ProgramData\Aimersoft\YouTube Downloader\WSBrowserAppMgr.dll [2016-08-08] () BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.) Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-22] (Google Inc.) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-22] (Google Inc.) Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-08-05] (pdfforge GmbH) Toolbar: HKLM-x32 - PDFescape Desktop Toolbar - {A6D4ADF0-4C82-4712-B9B8-69EE9CF06462} - C:\Program Files (x86)\PDFescape Desktop\creator-ie-plugin.dll [2017-07-13] (Red Software) Toolbar: HKU\S-1-5-21-3599117210-139940529-1983179741-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-22] (Google Inc.) Toolbar: HKU\S-1-5-21-3599117210-139940529-1983179741-1000 -> No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKU\S-1-5-21-3599117210-139940529-1983179741-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File Handler: WSAMAllMyTubechrome - {C985F516-9C03-4F90 - No File FireFox: ======== FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default [2017-08-03] FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\user.js [2017-06-29] FF NewTab: Mozilla\Firefox\Profiles\r8s5bbdm.default -> about:newtab FF DefaultSearchEngine: Mozilla\Firefox\Profiles\r8s5bbdm.default -> Google FF DefaultSearchUrl: Mozilla\Firefox\Profiles\r8s5bbdm.default -> hxxps://www.google.com/search?bcutc=sp-006 FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\r8s5bbdm.default -> Google FF SelectedSearchEngine: Mozilla\Firefox\Profiles\r8s5bbdm.default -> Google FF Homepage: Mozilla\Firefox\Profiles\r8s5bbdm.default -> hxxps://www.google.com/?bcutc=sp-006 FF Keyword.URL: Mozilla\Firefox\Profiles\r8s5bbdm.default -> hxxps://www.google.com/search?bcutc=sp-006 FF Extension: (UploadProgress) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\Extensions\fvicente@gmail.com.xpi [2016-06-29] FF Extension: (Avast SafePrice) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\Extensions\sp@avast.com.xpi [2017-06-03] FF Extension: (Avast Online Security) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\Extensions\wrc@avast.com.xpi [2017-06-03] FF Extension: (Video DownloadHelper) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-07-15] FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\r8s5bbdm.default\searchplugins\google-avast.xml [2016-12-24] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-01-31] [not signed] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-30] [not signed] FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker => not found FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-09-03] [not signed] FF HKLM-x32\...\Firefox\Extensions: [AMAllMyTube@Aimersoft.com] - C:\ProgramData\Aimersoft\YouTube Downloader\AMAllMyTube@Aimersoft.com_xpi FF Extension: (Aimersoft YouTube Downloader) - C:\ProgramData\Aimersoft\YouTube Downloader\AMAllMyTube@Aimersoft.com_xpi [2016-10-02] FF HKLM-x32\...\Firefox\Extensions: [{73B03417-517F-4ABC-A430-33518B96A552}] - C:\Program Files (x86)\Aimersoft\YouTube Downloader\SVRFirefoxExt FF Extension: (No Name) - C:\Program Files (x86)\Aimersoft\YouTube Downloader\SVRFirefoxExt [2014-06-04] [not signed] FF HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\user\AppData\Roaming\IDM\idmmzcc5 => not found FF HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\Firefox\Extensions: [{73B03417-517F-4ABC-A430-33518B96A552}] - C:\Program Files (x86)\Aimersoft\YouTube Downloader\SVRFirefoxExt FF HKU\S-1-5-21-3599117210-139940529-1983179741-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\user\AppData\Roaming\IDM\idmmzcc5 => not found FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-15] () FF Plugin: @alternatiff.com/AlternaTIFF -> C:\Program Files\MIE\AlternaTIFF\npatif64.dll [2015-01-16] (Medical Informatics Engineering, Inc.) FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll [2013-01-30] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-15] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-15] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-15] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [2013-03-25] (Nitro PDF) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2014-08-03] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems) FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-08-05] (pdfforge GmbH) FF Plugin-x32: PDFescape Desktop -> C:\Program Files (x86)\PDFescape Desktop\np-previewer.dll [2017-07-13] (Red Software) FF Plugin HKU\S-1-5-21-3599117210-139940529-1983179741-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-3599117210-139940529-1983179741-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\user\AppData\Roaming\Zoom\bin_00\npzoomplugin.dll [2017-07-18] (Zoom Video Communications, Inc.) Chrome: ======= CHR HomePage: Default -> hxxps://encrypted.google.com CHR StartupUrls: Default -> "hxxps://encrypted.google.com" CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/yhs/search?p={searchTerms}&hspart=comodo&hsimp=yhs-ccs&type=default CHR DefaultSearchKeyword: Default -> Yahoo CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10 CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2017-08-04] CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-29] CHR Extension: (Free Download Manager Chrome extension) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2017-04-07] CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-29] CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-29] CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-29] CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-29] CHR Extension: (Dropbox for Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2017-05-10] CHR Extension: (XV — XML Viewer) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeocglpgjdpaefaedpblffpeebgmgddk [2017-07-13] CHR Extension: (Adobe Acrobat) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-08-04] CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-29] CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (Avast Online Security) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-07-04] CHR Extension: (Zoom) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbjbjdpkobdjplfobhljndfdfdipjhg [2017-07-27] CHR Extension: (Grammarly for Chrome) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2017-07-29] CHR Extension: (Zoom Scheduler) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgjfgplpablkjnlkjmjdecgdpfankdle [2017-06-29] CHR Extension: (Yesware Reports) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiciehannidbjakcefendokamkjnolhg [2015-11-29] CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-10] CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-29] CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-15] CHR Extension: (Streak CRM for Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2017-06-19] CHR HKU\S-1-5-21-3599117210-139940529-1983179741-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3599117210-139940529-1983179741-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3599117210-139940529-1983179741-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hcjjaajflhellmcfcecojihhmdbjmmlm] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [mffeojddidkjekjfdhipjldikhhohipn] - C:\Program Files (x86)\Aimersoft\YouTube Downloader\SVRChromePlugin.crx Opera: ======= OPR Extension: (Fast search) - C:\Users\user\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2017-08-02] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-03-28] (Adobe Systems) [File not signed] R2 AirPrint; C:\Program Files (x86)\AirPrint\airprint.exe [234784 2016-09-17] (Apple Inc.) R2 AndServMgr; C:\Program Files\AMI\DuOS\AndServMgr.exe [82384 2016-02-25] (American Megatrends Inc.) R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2014-07-17] (Apache Software Foundation) [File not signed] R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-20] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-20] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [311592 2017-07-20] (AVAST Software) R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed] S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-10-21] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-10-21] (BlueStack Systems, Inc.) S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [466456 2016-10-21] (BlueStack Systems, Inc.) R2 Change Modem Device Service; C:\Program Files (x86)\MMX353G 3G USB Manager\Driver\ChgService.exe [135168 2012-10-23] () [File not signed] S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-09] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-09] (Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [49992 2017-08-02] (Dropbox, Inc.) R2 DigiRefresh; C:\Program Files\Avid\Pro Tools\MMERefresh.exe [117760 2017-07-24] (Avid Technology, Inc.) [File not signed] S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [197632 2017-07-24] (Avid Technology, Inc.) [File not signed] R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2272904 2016-09-29] (Comodo) R2 hmevpnsvc; C:\Program Files (x86)\hide.me VPN\hidemesvc.exe [138912 2017-07-24] (eVenture Limited) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319080 2015-06-04] (Intel Corporation) R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1768736 2017-07-18] (IObit) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) R2 mysql; C:\xampp\mysql\bin\mysqld.exe [10982912 2014-07-18] () [File not signed] R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed] R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-03-25] (Nitro PDF Software) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH) R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH) R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (© pdfforge GmbH.) R3 PDFescape Desktop; C:\Program Files\PDFescape Desktop\ws.exe [2343728 2017-07-13] (Red Software) R2 PDFescape Desktop Creator; C:\Program Files\PDFescape Desktop\creator-ws.exe [757552 2017-07-13] (Red Software) R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed] R2 postgresql-x64-9.2; C:\Program Files\PostgreSQL\9.2\bin\pg_ctl.exe [89600 2012-12-04] (PostgreSQL Global Development Group) [File not signed] R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-09-11] () S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 Sdl.ProductTelemetrics.v1; C:\Program Files (x86)\Common Files\SDL\Telemetrics\Sdl.Desktop.ProductTelemetrics.Host.Windows.exe [12288 2016-02-29] (SDL) [File not signed] R2 SeagateDashboardService; C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe [8704 2011-11-03] (Memeo) [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7534864 2016-08-25] (TeamViewer GmbH) S2 Tomcat7; C:\xampp\tomcat\bin\tomcat7.exe [80896 2013-07-02] (Apache Software Foundation) [File not signed] R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248704 2013-04-30] () [File not signed] R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4087568 2016-12-13] (Check Point Software Technologies Ltd.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WlanWpsSvc; C:\Program Files (x86)\D-Link\DWA-131 revA\WlanWpsSvc.exe [167936 2008-06-26] () [File not signed] R2 WPSService; C:\Program Files (x86)\NETGEAR\WNA1000M\WPSService.exe [287448 2013-04-03] () S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-11-01] (Check Point Software Technologies, Ltd.) R2 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [1040184 2016-12-13] (Check Point Software Technologies Ltd.) U4 cmdAgent; "C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe" [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 Agpproiovs; no ImagePath S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare) R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-07-20] (AVAST Software s.r.o.) R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-07-20] (AVAST Software s.r.o.) R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-07-20] (AVAST Software s.r.o.) R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-07-20] (AVAST Software s.r.o.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-04] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-04] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146696 2017-07-20] (AVAST Software) R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2017-07-04] (AVAST Software) R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [554528 2017-07-04] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-04] (AVAST Software) R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-04] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015848 2017-07-04] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-04] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-04] (AVAST Software) R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-04] (AVAST Software) S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-10-21] (BlueStack Systems) S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-10-07] (Bluestack System Inc. ) S2 CXIR; C:\Windows\System32\drivers\cxcir64.sys [44032 2011-05-04] (Conexant Systems, Inc.) S3 CXPOLARIS; C:\Windows\System32\drivers\cxpolar64.sys [428288 2011-05-04] (Conexant Systems, Inc.) S3 DCamUSBNovatek; C:\Windows\System32\Drivers\nvtcam.sys [2746624 2010-07-14] (Hewlett-Packard) R1 DuoVMDrv; C:\Windows\System32\DRIVERS\DuoVMDrv.sys [239536 2015-11-04] (American Megatrends Inc.) R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [15968 2014-11-18] () R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () R1 IMFCameraProtect; C:\Windows\system32\drivers\IMFCameraProtect.sys [26272 2017-03-17] (IObit.com) R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFDownProtect.sys [21360 2017-03-08] (IObit.com) R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22440 2017-01-06] (IObit) R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFForceDelete.sys [16216 2017-06-30] (IObit.com) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-08-02] (AO Kaspersky Lab) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [180560 2016-08-02] (AO Kaspersky Lab) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [292176 2016-08-02] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1015120 2016-08-02] (AO Kaspersky Lab) R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-02] (Malwarebytes) R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-03] (Malwarebytes) R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-03] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [84256 2017-08-04] (Malwarebytes) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R2 PHYMEM; C:\Windows\system32\ami_ipower.sys [15992 2016-05-18] () S3 prwntdrv; C:\Windows\system32\prwntdrv.sys [18528 2014-10-23] () S3 prwntdrv; C:\Windows\SysWOW64\prwntdrv.sys [15456 2014-10-23] () R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-05-01] (Corel Corporation) R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34752 2016-12-15] (IObit.com) R3 RTL8192cu; C:\Windows\System32\DRIVERS\WNA1000M.sys [855144 2011-01-31] (Realtek Semiconductor Corporation ) S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola) [File not signed] R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-03-19] (Duplex