Tracking Cookie Adtech and Casalemedia

Hi,

My computer runs win7 64-bit.

I started noticing today that my pc was running slower than usual. I discovered this while I was downloading some torrents from torrentleech website, which is a safe site. I then ran a virus scan with AVG Free, and it detected 2 threats, tracking cookie Adtech and Casalemedia, which it told me it secured and healed. My computer was running very slow at this moment, so I brought up my taskmanager, which said my processor was running at 100%. This was while I was running very few tasks. I then found this site, and looked up the two tracking cookies. Kapersky was recomended, so I installed it, and disabled AVG. Kapersky was not able to complete the scan, it stopped at 36%. I was then forced to close it and uninstall.

This did not help much, so I tried to do a system restore to a previous point. I was prompted that this system restore partially failed because of interference with anti-virus software.

I then downloaded adwcleaner and combofix, and ran them. I ran an AVG scan again, and it found nothing. But after a restart, my computer was slow again. I realize now I should not have downloaded combofix and adwcleaner and ran them without professional guidance, so I do apologize for that.

My computer still seems to run slow at times, processor being at 100% when only browsing webpages etc

I hope you can help me, and I will follow your instructions to the letter.

I read your starter guide, and downloaded and ran Frst.exe as instructed, and here are the results:

FRST LOG:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015

Ran by Bahgra (administrator) on BAHGRA-PC on 25-03-2015 20:53:06

Running from C:\Users\Bahgra\Desktop

Loaded Profiles: Bahgra (Available profiles: Bahgra)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Norsk, bokmål (Norge)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe

(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)

HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)

HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [4409400 2015-02-23] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [180224 2007-02-28] (Creative Technology Ltd)

HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry

HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-05-23] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1561968 2013-05-23] (Samsung)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Run: [HP Officejet 4620 series (NET)] => C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\RunOnce: [Adobe Speed Launcher] => 1427312693

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg...fr&d=2014-12-1523:13:31&v=4.1.0.411&pid=wtu&sg=&sap=hp

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-22] (Oracle Corporation)

BHO-x32: Påloggingshjelp for Microsoft-konto -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-22] (Oracle Corporation)

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creat...13/CTPIDPDE.cab

DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creat...015/CTSUEng.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creat...30321/CTPID.cab

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130

FF Homepage: https://www.google.com/?gws_rd=ssl

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()

FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll [2013-03-19] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()

FF Plugin-x32: @daum.net/npDaumGameStarter -> C:\Users\Default\AppData\Roaming\DaumGame\npDaumGameStarter.dll [2015-02-24] (Daum)

FF Plugin-x32: @gametap.com/npdd,version=1.0 -> D:\Program\Downloader\npdd.dll [2012-07-20] (Metaboli)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-03-21] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-06-09] (Nexon)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-01-09] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-01-09] (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Bahgra\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2013-03-30] (Raidcall)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3324200111-2799513535-2207132818-1001: @hola.org/vlc,version=1.6.64 -> C:\Users\Bahgra\AppData\Local\Hola\firefox\app\vlc No File

FF Plugin HKU\S-1-5-21-3324200111-2799513535-2207132818-1001: @mail.ru/GameCenter -> C:\Users\Bahgra\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll No File

FF Plugin HKU\S-1-5-21-3324200111-2799513535-2207132818-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Bahgra\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

FF Plugin HKU\S-1-5-21-3324200111-2799513535-2207132818-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Bahgra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-11-25] (Unity Technologies ApS)

FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2015-01-08]

FF Extension: Hola Better Internet - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2015-01-11]

FF Extension: EPUBReader - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-01-10]

FF Extension: Classic Theme Restorer - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2014-05-01]

FF Extension: RandImg.me Enabler - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2014-07-25]

FF Extension: MEGA - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2014-10-11]

FF Extension: BetterTTV - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2014-12-27]

FF Extension: Referrer Control - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\[email protected] [2014-01-06]

FF Extension: NoScript - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-11-07]

FF Extension: NoRedirect - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\{c1970c0d-dbe6-4d91-804f-c9c0de643a57}.xpi [2013-11-20]

FF Extension: Adblock Plus - C:\Users\Bahgra\AppData\Roaming\Mozilla\Firefox\Profiles\oxmul4rf.default-1383842300130\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-07]

Chrome:

=======

CHR Profile: C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-03]

CHR Extension: (BetterTTV) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2015-01-11]

CHR Extension: (Google Docs) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-03]

CHR Extension: (Google Drive) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-03]

CHR Extension: (YouTube) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-03]

CHR Extension: (Google Search) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-03]

CHR Extension: (Morpheon Dark - Aero) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpnbbonpgadmkipdlclghcekaklebdpi [2015-01-11]

CHR Extension: (Proxy SwitchySharp) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2015-01-11]

CHR Extension: (Hola Better Internet Engine) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\epbfmioobedknooiakdehepogalbgkng [2015-01-24]

CHR Extension: (Google Sheets) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-03]

CHR Extension: (Hola Better Internet) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-01-24]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-07]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-01-21]

CHR Extension: (HTTP Switchboard) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\mghdpehejfekicfjcdbfofhcmnjhgaag [2015-01-11]

CHR Extension: (Google Wallet) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-03]

CHR Extension: (Gmail) - C:\Users\Bahgra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-03]

CHR HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.goo...ice/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-03] ()

S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-01-04] (BitRaider, LLC)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-07-18] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 Intel® Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel® Corporation) [File not signed]

S3 Intel® Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel® Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

S3 Origin Client Service; D:\Games\Origin\OriginClientService.exe [1910640 2015-03-23] (Electronic Arts)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-14] ()

R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [4409400 2015-02-23] (SoftEther VPN Project at University of Tsukuba, Japan.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-03-04] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 asahci64; C:\Windows\system32\drivers\asahci64.sys [49048 2012-07-18] (Asmedia Technology)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [270816 2015-02-19] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-01-23] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [284128 2015-01-16] (AVG Technologies CZ, s.r.o.)

