Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Laptop Check-up [Closed]

Started by Gatt , Dec 24 2014 09:54 AM

This topic is locked

#1
Gatt

Posted 24 December 2014 - 09:54 AM

Member

Member
20 posts

Well i bought a used laptop on win 8 on it and i want to check it from viruses etc,thanks.

OTL logfile created on: 24-Dec-14 5:35:12 PM - Run 2

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\FiD0\Downloads

64bit- Enterprise Edition (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.17088)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: dd-MMM-yy

7.90 Gb Total Physical Memory | 5.59 Gb Available Physical Memory | 70.82% Memory free

9.09 Gb Paging File | 6.72 Gb Available in Paging File | 73.98% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 97.31 Gb Total Space | 35.65 Gb Free Space | 36.63% Space Free | Partition Type: NTFS

Drive F: | 833.85 Gb Total Space | 807.62 Gb Free Space | 96.85% Space Free | Partition Type: NTFS

Computer Name: FADYNADER | User Name: FiD0 | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014-12-24 17:34:47 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\FiD0\Downloads\OTL.exe

PRC - [2014-09-17 00:32:48 | 000,844,288 | -HS- | M] () -- C:\Users\FiD0\AppData\Roaming\Paint.exe

PRC - [2014-09-04 05:01:19 | 000,852,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

PRC - [2014-08-06 11:34:34 | 005,052,224 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

PRC - [2014-07-27 17:49:38 | 000,076,152 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

PRC - [2013-12-18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2013-11-14 13:58:33 | 001,028,384 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

PRC - [2013-11-14 13:58:23 | 001,914,656 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

PRC - [2012-10-10 10:59:28 | 000,143,024 | ---- | M] (Stardock Software, Inc) -- C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe

PRC - [2012-09-28 05:42:26 | 000,285,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

PRC - [2012-09-28 05:42:26 | 000,014,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

PRC - [2012-09-15 03:42:14 | 001,342,008 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

PRC - [2012-09-08 02:33:08 | 000,581,024 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

PRC - [2012-09-08 02:33:08 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

PRC - [2012-09-06 13:50:40 | 001,124,288 | ---- | M] (Motorola Solutions, Inc.) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

PRC - [2012-08-27 17:45:56 | 001,112,000 | ---- | M] (Motorola Solutions, Inc.) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

PRC - [2012-08-10 10:36:54 | 001,641,320 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

PRC - [2012-08-10 10:36:40 | 003,698,024 | ---- | M] (AuthenTec Inc.) -- C:\Program Files (x86)\HP SimplePass\TouchControl.exe

PRC - [2012-08-10 10:36:26 | 004,073,320 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

PRC - [2012-07-20 12:09:42 | 000,708,648 | ---- | M] (Intel) -- C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe

PRC - [2012-07-20 12:09:42 | 000,193,576 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\irstrtsv.exe

PRC - [2012-07-18 03:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

PRC - [2012-07-18 03:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

PRC - [2012-07-18 03:10:24 | 000,128,896 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

PRC - [2012-07-18 03:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

PRC - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe

PRC - [2011-08-22 17:07:32 | 000,354,416 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe

PRC - [2011-08-22 17:06:56 | 000,432,752 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe

PRC - [2011-08-22 15:28:42 | 000,079,872 | ---- | M] (VMware, Inc.) -- F:\Programs\Vmware\vmware-authd.exe

========== Modules (No Company Name) ==========

MOD - [2014-09-17 00:32:48 | 000,844,288 | -HS- | M] () -- C:\Users\FiD0\AppData\Roaming\Paint.exe

MOD - [2014-09-16 16:18:39 | 001,090,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\f72d41cf589260c31dd131862e14c974\System.ServiceModel.Web.ni.dll

MOD - [2014-09-16 16:16:06 | 002,997,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\017ba5623263deaab4e228cf294c4812\System.IdentityModel.ni.dll

MOD - [2014-09-16 16:14:59 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\7b6c6a096700a21c0eecf628f5ef6bc3\CustomMarshalers.ni.dll

MOD - [2014-09-16 16:14:54 | 002,297,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\e4ca095224104f4877fce6778db9236c\System.Core.ni.dll

MOD - [2014-09-15 16:11:27 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\907384ce43ff2de2187226b0c06e5c79\System.Configuration.ni.dll

MOD - [2014-09-15 16:11:22 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\848cc3bc6301915f75c4ad34a242e3b9\System.Xml.ni.dll

MOD - [2014-09-15 16:11:17 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\504c1e886bc566ce6c17e1c0b3b26688\System.Windows.Forms.ni.dll

MOD - [2014-09-15 16:11:06 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\091b84a56a7dbd81d6314c8fafaf260a\System.Drawing.ni.dll

MOD - [2014-09-15 16:10:26 | 007,988,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\7d6539d1e5dda1ef823234407a6ee48e\System.ni.dll

MOD - [2014-09-15 16:10:18 | 011,500,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b9d3e6f3fe8936deb2f1defb3a205f9a\mscorlib.ni.dll

MOD - [2014-09-15 16:10:07 | 019,720,192 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\2a94b8581236984c29b2eeed12b599d6\System.ServiceModel.ni.dll

MOD - [2014-09-13 23:03:36 | 000,029,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorDataMcfeeca6f#\4aa2a1c945079c26b5d190d62d64884b\IAStorDataMgrSvcInterfaces.ni.dll

MOD - [2014-09-13 23:03:14 | 000,370,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorUtil\63c6bfe130b3430669b66db8dde32343\IAStorUtil.ni.dll

MOD - [2014-09-13 23:03:13 | 000,794,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\c69f0ae329662091fb788f851e30461a\System.ServiceModel.Internals.ni.dll

MOD - [2014-09-13 23:03:13 | 000,122,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\b876b8527a4f5d88073e672fc4dfc570\SMDiagnostics.ni.dll

MOD - [2014-09-13 22:59:28 | 007,668,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\10216950450614b68fe2f42e33fa3c80\System.Xml.ni.dll

MOD - [2014-09-13 22:59:18 | 012,877,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f19197acf91e929a378151a745976330\System.Windows.Forms.ni.dll

MOD - [2014-09-13 22:58:40 | 002,822,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\8342e2bcd229103fdfc7abd2bcd26ea3\System.Runtime.Serialization.ni.dll

MOD - [2014-09-13 22:58:23 | 000,975,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\270a200e4a55f281235dcbde07450912\System.Configuration.ni.dll

MOD - [2014-09-13 22:57:17 | 007,041,536 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\3ae088663a4482609edd33763e1261bb\System.Core.ni.dll

MOD - [2014-09-13 22:57:05 | 010,051,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\dfb8b0724c39cdbbfcbb6f83a5be22cc\System.ni.dll

MOD - [2014-09-04 05:01:18 | 000,331,592 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppgooglenaclpluginchrome.dll

MOD - [2014-09-04 05:01:16 | 008,577,864 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll

MOD - [2014-09-04 05:01:12 | 001,098,056 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libglesv2.dll

MOD - [2014-09-04 05:01:10 | 000,174,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libegl.dll

MOD - [2014-09-04 05:01:09 | 001,660,232 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ffmpegsumo.dll

MOD - [2014-05-27 00:12:04 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

MOD - [2014-02-18 21:25:47 | 000,026,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorCommon\e8828390cfccd26055e2a6ea8f0456f4\IAStorCommon.ni.dll

MOD - [2014-02-16 13:36:28 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\61be23d6a688188e3419a1eb46fc9d9d\System.Drawing.ni.dll

MOD - [2014-02-16 13:14:26 | 000,198,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\0000f5ef7d4e9fef6ab4084784cf238c\CustomMarshalers.ni.dll

MOD - [2014-02-16 13:14:24 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\391541c89ed7585fc7e8936c43cee387\mscorlib.ni.dll

MOD - [2013-11-14 13:58:09 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll

MOD - [2012-08-10 10:36:26 | 004,073,320 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

MOD - [2012-08-10 10:36:20 | 000,018,792 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\DownloadManager.dll

========== Services (SafeList) ==========

SRV:64bit: - [2014-05-30 01:02:28 | 000,439,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)

SRV:64bit: - [2014-03-29 10:05:59 | 000,016,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)

SRV:64bit: - [2013-11-14 13:58:38 | 015,125,280 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)

SRV:64bit: - [2013-08-29 02:24:04 | 003,378,416 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)

SRV:64bit: - [2013-08-29 02:23:48 | 000,273,136 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)

SRV:64bit: - [2013-08-29 02:23:40 | 000,626,416 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)

SRV:64bit: - [2013-08-29 02:23:20 | 000,149,744 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)

SRV:64bit: - [2013-08-16 07:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)

SRV:64bit: - [2013-07-08 13:29:02 | 000,183,896 | ---- | M] (Sandboxie Holdings, LLC) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)

SRV:64bit: - [2013-06-25 00:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)

SRV:64bit: - [2013-06-01 11:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)

SRV:64bit: - [2013-05-04 08:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)

SRV:64bit: - [2013-05-04 08:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)

SRV:64bit: - [2013-04-09 06:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)

SRV:64bit: - [2013-03-02 04:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)

SRV:64bit: - [2013-03-02 04:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)

SRV:64bit: - [2013-01-10 01:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)

SRV:64bit: - [2012-09-20 08:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)

SRV:64bit: - [2012-09-06 10:47:02 | 000,028,160 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\valWBFPolicyService.exe -- (valWBFPolicyService)

SRV:64bit: - [2012-08-23 18:45:42 | 000,029,600 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)

SRV:64bit: - [2012-08-14 11:48:50 | 000,322,048 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)

SRV:64bit: - [2012-07-26 05:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)

SRV:64bit: - [2012-07-26 05:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)

SRV:64bit: - [2012-07-26 05:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)

SRV:64bit: - [2012-07-26 05:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)

SRV:64bit: - [2012-07-26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)

SRV:64bit: - [2012-07-26 05:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)

SRV:64bit: - [2012-07-26 05:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)

SRV:64bit: - [2012-07-26 05:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)

SRV:64bit: - [2012-07-26 05:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)

SRV:64bit: - [2012-07-26 05:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)

SRV:64bit: - [2012-07-26 05:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)

SRV:64bit: - [2012-07-26 05:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)

SRV:64bit: - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)

SRV:64bit: - [2012-04-20 23:16:12 | 000,635,104 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel®

SRV:64bit: - [2007-11-07 18:11:22 | 004,466,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)

SRV - [2014-09-17 00:32:52 | 000,844,288 | ---- | M] () [Auto | Stopped] -- F:\Programs\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2014-09-17 00:32:52 | 000,844,288 | ---- | M] () [Disabled | Stopped] -- F:\Programs\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2014-08-06 11:34:34 | 005,052,224 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)

SRV - [2014-07-27 17:49:38 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)

SRV - [2014-07-16 04:28:18 | 000,542,912 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013-12-18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013-11-14 13:58:23 | 001,914,656 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2013-11-13 05:39:36 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013-11-04 15:52:54 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)

SRV - [2013-09-12 05:42:34 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013-03-01 03:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)

SRV - [2012-10-10 10:59:28 | 000,143,024 | ---- | M] (Stardock Software, Inc) [Auto | Running] -- C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe -- (Start8)

SRV - [2012-09-28 05:42:26 | 000,014,904 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)

SRV - [2012-09-27 20:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)

SRV - [2012-09-08 02:33:08 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)

SRV - [2012-09-06 13:50:40 | 001,124,288 | ---- | M] (Motorola Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)

SRV - [2012-08-27 17:45:56 | 001,112,000 | ---- | M] (Motorola Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)

SRV - [2012-08-10 10:36:54 | 001,641,320 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe -- (FPLService)

SRV - [2012-07-26 05:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)

SRV - [2012-07-26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)

SRV - [2012-07-25 04:00:08 | 002,457,232 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)

SRV - [2012-07-20 12:09:42 | 000,193,576 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysWOW64\irstrtsv.exe -- (irstrtsv)

SRV - [2012-07-18 03:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)

SRV - [2012-07-18 03:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)

SRV - [2012-07-18 03:10:24 | 000,128,896 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe -- (Intel®

SRV - [2012-07-18 03:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)

SRV - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)

SRV - [2011-08-22 17:07:32 | 000,354,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)

SRV - [2011-08-22 17:06:56 | 000,432,752 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)

SRV - [2011-08-22 16:34:52 | 011,837,440 | ---- | M] () [On_Demand | Stopped] -- F:\Programs\Vmware\vmware-hostd.exe -- (VMwareHostd)

SRV - [2011-08-22 15:28:42 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- F:\Programs\Vmware\vmware-authd.exe -- (VMAuthdService)

SRV - [2011-08-21 23:11:28 | 000,846,448 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService)

SRV - [2010-06-16 01:44:29 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)

========== Driver Services (SafeList) ==========

DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)

DRV:64bit: - [2014-05-12 07:26:14 | 000,064,216 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mwac.sys -- (MBAMWebAccessControl)

DRV:64bit: - [2014-05-12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2014-04-06 12:55:51 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)

DRV:64bit: - [2014-04-06 12:55:02 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV:64bit: - [2014-03-28 21:19:38 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)

DRV:64bit: - [2014-03-24 00:11:52 | 000,269,592 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)

DRV:64bit: - [2014-01-07 09:02:04 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\nuidfltr.sys -- (NuidFltr)

DRV:64bit: - [2014-01-07 08:42:08 | 000,076,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\dc3d.sys -- (dc3d)

DRV:64bit: - [2013-12-18 17:16:44 | 000,140,560 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VBoxNetAdp.sys -- (VBoxNetAdp)

DRV:64bit: - [2013-12-06 15:37:50 | 000,035,232 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mcaudrv_x64.sys -- (mcaudrv_simple)

DRV:64bit: - [2013-11-27 03:53:58 | 000,052,128 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mcvidrv.sys -- (ManyCam)

DRV:64bit: - [2013-11-14 13:58:46 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nvvad64v.sys -- (nvvad_WaveExtensible)

DRV:64bit: - [2013-11-14 13:58:16 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\nvpciflt.sys -- (nvpciflt)

DRV:64bit: - [2013-10-28 14:13:22 | 000,449,496 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud)

DRV:64bit: - [2013-10-28 14:06:24 | 004,195,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2013-10-10 13:53:35 | 000,096,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)

DRV:64bit: - [2013-10-09 08:12:46 | 003,345,376 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\NETwew00.sys -- (NETwNe64)

DRV:64bit: - [2013-10-05 08:10:20 | 000,285,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)

DRV:64bit: - [2013-10-02 04:50:07 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)

DRV:64bit: - [2013-08-22 14:40:24 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\tap0901.sys -- (tap0901)

DRV:64bit: - [2013-08-20 16:02:12 | 000,204,568 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm)

DRV:64bit: - [2013-08-20 16:02:12 | 000,103,576 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)

DRV:64bit: - [2013-08-16 07:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)

DRV:64bit: - [2013-08-10 08:30:22 | 000,151,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)

DRV:64bit: - [2013-07-25 16:53:46 | 000,023,040 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\netaapl64.sys -- (Netaapl)

DRV:64bit: - [2013-07-09 10:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)