Secure Ltd.) R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx64.sys [34512 2015-06-23] () S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-25] (Anchorfree Inc.) R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [461240 2017-03-16] (Check Point Software Technologies Ltd.) S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-09-03] (Wondershare) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-08-04 09:23 - 2017-08-04 09:26 - 000043197 _____ C:\Users\user\Desktop\FRST.txt 2017-08-04 09:22 - 2017-08-04 09:23 - 000000000 ____D C:\FRST 2017-08-04 02:05 - 2017-08-04 02:14 - 000000000 ____D C:\Users\user\AppData\Roaming\PDFescape Desktop 2017-08-04 02:05 - 2017-08-04 02:05 - 000000792 _____ C:\Users\Public\Desktop\PDFescape Desktop.lnk 2017-08-04 02:03 - 2017-08-04 02:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFescape Desktop 2017-08-04 02:02 - 2017-08-04 02:11 - 000000000 ____D C:\Program Files\PDFescape Desktop 2017-08-04 02:02 - 2017-08-04 02:04 - 000000000 ____D C:\Program Files (x86)\PDFescape Desktop 2017-08-04 02:02 - 2017-08-04 02:02 - 000000000 ____D C:\Users\user\Documents\PDFescape Desktop 2017-08-04 01:56 - 2017-08-04 01:56 - 000000000 ____D C:\ProgramData\PDFescape Desktop 2017-08-04 01:54 - 2017-08-04 01:55 - 006483816 _____ (© RedSoftware) C:\Users\user\Desktop\PDFescape_Desktop_Installer.exe 2017-08-04 01:18 - 2017-08-04 01:18 - 000000000 ____D C:\Users\user\Classic PDF Editor Files 2017-08-04 01:15 - 2017-08-04 01:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic PDF Editor 2017-08-04 01:15 - 2017-08-04 01:15 - 000000000 ____D C:\Program Files (x86)\Classic PDF Editor 2017-08-04 01:10 - 2017-08-04 01:12 - 017600050 _____ ( ) C:\Users\user\Desktop\ClassicPDFSetup.exe 2017-08-03 14:37 - 2017-08-03 14:40 - 002381312 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe 2017-08-03 08:10 - 2017-08-03 08:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-08-03 07:16 - 2017-08-03 07:16 - 000000000 ____D C:\ProgramData\SWCUTemp 2017-08-02 23:01 - 2017-08-02 23:01 - 000000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} 2017-08-02 22:08 - 2017-08-02 22:08 - 000602216 _____ C:\Users\user\Desktop\News&Notes 5th August 2017 [709].pdf 2017-08-02 21:48 - 2017-08-03 14:35 - 000000000 ____D C:\Users\user\AppData\LocalLow\IObit 2017-08-02 21:48 - 2017-08-02 22:16 - 000000000 ____D C:\ProgramData\ProductData 2017-08-02 21:48 - 2017-08-02 21:48 - 000001172 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2017-08-02 21:48 - 2017-08-02 21:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter 2017-08-02 21:48 - 2017-03-17 12:31 - 000026272 _____ (IObit.com) C:\Windows\system32\Drivers\IMFCameraProtect.sys 2017-08-02 21:47 - 2017-08-02 21:48 - 008185288 _____ (Malwarebytes) C:\Users\user\Desktop\adwcleaner_7.0.1.0.exe 2017-08-02 21:45 - 2017-08-02 21:47 - 040996152 _____ (IObit ) C:\Users\user\Desktop\IObit-Malware-Fighter-Setup.exe 2017-08-02 20:43 - 2017-08-02 20:43 - 000001566 _____ C:\Windows\Tasks\MsF to Iwares Starter Edition.job 2017-08-02 20:02 - 2017-08-04 07:29 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-08-02 20:02 - 2017-08-03 07:19 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-08-02 20:02 - 2017-08-03 07:18 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-08-02 20:02 - 2017-08-02 20:03 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys 2017-08-02 20:02 - 2017-08-02 20:02 - 000001866 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-08-02 20:02 - 2017-08-02 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-08-02 20:02 - 2017-08-02 20:02 - 000000000 ____D C:\Program Files\Malwarebytes 2017-08-02 20:02 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-08-02 12:54 - 2017-08-02 12:54 - 000000004 _____ C:\ProgramData\_lg.3sap 2017-08-02 12:49 - 2017-08-03 07:16 - 000000000 ____D C:\Users\user\AppData\LocalLow\uTorrent 2017-08-02 04:44 - 2017-08-02 04:44 - 000000000 ___HD C:\$AV_ASW 2017-08-02 02:56 - 2017-08-02 23:23 - 004049016 _____ (Google) C:\Users\user\Desktop\chrome_cleanup_tool.exe 2017-08-02 02:49 - 2017-08-02 20:43 - 000016780 _____ C:\Windows\System32\Tasks\MsF to Iwares Starter Edition 2017-08-02 00:23 - 2017-08-02 00:23 - 000049992 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2017-08-02 00:23 - 2017-08-02 00:23 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys 2017-08-02 00:23 - 2017-08-02 00:23 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys 2017-08-02 00:23 - 2017-08-02 00:23 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys 2017-08-01 15:33 - 2017-08-01 16:09 - 000715789 _____ C:\Users\user\Desktop\USB-card-drive-order-sheet.xlsx 2017-07-31 01:59 - 2017-08-01 15:32 - 000715831 _____ C:\Users\user\Desktop\audio-bundles-order-form.xlsx 2017-07-30 15:13 - 2017-08-02 14:45 - 000002209 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk 2017-07-30 15:13 - 2017-08-02 14:44 - 000002165 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk 2017-07-27 22:45 - 2017-07-27 22:45 - 000049135 _____ C:\Users\user\Downloads\trid_w32.zip 2017-07-27 22:45 - 2017-07-27 22:45 - 000000000 ____D C:\Users\user\Downloads\trid_w32 2017-07-24 20:52 - 2017-07-24 21:06 - 000000000 ____D C:\Users\user\Documents\Untitled 2017-07-24 20:42 - 2017-07-24 21:25 - 000000000 ____D C:\Users\user\Documents\Podcasting 2017-07-24 20:31 - 2017-07-24 21:07 - 000000000 ____D C:\Users\user\Documents\Pro Tools 2017-07-24 20:30 - 2017-07-24 21:25 - 000000000 ____D C:\Users\Public\Pro Tools 2017-07-24 20:29 - 2017-07-24 20:29 - 000000000 ____D C:\Users\user\AppData\Local\Avid 2017-07-24 17:21 - 2017-08-02 14:44 - 000001936 _____ C:\Users\Public\Desktop\Pro Tools 12.lnk 2017-07-24 17:21 - 2017-07-24 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avid 2017-07-24 16:42 - 2017-07-24 16:51 - 000000000 ____D C:\Users\Public\Documents\Avid Video Engine 2017-07-24 16:42 - 2017-07-24 16:50 - 000000000 ____D C:\Program Files\Avid 2017-07-24 16:42 - 2017-07-24 16:42 - 000000000 ____D C:\Users\user\AppData\Roaming\Avid 2017-07-24 16:42 - 2017-07-24 16:42 - 000000000 ____D C:\Program Files (x86)\Avid 2017-07-24 15:19 - 2017-07-24 15:19 - 000762120 _____ (Avid Technology, Inc.) C:\Windows\system32\AvOmfToolkit.dll 2017-07-24 15:19 - 2017-07-24 15:19 - 000318464 _____ (Propellerhead Software AB) C:\Windows\system32\REX Shared Library.dll 2017-07-24 15:19 - 2017-07-24 15:19 - 000072968 _____ (Avid Technology, Inc.) C:\Windows\system32\libjpegV4.dll 2017-07-24 15:19 - 2017-07-24 15:19 - 000066560 _____ C:\Windows\system32\ntrights.exe 2017-07-24 13:32 - 2017-07-24 13:32 - 000630784 _____ (PACE Anti-Piracy) C:\Windows\SysWOW64\ilinet.dll 2017-07-24 13:09 - 2017-07-24 13:09 - 001459872 _____ C:\Users\user\Documents\3359_Avid-Pro_Tools_.torrent 2017-07-22 00:35 - 2017-07-22 00:35 - 000000132 _____ C:\Users\user\AppData\Roaming\Adobe AIFF Format CS6 Prefs 2017-07-21 12:55 - 2017-07-21 12:55 - 000025130 _____ C:\Users\user\Desktop\digital-publications_cd+app+usb-drive_2017-07-21.xlsx 2017-07-20 11:53 - 2017-07-20 12:11 - 000012472 _____ C:\Users\user\Desktop\all-bundles-comparison.xlsx 2017-07-20 11:52 - 2017-07-20 12:10 - 000012579 _____ C:\Users\user\Desktop\5-bundles-with-better-revenue-for-ashram.xlsx 2017-07-20 11:04 - 2017-07-20 12:10 - 000012691 _____ C:\Users\user\Desktop\about-avrpt-usb-card-drives.xlsx 2017-07-20 02:00 - 2017-07-20 02:00 - 000400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2017-07-19 21:56 - 2015-10-14 09:58 - 001431552 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\ReWire.dll 2017-07-19 21:55 - 2017-07-19 21:55 - 000000000 ____D C:\Users\user\Desktop\iZotope_Nectar_v2_03_Production_Suite 2017-07-19 21:53 - 2017-07-19 21:53 - 000000000 ____D C:\Program Files\Soundspot 2017-07-18 13:58 - 2017-07-18 13:58 - 000000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom 2017-07-17 21:21 - 2017-07-17 21:21 - 000165193 _____ C:\Users\user\Desktop\Crash Mats.xlsx 2017-07-16 21:01 - 2017-07-16 21:01 - 000000000 ____D C:\MagicPlusMini 2017-07-15 21:30 - 2017-07-15 21:30 - 000000000 _____ C:\Users\user\AppData\Local\{ECB12073-E17B-4A30-AA00-0AF50361E40A} 2017-07-15 21:29 - 2017-07-16 17:58 - 000000000 ____D C:\Users\user\Desktop\torrent 2017-07-15 14:17 - 2017-07-28 07:02 - 000000000 ____D C:\ProgramData\xml_param 2017-07-15 12:50 - 2017-07-17 21:06 - 000000000 ____D C:\Users\user\Desktop\sonia-yoga-nidra 2017-07-13 23:00 - 2017-07-13 23:00 - 000000000 ___SD C:\Users\user\Documents\My Data Sources 2017-07-13 15:59 - 2017-07-13 15:59 - 000633144 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll 2017-07-13 15:59 - 2017-07-13 15:59 - 000395592 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll 2017-07-13 15:59 - 2017-07-13 15:59 - 000333632 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll 2017-07-13 15:59 - 2017-07-13 15:59 - 000087880 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll 2017-07-13 12:32 - 2017-07-19 21:56 - 000000000 ____D C:\Program Files\VSTPlugIns 2017-07-13 12:32 - 2017-07-13 12:33 - 000000000 ___SD C:\Program Files (x86)\Waves 2017-07-13 12:32 - 2017-07-13 12:32 - 000000000 ____D C:\Program Files\Common Files\Digidesign 2017-07-13 12:21 - 2017-07-13 12:21 - 000000000 ____D C:\Users\user\AppData\Local\Waves Audio 2017-07-13 12:20 - 2017-07-13 12:34 - 000000000 ___SD C:\ProgramData\Waves Audio 2017-07-13 12:20 - 2017-07-13 12:20 - 000000000 ____D C:\Users\user\.Waves Central 2017-07-13 12:20 - 2017-07-13 12:20 - 000000000 ____D C:\Users\user\.QtWebEngineProcess 2017-07-13 12:19 - 2017-07-24 21:07 - 000000000 ____D C:\Users\user\AppData\Roaming\Waves Audio 2017-07-13 12:12 - 2017-07-13 12:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default) 2017-07-13 12:11 - 2017-07-13 12:33 - 000000000 ___SD C:\Users\Public\Waves Audio 2017-07-13 12:11 - 2017-07-13 12:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves 2017-07-13 12:10 - 2017-08-02 14:44 - 000001226 _____ C:\Users\Public\Desktop\Waves Central.lnk 2017-07-13 12:10 - 2017-07-13 12:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves Central 2017-07-13 12:09 - 2017-07-13 12:09 - 000000000 ____D C:\Program Files (x86)\Waves Central 2017-07-12 16:29 - 2017-06-30 09:45 - 000394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-07-12 16:29 - 2017-06-30 09:02 - 000346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-07-12 16:29 - 2017-06-30 08:27 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-07-12 16:29 - 2017-06-30 08:27 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2017-07-12 16:29 - 2017-06-30 08:09 - 001549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-07-12 16:29 - 2017-06-30 08:08 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll 2017-07-12 16:29 - 2017-06-29 11:57 - 025734656 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-07-12 16:29 - 2017-06-29 11:34 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-07-12 16:29 - 2017-06-29 11:33 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-07-12 16:29 - 2017-06-29 11:32 - 002899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-07-12 16:29 - 2017-06-29 11:32 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-07-12 16:29 - 2017-06-29 11:24 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-07-12 16:29 - 2017-06-29 11:21 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-07-12 16:29 - 2017-06-29 11:20 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-07-12 16:29 - 2017-06-29 11:20 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-07-12 16:29 - 2017-06-29 11:20 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-07-12 16:29 - 2017-06-29 11:14 - 005975552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-07-12 16:29 - 2017-06-29 11:13 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-07-12 16:29 - 2017-06-29 11:09 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-07-12 16:29 - 2017-06-29 11:01 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-07-12 16:29 - 2017-06-29 11:01 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-07-12 16:29 - 2017-06-29 11:00 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-07-12 16:29 - 2017-06-29 10:57 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-07-12 16:29 - 2017-06-29 10:56 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-07-12 16:29 - 2017-06-29 10:53 - 020270592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-07-12 16:29 - 2017-06-29 10:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-07-12 16:29 - 2017-06-29 10:53 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-07-12 16:29 - 2017-06-29 10:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-07-12 16:29 - 2017-06-29 10:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-07-12 16:29 - 2017-06-29 10:52 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-07-12 16:29 - 2017-06-29 10:49 - 002290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-07-12 16:29 - 2017-06-29 10:46 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-07-12 16:29 - 2017-06-29 10:44 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-07-12 16:29 - 2017-06-29 10:43 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-07-12 16:29 - 2017-06-29 10:43 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-07-12 16:29 - 2017-06-29 10:41 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-07-12 16:29 - 2017-06-29 10:39 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-07-12 16:29 - 2017-06-29 10:39 - 000725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-07-12 16:29 - 2017-06-29 10:38 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-07-12 16:29 - 2017-06-29 10:37 - 002132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-07-12 16:29 - 2017-06-29 10:35 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-07-12 16:29 - 2017-06-29 10:31 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-07-12 16:29 - 2017-06-29 10:30 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-07-12 16:29 - 2017-06-29 10:30 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-07-12 16:29 - 2017-06-29 10:28 - 015253504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-07-12 16:29 - 2017-06-29 10:28 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-07-12 16:29 - 2017-06-29 10:26 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-07-12 16:29 - 2017-06-29 10:26 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-07-12 16:29 - 2017-06-29 10:24 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-07-12 16:29 - 2017-06-29 10:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-07-12 16:29 - 2017-06-29 10:22 - 004549632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-07-12 16:29 - 2017-06-29 10:18 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-07-12 16:29 - 2017-06-29 10:17 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-07-12 16:29 - 2017-06-29 10:16 - 002057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-07-12 16:29 - 2017-06-29 10:16 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-07-12 16:29 - 2017-06-29 10:13 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-07-12 16:29 - 2017-06-29 10:11 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-07-12 16:29 - 2017-06-29 09:58 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-07-12 16:29 - 2017-06-29 09:54 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-07-12 16:29 - 2017-06-22 20:28 - 003223040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-07-12 16:29 - 2017-06-16 01:53 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2017-07-12 16:29 - 2017-06-13 04:24 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2017-07-12 16:29 - 2017-06-13 04:24 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-07-12 16:29 - 2017-06-13 04:24 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-07-12 16:29 - 2017-06-13 04:19 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2017-07-12 16:29 - 2017-06-13 04:19 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-07-12 16:29 - 2017-06-13 04:19 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2017-07-12 16:29 - 2017-06-13 04:19 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2017-07-12 16:29 - 2017-06-13 04:19 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-07-12 16:29 - 2017-06-13 04:19 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2017-07-12 16:29 - 2017-06-13 03:59 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2017-07-12 16:29 - 2017-06-13 03:59 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2017-07-12 16:29 - 2017-06-13 03:59 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2017-07-12 16:29 - 2017-06-13 03:58 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-07-12 16:29 - 2017-06-13 03:58 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-07-12 16:29 - 2017-06-13 03:58 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll 2017-07-12 16:29 - 2017-06-13 03:44 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2017-07-12 16:29 - 2017-06-13 03:44 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2017-07-12 16:29 - 2017-06-13 03:44 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe 2017-07-12 16:29 - 2017-06-13 03:36 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe 2017-07-12 16:29 - 2017-06-13 03:36 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe 2017-07-12 16:29 - 2017-06-13 03:36 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe 2017-07-12 16:29 - 2017-06-10 21:29 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2017-07-12 16:29 - 2017-06-10 21:09 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2017-07-12 16:29 - 2017-06-09 21:03 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-07-12 16:29 - 2017-06-06 21:00 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-07-12 16:29 - 2017-06-06 20:42 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-07-12 16:29 - 2017-05-30 10:26 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-07-12 16:29 - 2017-05-30 10:26 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2017-07-12 16:29 - 2017-05-30 10:26 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2017-07-12 16:29 - 2017-05-16 21:05 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-07-12 16:29 - 2017-05-16 21:05 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2017-07-12 16:29 - 2017-05-03 21:04 - 000094952 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2017-07-12 16:29 - 2017-05-03 20:59 - 001206272 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000620544 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000311296 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2017-07-12 16:29 - 2017-05-03 18:35 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2017-07-12 16:29 - 2017-03-23 07:36 - 001691136 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2017-07-12 16:28 - 2017-06-30 08:27 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2017-07-12 16:28 - 2017-06-30 08:27 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2017-07-12 16:28 - 2017-06-30 08:10 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-07-12 16:28 - 2017-06-30 08:10 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-07-12 16:28 - 2017-06-30 08:09 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2017-07-12 16:28 - 2017-06-30 08:08 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2017-07-12 16:28 - 2017-06-30 08:08 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll 2017-07-12 16:28 - 2017-06-30 07:57 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-07-12 16:28 - 2017-06-30 07:57 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-07-12 16:28 - 2017-06-30 07:56 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2017-07-12 16:28 - 2017-06-30 07:56 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll 2017-07-12 16:28 - 2017-06-29 11:49 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-07-12 16:28 - 2017-06-29 11:48 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-07-12 16:28 - 2017-06-29 11:33 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-07-12 16:28 - 2017-06-29 11:32 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-07-12 16:28 - 2017-06-29 11:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-07-12 16:28 - 2017-06-29 11:20 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-07-12 16:28 - 2017-06-29 11:05 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-07-12 16:28 - 2017-06-29 10:53 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-07-12 16:28 - 2017-06-29 10:52 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-07-12 16:28 - 2017-06-29 10:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-07-12 16:28 - 2017-06-29 10:43 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-07-12 16:28 - 2017-06-29 09:59 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-07-12 16:28 - 2017-06-29 09:53 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-07-12 16:28 - 2017-06-13 04:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-07-12 16:28 - 2017-06-13 03:59 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-07-12 16:28 - 2017-06-13 03:59 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-07-12 16:28 - 2017-06-13 03:59 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-07-12 16:28 - 2017-06-13 03:59 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-07-12 16:28 - 2017-06-13 03:59 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-07-12 16:28 - 2017-06-13 03:58 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-07-12 16:28 - 2017-06-13 03:49 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-07-12 16:28 - 2017-06-13 03:42 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-07-12 16:28 - 2017-06-13 03:42 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-07-12 16:28 - 2017-06-13 03:42 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-07-12 16:28 - 2017-06-13 03:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-07-12 16:28 - 2017-06-13 03:39 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-07-12 16:28 - 2017-06-13 03:35 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-07-12 16:28 - 2017-05-21 09:54 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2017-07-12 16:28 - 2017-05-21 09:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2017-07-12 16:28 - 2017-05-16 21:00 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2017-07-12 10:37 - 2017-07-12 10:37 - 000003190 _____ C:\Windows\System32\Tasks\{EB7D89F4-994B-4A40-8D86-35A2CEB78D99} 2017-07-12 09:40 - 2017-07-12 09:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Klanghelm 2017-07-12 09:40 - 2017-07-12 09:40 - 000000000 ____D C:\Program Files\Klanghelm 2017-07-12 09:39 - 2017-07-12 09:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugin Alliance 2017-07-10 16:56 - 2017-07-12 15:39 - 000000000 ____D C:\Program