S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2015-01-04] (BitRaider)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-05] (Disc Soft Ltd)

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-06] (GFI Software)

S3 hxsyol; C:\Windows\system32\hxsy64.sys [86352 2015-01-04] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-12-11] (Intel Corporation)

R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0018.sys [28640 2015-02-23] (SoftEther VPN Project at University of Tsukuba, Japan.)

S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7681v1J0\NTIOLib_X64.sys [11888 2011-01-06] (MSI) [File not signed]

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

S3 SaiK0CD7; C:\Windows\System32\DRIVERS\SaiK0CD7.sys [180544 2012-09-20] (Saitek)

R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)

R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)

S3 SaiU0CD7; C:\Windows\System32\DRIVERS\SaiU0CD7.sys [47168 2012-09-20] (Saitek)

R3 SEE; C:\Windows\System32\drivers\see.sys [38240 2015-02-23] (SoftEther VPN Project at University of Tsukuba, Japan.)

S1 BdfNdisf; \??\c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [X]

S1 bdftdif; \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdftdif.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]

S3 MBfilt; system32\drivers\MBfilt64.sys [X]

S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 20:53 - 2015-03-25 20:53 - 00026370 _____ () C:\Users\Bahgra\Desktop\FRST.txt

2015-03-25 20:52 - 2015-03-25 20:53 - 00000000 ____D () C:\FRST

2015-03-25 20:52 - 2015-03-25 20:52 - 02095616 _____ (Farbar) C:\Users\Bahgra\Desktop\FRST64.exe

2015-03-25 20:44 - 2015-03-25 20:44 - 00001188 _____ () C:\Windows\PFRO.log

2015-03-25 20:44 - 2015-03-25 20:44 - 00000392 _____ () C:\Windows\setupact.log

2015-03-25 20:44 - 2015-03-25 20:44 - 00000000 _____ () C:\Windows\setuperr.log

2015-03-25 20:30 - 2015-03-25 20:48 - 00036914 _____ () C:\Windows\WindowsUpdate.log

2015-03-25 20:15 - 2015-03-25 20:15 - 00040295 _____ () C:\ComboFix.txt

2015-03-25 20:06 - 2015-03-25 20:26 - 00000000 ____D () C:\ComboFix

2015-03-25 18:56 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls

2015-03-25 18:56 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls

2015-03-25 18:54 - 2015-03-25 20:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2015-03-15 18:45 - 2015-03-15 18:45 - 00000695 _____ () C:\Users\Public\Desktop\World of Warships.lnk

2015-03-15 18:45 - 2015-03-15 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships

2015-03-14 12:51 - 2015-03-14 12:51 - 00000000 ____D () C:\ArcheAge

2015-03-13 19:06 - 2015-03-13 19:06 - 00000218 _____ () C:\Users\Bahgra\AppData\Local\recently-used.xbel

2015-03-11 01:40 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 01:40 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 01:40 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 01:40 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 01:40 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 01:40 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 01:40 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 01:40 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 01:40 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-03-11 01:40 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-03-11 01:40 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-03-11 01:40 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-03-11 01:40 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-03-11 01:40 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-03-11 01:40 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-03-11 01:40 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 01:40 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 01:40 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-03-11 01:40 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 01:40 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-03-11 01:40 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-03-11 01:40 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-03-11 01:40 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-03-11 01:40 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 01:40 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-03-11 01:40 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 01:40 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 01:40 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 01:40 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 01:40 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-03-11 01:40 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-11 01:40 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-03-11 01:40 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-03-11 01:40 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 01:40 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-11 01:40 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 01:40 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 01:40 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 01:40 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 01:40 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 01:40 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 01:40 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 01:40 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 01:40 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 01:40 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 01:40 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 01:40 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 01:40 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 01:40 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 01:40 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 01:40 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-03-11 01:40 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 01:40 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 01:40 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-03-11 01:40 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 01:40 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-03-11 01:40 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-03-11 01:40 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-03-11 01:40 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 01:40 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-03-11 01:40 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-03-11 01:40 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-03-11 01:40 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-03-11 01:40 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-03-11 01:40 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-03-11 01:40 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 01:40 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 01:40 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 01:40 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 01:40 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 01:40 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-03-11 01:40 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-03-11 01:40 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-03-11 01:40 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 01:40 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-03-11 01:40 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-03-11 01:40 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-03-11 01:40 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 01:40 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 01:40 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-03-11 01:40 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-03-11 01:40 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-03-11 01:40 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-11 01:40 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 01:40 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 01:40 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-11 01:40 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 01:40 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-03-11 01:40 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 01:40 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-03-11 01:40 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 01:40 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 01:40 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 01:40 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 01:40 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 01:40 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 01:40 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 01:40 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 01:40 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 01:40 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 01:40 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-03-11 01:40 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-03-11 01:40 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll

2015-03-11 01:40 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx

2015-03-11 01:40 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll

2015-03-11 01:40 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2015-03-11 01:40 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-03-11 01:40 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-03-11 01:40 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-03-11 01:40 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-03-11 01:40 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 01:40 - 2015-01-31 04:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 01:40 - 2015-01-31 04:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2015-03-11 01:40 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 01:40 - 2015-01-31 00:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 01:40 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 01:40 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-11 01:40 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 01:40 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 01:40 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-03-10 17:11 - 2015-03-10 17:11 - 00000000 ____D () C:\Users\Bahgra\Documents\Colossal Order

2015-03-10 17:11 - 2015-03-10 17:11 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\Colossal Order

2015-03-10 17:11 - 2015-03-10 17:11 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\.mono

2015-03-10 17:11 - 2015-03-10 17:11 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Colossal Order

2015-03-10 17:11 - 2015-03-10 17:11 - 00000000 ____D () C:\ProgramData\.mono

2015-03-10 17:03 - 2015-03-10 17:03 - 00000208 _____ () C:\Users\Bahgra\Desktop\Cities Skylines.url

2015-03-03 21:48 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2015-03-03 21:48 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2015-03-03 21:48 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2015-03-03 21:48 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll

2015-02-26 01:32 - 2015-02-26 01:32 - 00000000 ____D () C:\ProgramData\Avg_Update_0215tb

2015-02-25 17:55 - 2015-02-25 17:55 - 00000776 _____ () C:\Users\Public\Desktop\Heroes of the Storm.lnk

2015-02-25 17:55 - 2015-02-25 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm

2015-02-24 07:38 - 2015-02-24 07:38 - 00000010 _____ () C:\Users\Bahgra\Desktop\BlackD.txt

2015-02-23 13:38 - 2015-02-23 13:38 - 00038240 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\Windows\system32\Drivers\see.sys

2015-02-23 13:38 - 2015-02-23 13:38 - 00028640 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\Windows\system32\Drivers\Neo_0018.sys

2015-02-23 13:37 - 2015-03-25 20:49 - 00000000 ____D () C:\Program Files\SoftEther VPN Client

2015-02-23 13:37 - 2015-02-23 13:37 - 00135736 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\Windows\system32\vpncmd.exe

2015-02-23 13:37 - 2015-02-23 13:37 - 00001939 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2015-02-23 13:37 - 2015-02-23 13:37 - 00001933 _____ () C:\Users\Public\Desktop\SoftEther VPN Client Manager.lnk

2015-02-23 13:37 - 2015-02-23 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2015-02-23 13:16 - 2015-02-23 13:16 - 00000113 _____ () C:\Users\Public\Desktop\검은사막.url

2015-02-23 13:16 - 2015-02-23 13:16 - 00000113 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\검은사막.url

2015-02-23 13:16 - 2015-02-23 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum Games

2015-02-23 13:13 - 2015-02-24 07:39 - 00000000 ____D () C:\Users\Default\AppData\Roaming\DaumGame

2015-02-23 13:13 - 2015-02-24 07:39 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\DaumGame

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-25 20:51 - 2010-11-21 17:33 - 00494226 _____ () C:\Windows\system32\perfh014.dat

2015-03-25 20:51 - 2010-11-21 17:33 - 00095176 _____ () C:\Windows\system32\perfc014.dat

2015-03-25 20:51 - 2009-07-14 06:13 - 01360682 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-25 20:51 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-25 20:51 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-25 20:46 - 2014-02-04 03:26 - 00000000 ___RD () C:\Users\Bahgra\Google Drive

2015-03-25 20:44 - 2014-02-04 03:25 - 00000988 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-03-25 20:44 - 2013-07-20 08:14 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-03-25 20:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-25 20:42 - 2014-08-16 13:31 - 00000000 ____D () C:\Program Files (x86)\LOOT

2015-03-25 20:42 - 2014-08-16 06:37 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Black_Tree_Gaming

2015-03-25 20:40 - 2014-04-05 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daedalic Entertainment

2015-03-25 20:36 - 2013-05-21 15:50 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\Skype

2015-03-25 20:36 - 2013-05-21 15:20 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\uTorrent

2015-03-25 20:30 - 2014-04-11 14:44 - 00000000 ____D () C:\Windows\pss

2015-03-25 20:29 - 2013-05-21 16:06 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\Spotify

2015-03-25 20:28 - 2013-05-21 16:06 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Spotify

2015-03-25 20:26 - 2014-12-09 11:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-03-25 20:26 - 2014-06-28 02:37 - 00000000 ____D () C:\ProgramData\MFAData

2015-03-25 20:26 - 2013-07-06 16:15 - 00000000 ____D () C:\Windows\erdnt

2015-03-25 20:26 - 2013-05-22 20:37 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\vlc

2015-03-25 20:26 - 2013-05-21 14:47 - 00000000 ____D () C:\Users\Bahgra

2015-03-25 20:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2015-03-25 20:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism

2015-03-25 20:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration

2015-03-25 20:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-03-25 20:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2015-03-25 20:25 - 2013-07-06 16:15 - 00000000 ____D () C:\Qoobox

2015-03-25 20:21 - 2013-05-14 07:55 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-03-25 20:13 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini

2015-03-25 20:10 - 2014-02-04 03:25 - 00000992 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-03-25 20:02 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2015-03-25 20:01 - 2009-07-14 05:45 - 00463280 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-25 19:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2015-03-25 19:58 - 2014-12-15 23:13 - 00009704 _____ () C:\Windows\SysWOW64\debug.log

2015-03-25 19:58 - 2013-11-07 17:40 - 00000000 ____D () C:\AdwCleaner

2015-03-25 19:50 - 2014-06-21 00:45 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001UA.job

2015-03-25 18:50 - 2013-08-15 02:00 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-25 18:50 - 2013-06-23 06:28 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\TS3Client

2015-03-25 18:50 - 2013-05-25 17:45 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\CrashDumps

2015-03-25 18:50 - 2013-05-22 20:43 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\Media Player Classic

2015-03-25 18:25 - 2013-05-21 16:06 - 00001811 _____ () C:\Users\Bahgra\Desktop\Spotify.lnk

2015-03-25 18:25 - 2013-05-21 16:06 - 00001797 _____ () C:\Users\Bahgra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2015-03-25 18:22 - 2015-01-21 18:56 - 00007598 _____ () C:\Users\Bahgra\AppData\Local\Resmon.ResmonCfg

2015-03-25 01:50 - 2014-06-21 00:45 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001Core.job

2015-03-23 23:33 - 2013-05-27 16:32 - 00000000 ____D () C:\ProgramData\Origin

2015-03-22 22:25 - 2013-12-17 21:09 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\OBS

2015-03-22 22:24 - 2013-12-17 21:09 - 00000000 ____D () C:\Program Files (x86)\OBS

2015-03-21 17:12 - 2015-01-03 08:49 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-03-19 13:15 - 2014-03-02 23:38 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2015-03-15 18:46 - 2014-06-14 16:30 - 00000000 ____D () C:\ProgramData\Package Cache

2015-03-15 18:46 - 2013-06-09 11:15 - 00000000 ____D () C:\Windows\SysWOW64\directx