DRV:64bit: - [2013-07-08 13:29:00 | 000,199,384 | ---- | M] (Sandboxie Holdings, LLC) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)

DRV:64bit: - [2013-07-02 03:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)

DRV:64bit: - [2013-07-02 03:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)

DRV:64bit: - [2013-06-29 08:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2013-06-01 05:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)

DRV:64bit: - [2013-03-02 12:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)

DRV:64bit: - [2013-03-02 12:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)

DRV:64bit: - [2013-03-01 03:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\npf.sys -- (NPF)

DRV:64bit: - [2013-01-10 03:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)

DRV:64bit: - [2012-12-13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012-11-27 05:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)

DRV:64bit: - [2012-11-20 06:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)

DRV:64bit: - [2012-11-06 05:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)

DRV:64bit: - [2012-10-12 10:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012-10-11 09:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)

DRV:64bit: - [2012-10-10 03:48:50 | 000,035,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\intelaud.sys -- (intaud_WaveExtensible)

DRV:64bit: - [2012-10-10 03:48:50 | 000,025,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\iwdbus.sys -- (iwdbus)

DRV:64bit: - [2012-10-10 03:48:48 | 000,188,896 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\xHCIPort.sys -- (XHCIPort)

DRV:64bit: - [2012-10-10 03:48:48 | 000,047,072 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\usb3Hub.sys -- (usb3Hub)

DRV:64bit: - [2012-09-28 05:37:04 | 000,650,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA)

DRV:64bit: - [2012-09-20 09:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2012-09-20 09:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2012-09-15 00:09:34 | 000,457,528 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SynTP.sys -- (SynTP)

DRV:64bit: - [2012-09-15 00:09:32 | 000,043,832 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Smb_driver_Intel.sys -- (SmbDrvI)

DRV:64bit: - [2012-09-13 13:35:08 | 000,162,344 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\AmpPal.sys -- (AMPPALP)

DRV:64bit: - [2012-09-13 13:35:08 | 000,162,344 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AmpPal.sys -- (AMPPAL)

DRV:64bit: - [2012-08-31 18:40:24 | 000,020,800 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WirelessButtonDriver64.sys -- (WirelessButtonDriver)

DRV:64bit: - [2012-08-29 17:36:54 | 000,857,472 | ---- | M] (Motorola Solutions, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btmhsf.sys -- (btmhsf)

DRV:64bit: - [2012-08-27 17:48:12 | 000,121,728 | ---- | M] (Motorola Solutions, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\btmaux.sys -- (btmaux)

DRV:64bit: - [2012-08-23 18:45:42 | 000,042,400 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Accelerometer.sys -- (Accelerometer)

DRV:64bit: - [2012-08-23 18:45:42 | 000,029,600 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\hpdskflt.sys -- (hpdskflt)

DRV:64bit: - [2012-08-21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012-08-14 11:48:50 | 000,542,208 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\stwrt64.sys -- (STHDA)

DRV:64bit: - [2012-08-09 05:17:50 | 000,273,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\RtsP2Stor.sys -- (RSP2STOR)

DRV:64bit: - [2012-08-06 20:07:08 | 000,068,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\iBtFltCoex.sys -- (ibtfltcoex)

DRV:64bit: - [2012-07-26 07:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2012-07-26 07:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)

DRV:64bit: - [2012-07-26 07:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)

DRV:64bit: - [2012-07-26 07:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)

DRV:64bit: - [2012-07-26 07:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)

DRV:64bit: - [2012-07-26 07:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)

DRV:64bit: - [2012-07-26 07:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)

DRV:64bit: - [2012-07-26 07:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2012-07-26 07:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2012-07-26 07:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)

DRV:64bit: - [2012-07-26 07:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2012-07-26 07:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)

DRV:64bit: - [2012-07-26 07:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)

DRV:64bit: - [2012-07-26 07:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2012-07-26 07:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)

DRV:64bit: - [2012-07-26 07:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2012-07-26 07:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2012-07-26 06:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)

DRV:64bit: - [2012-07-26 06:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)

DRV:64bit: - [2012-07-26 06:50:20 | 000,053,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Synth3dVsc.sys -- (Synth3dVsc)

DRV:64bit: - [2012-07-26 05:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)

DRV:64bit: - [2012-07-26 04:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)

DRV:64bit: - [2012-07-26 04:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)

DRV:64bit: - [2012-07-26 04:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)

DRV:64bit: - [2012-07-26 04:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)

DRV:64bit: - [2012-07-26 04:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)

DRV:64bit: - [2012-07-26 04:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)

DRV:64bit: - [2012-07-26 04:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)

DRV:64bit: - [2012-07-26 04:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)

DRV:64bit: - [2012-07-26 04:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)

DRV:64bit: - [2012-07-26 04:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)

DRV:64bit: - [2012-07-26 04:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)

DRV:64bit: - [2012-07-26 04:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)

DRV:64bit: - [2012-07-26 04:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)

DRV:64bit: - [2012-07-26 04:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2012-07-26 04:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)

DRV:64bit: - [2012-07-26 04:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)

DRV:64bit: - [2012-07-26 04:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012-07-26 04:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)

DRV:64bit: - [2012-07-26 04:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)

DRV:64bit: - [2012-07-26 04:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)

DRV:64bit: - [2012-07-26 04:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)

DRV:64bit: - [2012-07-26 04:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)

DRV:64bit: - [2012-07-26 04:25:02 | 000,202,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthLEEnum.sys -- (BthLEEnum)

DRV:64bit: - [2012-07-26 04:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)

DRV:64bit: - [2012-07-26 04:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)

DRV:64bit: - [2012-07-26 04:23:42 | 000,115,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\tsusbhub.sys -- (tsusbhub)

DRV:64bit: - [2012-07-26 04:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)

DRV:64bit: - [2012-07-21 03:09:40 | 000,043,800 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\irstrtdv.sys -- (irstrtdv)

DRV:64bit: - [2012-07-03 01:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)

DRV:64bit: - [2012-06-13 07:41:22 | 000,683,664 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)

DRV:64bit: - [2012-06-02 16:31:55 | 001,855,520 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\netr28ux.sys -- (netr28ux)

DRV:64bit: - [2012-05-31 09:49:12 | 000,458,384 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\RTL8187B.sys -- (RTL8187B)

DRV:64bit: - [2011-08-22 17:07:58 | 000,062,064 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmx86.sys -- (vmx86)

DRV:64bit: - [2011-08-22 17:06:14 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetuserif.sys -- (VMnetuserif)

DRV:64bit: - [2011-08-22 15:12:26 | 000,045,680 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetbridge.sys -- (VMnetBridge)

DRV:64bit: - [2011-08-22 15:12:26 | 000,020,080 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\vmnetadapter.sys -- (VMnetAdapter)

DRV:64bit: - [2011-08-21 23:11:26 | 000,039,024 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\hcmon.sys -- (hcmon)

DRV:64bit: - [2011-08-21 23:01:22 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmusb.sys -- (vmusb)

DRV:64bit: - [2011-08-08 14:59:12 | 000,116,336 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\vmci.sys -- (vmci)

DRV:64bit: - [2010-07-01 19:11:24 | 000,012,352 | ---- | M] () [Kernel | "Start" not found. | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 51617989

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://egypt.msn.com...EG&dcc=EG&opt=0

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US,en;q=0.8,ar-EG;q=0.5,ar;q=0.3

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CB 7A EF E7 97 2A CF 01 [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@authentec.com/ffwloplugin: C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\[email protected]: C:\Program Files (x86)\DAP\daplinkchecker [2014-06-23 15:49:38 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-01-18 15:21:09 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}: C:\Program Files (x86)\DAP\DAPFireFox [2014-06-23 15:49:38 | 000,000,000 | ---D | M]

[2013-11-22 19:04:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\FiD0\AppData\Roaming\Mozilla\Extensions

[2013-11-22 19:04:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

[2013-11-22 19:04:31 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2013-10-17 21:25:52 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - default_search_provider: (Enabled)

CHR - default_search_provider: search_url =

CHR - default_search_provider: suggest_url =

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Microsoft Office 2013 (Enabled) = C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll

CHR - plugin: Simple Pass (Enabled) = C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll

CHR - plugin: IntelÂ® Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

CHR - plugin: IntelÂ® Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\2.1.0.1_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.15_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.13_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndgfkambfodloighnpelbiiploigimba\0.0.0.3_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: No name found = C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2014-03-01 18:29:29 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (SpeedBit Link Verification Helper) - {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} - C:\Program Files (x86)\DAP\LinkVerifier.dll (Speedbit Ltd.)

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)

O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)

O4 - HKLM..\Run: [WsmUpdater] C:\Program Files (x86)\Web Solution Mart\Windows 8 Codecs Pack\Updater.exe (Web Solution Mart)

O4 - HKCU..\Run: [DownloadAccelerator] C:\Program Files (x86)\DAP\DAP.EXE (Speedbit Ltd.)

O4 - HKCU..\Run: [MicroUpdate] C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe ()

O4 - Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Paint.lnk = C:\Users\FiD0\AppData\Roaming\Paint.exe ()

O4 - Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thumbs.db ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm ()

O8:64bit: - Extra context menu item: &Verify with DAP - C:\Program Files (x86)\DAP\dapverify.htm ()

O8:64bit: - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm ()

O8:64bit: - Extra context menu item: Send to Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm ()

O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm ()

O8 - Extra context menu item: &Verify with DAP - C:\Program Files (x86)\DAP\dapverify.htm ()

O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm ()

O8 - Extra context menu item: Send to Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm ()

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.135.1.36 212.42.162.1 195.40.1.36

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{38AC1017-AC88-443E-9D84-55B4DE31A900}: NameServer = 8.8.8.8

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3C5A27DF-B1EE-4DF0-AFC4-2D5B9FFDE891}: NameServer = 8.8.8.8

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{45A8D001-125F-4059-9D62-2BFF92E0B7D9}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4C35162C-C507-4186-9180-C5C187D978C0}: DhcpNameServer = 172.20.10.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{559AD6EC-C2B4-4E81-BA13-A24AB4C5D579}: DhcpNameServer = 62.240.110.198 62.240.110.197

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{592B156F-D840-4EF5-A89B-FB71AD273632}: NameServer = 8.8.8.8

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6029D7FE-C36C-48F2-8155-C37D9AEADB22}: DhcpNameServer = 212.135.1.36 212.42.162.1 195.40.1.36

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7CE288CF-6AD1-40E0-AE51-AFEDCF70F8D8}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8C88C5F5-0130-4938-AB32-D0885D405266}: NameServer = 8.8.8.8,8.8.4.4

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\ms-help - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)

O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O30 - LSA: Security Packages - (livessp) - File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2014-03-01 16:53:53 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O32 - AutoRun File - [2014-12-12 21:08:31 | 000,000,102 | -HS- | M] () - C:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2014-12-24 17:31:17 | 000,000,102 | -HS- | M] () - F:\autorun.inf -- [ NTFS ]

O33 - MountPoints2\{2850a21d-4df4-11e3-be81-606c667598af}\Shell - "" = AutoRun

O33 - MountPoints2\{2850a21d-4df4-11e3-be81-606c667598af}\Shell\AutoRun\command - "" = "D:\OriginInstaller.exe"

O33 - MountPoints2\{3e05cb8f-1a1b-11e4-bf36-a0b3cc50876d}\Shell - "" = AutoRun

O33 - MountPoints2\{3e05cb8f-1a1b-11e4-bf36-a0b3cc50876d}\Shell\AutoRun\command - "" = "H:\Windows/Install.exe"

O33 - MountPoints2\{48d0007d-4170-11e3-be80-606c667598af}\Shell - "" = AutoRun

O33 - MountPoints2\{48d0007d-4170-11e3-be80-606c667598af}\Shell\AutoRun\command - "" = "H:\Windows/Install.exe"

O33 - MountPoints2\{fe140bac-1b5a-11e3-be72-606c667598af}\Shell - "" = AutoRun

O33 - MountPoints2\{fe140bac-1b5a-11e3-be72-606c667598af}\Shell\AutoRun\command - "" = "I:\setup.exe"

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (MACHINE BootExecut)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014-12-24 17:47:23 | 000,000,000 | ---D | C] -- C:\Program Files\Shotty

[2014-12-12 21:07:51 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2014-03-02 14:17:20 | 010,234,368 | ---- | C] (KRB) -- C:\Users\FiD0\AppData\Roaming\FastOCR.exe

[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014-12-24 17:42:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014-12-24 17:34:11 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014-12-24 17:19:04 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014-12-24 17:18:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014-12-12 21:08:31 | 000,000,102 | -HS- | M] () -- C:\autorun.inf

[2014-12-12 20:57:51 | 000,844,288 | -HS- | M] () -- C:\Paint

[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014-12-12 20:57:51 | 000,844,288 | -HS- | C] () -- C:\Paint

[2014-09-17 00:32:48 | 000,844,288 | -HS- | C] () -- C:\Users\FiD0\AppData\Roaming\Paint.exe

[2014-06-23 15:49:34 | 000,109,696 | ---- | C] () -- C:\Windows\SysWow64\EasyHook64.dll

[2014-06-23 15:49:34 | 000,091,264 | ---- | C] () -- C:\Windows\SysWow64\EasyHook32.dll

[2014-04-13 21:50:57 | 000,000,032 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\mbam.context.scan

[2014-04-13 16:18:38 | 000,000,017 | ---- | C] () -- C:\Users\FiD0\AppData\Local\resmon.resmoncfg

[2014-04-12 11:55:52 | 000,002,209 | ---- | C] () -- C:\Users\FiD0\AppData\Local\recently-used.xbel

[2014-04-10 09:43:03 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll

[2014-03-02 14:17:38 | 000,000,291 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\fastbf.ini

[2014-03-02 14:17:38 | 000,000,290 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\fastocr.xml

[2014-03-02 14:17:38 | 000,000,000 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\MyList.cfg

[2014-03-02 14:17:38 | 000,000,000 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\HitHistory.cfg

[2014-03-01 18:26:24 | 000,014,232 | ---- | C] () -- C:\Windows\SysWow64\sh4native.exe

[2014-02-19 20:31:17 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe

[2014-02-19 20:26:51 | 000,405,881 | ---- | C] () -- C:\Windows\KJ.exe

[2014-02-10 14:50:00 | 000,317,440 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll

[2014-02-10 14:49:58 | 000,182,272 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll

[2014-02-10 14:49:58 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll

[2013-12-02 12:21:23 | 000,000,132 | ---- | C] () -- C:\Users\FiD0\AppData\Roaming\Adobe PNG Format CC Prefs

[2013-09-20 08:49:03 | 000,000,244 | ---- | C] () -- C:\Windows\w32dasm8.ini

[2013-09-20 05:01:42 | 000,001,970 | ---- | C] () -- C:\Windows\Sandboxie.ini

[2013-09-14 02:03:08 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll

[2013-09-12 08:57:52 | 000,297,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe

[2013-09-12 08:57:50 | 000,076,152 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe

[2013-09-12 04:36:41 | 000,868,268 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2013-09-11 19:13:31 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin

[2013-09-11 19:13:23 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin

[2013-03-01 03:47:36 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll

========== ZeroAccess Check ==========

[2013-09-12 05:24:09 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2014-03-28 10:23:06 | 019,759,104 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014-03-28 08:18:26 | 017,562,112 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014-02-27 20:03:51 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\.minecraft

[2014-09-13 22:50:11 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\.purple

[2014-08-03 18:08:43 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\DAEMON Tools Lite

[2014-04-26 22:01:16 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\DAEMON Tools Pro

[2013-09-12 08:35:09 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\DAEMON Tools Ultra

[2014-08-07 01:34:33 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\dclogs

[2014-04-13 11:03:49 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Dev-Cpp

[2013-09-14 11:28:19 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\DMCache

[2014-07-30 17:42:45 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\EurekaLog

[2014-04-01 20:11:22 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\FileZilla

[2014-04-26 22:02:43 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Gajim

[2013-09-16 05:30:22 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\GSplit

[2013-12-23 08:32:47 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Gyazo

[2013-09-12 06:01:23 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\IDT

[2014-08-01 22:30:28 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\iFunbox_UserCache

[2013-11-30 17:59:53 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\iMobie

[2014-02-20 15:20:04 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\IsolatedStorage

[2013-12-16 19:29:41 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Litecoin

[2014-02-22 23:41:05 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\ManyCam

[2013-11-22 19:06:47 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Molura

[2013-11-13 11:08:34 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\MultiForce

[2013-12-15 22:19:11 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\MultiForce Backup

[2014-04-04 22:25:04 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Notepad++

[2014-07-27 16:17:23 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Origin

[2013-12-24 20:07:36 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\PlatinumHideIP

[2014-08-03 18:33:01 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Quest3D

[2014-08-03 18:36:36 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Roaming

[2014-06-23 15:49:38 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\SpeedBit

[2014-03-21 19:49:26 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Subversion

[2013-09-12 04:44:14 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Synaptics

[2013-12-16 19:21:53 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\TeamViewer

[2014-02-13 10:05:31 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\Tomabo

[2013-09-12 06:18:51 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\TuneUp Software

[2013-09-19 11:15:05 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\UBot Studio

[2014-01-14 16:20:26 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\UnknownApplicationVendor

[2014-09-17 00:58:05 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\uTorrent

[2013-11-17 03:33:39 | 000,000,000 | ---D | M] -- C:\Users\FiD0\AppData\Roaming\WebApp

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:56E2E879

< End of report >

#2
Valinorum

Posted 24 December 2014 - 11:02 AM

GeekU Guardian Bot

GeekU Moderator
3,330 posts

Why do you think that your computer has been infected by malware?

#3
Gatt

Posted 25 December 2014 - 08:12 AM

Member

Topic Starter
Member
20 posts

Well sometime its being slow not sure if thats normal plus i would like to check if there is any viruses on this lap

#4
Valinorum

Posted 25 December 2014 - 10:24 AM

GeekU Guardian Bot

GeekU Moderator
3,330 posts

Hi Gatt,

My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
Please do not install any new software while we are working on this system as it may hinder our process.
Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
Please do not try to fix anything without being ask.
Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
If you are confused about any instruction, stop and ask. Do not keep on going.
Do not repeat the steps if you face any problems.
I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.

Step #1 Scan with Farbar Recovery Scan Tool
- Please download Farbar Recovery Scan Tool by Farbar to your Desktop from the link below.
  Download link for 32 bit system
  Download link for 64 bit system
- Right-click on the program and choose Run as administrator;
- Put tick-mark on all boxes under Whitelist and Optional Scan;
- Click on Scan;
- After the scan two notepad files will be opened --
  - FRST.txt;
  - Addition.txt
- Copy and Paste the contents of the logs in your next reply.

Required Log(s):
- Farbar Tool Log(s)--
  - FRST.txt
  - Addition.txt

Regards,
Valinorum

#5
Gatt

Posted 28 December 2014 - 04:33 AM

Member

Topic Starter
Member
20 posts

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2014

Ran by FiD0 (administrator) on FADYNADER on 28-12-2014 12:30:00

Running from C:\Users\FiD0\Downloads

Loaded Profiles: FiD0 & UpdatusUser (Available profiles: FiD0 & UpdatusUser)

Platform: Windows 8 Enterprise (X64) OS Language: English (United Kingdom)

Internet Explorer Version 10

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

() C:\Windows\System32\valWBFPolicyService.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(VMware, Inc.) F:\Programs\Vmware\vmware-authd.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\LogonUI.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe

(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(http://shotty.devs-on.net) C:\Program Files\Shotty\Shotty.exe

() C:\Users\FiD0\AppData\Roaming\Paint.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-14] (IDT, Inc.)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-28] (Intel Corporation)

HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008 2012-09-15] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-08] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [WsmUpdater] => C:\Program Files (x86)\Web Solution Mart\Windows 8 Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Run: [DownloadAccelerator] => C:\Program Files (x86)\DAP\DAP.EXE [4110992 2014-06-23] (Speedbit Ltd.)

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Run: [MicroUpdate] => C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe [844288 2014-09-17] ()

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Run: [Shotty] => C:\Program Files\Shotty\Shotty.exe [724480 2014-12-24] (http://shotty.devs-on.net)

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {2850a21d-4df4-11e3-be81-606c667598af} - "D:\OriginInstaller.exe"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {3e05cb8f-1a1b-11e4-bf36-a0b3cc50876d} - "H:\Windows/Install.exe"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {48d0007d-4170-11e3-be80-606c667598af} - "H:\Windows/Install.exe"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {fe140bac-1b5a-11e3-be72-606c667598af} - "I:\setup.exe"

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)

Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Paint.lnk

ShortcutTarget: Paint.lnk -> C:\Users\FiD0\AppData\Roaming\Paint.exe ()

Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thumbs.db ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-2535051723-3405904455-3358818161-1001] => Internet Explorer proxy is enabled.

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://egypt.msn.com...EG&dcc=EG&opt=0

URLSearchHook: [S-1-5-21-2535051723-3405904455-3358818161-1004] ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM-x32 -> DefaultScope value is missing.

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: SpeedBit Link Verification Helper -> {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} -> C:\Program Files (x86)\DAP\LinkVerifier.dll (Speedbit Ltd.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 212.135.1.36 212.42.162.1 195.40.1.36

Tcpip\..\Interfaces\{38AC1017-AC88-443E-9D84-55B4DE31A900}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{3C5A27DF-B1EE-4DF0-AFC4-2D5B9FFDE891}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{592B156F-D840-4EF5-A89B-FB71AD273632}: [NameServer] 8.8.8.8

Tcpip\..\Interfaces\{6029D7FE-C36C-48F2-8155-C37D9AEADB22}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{8C88C5F5-0130-4938-AB32-D0885D405266}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:

========

FF ProfilePath: C:\Users\FiD0\AppData\Roaming\Mozilla\Firefox\Profiles\w4jeo9ps.default-1407082840817

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll ()

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)

FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll No File

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\[email protected] [2013-11-27]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\DAP\daplinkchecker

FF Extension: DAP Link Checker - C:\Program Files (x86)\DAP\daplinkchecker [2014-06-23]

FF HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Firefox\Extensions: [{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}] - C:\Program Files (x86)\DAP\DAPFireFox

FF Extension: Download Accelerator Plus (DAP) extension - C:\Program Files (x86)\DAP\DAPFireFox [2014-06-23]

Chrome:

=======

CHR HomePage: Default -> https://www.google.com.eg/

CHR StartupUrls: Default -> "hxxp://google.com/", ""

CHR Profile: C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-12]

CHR Extension: (Google Drive) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-12]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-26]

CHR Extension: (YouTube) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-12]

CHR Extension: (Google Search) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-12]

CHR Extension: (Download Accelerator Plus (DAP)) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb [2014-06-26]

CHR Extension: (AdBlock) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-05]

CHR Extension: (FVD Downloader) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-12-25]

CHR Extension: (Link Extraction) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndgfkambfodloighnpelbiiploigimba [2013-11-13]

CHR Extension: (Google Wallet) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-12]

CHR Extension: (Gmail) - C:\Users\FiD0\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-12]

CHR HKLM-x32\...\Chrome\Extension: [fegekclkdhbnfdcmomlpegkkndgnmfmo] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2012-07-12]

CHR HKLM-x32\...\Chrome\Extension: [ffdcfjdljhbehggjdkdioajnknjcpbjb] - C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx [2014-06-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641320 2012-08-10] (HP)

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]

R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)

R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)

S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2010-06-16] () [File not signed]

S4 MBAMScheduler; F:\Programs\Malwarebytes Anti-Malware\mbamscheduler.exe [844288 2014-09-17] () [File not signed]

S2 MBAMService; F:\Programs\Malwarebytes Anti-Malware\mbamservice.exe [844288 2014-09-17] () [File not signed]

S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4466688 2007-11-07] (Microsoft Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-29] ()

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-27] ()

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)

R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143024 2012-10-10] (Stardock Software, Inc)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]

R2 VMAuthdService; F:\Programs\Vmware\vmware-authd.exe [79872 2011-08-22] (VMware, Inc.) [File not signed]

S3 VMwareHostd; F:\Programs\Vmware\vmware-hostd.exe [11837440 2011-08-22] () [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-29] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)

S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-04-06] (Disc Soft Ltd)

R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-21] (Intel Corporation)

R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [52128 2013-11-27] (Visicom Media Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)

S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [File not signed]

R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-09] (Intel Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)

S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2012-08-09] (Realtek Semiconductor Corp.)

S3 RTL8187B; C:\Windows\system32\DRIVERS\RTL8187B.sys [458384 2012-05-31] (Realtek Semiconductor Corporation )

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-15] (Synaptics Incorporated)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-06] (Duplex Secure Ltd.)

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-10] (Windows ® Win 7 DDK provider)

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]

S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [113936 2013-12-18] (Oracle Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)

R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-10] (Windows ® Win 7 DDK provider)

U3 az2w8a3r; C:\Windows\System32\Drivers\az2w8a3r.sys [0 ] (Intel Corporation)

S3 cpuz136; \??\C:\Users\FiD0\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

S3 massfilter; \SystemRoot\System32\drivers\massfilter.sys [X]

S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]

S3 ZTEusbmdm6k; \SystemRoot\system32\DRIVERS\ZTEusbmdm6k.sys [X]

S3 ZTEusbnmea; \SystemRoot\system32\DRIVERS\ZTEusbnmea.sys [X]

S3 ZTEusbser6k; \SystemRoot\system32\DRIVERS\ZTEusbser6k.sys [X]