Files\Plugin Alliance 2017-07-10 16:46 - 2017-07-10 16:56 - 000000000 ____D C:\Users\user\AppData\Roaming\Plugin Alliance Installation Manager 2017-07-10 11:55 - 2017-07-12 18:02 - 000000000 ____D C:\Users\user\Desktop\1999-daksinamurti-stotram-128kbps 2017-07-10 09:35 - 2017-07-10 09:36 - 000000000 ____D C:\Users\user\Documents\newsletter-inspiration 2017-07-07 11:21 - 2017-07-07 14:27 - 000000000 ____D C:\Users\user\Desktop\alphabet-isha 2017-07-05 11:47 - 2017-08-02 01:08 - 000000000 ____D C:\Users\user\Desktop\ukele-songs ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-08-04 09:19 - 2013-01-30 22:28 - 000000000 ____D C:\Users\user\AppData\Roaming\Skype 2017-08-04 09:03 - 2017-05-09 09:58 - 000000904 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2017-08-04 06:55 - 2013-12-16 21:50 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3599117210-139940529-1983179741-1000UA.job 2017-08-04 02:57 - 2009-07-14 10:15 - 000009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-08-04 02:57 - 2009-07-14 10:15 - 000009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-08-04 02:03 - 2013-01-30 13:40 - 000000000 ____D C:\Users\user\AppData\Local\Adobe 2017-08-04 01:45 - 2009-07-14 10:43 - 000800998 _____ C:\Windows\system32\PerfStringBackup.INI 2017-08-04 01:45 - 2009-07-14 08:50 - 000000000 ____D C:\Windows\inf 2017-08-04 00:40 - 2013-06-05 09:53 - 000388096 ___SH C:\Users\user\Documents\Thumbs.db 2017-08-04 00:36 - 2016-08-30 14:45 - 000000000 ____D C:\Users\user\AppData\Roaming\Mp3tag 2017-08-03 21:55 - 2013-12-16 21:50 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3599117210-139940529-1983179741-1000Core.job 2017-08-03 20:01 - 2017-05-17 00:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameXP v4.14 2017-08-03 17:59 - 2013-11-07 14:45 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc 2017-08-03 17:28 - 2013-11-29 10:47 - 000001456 _____ C:\Users\user\AppData\Local\Adobe Save for Web 13.0 Prefs 2017-08-03 16:46 - 2015-12-26 08:56 - 000000000 ____D C:\Program Files (x86)\Opera 2017-08-03 15:35 - 2013-03-14 22:29 - 000000000 ____D C:\Users\user\AppData\Roaming\uTorrent 2017-08-03 14:43 - 2015-11-16 22:50 - 000000000 ____D C:\Users\user\AppData\Local\CrashDumps 2017-08-03 14:35 - 2016-12-06 21:11 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla 2017-08-03 12:44 - 2016-09-08 15:34 - 000007887 _____ C:\Windows\BRRBCOM.INI 2017-08-03 10:02 - 2017-05-09 09:57 - 000000900 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2017-08-03 08:10 - 2017-05-09 09:57 - 000000000 ____D C:\Program Files (x86)\Dropbox 2017-08-03 07:22 - 2017-04-30 09:27 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2017-08-03 07:18 - 2016-05-18 10:14 - 000000000 __SHD C:\Users\user\IntelGraphicsProfiles 2017-08-03 07:17 - 2014-04-11 10:09 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-08-03 07:13 - 2009-07-14 10:38 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-08-02 23:15 - 2015-03-07 12:13 - 000000000 ____D C:\Windows\System32\Tasks\Sony Corporation 2017-08-02 23:15 - 2015-03-07 12:08 - 000000000 ____D C:\Program Files\Common Files\Sony Shared 2017-08-02 23:15 - 2013-03-13 23:29 - 000000000 ____D C:\Program Files (x86)\Sony 2017-08-02 23:11 - 2013-04-22 14:55 - 000000000 ____D C:\ProgramData\SmartSound Software Inc 2017-08-02 23:11 - 2013-01-25 22:54 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-08-02 22:53 - 2013-11-17 12:26 - 000000000 ____D C:\AdwCleaner 2017-08-02 22:06 - 2016-08-22 12:05 - 000000000 ____D C:\Users\user\Desktop\Kayesh 2017-08-02 21:56 - 2013-04-23 12:22 - 000000000 ____D C:\Users\user\AppData\Roaming\IObit 2017-08-02 21:56 - 2013-04-23 12:22 - 000000000 ____D C:\ProgramData\IObit 2017-08-02 21:48 - 2013-04-23 12:21 - 000000000 ____D C:\Program Files (x86)\IObit 2017-08-02 20:43 - 2009-07-14 08:50 - 000000000 ____D C:\Windows\security 2017-08-02 20:43 - 2009-07-14 08:50 - 000000000 ____D C:\Program Files\MsF to Iwares Starter Edition 2017-08-02 20:02 - 2014-04-11 10:08 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-08-02 20:02 - 2014-04-11 10:08 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2017-08-02 15:39 - 2017-01-04 22:40 - 000000000 ____D C:\Users\user\Desktop\AVRPT_2017 2017-08-02 14:45 - 2017-06-14 12:41 - 000001373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2017-08-02 14:45 - 2017-06-14 12:40 - 000001304 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2017-08-02 14:45 - 2017-05-05 16:02 - 000001320 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ProtectUSB Software.lnk 2017-08-02 14:45 - 2017-05-05 15:54 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-08-02 14:45 - 2017-04-30 10:11 - 000001176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2017-08-02 14:45 - 2017-03-14 23:34 - 000000868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIRiPad.lnk 2017-08-02 14:45 - 2017-01-21 23:12 - 000000972 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\join.me.lnk 2017-08-02 14:45 - 2017-01-11 22:35 - 000000754 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anki.lnk 2017-08-02 14:45 - 2016-11-05 23:07 - 000002056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk 2017-08-02 14:45 - 2016-08-15 18:11 - 000001569 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk 2017-08-02 14:45 - 2016-08-15 13:39 - 000002657 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo to Cartoon.lnk 2017-08-02 14:45 - 2016-08-03 20:58 - 000002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk 2017-08-02 14:45 - 2016-06-21 21:20 - 000001193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Scribe Transcription Software.lnk 2017-08-02 14:45 - 2016-06-21 21:17 - 000001241 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc Burning Software.lnk 2017-08-02 14:45 - 2016-06-21 21:14 - 000001743 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CafeTran Espresso.lnk 2017-08-02 14:45 - 2015-12-26 09:02 - 000001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk 2017-08-02 14:45 - 2015-11-29 12:14 - 000002194 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-08-02 14:45 - 2015-11-21 22:41 - 000000970 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FastCopy.lnk 2017-08-02 14:45 - 2015-11-09 00:13 - 000001010 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk 2017-08-02 14:45 - 2015-06-23 00:16 - 000001209 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTap Streaming Audio Recorder.lnk 2017-08-02 14:45 - 2013-11-29 00:24 - 000002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk 2017-08-02 14:45 - 2013-11-29 00:24 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk 2017-08-02 14:45 - 2013-11-29 00:17 - 000001036 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2017-08-02 14:45 - 2013-11-01 04:20 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-08-02 14:45 - 2013-05-13 00:07 - 000001211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk 2017-08-02 14:45 - 2013-05-13 00:07 - 000001123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk 2017-08-02 14:45 - 2013-05-13 00:06 - 000001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk 2017-08-02 14:45 - 2013-05-13 00:06 - 000001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk 2017-08-02 14:45 - 2013-05-13 00:04 - 000001523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk 2017-08-02 14:45 - 2013-05-13 00:04 - 000001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.exe.lnk 2017-08-02 14:45 - 2013-05-09 19:42 - 000002062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS.lnk 2017-08-02 14:45 - 2013-04-14 22:59 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 