2015-03-14 20:13 - 2014-07-14 23:02 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Glyph

2015-03-14 20:07 - 2014-04-20 08:43 - 00000000 ____D () C:\Users\Bahgra\Documents\ArcheAge

2015-03-14 10:23 - 2013-07-08 16:38 - 00000000 ____D () C:\Users\Bahgra\AppData\Roaming\deluge

2015-03-13 08:53 - 2014-06-28 02:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2015-03-13 08:52 - 2014-06-28 02:38 - 00000000 ____D () C:\$AVG

2015-03-11 04:11 - 2014-02-04 03:25 - 00002042 _____ () C:\Users\Public\Desktop\Google Slides.lnk

2015-03-11 04:11 - 2014-02-04 03:25 - 00002040 _____ () C:\Users\Public\Desktop\Google Sheets.lnk

2015-03-11 04:11 - 2014-02-04 03:25 - 00002030 _____ () C:\Users\Public\Desktop\Google Docs.lnk

2015-03-11 04:11 - 2014-02-04 03:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2015-03-09 17:18 - 2013-12-19 15:15 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Battle.net

2015-03-07 18:52 - 2015-01-01 02:08 - 00000000 ____D () C:\Users\Bahgra\AppData\Local\Ares

2015-03-07 16:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-04 01:43 - 2014-12-15 23:13 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp

2015-02-26 21:14 - 2013-05-24 16:21 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2013-07-06 12:45 - 2013-07-06 12:45 - 0179501 _____ () C:\Users\Bahgra\AppData\Local\ars.cache

2013-07-06 12:47 - 2013-07-06 12:47 - 1079742 _____ () C:\Users\Bahgra\AppData\Local\census.cache

2014-04-11 14:57 - 2014-04-11 14:57 - 0000002 _____ () C:\Users\Bahgra\AppData\Local\config.txt

2013-06-16 21:57 - 2015-01-26 17:56 - 0012288 _____ () C:\Users\Bahgra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-07-06 12:35 - 2013-07-06 12:35 - 0000036 _____ () C:\Users\Bahgra\AppData\Local\housecall.guid.cache

2015-03-13 19:06 - 2015-03-13 19:06 - 0000218 _____ () C:\Users\Bahgra\AppData\Local\recently-used.xbel

2015-01-21 18:56 - 2015-03-25 18:22 - 0007598 _____ () C:\Users\Bahgra\AppData\Local\Resmon.ResmonCfg

2014-07-02 18:39 - 2014-07-02 18:39 - 0000057 _____ () C:\ProgramData\Ament.ini

Some zero byte size files/folders:

==========================

C:\Windows\System32\nvapi.dll

C:\Windows\System32\nvwgf2um.dll

C:\Windows\System32\Drivers\tmcomm.sys

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-03-25 06:41

==================== End Of Log ============================

ADDITION LOG:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015

Ran by Bahgra at 2015-03-25 20:53:29

Running from C:\Users\Bahgra\Desktop

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\uTorrent) (Version: 3.4.2.39586 - BitTorrent Inc.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1860 - Adobe Systems Incorporated)

Adobe Flash Media Live Encoder 3.2 (HKLM-x32\...\{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}) (Version: 3.2.0 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Norsk (HKLM-x32\...\{AC76BA86-7AD7-1044-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Age of Mythology: Extended Edition Update v1.7 (HKLM-x32\...\QWdlb2ZNeXRob2xvZ3lFeHRlbmRlZEVkaXRpb24=_is1) (Version: 1 - )

Anno 1404 (HKLM-x32\...\Steam App 33250) (Version: - Blue Byte)

Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version: - Blue Byte)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Apple-programsupport (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)

Archeage (HKLM-x32\...\Glyph Archeage) (Version: - Trion Worlds, Inc.)

Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)

Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)

AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5751 - AVG Technologies)

AVG 2015 (Version: 15.0.4315 - AVG Technologies) Hidden

AVG 2015 (Version: 15.0.5751 - AVG Technologies) Hidden

AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)

Baldur's Gate II: Enhanced Edition (HKLM-x32\...\Steam App 257350) (Version: - Beamdog)

Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - )

Bastion (HKLM-x32\...\Steam App 107100) (Version: - Supergiant Games)

Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)

Beyond Divinity (HKLM-x32\...\Steam App 219760) (Version: - Larian Studios)

BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Broken Age (HKLM-x32\...\Steam App 232790) (Version: - Double Fine Productions)

CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden

CBR and CBZ to PDF 2.1.2.8 (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\CBR and CBZ to PDF) (Version: 2.1.2.8 - Indie Softworks)

CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)

Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order)

Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)

Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)

Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - )

Creative System Information (HKLM-x32\...\SysInfo) (Version: - )

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)

Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)

DaumGame Starter (HKLM\...\DaumGame Starter_is1) (Version: 1.0.0.1 - DaumGame)

DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)

Deadlight (HKLM-x32\...\Steam App 211400) (Version: - Tequila Works, S.L.)

Deluge 1.3.6 (HKLM-x32\...\Deluge) (Version: - )

Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)

Divine Divinity (HKLM-x32\...\Steam App 214170) (Version: - Larian Studios)

Divinity II: Developer's Cut (HKLM-x32\...\Steam App 219780) (Version: - Larian Studios)

Divinity Original Sin (HKLM-x32\...\Steam App 230230) (Version: - Larian Studios)

Downloader (HKLM-x32\...\Downloader) (Version: - )

Dragon Age: Origins - Ultimate Edition (HKLM-x32\...\Steam App 47810) (Version: - BioWare)

Elite Dangerous Launcher version 0.4.1765.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.1765.0 - Frontier Developments)

erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden

EVGA OC Scanner X 3.2.0 (64-bit) (HKLM\...\{CC520CF6-B02E-49AA-8192-C1DDC159E0AA}}_is1) (Version: - EVGA)

EVGA Precision X 4.2.1 (HKLM-x32\...\PrecisionX) (Version: 4.2.1 - EVGA Corporation)

Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)

Far Cry 4 version 1.0 (HKLM-x32\...\{29166D9E-2B8B-495B-B864-701C0BF33170}_is1) (Version: 1.0 - )

Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)

FINAL FANTASY VIII (HKLM-x32\...\Steam App 39150) (Version: - SQUARE ENIX)

FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)

Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - )

Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version: - Greenheart Games)

Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)

Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)

Google Drive (HKLM-x32\...\{6C36881B-0E51-4231-9D02-BF2149664D34}) (Version: 1.20.8672.3137 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

GRAV (HKLM-x32\...\Steam App 332500) (Version: - BitMonster, Inc.)