========================== Drivers MD5 =======================

C:\Windows\System32\drivers\1394ohci.sys E890C46E4754F0DF51BAFCC8D2E07498

C:\Windows\System32\drivers\3ware.sys 4F18D4C7EA14F11A7211F60D553C03DB

C:\Windows\system32\DRIVERS\Accelerometer.sys BE14A19386CC6711D2225D2B242AAC53

C:\Windows\System32\drivers\ACPI.sys 975AABEB243B800C23626D6B652C5A9C

C:\Windows\System32\Drivers\acpiex.sys DC968C37822117E576B933F34A2D130C

C:\Windows\System32\drivers\acpipagr.sys 0CA9F7C3A78227C21A0A7854E245CFB2

C:\Windows\System32\drivers\acpipmi.sys 8EB8DA03B142D3DD1EB9ED8107A76C43

C:\Windows\System32\drivers\acpitime.sys CBCE725C5D86ABA7D2604E22951AA9B8

C:\Windows\System32\drivers\adp94xx.sys 93C6388592B99925C1D1576E465BC80F

C:\Windows\System32\drivers\adpahci.sys D27763E0247292654E7F7D16444C7C72

C:\Windows\System32\drivers\adpu320.sys 67B90070FF48F794AF19F9FCF0080D75

C:\Windows\system32\drivers\afd.sys FE7FB9612D354EB41DF4F0FF5D6FB259

C:\Windows\System32\drivers\agp440.sys 01590377A5AB19E792528C628A2A68F9

C:\Windows\System32\drivers\amdk8.sys 5A81054B824004B1ECC04F0034A1CDF9

C:\Windows\System32\drivers\amdppm.sys B849D453E644FAB9BC8EF6DC8CA9C4C6

C:\Windows\System32\drivers\amdsata.sys 35A0EB5AECB0FA3C41A2FB514A562304

C:\Windows\System32\drivers\amdsbs.sys 00452671904F5EE94B50BF0219C97164

C:\Windows\System32\drivers\amdxata.sys EA3FFE53E92E59C87E3ECA9BEB20D9B7

C:\Windows\System32\drivers\AMPPAL.sys 0C3D62CB6B8F2B3CC42369BAC0F58AD5

C:\Windows\system32\DRIVERS\amppal.sys 0C3D62CB6B8F2B3CC42369BAC0F58AD5

C:\Windows\system32\drivers\appid.sys 83B3682CE922FB0F415734B26D9D6233

C:\Windows\System32\drivers\arc.sys E933401B392387F4BE34DE8BAF1722A7

C:\Windows\System32\drivers\arcsas.sys 07CA323EF2E8247A568AB0F3662AD644

C:\Windows\system32\DRIVERS\asyncmac.sys 74DBAEC35366C4EE7670428808715A6A

C:\Windows\System32\drivers\atapi.sys A721FF570C2387E383BDDEA9632863C9

C:\Windows\System32\drivers\bxvbda.sys 87AB5BB072A3F128541D5B815F82FFDD

C:\Windows\System32\drivers\BasicDisplay.sys 81703BC5D68DEDBB086C2368FBE7B334

C:\Windows\System32\drivers\BasicRender.sys 5EC68164E14D25675C98BBB5F09E8606

C:\Windows\System32\Drivers\Beep.sys 9E7AEA59776D904607985AFFE7E5E183

C:\Windows\System32\DRIVERS\bowser.sys B17AC10B47C7FCB44D22A1F06415840E

C:\Windows\System32\drivers\BthAvrcpTg.sys 6695200F455E251F0BCC9CE4D0978D59

C:\Windows\System32\drivers\BthEnum.sys A8B20D852B07AE19A13B5D47EC4E4C3B

C:\Windows\System32\drivers\bthhfenum.sys 616EB8748C988AEE98D93DA141C3D3B4

C:\Windows\System32\drivers\BthHFHid.sys DCB4EBD928A6FB368BE6CAE522412DE1

C:\Windows\system32\DRIVERS\BthLEEnum.sys 42201C346F0B8C458E1E9CDE04D68A2C

C:\Windows\System32\drivers\bthmodem.sys 033916CE8784A848B9A3D686B7F66D97

C:\Windows\system32\DRIVERS\bthpan.sys 091BB978E9504D0AD14586929431A957

C:\Windows\System32\Drivers\BTHport.sys 13795CAA34239D97A7211E7F9D96E012

C:\Windows\System32\Drivers\BTHUSB.sys 1F715957F5236D30B6020A19A4271F6A

C:\Windows\system32\DRIVERS\btmaux.sys 7235891AF09D13C4214DEEE57ED331D0

C:\Windows\system32\DRIVERS\btmhsf.sys 76D0DDD58A773CA1BFB4D30AAE03517A

C:\Windows\System32\DRIVERS\cdfs.sys 990B1BABE6E81FB18E65A87EBEFB1772

C:\Windows\System32\drivers\cdrom.sys 339BFF85D788268752DA8C9644B188EE

C:\Windows\System32\drivers\circlass.sys F64B7D1A37CC1D5F421D5359EEC81E2E

C:\Windows\System32\drivers\CLFS.sys 9905168708DB68849B879B5548F68AB3

C:\Windows\System32\drivers\CmBatt.sys 2DC8538A2260647484A6C921CA837313

C:\Windows\System32\Drivers\cng.sys DBF9E5346431557BF56F41E7F8EC0DC1

C:\Windows\System32\drivers\CompositeBus.sys 0E5B1E9E7122EDAAF1F6CE047965CA92

C:\Windows\System32\drivers\condrv.sys D9CB0782AF819548072AA45B70F8B22D

C:\Windows\System32\drivers\csc.sys F2C69C3D98249DE14D4B2832516D4FD5

C:\Windows\System32\drivers\dam.sys FAEF4C245BE832DB41B15DAAC336AFB7

C:\Windows\system32\DRIVERS\dc3d.sys D06E443457FADC6B1AFAF3AA4B6936F6

C:\Windows\System32\Drivers\dfsc.sys 431141C6859990824D17F71C30A78728

C:\Windows\system32\DRIVERS\ssudbus.sys E428DFFA96FAD07D8CA3C9082563A225

C:\Windows\System32\drivers\discache.sys 3C736FAE17BA6F91BA37594AAB139CD0

C:\Windows\System32\drivers\disk.sys AE3786294CC246A5403783E1B86A0168

C:\Windows\System32\drivers\dmvsc.sys 82A7C72593793FE1EADA7A305BD1567A

C:\Windows\system32\drivers\drmkaud.sys 9C7C183F937951AE17C5B8B3259CF3FF

C:\Windows\System32\drivers\dtsoftbus01.sys 33F90B202E9DD9B7D489EB59310FDC34

C:\Windows\System32\drivers\dxgkrnl.sys 2BB5627EB587FA995086C3D8C21B6D3F

C:\Windows\System32\drivers\evbda.sys 5AB97B3282D7D6114949D1EB5C8598E4

C:\Windows\System32\drivers\EhStorClass.sys 66D60BD9A4C05616ABECA2A901475098

C:\Windows\System32\drivers\EhStorTcgDrv.sys A61D0F543024E458C0FE32352E1978E2

C:\Windows\System32\drivers\errdev.sys D790D058D67582DB9C84C2D33695FE6B

C:\Windows\System32\Drivers\exfat.sys 7A4D6FEB8C52B3FE855E4DCDF9107E03

C:\Windows\System32\Drivers\fastfat.sys 60996602A7111FD2D086E803F33E4282

C:\Windows\System32\drivers\fdc.sys 73B2D11DF0B6E03A0CB0323218ACB3E4

C:\Windows\System32\drivers\fileinfo.sys 88A9EBACD1058ABB237A6B4E96E7F397

C:\Windows\System32\drivers\filetrace.sys 9E4EE3A0B00FF7D5F42A4AF9744CBA02

C:\Windows\System32\drivers\flpydisk.sys B1D4C168FF7B8579E3745888658FFB1D

C:\Windows\System32\drivers\fltmgr.sys B33EC133AE4E6C1881D2302D93D2467D

C:\Windows\System32\drivers\FsDepends.sys A5F7873A39E4E9FAAAE59B7E9E36B705

C:\Windows\System32\Drivers\Fs_Rec.sys A6DD7D491F587F4BC13FB972977DC8E8

C:\Windows\System32\DRIVERS\fvevol.sys C1646A95EAC515F60CDB2A7A8A013C1E

C:\Windows\System32\drivers\fxppm.sys A969D92973DFA895E7776B4BFE36DBB2

C:\Windows\System32\drivers\gagp30kx.sys 52BC441E07A827EBAB70CDC7EAEDB28D

C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F

C:\Windows\System32\drivers\vmgencounter.sys 721F8EEF5E9747F32670DEFF7FB92541

C:\Windows\System32\Drivers\msgpioclx.sys FC2B8B06BDBD3B6457F5A3DA9AD2410E

C:\Windows\system32\drivers\hcmon.sys 5BF776ABEDEA06B0779C82E9D54B58D7

C:\Windows\system32\drivers\HdAudio.sys 630555943E5A3FE21010CE91EC7FC84F

C:\Windows\System32\drivers\HDAudBus.sys 58CC013EFA9893057160EDA018D8ADCE

C:\Windows\System32\drivers\HidBatt.sys 3F76BBA53D65E85A7F53E7A71082082C

C:\Windows\System32\drivers\hidbth.sys 085F150D002B7F0153D3C06DDF33A143

C:\Windows\System32\drivers\hidi2c.sys CC4A07E51D89575CAB6F4EB590D87CD4

C:\Windows\System32\drivers\hidir.sys DC96F7DACB777CDEAEF9958A50BFDA06

C:\Windows\System32\drivers\hidusb.sys 012C354B4AB48E9A7A657DF39E3A2073

C:\Windows\System32\DRIVERS\hpdskflt.sys 0C28C65207A2BD4C737A5BCDAB26A430

C:\Windows\System32\drivers\HpSAMD.sys 64DB7A8D97CA53DCCF93D0A1E08342CF

C:\Windows\System32\drivers\HTTP.sys F4A91D985EB9D1D2717D538F3424603C

C:\Windows\System32\drivers\hwpolicy.sys 2A98301068801700906C06649860FE94

C:\Windows\System32\drivers\hyperkbd.sys DC76901D82097C9E297F20C287CB9A27

C:\Windows\system32\DRIVERS\HyperVideo.sys 716413AB3CA12DE0A7222D28C1C9352C

C:\Windows\System32\drivers\i8042prt.sys C9E9CBF73AFFBFE3E801EFB516787BA3

C:\Windows\System32\drivers\iaStorA.sys C02FC4C6C411C85F209EBD0EBBF8CAE9

C:\Windows\System32\drivers\iaStorV.sys 5E394EBD26FD68AA9300332C46BEDD62

C:\Windows\system32\DRIVERS\iBtFltCoex.sys C430482AC892D52CED021EDDD4D368A2

C:\Windows\system32\DRIVERS\igdkmd64.sys 4EB6ABBF5D78E65A418BA71EF3ACE251

C:\Windows\System32\drivers\iirsp.sys 24847A06B84339FEEDE5CABF3D27D320

C:\Windows\system32\drivers\intelaud.sys FD2032D2EAE8D7F3381EBA5FA3E7FEEA

C:\Windows\system32\DRIVERS\IntcDAud.sys B375D8686E1BD2B79C0F00E3868A8C3B

C:\Windows\System32\drivers\intelide.sys 4F37726CF764CA18A8A84F85EF3A7F24

C:\Windows\System32\drivers\intelppm.sys E15CDF68DD73423F15D4AC404793AF0D

C:\Windows\System32\DRIVERS\ipfltdrv.sys 8FCA66234A0933D796BB780B7953BAB9

C:\Windows\System32\drivers\IPMIDrv.sys A4071DA3AE419F9694BFCB267C7DB8D7

C:\Windows\System32\drivers\ipnat.sys 3969B9C218DD3FAA9F4ED2FFC3651C02

C:\Windows\System32\drivers\irenum.sys 25CD7C4BB2863FFC2B0B311F0AEBF77C

C:\Windows\System32\drivers\irstrtdv.sys 4D9B9A794F22415B8C3E0CCFBE61BC7A

C:\Windows\System32\drivers\isapnp.sys D940C5BB9DC92E588533C19ABCC3D2C2

C:\Windows\System32\drivers\msiscsi.sys E6530FD4F61B40F338BF4355A21B9A09

C:\Windows\System32\drivers\iwdbus.sys C59B9CE2855E667809F9E63C20FC44A5

C:\Windows\System32\drivers\kbdclass.sys 8FBD94B69D6423E20ABCD59D86368B21

C:\Windows\System32\drivers\kbdhid.sys E88C932ABDF8185A62C8F2FC7B051FB6

C:\Windows\system32\DRIVERS\kdnic.sys FB6C185092E18011EF49989425C2AA87

C:\Windows\System32\Drivers\ksecdd.sys 8B3EB6372436195B8EA8AE09A184BCE2

C:\Windows\System32\Drivers\ksecpkg.sys 0EB535ADDC065F2D0CBFC089630A6065

C:\Windows\system32\drivers\ksthunk.sys 81492FEEBF2F26455B00EE8DBAE8A1B0

C:\Windows\system32\DRIVERS\lltdio.sys CEEFD29FC551F289810B0B9381B321DC

C:\Windows\System32\drivers\lsi_sas.sys 022CDD12161B063D7852B1075BF3FFF2

C:\Windows\System32\drivers\lsi_sas2.sys 07AD59D669B996F29F91817F0ECFA34F

C:\Windows\System32\drivers\lsi_scsi.sys 216FB796AA4E252ACCE93B1BCB80B5EC

C:\Windows\System32\drivers\lsi_sss.sys 5E80530AF37102488EE980B4A92AF99F

C:\Windows\system32\drivers\luafv.sys 2BDC5D711FA61307CE6190D47C956368

C:\Windows\system32\DRIVERS\mcvidrv.sys D8AD76AB13299C52D1D3C58FD3ADAF59

C:\Windows\system32\drivers\mbam.sys F92B0E478C0FAA6D6661E6E977247E60

C:\Windows\system32\drivers\mwac.sys 0664F6335F108F38FE08C3CA747311EE

C:\Windows\system32\drivers\mcaudrv_x64.sys F1CE49C11A9833A5D2EC32443A142064

C:\Windows\System32\drivers\megasas.sys 9B0D829C3BE4E7472DB9DD2B79908E3C

C:\Windows\System32\drivers\MegaSR.sys ECC3F54C7AFC318271C4F0B4606D8DB0

C:\Windows\System32\drivers\HECIx64.sys 772A1DEEDFDBC244183B5C805D1B7D85

C:\Windows\System32\drivers\modem.sys 780098AD5DA8A4822E2563984C85EF7B

C:\Windows\System32\drivers\monitor.sys EA8EAD3F5B762F889CC7F3966625B48B

C:\Windows\System32\drivers\mouclass.sys 618446B98C79776654340CE27C73485E

C:\Windows\System32\drivers\mouhid.sys C0ADEBED913295803B579ED288936CBB

C:\Windows\System32\drivers\mountmgr.sys E7E9DBFDD3F25ED0C05B99AE9FA18BDE

C:\Windows\System32\drivers\mpsdrv.sys 4CCBBD4944777CA100B9A6C2F149A46F

C:\Windows\system32\drivers\mrxdav.sys 3D70147F55F1EC84EB9139ED7FFE48BC

C:\Windows\System32\DRIVERS\mrxsmb.sys 14EE56050E1637926F5CFA65B1F4209B

C:\Windows\System32\DRIVERS\mrxsmb10.sys 06D5F2FA3C61E8EA91648EA8E9F99FD3

C:\Windows\System32\DRIVERS\mrxsmb20.sys 0AA400AB21745F1153ECE75E0186509A

C:\Windows\system32\DRIVERS\bridge.sys 98487487D6B3797CA927E9D7B030AE13

C:\Windows\System32\Drivers\Msfs.sys 3886F1F2A4D2900ABAA7E4486BEEE6A2

C:\Windows\System32\drivers\msgpiowin32.sys C32A7A39B960A42BA9D4FBE47213CA03

C:\Windows\System32\drivers\mshidkmdf.sys D3857A767B91A061B408CCAB02DA4F40

C:\Windows\System32\drivers\mshidumdf.sys 839B48910FB1E887635C48F3EC11A05E

C:\Windows\System32\drivers\msisadrv.sys 55C0DB741E3AB7463242B185B1C2997C

C:\Windows\system32\drivers\MSKSSRV.sys 509809566E49F4411055864EA8D437CD

C:\Windows\system32\DRIVERS\mslldp.sys 63145201D6458E4958E572E7D6FC2604

C:\Windows\system32\drivers\MSPCLOCK.sys 99D526E803DB6D7FF290FD98B6204641

C:\Windows\system32\drivers\MSPQM.sys 06FA77C3E2A491ADCD704C5E73006269