8.lnk 2017-08-02 14:45 - 2013-03-28 21:16 - 000002045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition 3.0.lnk 2017-08-02 14:45 - 2013-03-16 15:07 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2017-08-02 14:45 - 2013-02-01 07:52 - 000001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CS5.5.lnk 2017-08-02 14:45 - 2013-02-01 07:50 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.5.lnk 2017-08-02 14:45 - 2013-02-01 07:50 - 000001101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk 2017-08-02 14:45 - 2013-01-30 14:51 - 000001342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk 2017-08-02 14:45 - 2013-01-26 12:15 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2017-08-02 14:45 - 2013-01-26 12:15 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2017-08-02 14:45 - 2013-01-25 22:48 - 000001284 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-08-02 14:45 - 2009-07-14 10:27 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-08-02 14:45 - 2009-07-14 10:27 - 000001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2017-08-02 14:45 - 2009-07-14 10:27 - 000001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2017-08-02 14:45 - 2009-07-14 10:24 - 000001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2017-08-02 14:44 - 2016-10-26 22:11 - 000001894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk 2017-08-02 14:44 - 2013-01-30 14:49 - 000001325 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk 2017-08-02 14:44 - 2009-07-14 10:31 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2017-08-02 14:44 - 2009-07-14 10:19 - 000001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2017-08-02 14:43 - 2016-03-26 00:02 - 000001944 _____ C:\Users\user\Desktop\iLanguage.lnk 2017-08-02 14:43 - 2015-11-18 11:53 - 000001465 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Free Video To Audio Converter 2015.lnk 2017-08-02 14:43 - 2014-05-21 13:43 - 000000833 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2017-08-02 14:41 - 2015-12-02 11:56 - 000000000 ____D C:\Program Files (x86)\Aktiv MP3 Recorder 2017-08-02 14:41 - 2014-02-13 00:56 - 000000000 ____D C:\Program Files\COMODO 2017-08-02 13:24 - 2017-03-21 22:19 - 000000000 ____D C:\Users\user\Documents\2017-bundle-content 2017-08-02 12:14 - 2014-08-11 20:16 - 000000000 ____D C:\Program Files (x86)\Mobile Partner 2017-08-02 12:10 - 2013-11-01 04:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2017-08-02 12:07 - 2014-12-12 22:00 - 000000000 ____D C:\Users\user\AppData\Roaming\DigitalVolcano 2017-08-02 12:06 - 2014-12-07 23:14 - 000000000 ____D C:\Program Files (x86)\AviSynth 2.5 2017-08-02 12:01 - 2013-12-11 01:07 - 000000000 ____D C:\ProgramData\MAGIX 2017-08-02 12:00 - 2017-05-05 16:02 - 000000000 ____D C:\Program Files (x86)\Protect Software ProtectUSB Software 2017-08-02 12:00 - 2013-01-30 22:01 - 000000000 ____D C:\Program Files (x86)\MMX353G 3G USB Manager 2017-08-02 03:25 - 2017-07-02 13:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-08-02 03:25 - 2017-02-08 20:51 - 000000000 ____D C:\Users\user\AppData\Roaming\Hide.me 2017-08-02 03:25 - 2016-10-26 22:11 - 000000000 ____D C:\Program Files (x86)\Bluestacks 2017-08-02 03:25 - 2015-12-04 17:33 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software 2017-08-02 03:25 - 2014-05-22 16:59 - 000000000 ____D C:\Program Files (x86)\kBilling 2017-08-02 03:25 - 2009-07-14 08:50 - 000000000 ____D C:\Windows\registration 2017-08-02 03:14 - 2016-08-23 22:30 - 000000000 _____ C:\Windows\SysWOW64\last.dump 2017-08-01 13:06 - 2017-06-06 12:10 - 000000000 ____D C:\Users\user\Desktop\swamini-BG-2010-meta 2017-07-31 10:18 - 2016-03-05 15:15 - 000000000 ____D C:\Users\user\Desktop\AVRPT-main-files 2017-07-31 08:54 - 2009-07-14 08:50 - 000000000 ____D C:\Windows\system32\NDF 2017-07-30 15:13 - 2013-01-30 14:04 - 000000000 ____D C:\Program Files (x86)\Google 2017-07-28 01:12 - 2014-03-02 02:29 - 000000000 ____D C:\ProgramData\Aimersoft YouTube Downloader 2017-07-27 21:25 - 2016-11-27 20:49 - 000000000 ____D C:\Users\user\Desktop\rakesh-yoga 2017-07-27 00:56 - 2017-06-26 13:37 - 000000000 ____D C:\Users\user\Desktop\sonia-web 2017-07-25 22:52 - 2016-12-20 11:05 - 000000000 ____D C:\Users\user\Desktop\rakesh-web 2017-07-24 20:21 - 2013-01-29 16:12 - 000236608 _____ C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT 2017-07-24 18:07 - 2009-07-14 10:15 - 006210736 _____ C:\Windows\system32\FNTCACHE.DAT 2017-07-24 16:42 - 2016-11-05 23:00 - 000000000 ____D C:\Program Files\Common Files\Avid 2017-07-24 12:15 - 2017-02-08 20:50 - 000000000 ____D C:\Program Files (x86)\hide.me VPN 2017-07-24 02:40 - 2013-05-25 11:33 - 000000000 ____D C:\Users\user\AppData\Local\ElevatedDiagnostics 2017-07-23 22:53 - 2016-11-19 10:43 - 000000000 ____D C:\Users\user\Documents\addresses 2017-07-22 12:31 - 2017-01-08 22:46 - 000000000 ____D C:\Users\user\Desktop\sonia-2017 2017-07-21 16:46 - 2015-12-26 09:03 - 000003844 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1451100758 2017-07-20 06:52 - 2014-02-20 13:46 - 000000000 ____D C:\Users\user\AppData\Roaming\iZotope 2017-07-20 02:02 - 2017-04-30 10:11 - 000003890 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1493527308 2017-07-20 02:01 - 2017-04-30 09:27 - 000146696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2017-07-20 02:00 - 2017-04-30 09:27 - 000146664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys.150049628225003 2017-07-20 01:59 - 2017-04-30 09:27 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys 2017-07-20 01:59 - 2017-04-30 09:27 - 000320008 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys 2017-07-20 01:59 - 2017-04-30 09:27 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys 2017-07-20 01:59 - 2017-04-30 09:27 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys 2017-07-19 21:59 - 2013-05-24 14:03 - 000000000 ____D C:\ProgramData\Package Cache 2017-07-19 21:56 - 2016-11-05 23:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope 2017-07-19 21:56 - 2016-11-05 23:00 - 000000000 ____D C:\Users\user\Documents\iZotope 2017-07-19 21:56 - 2016-11-05 23:00 - 000000000 ____D C:\Program Files (x86)\iZotope 2017-07-19 21:56 - 2013-03-25 14:41 - 000000000 ____D C:\Program Files (x86)\VSTplugins 2017-07-19 21:53 - 2016-11-05 23:01 - 000000000 ____D C:\Program Files\Common Files\VST3 2017-07-18 20:20 - 2015-11-13 15:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Find and Mount 2017-07-18 20:20 - 2015-03-13 23:14 - 000000000 ____D C:\Program Files\A-FF Find and Mount 2017-07-18 17:42 - 2015-11-28 23:31 - 000000000 ____D C:\Users\user\Desktop\Diwan-iyengaryoga.co.in 2017-07-18 16:29 - 2016-11-02 21:19 - 000000000 ____D C:\Users\user\Desktop\joy-web+more 2017-07-18 13:59 - 2017-01-11 23:57 - 000000000 ____D C:\Users\user\AppData\Roaming\Zoom 2017-07-15 21:47 - 2015-10-09 08:39 - 000571656 _____ C:\Windows\ntbtlog.txt 2017-07-15 06:55 - 2015-11-21 16:07 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-07-15 06:55 - 2013-11-01 04:27 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-07-15 06:55 - 2013-11-01 04:27 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-07-15 06:55 - 2013-11-01 04:27 - 000000000 ____D C:\Windows\system32\Macromed 2017-07-15 06:55 - 2013-01-30 14:49 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-07-14 16:15 - 2017-06-13 14:02 - 000000000 ____D C:\Users\user\Desktop\sonia-meta-2017 2017-07-14 12:19 - 2014-06-24 17:13 - 000000372 ____H C:\Users\user\Desktop\.BridgeLabelsAndRatings 2017-07-13 04:07 - 2009-07-14 08:50 - 000000000 ____D