Grim Dawn (HKLM-x32\...\Steam App 219990) (Version: - )

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)

Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)

Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - )

HP Officejet 4620 series basisprogramvare (HKLM\...\{38AF24FA-CA7C-4C3E-99B3-DCCE4AA3EC1E}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Officejet 4620 series Hjelp (HKLM-x32\...\{FC12CBF3-DBA6-4986-8D1D-2ECE0C229330}) (Version: 6.0.0 - Hewlett Packard)

I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)

League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden

Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)

Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)

Mass Effect (HKLM-x32\...\Steam App 17460) (Version: - BioWare)

Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version: - BioWare)

Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office 365 - nb-no (HKLM\...\O365HomePremRetail - nb-no) (Version: 15.0.4701.1002 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{01db25f3-1b76-4d97-88c8-1c90634d88fb}) (Version: 11.0.60610.1 - Корпорация Майкрософт)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version: - Virtual Heroes)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

MPC-HC 1.6.8 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.6.8.7417 - MPC-HC Team)

NVIDIA 3D Vision-driver 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)

NVIDIA Driver for HD-lyd 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA Driver til 3D Vision-kontroller 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafikkdriver 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)

NVIDIA PhysX systemprogramvare 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )

OpenAL (HKLM-x32\...\OpenAL) (Version: - )

OpenOffice.org 3.4.1 (HKLM-x32\...\{5EF3F0D6-9F51-4759-8934-E43C1373D1A2}) (Version: 3.41.9593 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)

Papers, Please (HKLM-x32\...\Steam App 239030) (Version: - 3909)

Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)

Plants vs. Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)

Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)

Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)

Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)

RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.0-1.0.10926.49 - raidcall.com)

Raptr (HKLM-x32\...\Raptr) (Version: - )

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.28.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.28.0 - Renesas Electronics Corporation) Hidden

Rise of the Badlands version 1.0 (HKLM-x32\...\{42797BDE-3EF5-46FD-AC41-F1C692638443}}_is1) (Version: 1.0 - Free Reign Entertainment)

RivaTuner Statistics Server 5.2.0 (HKLM-x32\...\RTSS) (Version: 5.2.0 - Unwinder)

Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13052_10 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.5.3.13052_10 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)

Shadowrun Returns (HKLM-x32\...\Steam App 234650) (Version: - Harebrained Schemes)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)

Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version: - Firaxis Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smart Technology Programming Software 7.0.27.13 (HKLM\...\{BD90BC1C-115D-47E1-B85C-07AE182C3AB8}) (Version: 7.0.27.13 - Mad Catz)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.14.9530 - SoftEther VPN Project)

Sound Blaster X-Fi Xtreme Audio (HKLM-x32\...\{53E2DCBB-E6F7-4C83-B1EF-F78435B9814E}) (Version: 1.0 - )

South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Spotify) (Version: 1.0.2.6.g9977a14b - Spotify AB)

Språkpakke for Microsoft Visual Studio 2010 Tools for Office Runtime (x64) – NOR (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NOR) (Version: 10.0.50903 - Microsoft Corporation)

Star Wars Galaxies (HKLM-x32\...\{88038160-9BCB-47BE-A5C3-5CE2DC115509}) (Version: 1.00.000 - )

Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 8.0.0.5 - Bioware/EA)

Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.0.0.0 - Electronic Arts, Inc.)

State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold 3 (HKLM-x32\...\Steam App 47400) (Version: - FireFly Studios)

Stronghold Crusader Extreme HD (HKLM-x32\...\Steam App 16700) (Version: - Firefly Studios)

Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version: - FireFly Studios)

Stronghold HD (HKLM-x32\...\Steam App 40950) (Version: - FireFly Studios)

Subtitle Workshop 6.0b (HKLM-x32\...\SubtitleWorkshop) (Version: - )

SWGEmu Launchpad (HKLM-x32\...\{37A10E4F-B984-462D-A33E-6C3D74CB1299}) (Version: 0.22 - SWGEmu)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version: - )

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)

The Incredible Adventures of Van Helsing (HKLM-x32\...\Steam App 215530) (Version: - NeocoreGames)

The Last Remnant (HKLM-x32\...\Steam App 23310) (Version: - SQUARE ENIX)

The Legend of Heroes: Trails in the Sky (HKLM-x32\...\Steam App 251150) (Version: - Nihon Falcom)

The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.3.32.1010 - Electronic Arts Inc.)

The Swapper (HKLM-x32\...\Steam App 231160) (Version: - Olli Harjola, Otto Hantula, Tom Jubert, Carlo Castellano)

The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version: - CD Projekt RED)

The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version: - CD Projekt RED)

The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)

Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.2 - Electronic Arts)

To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)

Tom Clancy's Splinter Cell Blacklist (HKLM-x32\...\Steam App 235600) (Version: - Ubisoft Toronto)

Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)

Town of Salem (HKLM-x32\...\Steam App 334230) (Version: - BlankMediaGames)

Towns (HKLM-x32\...\Steam App 221020) (Version: - Xavi Canal, Ben Palgi)

Unity Web Player (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Windower (HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\...\Windower) (Version: 4.0.0.0 - Windower Team)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-driverpakke - Advanced Micro Devices, Inc System (03/16/2011 5.12.0.0015) (HKLM\...\A3A37EC031F134EDD1E9DB40819B1EAD0DB7C844) (Version: 03/16/2011 5.12.0.0015 - Advanced Micro Devices, Inc)