C:\Windows\System32\Drivers\MsRPC.sys E134EC4DE11CF78CB01432D180710D84

C:\Windows\System32\drivers\mssmbios.sys B5AECF12F09DEE97C9FCAA5BA016CE1E

C:\Windows\system32\drivers\MSTEE.sys 72D66A05E0F99F2528F6C6204FD22AA1

C:\Windows\System32\drivers\MTConfig.sys 8AAAE399FC255FA105D4158CBA289001

C:\Windows\System32\Drivers\mup.sys 3BCB702F3E6CC622DCAFCAA45D7CDE0A

C:\Windows\System32\drivers\mvumis.sys 3A1E095277BBD406CEA8EA6B76950664

C:\Windows\system32\DRIVERS\nwifi.sys 43D7388A90A4C6EA346A4D6FF0377479

C:\Windows\System32\drivers\ndis.sys A10E176F3B2BF83EDE7B5C4658C93B66

C:\Windows\system32\DRIVERS\ndiscap.sys 39C8A1D9D46F5E83A016BCAB72455284

C:\Windows\system32\DRIVERS\NdisImPlatform.sys 762941932B7E4C588E48A577BA9D6440

C:\Windows\system32\DRIVERS\ndistapi.sys 7A6F8A6D0E01432EBA294EF29CDD0FA7

C:\Windows\system32\DRIVERS\ndisuio.sys 79AB68BB3FFF974AD4F41FA559F4EC67

C:\Windows\system32\DRIVERS\ndiswan.sys 62C7DBF4F9301F76CF87D4B9D8F57BF8

C:\Windows\System32\Drivers\NDProxy.sys 3730942D7DB2F8BB5F84542B7FF6F650

C:\Windows\System32\drivers\Ndu.sys D3F60A4345FCA9C1BE68AD7D0D6DE770

C:\Windows\system32\DRIVERS\netaapl64.sys EE00C544C025958AF50C7B199F3C8595

C:\Windows\System32\DRIVERS\netbios.sys 7C203A76394F9AE68F69EEE5F9612C4A

C:\Windows\System32\DRIVERS\netbt.sys 7CEC25C682D319D484630B3952C31A11

C:\Windows\system32\DRIVERS\netr28ux.sys 9F929E74A8FB21B2B44B41C115F10B39

C:\Windows\system32\DRIVERS\NETwew00.sys 75B9B86878CC159FBC40C4F9202ADBE3

C:\Windows\System32\drivers\nfrd960.sys 12DD2800E4EEA37DC9AE256AD62423B4

C:\Windows\System32\drivers\npf.sys DE7FCC77F4A503AF4CA6A47D49B3713D

C:\Windows\System32\Drivers\Npfs.sys 17E19A742FB30C002F8B43575451DBE1

C:\Windows\System32\drivers\npsvctrig.sys 8ED299C30792544264E558BEA79F0947

C:\Windows\System32\drivers\nsiproxy.sys 689B3B1E95C70ABF7AFF29F9406EF1E0

C:\Windows\System32\Drivers\Ntfs.sys 7BE3EDFFA3216F989A6BDCB14795DD08

C:\Windows\System32\drivers\NuidFltr.sys 96ACBF3DDC38A52FEE115F577F36568F

C:\Windows\System32\Drivers\Null.sys 4163ADE07DB51843AE31F65B94F5398D

C:\Windows\system32\DRIVERS\nvlddmkm.sys F554291C0A11F5B713B54C5886D4AA31

C:\Windows\System32\DRIVERS\nvpciflt.sys 3F403A74349FCE04DF8D7BE24E6A02BD

C:\Windows\System32\drivers\nvraid.sys D6D34118263412D3AAA8348A9572B7F2

C:\Windows\System32\drivers\nvstor.sys 27AFC428D1D32ABD04A86763A4EDDEA9

C:\Windows\system32\drivers\nvvad64v.sys 31B16657118E439B77B0A527F7EA66CB

C:\Windows\System32\drivers\nv_agp.sys 051CFB5107BAAE510419BDC41F8C4036

C:\Windows\System32\drivers\parport.sys 4563DAF8C6A740AD7F501E219BD10766

C:\Windows\System32\drivers\partmgr.sys D6ACCF9F2EEEEA711C14EFD976E573F3

C:\Windows\System32\drivers\pci.sys 4A003E8F718C1E6A2050CA98CD53E3E2

C:\Windows\System32\drivers\pciide.sys F9908D274D458220F91E89B54D78D837

C:\Windows\System32\drivers\pcmcia.sys 84D19CB6102627932DCB5DFDF89FE269

C:\Windows\System32\drivers\pcw.sys CEBBAD5391C2644560C55628A40BFD27

C:\Windows\System32\drivers\pdc.sys 0698DEDEAD6A00AD0D468C687D830FBF

C:\Windows\System32\drivers\peauth.sys 61FE70659CD43E07F94DA4DC31DEC493

C:\Windows\system32\DRIVERS\raspptp.sys 362D47E5B4D67270DE4B8606036F4ADD

C:\Windows\System32\drivers\processr.sys DD979EB6A7212F60E4AFBE96EDC7AE6D

C:\Windows\system32\DRIVERS\pacer.sys EB8034147D4820CD31BFCB11A2A652DF

C:\Windows\system32\drivers\qwavedrv.sys 13D47BB0CCA2FC51BD15F8E85C6A078E

C:\Windows\System32\DRIVERS\rasacd.sys 873C60F8178100557740A832FCE10B5F

C:\Windows\system32\DRIVERS\AgileVpn.sys 69B93F623B130976243ECA3D84CC99CA

C:\Windows\system32\DRIVERS\rasl2tp.sys A14D625C5AEE5FFE0F47D1A1D419FAAE

C:\Windows\system32\DRIVERS\raspppoe.sys 00695B9C2DB6111064499C529E90C042

C:\Windows\system32\DRIVERS\rassstp.sys A7F24D8CD1956B0A1FDCB86CC5114DE4

C:\Windows\System32\DRIVERS\rdbss.sys CA03D642ACE58E1BA54E4B383F91CD69

C:\Windows\System32\drivers\rdpbus.sys CA7DF5EC95D8DE0DD24BE7FF97369F68

C:\Windows\System32\drivers\rdpdr.sys B2A3AD74FF2E2FFA73AF2567108231B3

C:\Windows\System32\drivers\rdpvideominiport.sys 57F4787E4602A3FCA719C0A33137C6DA

C:\Windows\System32\Drivers\RDPWD.sys B3CB0721E81E30419CE7D837EF4EA151

C:\Windows\System32\drivers\rdyboost.sys 62C1F8A0685FE07E998AA296C4F697C4

C:\Windows\System32\drivers\rfcomm.sys CCBFCABDFE2BC22F0645CEAADDB36004

C:\Windows\system32\DRIVERS\RtsP2Stor.sys 8EAAC43684B9DE3F1532767EEB3DCA97

C:\Windows\system32\DRIVERS\rspndr.sys E04E770DD198B9399640717145E79EBF

C:\Windows\system32\DRIVERS\Rt630x64.sys 7D9DA8EC6784A9EE213C676709D46BE6

C:\Windows\system32\DRIVERS\RTL8187B.sys 4045C3F69F5FEF1186A76320E560F1CC

C:\Windows\System32\drivers\vms3cap.sys 752EC7DCD2F96871A3857EEE6AFE965A

C:\Program Files\Sandboxie\SbieDrv.sys 53E618640032FF0511901551D7F77424

C:\Windows\System32\drivers\sbp2port.sys 9C7B28CE0D136DB226E24DB3BC817F92

C:\Windows\System32\DRIVERS\scfilter.sys 5D7733A12756B267FCA021672B26BC9E

C:\Windows\System32\drivers\sdbus.sys F58B030A0664385C707B8C1C63682041

C:\Windows\System32\drivers\sdstor.sys BB107AA9980B0DA4E19A3A90C3BD4460

C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit

C:\Windows\System32\drivers\SerCx.sys 87C46B239A7EEF30FDFDD5E9BD46130C

C:\Windows\System32\drivers\serenum.sys 7A1F9347C85FD55E39B8A76B3A25C5AD

C:\Windows\System32\drivers\serial.sys F640A0A218BBF857F1D04A15D7D939F6

C:\Windows\System32\drivers\sermouse.sys F1A5F56B2620B862CC28FF96A0A6DAAB

C:\Windows\System32\drivers\sfloppy.sys 7EE65419B29302C795714FF8073969A1

C:\Windows\System32\drivers\SiSRaid2.sys 2560721D6F16D5B611C36A3A9D28C1B2

C:\Windows\System32\drivers\sisraid4.sys 3AA8FDE1DBF65BB8B88B053529554A0D

C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys 295DEA82E1247F3D705700C990F28452

C:\Windows\System32\drivers\spaceport.sys 9110193D93960E38B8692E4519C75D72

C:\Windows\System32\drivers\SpbCx.sys 3D8679C8DF52EB26EB7583A4E0A29202

C:\Windows\System32\Drivers\sptd.sys 74D30C2EF66C2EB19F17ED5423AA8038

C:\Windows\System32\DRIVERS\srv.sys 0F1FCD575A03ABDE13FCA9D0ADE4DDA6

C:\Windows\System32\DRIVERS\srv2.sys B56A855B23676CCE05B626C6037FD02F

C:\Windows\System32\DRIVERS\srvnet.sys 78E9665C8DC59106D133CBEF0F0C3DE3

C:\Windows\system32\DRIVERS\ssudmdm.sys AAF6F247F1DC370C593B4430974EAD9C

C:\Windows\System32\drivers\stexstor.sys 4E85355B94CFCB67C135F6521A4895A7

C:\Windows\system32\DRIVERS\stwrt64.sys DDB926338200FC230FC9AAE803D053C2

C:\Windows\System32\drivers\storahci.sys B240874B2CA0CD02E8CD11E140B14C57

C:\Windows\System32\DRIVERS\vmstorfl.sys F74DBC95A57B1EE866D3732EB5F79BE2

C:\Windows\System32\drivers\storvsc.sys 543CD3CC0E05B8D8815E0D4F040B6F59

C:\Windows\System32\drivers\storvsp.sys 1A36AC469140F87CDE62D7F8524E270C

C:\Windows\System32\drivers\swenum.sys 4AFD66AAE74FFB5986BC240744DC5FC9

C:\Windows\System32\drivers\Synth3dVsc.sys E4F74CFFCAFCF1F2F18F458F99C595C0

C:\Windows\system32\DRIVERS\SynTP.sys B6A2B49028C45A2B5322DD638FE7BE5F

C:\Windows\system32\DRIVERS\tap0901.sys 3C32FF010F869BC184DF71290477384E

C:\Windows\System32\drivers\tcpip.sys 2AE9136724568DB4F08BC04F131CFC54

C:\Windows\system32\DRIVERS\tcpip.sys 2AE9136724568DB4F08BC04F131CFC54

C:\Windows\System32\drivers\tcpipreg.sys 8F2A13A5DF99D72FDDE87F502A66F989

C:\Windows\system32\DRIVERS\tdx.sys 73DC722CE5DF26D7638CE2446F2655C7

C:\Windows\System32\drivers\terminpt.sys F7C8AB5D8AFFAA318D6A21093D139BF4

C:\Windows\system32\drivers\tpm.sys E94F7A7B48C7638D1F3F8089344C97B7

C:\Windows\System32\drivers\tsusbflt.sys 4E7C5FB10A50435523DE0CAA37DE2BD3

C:\Windows\System32\drivers\TsUsbGD.sys 16D684A820872EE54F6370703AC0B513

C:\Windows\System32\drivers\tsusbhub.sys 96BBE395D7133646A1E746F95A6D46B0

C:\Windows\system32\DRIVERS\tunnel.sys 78C9EE193AC2B4CBDBC48B620314D740

C:\Windows\System32\drivers\uagp35.sys 6D4F67CA56ACA2085DFA2CD89EAFBC1A

C:\Windows\System32\drivers\uaspstor.sys 6FD6D03B7752C78712E5CFF29A305026

C:\Windows\System32\drivers\ucx01000.sys 061BA3EE0D2BE17944990544008CF190

C:\Windows\System32\DRIVERS\udfs.sys 25C50F4EDF70D0A831E0566BD181CCF2

C:\Windows\System32\drivers\uliagpkx.sys 07FEBCDF24FABA0D47B635D85A0FFB7A

C:\Windows\System32\drivers\umbus.sys 02CEB3FE6152668A7BA420B93B664860

C:\Windows\System32\drivers\umpass.sys 991EE6B5FC41EAEF99C8AF5B92F2CA09

C:\Windows\System32\drivers\usb3Hub.sys 8047D8AFA070A4C3B9FCBDBF77A84C45

C:\Windows\System32\Drivers\usbaapl64.sys C9E9D59C0099A9FF51697E9306A44240

C:\Windows\system32\drivers\usbaudio.sys 9E9F21FF91D7ECC0BCCB94D3FE52A959

C:\Windows\System32\drivers\usbccgp.sys C976C4306F9AE133D6BBD47FDFC3BF92

C:\Windows\System32\drivers\usbcir.sys 427B6DB8C05A5A977E8C3525370A2595

C:\Windows\System32\drivers\usbehci.sys B24FDEB1B18496F1B463782235AA3AF1

C:\Windows\System32\drivers\usbhub.sys F8C2A832DF9403F5EA8080CBDBDA95FB

C:\Windows\System32\drivers\UsbHub3.sys FAAB461D5AEB21EE5FC5C0DBD6648223

C:\Windows\System32\drivers\usbohci.sys 325F6179009B5A7F6118951A5BA422AB

C:\Windows\System32\drivers\usbprint.sys 9FDBA6982582A6F2354144980F641E7B

C:\Windows\System32\drivers\USBSTOR.SYS BFC7FE4AAEB61317A921871B4085EF4B

C:\Windows\System32\drivers\usbuhci.sys 1ABF657259DB57F7E5558E4DF1357C0C

C:\Windows\System32\Drivers\usbvideo.sys 9EF7C01D3ACCBC243B5CB1A95865B2FF

C:\Windows\System32\drivers\USBXHCI.SYS 8DC398D7B8E02C929A2096E74A170970

C:\Windows\system32\DRIVERS\VBoxDrv.sys 8DB40EB504AE9C10558675035B4B4A4A

C:\Windows\system32\DRIVERS\VBoxNetAdp.sys 9C24F61B36E7305AC42DC41881A2C97C

C:\Windows\system32\DRIVERS\VBoxNetFlt.sys 4B3B9912BBA05473BE94E61334971858

C:\Windows\System32\Drivers\VBoxUSB.sys E40ED858DB77EC5D92871B4BF26DE3CA

C:\Windows\system32\DRIVERS\VBoxUSBMon.sys DD8F22BA8DD0F2A9A1D5D93023441FE0

C:\Windows\System32\drivers\vdrvroot.sys BACECBFF9C97F7627A60B0E0F1FE7EE8

C:\Windows\System32\drivers\VerifierExt.sys 74FA2D4368DE6F6CE14393EDF1F342BE

C:\Windows\System32\drivers\vhdmp.sys 500BE6B2E49883720D0AE8BB859ED7A3

C:\Windows\System32\drivers\viaide.sys F5B4A14B00E89250C50982AC762DDD1D

C:\Windows\System32\drivers\Vid.sys 0E43886F01C85B47BA0A3157274BCF59

C:\Windows\System32\drivers\vmbus.sys 78DB50F7329F6D1311658DABFFFC8BE0

C:\Windows\System32\drivers\VMBusHID.sys ECFEE2F2BA3932C7880D1A8F67D68F91

C:\Windows\System32\drivers\vmbusr.sys B4F432A51826FFC66F4DF72A83E8E4B1

C:\Windows\System32\drivers\vmci.sys 87FC1DD880E8CAC4FAEBB84AF61A87C4

C:\Windows\system32\DRIVERS\vmnetadapter.sys B259C31378BC855AFD1B53F59311C251

C:\Windows\system32\DRIVERS\vmnetbridge.sys DEC4CE720FFEDA939CF1BA315CFBD993

C:\Windows\system32\drivers\vmnetuserif.sys 227982E986C02B710630D7FC570CAA77

C:\Windows\System32\Drivers\vmusb.sys 415B167695C4B5960A13098622EF3D80

C:\Windows\system32\drivers\vmx86.sys 86AA5EAE57E2EAEF3B6F5C16B27E0EC4

C:\Windows\System32\drivers\volmgr.sys CB60FAAED8B49B812EBBF77EB87D9B18

C:\Windows\System32\drivers\volmgrx.sys A74101DA9809251BCD0E5A26BAE0F824

C:\Windows\System32\drivers\volsnap.sys AA37946941ED3805AB3A924965907147

C:\Windows\System32\drivers\vpci.sys A8DA1C1B52ECEA3726DEBED4FF1B700D

C:\Windows\System32\drivers\vpcivsp.sys 0190AFFF28F600461C0164353CC7EE27

C:\Windows\System32\drivers\vsmraid.sys 38A60CD9C009C55C6D3B5586F8E6A353

C:\Windows\SysWow64\drivers\vstor2-mntapi10-shared.sys 6107E33A30C0B923F31C872E1980D2D1