C:\Windows\rescache 2017-07-13 03:26 - 2017-05-20 06:18 - 000000000 ____D C:\Windows\system32\appraiser 2017-07-11 00:33 - 2013-01-30 13:06 - 000000000 ____D C:\Users\user\AppData\Roaming\Adobe 2017-07-09 03:34 - 2013-04-01 07:34 - 000000000 ____D C:\Users\user\AppData\Roaming\FileZilla 2017-07-07 16:04 - 2013-05-22 21:21 - 000000000 ____D C:\Users\user\Documents\pujabook-michika 2017-07-07 01:19 - 2014-01-20 22:43 - 000000000 ____D C:\Users\user\Desktop\AVRPT-accounts ==================== Files in the root of some directories ======= 2013-02-17 08:57 - 2013-02-17 08:57 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll 2017-07-22 00:35 - 2017-07-22 00:35 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe AIFF Format CS6 Prefs 2013-12-27 00:01 - 2017-02-03 23:15 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe BMP Format CS6 Prefs 2013-05-19 20:19 - 2013-05-19 20:19 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe GIF Format CS5 Prefs 2013-12-26 23:22 - 2017-03-31 10:02 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe GIF Format CS6 Prefs 2013-12-26 22:42 - 2016-08-05 23:43 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe IllExport Filter CS6 Prefs 2013-12-26 22:46 - 2017-06-20 21:12 - 000000132 _____ () C:\Users\user\AppData\Roaming\Adobe PNG Format CS6 Prefs 2014-01-16 00:59 - 2014-01-16 00:59 - 000000049 ____H () C:\Users\user\AppData\Roaming\Bounce Mail Handler.ini 2015-02-16 22:15 - 2015-02-16 23:03 - 000000659 _____ () C:\Users\user\AppData\Roaming\droid4xinstaller.log 2014-03-01 18:27 - 2014-03-01 18:31 - 000022472 _____ () C:\Users\user\AppData\Roaming\net.telestream.producer.xml 2014-03-01 18:31 - 2014-03-01 18:31 - 000000110 _____ () C:\Users\user\AppData\Roaming\net.telestream.wirecast.webstream.xml 2014-05-22 20:18 - 2014-05-22 20:18 - 000000409 _____ () C:\Users\user\AppData\Roaming\repmand.ini 2014-05-22 20:18 - 2014-05-22 20:18 - 000000033 _____ () C:\Users\user\AppData\Roaming\repmandlib.ini 2015-06-23 00:16 - 2015-06-23 00:16 - 000001167 _____ () C:\Users\user\AppData\Roaming\trace_FilterInstaller.txt 2015-06-23 00:16 - 2015-06-23 00:16 - 000000000 _____ () C:\Users\user\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2014-01-15 04:22 - 2017-02-23 23:10 - 000088842 _____ () C:\Users\user\AppData\Roaming\unins000.dat 2017-02-23 22:10 - 2017-02-23 22:09 - 000715253 _____ () C:\Users\user\AppData\Roaming\unins000.exe 2014-01-10 14:24 - 2014-01-10 14:31 - 142848334 _____ () C:\Users\user\AppData\Local\ACCCx2_3_0_322.zip.aamdownload 2014-01-10 14:24 - 2014-01-10 14:25 - 000001796 _____ () C:\Users\user\AppData\Local\ACCCx2_3_0_322.zip.aamdownload.aamd 2015-12-07 14:46 - 2015-12-07 15:46 - 229845839 _____ () C:\Users\user\AppData\Local\ACCCx3_4_1_181.zip.aamdownload 2015-12-07 14:46 - 2015-12-07 15:46 - 000002657 _____ () C:\Users\user\AppData\Local\ACCCx3_4_1_181.zip.aamdownload.aamd 2016-08-15 15:15 - 2016-08-15 15:37 - 302675591 _____ () C:\Users\user\AppData\Local\ACCCx3_7_5_291.zip.aamdownload 2016-08-15 15:15 - 2016-08-15 15:37 - 000003392 _____ () C:\Users\user\AppData\Local\ACCCx3_7_5_291.zip.aamdownload.aamd 2013-05-13 14:20 - 2016-02-13 11:03 - 000001456 _____ () C:\Users\user\AppData\Local\Adobe Save for Web 12.0 Prefs 2013-11-29 10:47 - 2017-08-03 17:28 - 000001456 _____ () C:\Users\user\AppData\Local\Adobe Save for Web 13.0 Prefs 2017-05-13 14:49 - 2017-05-13 14:49 - 000000000 ____H () C:\Users\user\AppData\Local\BITFD13.tmp 2013-10-02 12:52 - 2014-07-06 12:18 - 000009728 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-03-10 11:15 - 2017-03-10 11:15 - 000000092 _____ () C:\Users\user\AppData\Local\fusioncache.dat 2014-05-19 08:37 - 2014-05-19 08:57 - 000007609 _____ () C:\Users\user\AppData\Local\resmon.resmoncfg 2015-04-03 20:36 - 2015-04-03 20:36 - 000000052 _____ () C:\Users\user\AppData\Local\vmrWorkAround.log 2017-05-13 14:48 - 2017-05-13 14:49 - 000000000 _____ () C:\Users\user\AppData\Local\{2F8851E9-3400-425F-AD29-F4975B9AB53C} 2014-06-28 10:20 - 2014-06-28 10:20 - 000000000 _____ () C:\Users\user\AppData\Local\{8A038322-92C6-4051-A95F-064E7D15ABE3} 2017-07-15 21:30 - 2017-07-15 21:30 - 000000000 _____ () C:\Users\user\AppData\Local\{ECB12073-E17B-4A30-AA00-0AF50361E40A} 2017-05-13 14:47 - 2017-05-13 14:47 - 000000000 _____ () C:\Users\user\AppData\Local\{EE3266C0-654E-4527-82F5-A08B6BC36423} 2014-05-22 17:01 - 2014-05-22 17:01 - 000005024 _____ () C:\ProgramData\dbvvomjc.bpt 2013-01-30 14:44 - 2014-01-17 02:54 - 000001766 _____ () C:\ProgramData\hpzinstall.log 2014-06-19 21:39 - 2014-06-19 21:39 - 000010375 _____ () C:\ProgramData\regid.2008-04.com.caricaturesoft_4ECD9E60-F79E-481F-B428-F04A7E9EF846.swidtag 2017-08-02 12:54 - 2017-08-02 12:54 - 000000004 _____ () C:\ProgramData\_lg.3sap Some files in TEMP: ==================== 2017-02-19 13:43 - 2017-02-19 13:45 - 000004096 _____ () C:\Users\user\AppData\Local\Temp\bk4jaotl.dll 2016-06-21 21:17 - 2016-06-21 21:17 - 000864528 _____ (NCH Software) C:\Users\user\AppData\Local\Temp\burnsetup.exe 2016-06-26 00:17 - 2016-06-26 00:17 - 000739904 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u91-windows-au.exe 2017-03-10 11:19 - 2006-12-02 04:56 - 001101824 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\mfc80.dll 2017-03-10 11:19 - 2006-12-02 04:56 - 001093120 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\mfc80u.dll 2017-03-10 11:19 - 2006-12-02 10:48 - 000069632 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\mfcm80.dll 2017-03-10 11:19 - 2006-12-02 10:52 - 000057856 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\mfcm80u.dll 2012-10-26 15:20 - 2012-10-26 15:20 - 002497897 ____R (Mobile ) C:\Users\user\AppData\Local\Temp\Modem_installation.exe 2017-03-10 11:19 - 2006-12-02 10:52 - 000479232 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\msvcm80.dll 2017-03-10 11:19 - 2006-12-02 02:33 - 000548864 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\msvcp80.dll 2017-03-10 11:19 - 2006-12-02 02:33 - 000626688 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\msvcr80.dll 2017-03-10 11:19 - 2011-09-13 13:46 - 000420808 _____ () C:\Users\user\AppData\Local\Temp\OSU.exe 2016-12-16 11:58 - 2016-12-16 11:58 - 000003072 _____ () C:\Users\user\AppData\Local\Temp\p1o4yvd3.dll 2016-12-16 12:00 - 2016-12-16 12:01 - 000003072 _____ () C:\Users\user\AppData\Local\Temp\qgflc51f.dll 2016-11-25 21:26 - 2017-07-22 11:59 - 058740704 _____ (Skype Technologies S.A.) C:\Users\user\AppData\Local\Temp\SkypeSetup.exe 2016-06-21 21:34 - 2016-06-21 21:34 - 000684032 ____N () C:\Users\user\AppData\Local\Temp\sqlite-3.8.7-443ab486-4d09-4c57-a722-ba07dfc63722-sqlitejdbc.dll 2017-04-07 00:51 - 2017-04-07 00:58 - 005958864 _____ (eVenture Limited ) C:\Users\user\AppData\Local\Temp\tmpBE36.exe 2017-03-16 22:01 - 2017-03-16 22:01 - 014456872 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\vc_redist.x86.exe 2017-02-24 22:11 - 2017-03-10 12:21 - 030533688 _____ () C:\Users\user\AppData\Local\Temp\vlc-2.2.4-win32.exe 2016-10-23 16:40 - 2016-10-23 16:41 - 005241568 _____ (NCH Software) C:\Users\user\AppData\Local\Temp\vpsetup.exe 2017-03-10 11:19 - 2011-09-13 13:41 - 000012800 _____ () C:\Users\user\AppData\Local\Temp\WtgDriverInstallX.dll 2017-03-10 11:19 - 2011-09-13 13:45 - 000606208 _____ () C:\Users\user\AppData\Local\Temp\WTGXMLUtil.dll 2015-04-21 15:17 - 2015-04-21 15:17 - 000455600 ____R (Macrovision Corporation) C:\Users\user\AppData\Local\Temp\_is8D98.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-08-02 04:20 ==================== End of FRST.txt ============================