Windows-driverpakke - AMD (amd_sata) HDC (04/11/2012 1.2.001.0331) (HKLM\...\BD0CF85FC90EC4EEB885EFE0D63459B8C9B578A9) (Version: 04/11/2012 1.2.001.0331 - AMD)

Windows-driverpakke - AMD (amd_sata) HDC (04/11/2012 1.2.001.0331) (HKLM\...\FB1D3CA5E82F2B8B832547780586B995B1F942BA) (Version: 04/11/2012 1.2.001.0331 - AMD)

Windows-driverpakke - Asmedia Technology (asahci64) hdc (07/18/2012 1.3.8.000) (HKLM\...\9408E68BC8A20B75E31B2992F0B23CEAF9743213) (Version: 07/18/2012 1.3.8.000 - Asmedia Technology)

Windows-driverpakke - Intel (MEIx64) System (12/17/2012 9.0.0.1287) (HKLM\...\AB25C12A73EF7334D5E8C882872BE30B5035BA60) (Version: 12/17/2012 9.0.0.1287 - Intel)

Windows-driverpakke - Intel Corporation (iaStorA) HDC (12/11/2012 11.7.1.1001) (HKLM\...\9A357B65944888D86166D2DBF7B8505F4D30AB5B) (Version: 12/11/2012 11.7.1.1001 - Intel Corporation)

Windows-driverpakke - Intel hdc (02/25/2013 9.2.0.1033) (HKLM\...\EC3A7B76E88A879A12509761E6BECA82A3E0D42F) (Version: 02/25/2013 9.2.0.1033 - Intel)

Windows-driverpakke - Intel hdc (09/10/2010 9.2.0.1011) (HKLM\...\171901D8B4D5484C362A709BF264A50F065A14FB) (Version: 09/10/2010 9.2.0.1011 - Intel)

Windows-driverpakke - Intel System (02/25/2013 9.2.0.1033) (HKLM\...\0FBDCFE2DCC63A72CD0046C5A604EEFA2B9EE5C1) (Version: 02/25/2013 9.2.0.1033 - Intel)

Windows-driverpakke - Intel System (02/25/2013 9.2.0.1033) (HKLM\...\88993E09CB417247BEF7C2B501EDAB4BFF1EC272) (Version: 02/25/2013 9.2.0.1033 - Intel)

Windows-driverpakke - Intel System (02/25/2013 9.2.0.1033) (HKLM\...\B2E0AF6C4867560FC6415C14B0F506FEFD79BDBA) (Version: 02/25/2013 9.2.0.1033 - Intel)

Windows-driverpakke - Intel System (03/10/2011 9.2.0.1026) (HKLM\...\9BC1D406C7F459937934ABBF1D718304962F15C8) (Version: 03/10/2011 9.2.0.1026 - Intel)

Windows-driverpakke - Intel System (04/14/2011 1.2.0.1030) (HKLM\...\CF7E87A2491E5E9846C8193CC987F35028937C4B) (Version: 04/14/2011 1.2.0.1030 - Intel)

Windows-driverpakke - Intel System (07/19/2011 9.2.0.1032) (HKLM\...\03616F2289682C41A0832A9023B55F5F63976BD4) (Version: 07/19/2011 9.2.0.1032 - Intel)

Windows-driverpakke - Intel System (09/10/2010 9.2.0.1011) (HKLM\...\0CDBDD444A1F5FFEA227B4E7DCE195F11F08240A) (Version: 09/10/2010 9.2.0.1011 - Intel)

Windows-driverpakke - Intel System (11/20/2010 9.2.0.1016) (HKLM\...\43B5066463CEBC83E99586A67037B6F9FC4193FE) (Version: 11/20/2010 9.2.0.1016 - Intel)

Windows-driverpakke - Intel USB (02/25/2013 9.2.0.1033) (HKLM\...\8A0F99083C3CCA80A3FD3EBAB889C485B45342BD) (Version: 02/25/2013 9.2.0.1033 - Intel)

Windows-driverpakke - Intel USB (12/21/2010 9.2.0.1021) (HKLM\...\0DD5528A211904214F70A66DE6ADBD378B21566D) (Version: 12/21/2010 9.2.0.1021 - Intel)

Windows-driverpakke - JMicron Technology Corp. (JRAID) SCSIAdapter (05/19/2011 1.17.63.1) (HKLM\...\06E10C20ED3FE11DFCFF3E571D177FAA78FB86E9) (Version: 05/19/2011 1.17.63.1 - JMicron Technology Corp.)

Windows-driverpakke - Marvell Inc. (mv91xx) SCSIAdapter (06/06/2012 1.2.0.1027) (HKLM\...\A4351BE2478C5DE51CDB574932BBC66B9848A304) (Version: 06/06/2012 1.2.0.1027 - Marvell Inc.)

Windows-driverpakke - Marvell Inc. (mv91xx) SCSIAdapter (11/11/2011 1.2.0.1019) (HKLM\...\D5E2BE36AA4BDC1BDA7110D5C4257B56CE5C4457) (Version: 11/11/2011 1.2.0.1019 - Marvell Inc.)

Windows-driverpakke - Marvell Inc. System (11/11/2011 1.2.0.1019) (HKLM\...\8EF935D43698719F47B05017BC402E188DE32265) (Version: 11/11/2011 1.2.0.1019 - Marvell Inc.)

Windows-driverpakke - Marvell Semiconductor Inc. (mv91cons) System (06/06/2012 1.2.0.1027) (HKLM\...\71EF33B628594739A9434DDDF2DE4326B8A1C10E) (Version: 06/06/2012 1.2.0.1027 - Marvell Semiconductor Inc.)

Windows-driverpakke - Marvell Semiconductor Inc. (mv91cons) System (11/11/2011 1.2.0.1019) (HKLM\...\E4D2648BC3EDEFD097A6698660758196229298D9) (Version: 11/11/2011 1.2.0.1019 - Marvell Semiconductor Inc.)