C:\Windows\System32\drivers\vstxraid.sys A0F6FE0FC2F647C22BBFD6BD4249DBCC

C:\Windows\System32\drivers\vwifibus.sys 62460A45435A26A334907E3F2EA45611

C:\Windows\system32\DRIVERS\vwififlt.sys 095E943D27025E4D588AF0A72CC2318F

C:\Windows\system32\DRIVERS\vwifimp.sys 73FA1A41A97A5C34ADC03B3577FF1A86

C:\Windows\System32\drivers\wacompen.sys 6B806E893714019969E2B50D7EF6A4D9

C:\Windows\system32\DRIVERS\wanarp.sys 61F6972FF9AC9A8D0B4D62076DC30051

C:\Windows\System32\drivers\wd.sys B3A4D918DAB90505B6BC7B70632913CB

C:\Windows\system32\drivers\WdBoot.sys B7FD627AAE8E95848BFEC437C923A87E

C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8

C:\Windows\system32\drivers\WdFilter.sys FAC362ED29713A535C6E2EEFFA5B4733

C:\Windows\System32\DRIVERS\wfplwfs.sys 44BB9C31E6242C4BD1CE7C2B440C2533

C:\Windows\System32\drivers\wimmount.sys A3C7624A42A3447EF5EDD1ED37FE4E60

C:\Windows\System32\drivers\WinUSB.sys BB20956C424531003F7FA6CD36F11D5D

C:\Windows\System32\drivers\WirelessButtonDriver64.sys 4F2A80D65AE6F845776E2F06AE6782ED

C:\Windows\System32\drivers\wmiacpi.sys E2A596CACFC6504306CDB7B593B90084

C:\Windows\System32\DRIVERS\wpcfltr.sys C6FF953D5D6F2EAE3B8883474D5076B3

C:\Windows\System32\drivers\WpdUpFltr.sys 0346CAFC181C91C6E2330332EB332ED6

C:\Windows\system32\drivers\ws2ifsl.sys BC8B5CB336E63BB25EAD1CE8EDD34B81

C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F

C:\Windows\System32\drivers\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

C:\Windows\system32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

C:\Windows\System32\drivers\XHCIPort.sys 24E57041608ED6A9D7FDAD0D9EC214E2

C:\Windows\System32\Drivers\az2w8a3r.sys

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 12:30 - 2014-12-28 12:30 - 00046515 _____ () C:\Users\FiD0\Downloads\FRST.txt

2014-12-28 12:29 - 2014-12-28 12:30 - 00000000 ____D () C:\FRST

2014-12-28 12:28 - 2014-12-28 12:29 - 02122752 _____ (Farbar) C:\Users\FiD0\Downloads\FRST64.exe

2014-12-27 22:43 - 2014-12-28 01:59 - 00844288 _____ () C:\Users\FiD0\Downloads\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion (1).exe

2014-12-27 22:43 - 2014-12-27 22:43 - 00083968 ___SH (Toshiba) C:\Users\FiD0\Downloads\vAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion (1).exe

2014-12-27 22:08 - 2014-12-27 22:08 - 00889416 _____ (Microsoft Corporation) C:\Users\FiD0\Downloads\dotNetFx40_Full_setup.exe

2014-12-27 22:05 - 2014-12-27 22:37 - 00844288 _____ () C:\Users\FiD0\Downloads\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe

2014-12-27 22:05 - 2014-12-27 22:05 - 00083968 ___SH (Toshiba) C:\Users\FiD0\Downloads\vAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe

2014-12-27 21:33 - 2014-11-26 23:11 - 00714184 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-27 21:33 - 2014-11-26 23:11 - 00106440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-27 21:32 - 2014-12-27 21:32 - 00000649 _____ () C:\Paint.lnk

2014-12-27 13:41 - 2014-12-27 13:41 - 00004011 _____ () C:\Users\FiD0\Downloads\starbucks %2B cpture.ini

2014-12-27 12:37 - 2014-12-27 12:37 - 00322233 _____ () C:\Users\FiD0\Downloads\combo.pw_10k_leaked_info_-_sql_list_-_combo_list_-_database.txt

2014-12-27 02:48 - 2014-12-27 02:48 - 00655249 _____ () C:\Users\FiD0\Desktop\proxiess.txt

2014-12-27 02:41 - 2014-12-27 02:41 - 01564840 _____ () C:\Users\FiD0\Downloads\VIP-SQLI-Email-ComboList.rar

2014-12-27 02:39 - 2014-12-27 02:39 - 00009346 _____ () C:\Users\FiD0\Desktop\amazon.com.au proxyless.ini

2014-12-27 00:44 - 2014-12-27 00:44 - 00022355 _____ () C:\Users\FiD0\Downloads\SplitOrJoin 0.2.rar

2014-12-26 15:15 - 2014-12-26 15:15 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\Sun

2014-12-26 01:20 - 2014-12-26 01:20 - 00000922 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk

2014-12-26 01:19 - 2014-12-26 01:19 - 00000867 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk

2014-12-26 01:18 - 2014-12-26 01:18 - 00000914 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk

2014-12-26 01:18 - 2014-12-26 01:18 - 00000839 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk

2014-12-26 01:17 - 2014-12-26 01:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe

2014-12-26 01:17 - 2014-12-26 01:17 - 00000000 ____D () C:\Program Files (x86)\Adobe Media Player

2014-12-26 01:14 - 2014-12-26 01:14 - 00000987 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk

2014-12-26 01:13 - 2014-12-26 01:13 - 00001523 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk

2014-12-26 01:13 - 2014-12-26 01:13 - 00000997 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk

2014-12-26 01:13 - 2014-12-26 01:13 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia

2014-12-26 01:13 - 2014-12-26 01:13 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia

2014-12-26 00:55 - 2014-12-26 02:08 - 04482410 _____ () C:\Users\FiD0\Desktop\gatt (1).psd

2014-12-25 17:41 - 2014-12-25 17:41 - 00594184 ___SH () C:\Users\FiD0\Downloads\vEmail Pass 3940338.txt.exe

2014-12-25 17:02 - 2014-12-25 17:02 - 00008704 ___SH () C:\Users\FiD0\Downloads\Thumbs.db

2014-12-24 19:40 - 2014-10-09 06:00 - 01519104 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll

2014-12-24 19:40 - 2014-10-09 06:00 - 01484288 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2014-12-24 19:40 - 2014-10-09 06:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll

2014-12-24 19:40 - 2014-10-09 05:59 - 01195520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll

2014-12-24 19:40 - 2014-10-09 05:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll

2014-12-24 18:39 - 2014-12-24 18:39 - 00000645 _____ () C:\Users\FiD0\Desktop\Bit Che.lnk

2014-12-24 18:39 - 2014-12-24 18:39 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\Convivea

2014-12-24 18:39 - 2014-12-24 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bit Che

2014-12-24 18:04 - 2014-07-09 00:32 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll

2014-12-24 18:04 - 2014-07-03 03:59 - 01824784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-12-24 18:04 - 2014-06-25 09:07 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-12-24 18:04 - 2014-06-18 01:23 - 02238464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-12-24 18:04 - 2014-06-11 16:47 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2014-12-24 18:04 - 2014-06-11 06:40 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2014-12-24 18:03 - 2014-10-18 10:44 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-12-24 18:03 - 2014-10-18 09:05 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-12-24 18:03 - 2014-10-11 09:44 - 19764736 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-12-24 18:03 - 2014-10-11 07:57 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-12-24 18:03 - 2014-10-09 05:59 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2014-12-24 18:03 - 2014-10-09 05:59 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2014-12-24 18:03 - 2014-10-09 05:58 - 00458240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2014-12-24 18:03 - 2014-10-03 03:21 - 00522728 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-12-24 18:03 - 2014-10-03 00:29 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-12-24 18:03 - 2014-10-03 00:29 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-12-24 18:03 - 2014-10-03 00:29 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-12-24 18:03 - 2014-09-22 07:38 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-12-24 18:03 - 2014-09-22 05:56 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-12-24 18:03 - 2014-09-18 01:24 - 00987136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll

2014-12-24 18:03 - 2014-09-18 01:24 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmscan.dll

2014-12-24 18:03 - 2014-09-18 01:24 - 00278528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm.dll

2014-12-24 18:03 - 2014-09-18 01:24 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adrclient.dll

2014-12-24 18:03 - 2014-09-18 00:57 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll

2014-12-24 18:03 - 2014-09-18 00:57 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll

2014-12-24 18:03 - 2014-09-18 00:57 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\srm.dll

2014-12-24 18:03 - 2014-09-18 00:57 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\adrclient.dll

2014-12-24 18:03 - 2014-07-12 06:41 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL

2014-12-24 18:03 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2014-12-24 18:03 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2014-12-24 18:03 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2014-12-24 18:03 - 2014-07-12 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2014-12-24 18:03 - 2014-07-12 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2014-12-24 18:03 - 2014-07-12 06:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL

2014-12-24 18:03 - 2014-07-12 06:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL

2014-12-24 18:03 - 2014-07-12 06:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL

2014-12-24 18:03 - 2014-07-12 06:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL

2014-12-24 18:03 - 2014-07-12 06:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL

2014-12-24 18:03 - 2014-07-12 06:15 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL

2014-12-24 18:03 - 2014-07-12 02:02 - 00478352 _____ () C:\Windows\SysWOW64\locale.nls

2014-12-24 18:03 - 2014-07-12 02:00 - 00478352 _____ () C:\Windows\system32\locale.nls

2014-12-24 18:03 - 2014-07-09 00:33 - 00181248 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe

2014-12-24 18:03 - 2014-07-09 00:32 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-12-24 18:03 - 2014-07-09 00:30 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll

2014-12-24 18:03 - 2014-07-07 07:52 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2014-12-24 18:03 - 2014-07-07 07:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2014-12-24 18:03 - 2014-07-04 12:52 - 00328000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-12-24 18:03 - 2014-07-03 02:30 - 01408952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-12-24 18:03 - 2014-06-28 09:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-12-24 18:03 - 2014-06-28 08:57 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-12-24 18:03 - 2014-06-28 08:56 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-12-24 18:03 - 2014-06-25 09:09 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-12-24 18:03 - 2014-06-18 01:27 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-12-24 18:03 - 2014-06-11 00:44 - 01403896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-12-24 18:03 - 2014-02-04 12:57 - 01271664 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-12-24 18:02 - 2014-11-21 10:38 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-12-24 18:02 - 2014-11-21 10:38 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-12-24 18:02 - 2014-11-21 10:37 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-12-24 18:02 - 2014-11-21 10:37 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2014-12-24 18:02 - 2014-11-21 10:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 19283456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 15400960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-12-24 18:02 - 2014-11-21 10:36 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-12-24 18:02 - 2014-11-21 10:35 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-12-24 18:02 - 2014-11-21 09:17 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-12-24 18:02 - 2014-11-21 09:17 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-12-24 18:02 - 2014-11-21 09:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-12-24 18:02 - 2014-11-21 09:17 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 13758976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-12-24 18:02 - 2014-11-21 09:16 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-12-24 18:02 - 2014-11-21 09:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-12-24 18:02 - 2014-11-21 09:00 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-12-24 18:02 - 2014-11-21 08:54 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-12-24 18:02 - 2014-11-21 06:30 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2014-12-24 18:02 - 2014-10-02 01:05 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-12-24 18:02 - 2014-09-22 07:53 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-12-24 18:02 - 2014-09-13 08:24 - 02233152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-12-24 18:02 - 2014-09-06 02:46 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2014-12-24 18:02 - 2014-09-03 04:48 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-12-24 18:02 - 2014-09-03 04:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2014-12-24 18:02 - 2014-09-03 04:22 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2014-12-24 18:02 - 2014-09-03 04:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-12-24 18:02 - 2014-08-29 06:17 - 02043392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2014-12-24 18:02 - 2014-08-29 06:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2014-12-24 18:02 - 2014-08-29 06:04 - 02837504 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2014-12-24 18:02 - 2014-08-29 06:04 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2014-12-24 18:02 - 2014-08-28 08:04 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll

2014-12-24 18:02 - 2014-08-28 08:04 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll

2014-12-24 18:02 - 2014-08-28 07:59 - 00616448 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2014-12-24 18:02 - 2014-08-28 07:59 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll

2014-12-24 18:02 - 2014-08-28 07:59 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll

2014-12-24 18:02 - 2014-08-28 07:59 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\FXST30.dll

2014-12-24 18:02 - 2014-08-27 00:08 - 00270024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-12-24 18:02 - 2014-07-24 15:12 - 00328512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2014-12-24 18:02 - 2014-07-07 07:53 - 01125376 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-12-24 18:02 - 2014-07-07 07:52 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-12-24 18:02 - 2014-07-07 07:52 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2014-12-24 18:02 - 2014-07-07 07:51 - 05982208 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-12-24 18:02 - 2014-07-07 06:01 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-12-24 18:02 - 2014-07-07 06:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll

2014-12-24 18:02 - 2014-07-07 06:00 - 05095424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-12-24 18:02 - 2014-07-07 05:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2014-12-24 18:01 - 2014-11-21 10:36 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-12-24 18:01 - 2014-11-21 09:17 - 14364672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-12-24 18:01 - 2014-11-21 09:17 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-12-24 18:01 - 2014-11-21 09:16 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-12-24 18:01 - 2014-11-21 09:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-12-24 18:01 - 2014-11-06 08:50 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2014-12-24 18:01 - 2014-11-06 07:03 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-24 18:01 - 2014-10-11 09:45 - 10115072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-12-24 18:01 - 2014-10-11 09:44 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-12-24 18:01 - 2014-10-11 09:44 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-12-24 18:01 - 2014-10-11 09:43 - 02307072 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-12-24 18:01 - 2014-10-11 07:58 - 08858624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-12-24 18:01 - 2014-10-11 07:57 - 02416640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-12-24 18:01 - 2014-10-11 07:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-12-24 18:01 - 2014-10-11 07:56 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-12-24 18:00 - 2014-10-11 09:44 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-12-24 18:00 - 2014-10-11 07:41 - 00713728 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-12-24 18:00 - 2014-10-11 07:41 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-12-24 18:00 - 2014-10-11 07:05 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-12-24 18:00 - 2014-10-11 07:04 - 00713728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-12-24 18:00 - 2014-09-25 01:29 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-12-24 18:00 - 2014-09-25 01:29 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-12-24 18:00 - 2014-09-25 01:01 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-12-24 18:00 - 2014-09-25 01:01 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-12-24 17:59 - 2014-10-23 14:47 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-12-24 17:59 - 2014-10-23 13:04 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-12-24 17:59 - 2014-08-22 01:56 - 01418752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-12-24 17:59 - 2014-08-22 01:27 - 01845760 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-12-24 17:58 - 2014-11-08 13:22 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-12-24 17:58 - 2014-11-08 13:21 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-12-24 17:58 - 2014-11-08 08:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-12-24 17:58 - 2014-11-08 08:56 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-12-24 17:58 - 2014-10-11 10:35 - 00171840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-12-24 17:58 - 2014-10-11 09:44 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll

2014-12-24 17:58 - 2014-10-11 09:43 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-12-24 17:58 - 2014-10-11 07:57 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll

2014-12-24 17:58 - 2014-07-24 15:50 - 00447296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-12-24 17:58 - 2014-07-17 01:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll

2014-12-24 17:58 - 2014-07-17 00:59 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-12-24 17:58 - 2014-07-17 00:59 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll

2014-12-24 17:58 - 2014-07-12 08:45 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll

2014-12-24 17:58 - 2014-07-12 06:36 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-12-24 17:58 - 2014-07-12 06:36 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-12-24 17:58 - 2014-07-12 06:34 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-12-24 17:58 - 2014-07-12 06:34 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-12-24 17:58 - 2014-06-28 08:57 - 01341952 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2014-12-24 17:58 - 2014-06-28 04:23 - 01126400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-12-24 17:58 - 2014-06-13 01:34 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-12-24 17:58 - 2014-06-13 01:29 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-12-24 17:48 - 2014-12-28 11:10 - 00000000 ____D () C:\Users\FiD0\AppData\Local\Shotty

2014-12-24 17:47 - 2014-12-27 21:32 - 00000000 ____D () C:\Program Files\Shotty

2014-12-24 17:46 - 2014-10-30 09:20 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-12-24 17:46 - 2014-10-30 07:22 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-12-12 20:57 - 2014-12-12 20:57 - 00844288 ___SH () C:\Paint

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 12:30 - 2013-09-16 06:08 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\Skype

2014-12-28 12:19 - 2013-09-12 05:42 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-28 12:17 - 2013-11-17 14:09 - 00002238 ____H () C:\Users\FiD0\Documents\Default.rdp

2014-12-28 12:12 - 2013-09-12 05:44 - 00000926 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-12-28 11:49 - 2014-04-14 23:46 - 00679424 ___SH () C:\Users\FiD0\Desktop\Thumbs.db

2014-12-28 11:28 - 2014-04-26 22:20 - 01957904 _____ () C:\Windows\WindowsUpdate.log

2014-12-28 11:08 - 2013-09-12 05:44 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-12-28 11:08 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru

2014-12-28 02:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache

2014-12-27 22:21 - 2014-03-02 19:12 - 00000000 ____D () C:\Users\FiD0\AppData\Local\CrashDumps

2014-12-27 21:37 - 2012-07-26 09:28 - 00854194 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-12-27 21:33 - 2013-12-20 18:13 - 00000000 ____D () C:\ProgramData\VMware

2014-12-27 21:32 - 2014-08-03 19:13 - 00000000 ____D () C:\Program Files (x86)\Etisalat USB modem

2014-12-27 21:32 - 2014-04-26 22:09 - 00180258 _____ () C:\Windows\PFRO.log

2014-12-27 21:32 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-27 21:32 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-12-27 21:31 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\en-GB

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\en-GB

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender

2014-12-27 21:30 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-12-27 21:29 - 2013-09-14 13:32 - 00000000 ____D () C:\Windows\system32\MRT

2014-12-27 02:08 - 2013-09-17 03:44 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\uTorrent

2014-12-26 01:59 - 2013-09-16 05:43 - 00000000 ____D () C:\Users\FiD0\AppData\Local\Adobe

2014-12-26 01:20 - 2013-11-15 11:38 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-12-26 01:20 - 2013-11-15 11:34 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-12-26 01:19 - 2013-09-11 19:10 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\Adobe

2014-12-26 01:18 - 2013-09-12 05:40 - 00000000 ____D () C:\ProgramData\Adobe

2014-12-26 01:13 - 2013-09-16 06:21 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-12-24 23:13 - 2013-09-12 05:50 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-12-24 19:49 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp

2014-12-24 19:46 - 2013-09-12 05:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2014-12-24 19:45 - 2013-09-12 05:41 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-12-24 19:14 - 2013-09-12 04:15 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2535051723-3405904455-3358818161-1001

2014-12-24 18:07 - 2013-09-12 05:44 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-12-24 18:07 - 2013-09-12 05:44 - 00003662 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-12-24 17:38 - 2014-09-17 16:34 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-12-24 17:38 - 2013-09-16 06:08 - 00000000 ____D () C:\ProgramData\Skype

2014-12-12 21:11 - 2013-09-11 19:09 - 00000000 ____D () C:\Users\FiD0

2014-12-12 21:07 - 2013-09-12 04:15 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-12 21:06 - 2013-09-12 05:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat

2014-12-12 21:06 - 2013-09-12 04:56 - 00000000 ____D () C:\Program Files (x86)\CyberLink

2014-12-12 21:02 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries

2014-12-12 21:01 - 2013-11-02 22:25 - 00000000 ____D () C:\Windows\SysWOW64\SupportAppCB

2014-12-12 21:00 - 2014-01-02 16:18 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-12-12 21:00 - 2014-01-02 16:18 - 00000000 ____D () C:\Program Files\iPod

2014-12-12 20:58 - 2013-12-01 19:10 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-12-12 20:58 - 2013-09-12 06:26 - 00000000 ____D () C:\ProgramData\Origin

2014-12-12 20:54 - 2013-12-20 18:19 - 00000000 ____D () C:\Users\FiD0\AppData\Roaming\VMware

2014-12-12 20:54 - 2013-12-20 18:19 - 00000000 ____D () C:\Users\FiD0\AppData\Local\VMware

2014-12-12 20:29 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent

Some content of TEMP:

====================

C:\Users\FiD0\AppData\Local\Temp\AutoRun.exe

C:\Users\FiD0\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\FiD0\AppData\Local\Temp\AVG.exe

C:\Users\FiD0\AppData\Local\Temp\cabex.dll

C:\Users\FiD0\AppData\Local\Temp\ICReinstall_FileZilla_3.8.0_win32-setup.exe

C:\Users\FiD0\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\FiD0\AppData\Local\Temp\mirc732.exe

C:\Users\FiD0\AppData\Local\Temp\ntdll_dump.dll

C:\Users\FiD0\AppData\Local\Temp\Quarantine.exe

C:\Users\FiD0\AppData\Local\Temp\RunWizards.exe

C:\Users\FiD0\AppData\Local\Temp\SetupUtils6.dll

C:\Users\FiD0\AppData\Local\Temp\SHSetup.exe

C:\Users\FiD0\AppData\Local\Temp\SkypeSetup.exe

C:\Users\FiD0\AppData\Local\Temp\SRLDetectionLibrary8852272649607411957.dll

C:\Users\FiD0\AppData\Local\Temp\xmlUpdater.exe

C:\Users\FiD0\AppData\Local\Temp\_isB70A.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows Boot Manager

--------------------

identifier {bootmgr}

device partition=\Device\HarddiskVolume1

description Windows Boot Manager

locale en-GB

inherit {globalsettings}

integrityservices Enable

default {current}

resumeobject {ef21207b-1b14-11e3-8ea6-8facd0fed316}

displayorder {current}

toolsdisplayorder {memdiag}

timeout 30

Windows Boot Loader

-------------------

identifier {current}

device partition=C:

path \Windows\system32\winload.exe

description Windows 8

locale en-GB

inherit {bootloadersettings}

recoverysequence {ef21207d-1b14-11e3-8ea6-8facd0fed316}

integrityservices Enable

recoveryenabled Yes

allowedinmemorysettings 0x15000075

osdevice partition=C:

systemroot \Windows

resumeobject {ef21207b-1b14-11e3-8ea6-8facd0fed316}

nx OptIn

bootmenupolicy Standard

hypervisorlaunchtype Auto

Windows Boot Loader

-------------------

identifier {ef21207d-1b14-11e3-8ea6-8facd0fed316}

device ramdisk=[\Device\HarddiskVolume1]\Recovery\ef21207d-1b14-11e3-8ea6-8facd0fed316\Winre.wim,{ef21207e-1b14-11e3-8ea6-8facd0fed316}

path \windows\system32\winload.exe

description Windows Recovery Environment

locale en-GB

inherit {bootloadersettings}

displaymessage Recovery

osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\ef21207d-1b14-11e3-8ea6-8facd0fed316\Winre.wim,{ef21207e-1b14-11e3-8ea6-8facd0fed316}

systemroot \windows

nx OptIn

bootmenupolicy Standard

winpe Yes

Resume from Hibernate

---------------------

identifier {ef21207b-1b14-11e3-8ea6-8facd0fed316}

device partition=C:

path \Windows\system32\winresume.exe

description Windows Resume Application

locale en-GB

inherit {resumeloadersettings}

recoverysequence {ef21207d-1b14-11e3-8ea6-8facd0fed316}

recoveryenabled Yes

allowedinmemorysettings 0x15000075

filedevice partition=C:

filepath \hiberfil.sys

bootmenupolicy Standard

debugoptionenabled No

Windows Memory Tester

---------------------

identifier {memdiag}

device partition=\Device\HarddiskVolume1

path \boot\memtest.exe

description Windows Memory Diagnostic

locale en-GB

inherit {globalsettings}

badmemoryaccess Yes

EMS Settings

------------

identifier {emssettings}

bootems No

Debugger Settings

-----------------

identifier {dbgsettings}

debugtype Serial

debugport 1

baudrate 115200

RAM Defects

-----------

identifier {badmemory}

Global Settings

---------------

identifier {globalsettings}

inherit {dbgsettings}

{emssettings}

{badmemory}

Boot Loader Settings

--------------------

identifier {bootloadersettings}

inherit {globalsettings}

{hypervisorsettings}

Hypervisor Settings

-------------------

identifier {hypervisorsettings}

hypervisordebugtype Serial

hypervisordebugport 1

hypervisorbaudrate 115200

Resume Loader Settings

----------------------

identifier {resumeloadersettings}

inherit {globalsettings}

Device options

--------------

identifier {ef21207e-1b14-11e3-8ea6-8facd0fed316}

description Windows Recovery

ramdisksdidevice partition=\Device\HarddiskVolume1

ramdisksdipath \Recovery\ef21207d-1b14-11e3-8ea6-8facd0fed316\boot.sdi

LastRegBack: 2014-12-25 11:18

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2014

Ran by FiD0 at 2014-12-28 12:31:13

Running from C:\Users\FiD0\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\uTorrent) (Version: 3.3.2.30488 - BitTorrent Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Flash Player 11 Plugin 64-bit (HKLM\...\Adobe Flash Player Plugin) (Version: 11.2.202.233 - Adobe Systems Incorporated)

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Reader X (10.1.9) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.6.636 - Adobe Systems, Inc.)

AuthenTec TrueAPI 64-bit (Version: 1.6.0.86 - AuthenTec, Inc.) Hidden

Bit Che (HKLM-x32\...\{D9DA5C41-964F-455F-B5E7-3664519440E8}_is1) (Version: 3.0 build 10 - Convivea Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2.5712 - CyberLink Corp.)

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7.4528 - CyberLink Corp.)

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Download Accelerator Plus (DAP) (HKLM-x32\...\Download Accelerator Plus (DAP)) (Version: 10059 (Build 2593) - Speedbit Ltd.)

Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

HP 3D DriveGuard (HKLM\...\{6821D775-9303-46DD-977A-2D97CA18B054}) (Version: 4.2.8.1 - Hewlett-Packard Company)

HP CoolSense (HKLM-x32\...\{8704FEEF-A6A8-4E7E-B124-BD6122C66E2C}) (Version: 2.10.42 - Hewlett-Packard Company)

HP Documentation (HKLM-x32\...\{53D3E126-699A-4D92-AA66-6560D573553E}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)

HP SimplePass (HKLM-x32\...\{34C821CA-6B55-44A0-8A9B-2EF471D6019E}) (Version: 6.0.100.244 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)

HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6423.0 - IDT)

iFunbox (v2.8.2414.748), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.8.2414.748 - )

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3345 - Intel Corporation)

Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{E77289CF-12B9-4CAB-A49E-FEAE947F4D95}) (Version: 15.5.4.0423 - Intel Corporation)

Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{0728A184-F899-4356-B93D-8228674F0DEB}) (Version: 2.6.1209.0268 - Motorola Solutions, Inc.)

Intel® Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)

Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel® WiDi (HKLM\...\{6097158B-0184-4140-BEC3-7885794D2571}) (Version: 3.5.40.0 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.550 - Oracle)

K-Lite Codec Pack 9.6.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 9.6.5 - )

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM-x32\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 ENU (HKLM-x32\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)

Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{62577E41-C350-3D07-97C8-2B6CDB4BAD60}) (Version: 3.5.21022 - Microsoft)

Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{11EB1163-5761-4BC6-8F48-98DCF6A46BBF}) (Version: 6.1.5288.17011 - Microsoft Corporation)

Mozilla Firefox 25.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 en-US)) (Version: 25.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 25.0.1 - Mozilla)

NVIDIA GeForce Experience 1.7.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7.1 - NVIDIA Corporation)

NVIDIA Graphics Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)

NVIDIA Virtual Audio 1.2.9 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.9 - NVIDIA Corporation)

Oracle VM VirtualBox 4.3.6 (HKLM\...\{DC65DFD8-E175-4A85-948A-42965853B2E8}) (Version: 4.3.6 - Oracle Corporation)

Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)

Sandboxie 4.04 (64-bit) (HKLM\...\Sandboxie) (Version: 4.04 - Sandboxie Holdings, LLC)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden

SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden

Shotty - Tiny but impressive screenshot utility (HKLM\...\2e730c18-03e8-4d1d-8fc2-0ee3ea04a765) (Version: 2.0.2.216 - Thomas Baumann)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Start8 (HKLM\...\Start8_is1) (Version: 1.0 - Stardock Corporation)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.15.0 - Synaptics Incorporated)

System Requirements Lab CYRI (HKLM-x32\...\{19B0831B-0C18-4103-86E4-90FCD04CD3B9}) (Version: 6.0.12.5 - Husdawg, LLC)

System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)

Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)

Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)

Vista Shortcut Manager x64 (HKLM\...\{C7311329-C491-427B-8880-133E84869B3A}) (Version: 2.0 - Frameworkx)

Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)

VmciSockets (Version: 9.1.54.1 - VMware, Inc.) Hidden

VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 8.0.0.18997 - VMware, Inc)

VMware Workstation (x32 Version: 8.0.0.18997 - VMware, Inc.) Hidden

Windows 8 Codecs Pack 1.0.0 (HKLM\...\w8cpsetup_is1) (Version: 1.0.0 - Web Solution Mart)

WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)

WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

27-12-2014 21:24:41 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 07:26 - 2014-03-01 18:29 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {165B00A7-81E3-45B2-B309-E107006F5061} - System32\Tasks\Intel® Rapid Start Technology Manager => C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe [2012-07-20] (Intel)

Task: {168AA644-EDF7-499F-BF4E-3A3EE8E16DE5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-12] (Adobe Systems Incorporated)

Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask

Task: {244F9177-92FE-4CD9-826A-32170CA8EF2A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Uploader

Task: {307D8C75-FDA3-49D3-AA9F-DB79F405FB59} - System32\Tasks\Microsoft\Windows\Autochk\Proxy

Task: {31E908AC-63DF-43C4-8DC2-43CC8DCD23EE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)

Task: {34D46D98-48F1-496E-ACB1-B4A9EE8AB9B6} - System32\Tasks\{9569D1D1-C25E-4622-8764-7DE2386917AE} => Chrome.exe http://ui.skype.com/...e=tsProgressBar

Task: {4B0905A7-2EC2-43EE-8E95-3846C06E0133} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe

Task: {4BA17CD1-C375-4F2F-9092-65A4ACD5366A} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\WatTask => C:\Windows Activation Technologies\wat.exe [2006-04-21] ()

Task: {5096331C-0CDA-4AB7-BB30-8DA35EF24DE9} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver

Task: {578A522C-22B1-4022-8851-4D511DEAC5FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-12] (Google Inc.)