Windows-driverpakke - Realtek (RTL8167) Net (03/04/2013 7.069.0304.2013) (HKLM\...\DCA4928744167861F03F7E43039BA82D5F4C1CE1) (Version: 03/04/2013 7.069.0304.2013 - Realtek)

Windows-driverpakke - Realtek (RTL8167) Net (12/26/2012 7.067.1226.2012) (HKLM\...\85BB2284011D96871518CFA7B57630FE47BEA2B4) (Version: 12/26/2012 7.067.1226.2012 - Realtek)

Windows-driverpakke - Realtek Semiconductor Corp. HD Audio Driver (03/29/2013 6.0.1.6873) (HKLM\...\55820F9EDC8C07CF8D5A1A85141DD2879A86B9F7) (Version: 03/29/2013 6.0.1.6873 - Realtek Semiconductor Corp.)

Windows-driverpakke - Realtek Semiconductor Corp. HD Audio Driver (03/29/2013 6.0.1.6873) (HKLM\...\AFCE7F0B377FC3ABF35E306DB8EF432EE066252F) (Version: 03/29/2013 6.0.1.6873 - Realtek Semiconductor Corp.)

Windows-driverpakke - Realtek Semiconductor Corp. HD Audio Driver (06/19/2012 6.0.1.6662) (HKLM\...\4A5EF81C80190F479C6FB16BC8CF595275AAC778) (Version: 06/19/2012 6.0.1.6662 - Realtek Semiconductor Corp.)

WinRAR 5.00 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.4 - win.rar GmbH)

WinZip 17.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DB}) (Version: 17.5.10480 - WinZip Computing, S.L. )

World of Warships (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814NA}_is1) (Version: - Wargaming.net)

Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

XSplit Broadcaster (HKLM-x32\...\{F8A47958-47CC-4B57-AE7D-7DDC0A86BEF5}) (Version: 1.3.1311.1201 - SplitMediaLabs)

검은사막 클라이언트 (HKLM-x32\...\검은사막_is1) (Version: - Daum Games)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3324200111-2799513535-2207132818-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Bahgra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3324200111-2799513535-2207132818-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Bahgra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3324200111-2799513535-2207132818-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Bahgra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3324200111-2799513535-2207132818-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Bahgra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3324200111-2799513535-2207132818-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Bahgra\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

24-03-2015 00:53:09 Planlagt kontrollpunkt

25-03-2015 18:28:03 Windows Update

25-03-2015 20:25:07 Gjenopprettingsoperasjon

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-03-25 20:13 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0825F580-0780-43EA-A407-710BBB32A0AD} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-02-10] (Microsoft Corporation)

Task: {43A27534-B59D-423F-A170-2D47B350B72C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)

Task: {45BCC703-DC05-4A95-A40F-E5E5D024AF96} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: {5FD5D971-AA65-4B73-AE04-E3BB7BD5447F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-04] (Google Inc.)

Task: {7133B27D-9127-4F1B-9F75-FF9C29F1584E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

Task: {934CDF79-6D73-40BF-BAA0-E398DD337ABF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {95D40853-1A5C-45EB-B2EB-3BBC93EAD931} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)

Task: {97BB457F-2A8A-4541-8244-5A9C8F910F75} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe

Task: {C563E8E9-CE0D-47DF-94F8-AFD90C0C2BC9} - System32\Tasks\{936C00EE-6795-4C6C-B478-EAB30F1B93CC} => pcalua.exe -a D:\Games\Steam\bin\steamservice.exe -d D:\Games\Steam -c /installscript "D:\Games\Steam\steamapps\common\Ragnarok Online 2\runasadmin.vdf" 231060

Task: {C6C57D22-2F63-425B-8600-F28CE6E593FE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001UA => C:\Users\Bahgra\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-21] (Facebook Inc.)

Task: {E7258E5A-B4B6-4917-B759-551603E5AFE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-04] (Google Inc.)

Task: {F005CD9F-6F50-4577-A4A1-1183A156D375} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001Core => C:\Users\Bahgra\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-21] (Facebook Inc.)

Task: {FE4DB0AF-80F1-45F3-B8E7-92B9DF2343B1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001Core.job => C:\Users\Bahgra\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3324200111-2799513535-2207132818-1001UA.job => C:\Users\Bahgra\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-03-04 01:43 - 2015-03-04 01:43 - 00620056 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

2013-07-20 08:14 - 2015-01-10 00:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-02 23:38 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-06-14 16:30 - 2014-06-14 16:30 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-09-18 08:23 - 2014-09-18 08:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2014-10-14 19:51 - 2014-10-14 19:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2014-09-18 08:23 - 2014-09-18 08:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2014-10-14 19:51 - 2014-10-14 19:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2013-05-22 19:51 - 2009-02-06 17:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL

2013-05-22 19:51 - 2009-03-26 13:46 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL

2015-03-25 20:44 - 2015-03-25 20:44 - 00098816 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32api.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00110080 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\pywintypes27.dll

2015-03-25 20:44 - 2015-03-25 20:44 - 00364544 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\pythoncom27.dll

2015-03-25 20:44 - 2015-03-25 20:44 - 00045568 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_socket.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 01161216 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_ssl.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00320512 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32com.shell.shell.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00713216 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_hashlib.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 01175040 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._core_.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00805888 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._gdi_.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00811008 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._windows_.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 01062400 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._controls_.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00735232 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._misc_.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00682496 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\pysqlite2._sqlite.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00128512 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_elementtree.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00127488 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\pyexpat.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00087552 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_ctypes.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00119808 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32file.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00108544 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32security.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00007168 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\hashobjs_ext.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00167936 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32gui.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00018432 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32event.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00038912 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32inet.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00011264 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32crypt.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00070656 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._html2.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00027136 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_multiprocessing.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00020480 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\_yappi.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00035840 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32process.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00686080 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\unicodedata.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00122368 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._wizard.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00024064 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32pipe.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00010240 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\select.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00025600 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32pdh.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00525640 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\windows._lib_cacheinvalidation.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00017408 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32profile.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00022528 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\win32ts.pyd