Task: {67229DF8-B971-4F31-933D-0FD466D45DE1} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater

Task: {674382BF-5332-4EC5-988F-3062928BA788} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {696A50D0-586C-4037-B98B-AC8229A41FC3} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-09-15] (Synaptics Incorporated)

Task: {6C2E95A6-F6CB-40FA-B1CD-30F1E4AA5A53} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {82626988-7580-40B8-ACEE-E66E4E98A6B4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-27] (Microsoft Corporation)

Task: {98C7D62D-C617-4F47-A6B5-26102F771CA7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation

Task: {C84F8A44-9FD3-4273-930B-E488674D2812} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent

Task: {D380F7D3-E152-4B3A-A46A-97F757897DB6} - System32\Tasks\{D1100320-7A88-43BC-8A74-797E2EFFD754} => pcalua.exe -a "C:\Program Files (x86)\Google\Picasa3\Uninstall.exe"

Task: {D956D9FE-DA9C-45A2-BBD1-5DDBC2B26C2A} - System32\Tasks\{60DF1BC8-4631-4DC2-855E-D79B9824ED8B} => Chrome.exe http://www.skype.com...LastError=12002

Task: {DB099640-5867-4668-85C6-45031C0D254F} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector

Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask

Task: {EC6903E6-84F2-4FAB-B3C7-F82E36FA497F} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2535051723-3405904455-3358818161-1001

Task: {F6EEB348-4FCE-484C-B5EE-7FDB5F66360C} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-12 08:57 - 2014-07-27 17:49 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2012-09-06 10:47 - 2012-09-06 10:47 - 00028160 _____ () C:\Windows\system32\valWBFPolicyService.exe

2013-11-22 18:23 - 2013-11-14 13:58 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2013-09-12 04:26 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll

2012-08-10 10:36 - 2012-08-10 10:36 - 04073320 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

2013-09-11 19:13 - 2012-09-25 00:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-09-17 00:32 - 2014-09-17 00:32 - 00844288 ___SH () C:\Users\FiD0\AppData\Roaming\Paint.exe

2011-08-22 16:23 - 2011-08-22 16:23 - 01222656 _____ () F:\Programs\Vmware\libxml2.dll

2013-09-12 04:22 - 2012-06-25 20:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll

2013-11-22 18:23 - 2013-11-14 13:58 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll

2014-11-12 17:17 - 2014-11-12 17:17 - 08897696 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-12-24 23:13 - 2014-12-06 03:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll

2014-12-24 23:13 - 2014-12-06 03:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll

2014-12-24 23:13 - 2014-12-06 03:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll

2014-12-24 23:13 - 2014-12-06 03:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:56E2E879

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "BTMTrayAgent"

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

HKLM\...\StartupApproved\Run32: => "BDRegion"

HKLM\...\StartupApproved\Run32: => "RemoteControl10"

HKLM\...\StartupApproved\Run32: => "AdobeCEPServiceManager"

HKLM\...\StartupApproved\Run32: => "mobilegeni daemon"

HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"

HKLM\...\StartupApproved\Run32: => "WsmUpdater"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\StartupApproved\Run: => "DAEMON Tools Ultra Agent"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\StartupApproved\Run: => "MicroUpdate"

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\StartupApproved\Run: => "DownloadAccelerator"

========================= Accounts: ==========================

Administrator (S-1-5-21-2535051723-3405904455-3358818161-500 - Administrator - Disabled)

FiD0 (S-1-5-21-2535051723-3405904455-3358818161-1001 - Administrator - Enabled) => C:\Users\FiD0

Guest (S-1-5-21-2535051723-3405904455-3358818161-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2535051723-3405904455-3358818161-1003 - Limited - Enabled)

UpdatusUser (S-1-5-21-2535051723-3405904455-3358818161-1004 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: WAN Miniport (IP)

Description: WAN Miniport (IP)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver

Name: VirtualBox Host-Only Ethernet Adapter

Description: VirtualBox Host-Only Ethernet Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Oracle Corporation

Service: VBoxNetAdp

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN Miniport (IPv6)

Description: WAN Miniport (IPv6)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver

Name: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed Adapter

Description: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed Adapter

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Intel Corporation

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: WAN Miniport (Network Monitor)

Description: WAN Miniport (Network Monitor)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver

==================== Event log errors: =========================

Application errors:

==================

Error: (12/28/2014 03:37:05 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: nvstreamsvc.exe, version: 1.6.53.0, time stamp: 0x527cf301

Faulting module name: KERNELBASE.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c

Exception code: 0xc0000142

Fault offset: 0x00000000000e2000

Faulting process ID: 0x519c

Faulting application start time: 0xnvstreamsvc.exe0

Faulting application path: nvstreamsvc.exe1

Faulting module path: nvstreamsvc.exe2

Report ID: nvstreamsvc.exe3

Faulting package full name: nvstreamsvc.exe4

Faulting package-relative application ID: nvstreamsvc.exe5

Error: (12/28/2014 02:09:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/27/2014 10:21:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe, version: 1.0.0.0, time stamp: 0x549e5502

Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d2be6

Exception code: 0xc000041d

Fault offset: 0x00010f22

Faulting process ID: 0x374c

Faulting application start time: 0xAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe0

Faulting application path: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe1

Faulting module path: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe2

Report ID: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe3

Faulting package full name: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe4

Faulting package-relative application ID: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe5

Error: (12/27/2014 10:21:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe, version: 1.0.0.0, time stamp: 0x549e5502

Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d2be6

Exception code: 0xe0434352

Fault offset: 0x00010f22

Faulting process ID: 0x374c

Faulting application start time: 0xAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe0

Faulting application path: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe1

Faulting module path: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe2

Report ID: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe3

Faulting package full name: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe4

Faulting package-relative application ID: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe5

Error: (12/27/2014 10:10:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: chrome.exe, version: 39.0.2171.95, time stamp: 0x548243f3

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000008

Fault offset: 0x5fad4bf9

Faulting process ID: 0x30f8

Faulting application start time: 0xchrome.exe0

Faulting application path: chrome.exe1

Faulting module path: chrome.exe2

Report ID: chrome.exe3

Faulting package full name: chrome.exe4

Faulting package-relative application ID: chrome.exe5

Error: (12/27/2014 00:40:27 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/26/2014 03:17:56 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program javaw.exe version 7.0.550.14 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 4d90

Start Time: 01d0210e3bc2fdd2

Termination Time: 4294967295

Application Path: C:\Program Files (x86)\Java\jre7\bin\javaw.exe

Report Id: 9a40115c-8d01-11e4-bf3e-a0b3cc50876d

Faulting package full name:

Faulting package-relative application ID:

Error: (12/26/2014 03:16:59 PM) (Source: Application Hang) (EventID: 1002) (User: )

Process ID: 1864

Start Time: 01d0210df68e2cf2

Termination Time: 4294967295

Application Path: C:\Program Files (x86)\Java\jre7\bin\javaw.exe

Report Id: 77dc2356-8d01-11e4-bf3e-a0b3cc50876d

Faulting package full name:

Faulting package-relative application ID:

Error: (12/26/2014 10:31:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/25/2014 09:45:58 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

System errors:

=============

Error: (12/26/2014 00:22:20 PM) (Source: volsnap) (EventID: 36) (User: )

Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (12/24/2014 07:41:26 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800706b5: Windows Malicious Software Removal Tool for Windows 8, 8.1 and Windows Server 2012, 2012 R2 x64 Edition - December 2014 (KB890830).

Error: (12/12/2014 09:02:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The BlueStacks Updater Service service terminated unexpectedly. It has done this 1 time(s).

Error: (09/15/2014 03:39:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The BlueStacks Android Service service terminated with the following error:

%%1064

Error: (09/15/2014 01:14:41 AM) (Source: DCOM) (EventID: 10010) (User: FadyNader)

Description: {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5}

Error: (09/10/2014 06:06:13 PM) (Source: ipnathlp) (EventID: 1233) (User: )

Description:

Error: (09/08/2014 01:54:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The BlueStacks Android Service service terminated with the following error:

%%1064

Error: (08/30/2014 02:40:44 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The BlueStacks Android Service service terminated with the following error:

%%1064

Error: (08/30/2014 02:20:17 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The BlueStacks Android Service service terminated with the following error:

%%1064

Error: (08/16/2014 02:25:11 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The BlueStacks Android Service service terminated with the following error:

%%1064

Microsoft Office Sessions:

=========================

Error: (12/28/2014 03:37:05 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: nvstreamsvc.exe1.6.53.0527cf301KERNELBASE.dll6.2.9200.1704653b4864cc000014200000000000e2000519c01d0223ec95617fdC:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeKERNELBASE.dll071cddff-8e32-11e4-bf3f-8ab48efaf3ec

Error: (12/28/2014 02:09:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/27/2014 10:21:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe1.0.0.0549e5502KERNELBASE.dll6.2.9200.16864531d2be6c000041d00010f22374c01d022129ff1206cC:\Users\FiD0\Desktop\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exeC:\Windows\SYSTEM32\KERNELBASE.dllec994c20-8e05-11e4-bf3f-a0b3cc50876d

Error: (12/27/2014 10:21:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe1.0.0.0549e5502KERNELBASE.dll6.2.9200.16864531d2be6e043435200010f22374c01d022129ff1206cC:\Users\FiD0\Desktop\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exeC:\Windows\SYSTEM32\KERNELBASE.dllea44e36d-8e05-11e4-bf3f-a0b3cc50876d

Error: (12/27/2014 10:10:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe39.0.2171.95548243f3unknown0.0.0.000000000c00000085fad4bf930f801d022113231ea5dC:\Program Files (x86)\Google\Chrome\Application\chrome.exeunknown75974de7-8e04-11e4-bf3f-a0b3cc50876d

Error: (12/27/2014 00:40:27 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/26/2014 03:17:56 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: javaw.exe7.0.550.144d9001d0210e3bc2fdd24294967295C:\Program Files (x86)\Java\jre7\bin\javaw.exe9a40115c-8d01-11e4-bf3e-a0b3cc50876d

Error: (12/26/2014 03:16:59 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: javaw.exe7.0.550.14186401d0210df68e2cf24294967295C:\Program Files (x86)\Java\jre7\bin\javaw.exe77dc2356-8d01-11e4-bf3e-a0b3cc50876d

Error: (12/26/2014 10:31:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

Error: (12/25/2014 09:45:58 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231

CodeIntegrity Errors:

===================================

Date: 2013-09-12 10:26:09.514

Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\smss.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\shell32.dll with signing level Unsigned while the system requires signing level Windows or better to load.

Date: 2013-09-12 05:25:40.731

Date: 2013-09-12 05:18:32.309

Date: 2013-09-12 04:51:58.294

Date: 2013-09-12 04:49:58.341

==================== Memory info ===========================

Processor: Intel® Core™ i7-3630QM CPU @ 2.40GHz

Percentage of memory in use: 27%

Total physical RAM: 8087.31 MB

Available physical RAM: 5825.48 MB

Total Pagefile: 9303.31 MB

Available Pagefile: 6934.19 MB

Total Virtual: 8192 MB

Available Virtual: 8191.75 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.31 GB) (Free:30.54 GB) NTFS

Drive f: () (Fixed) (Total:833.85 GB) (Free:807.18 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 076046FF)

Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=97.3 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (Size: 8 GB) (Disk ID: E5E3D597)

Partition: GPT Partition Type.

==================== End Of Log ============================

#6
Valinorum

Posted 28 December 2014 - 11:55 AM

GeekU Guardian Bot

GeekU Moderator
3,330 posts

Please, be careful, regarding what you download from the internet in the future.

Step #2 Fix with FRST
Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.

Open Notepad.exe. Do not use any other text editor software;

Copy and Paste the contents inside the code-box to your Notepad --

Start
CreateRestorePoint:
CloseProcesses:
Emptytemp:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Run: [MicroUpdate] => C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe [844288 2014-09-17] ()
C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {2850a21d-4df4-11e3-be81-606c667598af} - "D:\OriginInstaller.exe" 
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {3e05cb8f-1a1b-11e4-bf36-a0b3cc50876d} - "H:\Windows/Install.exe" 
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {48d0007d-4170-11e3-be80-606c667598af} - "H:\Windows/Install.exe" 
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\MountPoints2: {fe140bac-1b5a-11e3-be72-606c667598af} - "I:\setup.exe" 
Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Paint.lnk
ShortcutTarget: Paint.lnk -> C:\Users\FiD0\AppData\Roaming\Paint.exe ()
Startup: C:\Users\FiD0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thumbs.db ()
ProxyEnable: [S-1-5-21-2535051723-3405904455-3358818161-1001] => Internet Explorer proxy is enabled.
HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://egypt.msn.com...EG&dcc=EG&opt=0
URLSearchHook: [S-1-5-21-2535051723-3405904455-3358818161-1004] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
CHR StartupUrls: Default -> "hxxp://google.com/", ""
C:\Windows\System32\Drivers\az2w8a3r.sys 
2014-12-27 22:43 - 2014-12-28 01:59 - 00844288 _____ () C:\Users\FiD0\Downloads\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion (1).exe
2014-12-27 22:43 - 2014-12-27 22:43 - 00083968 ___SH (Toshiba) C:\Users\FiD0\Downloads\vAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion (1).exe
2014-12-27 22:05 - 2014-12-27 22:37 - 00844288 _____ () C:\Users\FiD0\Downloads\Amazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe
2014-12-27 22:05 - 2014-12-27 22:05 - 00083968 ___SH (Toshiba) C:\Users\FiD0\Downloads\vAmazon's prostitute ++ Elite ++ Nivida ++ Dispersion.exe
2014-12-27 21:32 - 2014-12-27 21:32 - 00000649 _____ () C:\Paint.lnk
2014-12-25 17:41 - 2014-12-25 17:41 - 00594184 ___SH () C:\Users\FiD0\Downloads\vEmail Pass 3940338.txt.exe
2014-12-12 20:57 - 2014-12-12 20:57 - 00844288 ___SH () C:\Paint
AlternateDataStreams: C:\ProgramData\Temp:56E2E879

End

Click on File > Save as...
- Inside the File Name box type fixlist.txt;
- From the Save as type drop down list, choose All Files
Save the file to your Desktop;
Re-run FRST.exe and click Fix;
- Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.
After the completion, a log will be produced;
Copy and Paste the contents of the log in your next reply.

Required Log(s):
- FRST Fix Log

Regards,
Valinorum

#7
Gatt

Posted 29 December 2014 - 12:30 PM

Member

Topic Starter
Member
20 posts

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-12-2014

Ran by FiD0 at 2014-12-29 20:21:31 Run:1

Running from C:\Users\FiD0\Desktop\New folder

Loaded Profiles: FiD0 & UpdatusUser (Available profiles: FiD0 & UpdatusUser)

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

Start

CreateRestorePoint:

CloseProcesses:

Emptytemp:

HKLM-x32\...\Run: [] => [X]

HKU\S-1-5-21-2535051723-3405904455-3358818161-1001\...\Run: [MicroUpdate] => C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe [844288 2014-09-17] ()

C:\Users\FiD0\Documents\MSDCSC\msdcsc.exe