2015-03-25 20:44 - 2015-03-25 20:44 - 00078336 _____ () C:\Users\Bahgra\AppData\Local\Temp\_MEI40202\wx._animate.pyd

2012-09-12 23:38 - 2012-09-12 23:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll

2012-09-12 23:38 - 2012-09-12 23:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll

2012-09-12 23:38 - 2012-09-12 23:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll

2012-09-12 23:38 - 2012-09-12 23:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll

2012-09-12 23:38 - 2012-09-12 23:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll

2014-12-15 23:13 - 2014-12-15 23:13 - 01686552 _____ () C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll

2013-03-08 06:17 - 2013-03-08 06:17 - 07816192 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avcodec-54.dll

2013-03-08 06:17 - 2013-03-08 06:17 - 00188416 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avutil-52.dll

2013-03-08 06:17 - 2013-03-08 06:17 - 01425920 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avformat-54.dll

2013-03-08 06:17 - 2013-03-08 06:17 - 00336896 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swscale-2.dll

2013-03-08 06:17 - 2013-03-08 06:17 - 00096256 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swresample-0.dll

2015-03-21 17:12 - 2015-03-14 11:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll

2015-03-21 17:12 - 2015-03-14 11:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll

2013-07-06 12:58 - 2013-07-06 12:58 - 00000000 _____ () C:\Windows\system32\nvwgf2um.dll

2015-03-21 17:12 - 2015-03-14 11:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3324200111-2799513535-2207132818-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Bahgra\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Kaspersky Software Updater Beta.lnk => C:\Windows\pss\Kaspersky Software Updater Beta.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SoftEther VPN Client Manager Startup.lnk => C:\Windows\pss\SoftEther VPN Client Manager Startup.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Bahgra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

MSCONFIG\startupreg: EADM => "D:\Games\Origin\Origin.exe" -AutoStart

MSCONFIG\startupreg: hola => C:\Program Files\Hola\app\hola.exe --tray --autorun

MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup

MSCONFIG\startupreg: KPeerNexonEU => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe

MSCONFIG\startupreg: KSS => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe" /autorun

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\Bahgra\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Bahgra\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

MSCONFIG\startupreg: Steam => "D:\Games\Steam\steam.exe" -silent

MSCONFIG\startupreg: uTorrent => "C:\Users\Bahgra\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

==================== Accounts: =============================

Administrator (S-1-5-21-3324200111-2799513535-2207132818-500 - Administrator - Disabled)

Bahgra (S-1-5-21-3324200111-2799513535-2207132818-1001 - Administrator - Enabled) => C:\Users\Bahgra

Gjest (S-1-5-21-3324200111-2799513535-2207132818-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3324200111-2799513535-2207132818-1006 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: BitDefender Firewall NDIS 6 Filter Driver

Description: BitDefender Firewall NDIS 6 Filter Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: BdfNdisf

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: bdftdif

Description: bdftdif

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: bdftdif

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft Teredo tunnelkort

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (03/25/2015 08:46:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:29:58 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:28:16 PM) (Source: System Restore) (EventID: 8210) (User: )

Description: Det oppstod en ukjent feil under systemgjenopprettingen: (Planlagt kontrollpunkt). Tilleggsinformasjon: 0x80070005.

Error: (03/25/2015 08:15:10 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:04:13 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:02:34 PM) (Source: ESENT) (EventID: 455) (User: )

Description: taskhost (4144) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Bahgra\AppData\Local\Microsoft\Windows\WebCache\V01011C8.log.

Error: (03/25/2015 07:13:58 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073415161

Error: (03/25/2015 06:26:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 05:20:35 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programmet Explorer.EXE versjon 6.1.7601.17567 sluttet å samhandle med Windows og ble lukket. Hvis du vil se om det finnes mer informasjon tilgjengelig om problemet, ser du i problemloggen i kontrollpanelet for Handlingssenter.

Prosess-ID: 8b0

Starttidspunkt: 01d0623c2f354487

Avslutningstidspunkt: 37

Programbane: C:\Windows\Explorer.EXE

Rapport-ID: dbefd74e-d30a-11e4-a907-00ac56af7384

Error: (03/25/2015 06:41:30 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Generering av aktiveringskontekst mislyktes for C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1. Feil i manifest- eller policyfilen C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2 i linje C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

En komponentversjon som kreves av programmet, er i konflikt med en annen komponentversjon som allerede er aktiv.

Komponentene i konflikt er:.

Komponent 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponent 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

System errors:

=============

Error: (03/25/2015 08:44:52 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Følgende oppstarts- eller systemstartdriver(e) kan ikke lastes inn:

BdfNdisf

bdftdif

Error: (03/25/2015 08:28:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Følgende oppstarts- eller systemstartdriver(e) kan ikke lastes inn:

BdfNdisf

bdftdif

Error: (03/25/2015 08:13:24 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Følgende oppstarts- eller systemstartdriver(e) kan ikke lastes inn:

BdfNdisf

bdftdif

Error: (03/25/2015 08:12:01 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (03/25/2015 08:11:59 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Tjenesten PEVSystemStart er merket som en interaktiv tjeneste. Men systemet er konfigurert for ikke å tillate interaktive tjenester. Denne tjenesten vil muligens ikke fungere som den skal.

Error: (03/25/2015 08:11:30 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\ComboFix\catchme.sys er blokkert fra å lastes inn på grunn av inkompatibilitet med dette systemet. Kontakt programvareleverandøren for å få en kompatibel versjon av driveren.

Error: (03/25/2015 08:11:30 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\ComboFix\catchme.sys er blokkert fra å lastes inn på grunn av inkompatibilitet med dette systemet. Kontakt programvareleverandøren for å få en kompatibel versjon av driveren.

Error: (03/25/2015 08:09:20 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Error: (03/25/2015 08:02:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Følgende oppstarts- eller systemstartdriver(e) kan ikke lastes inn:

BdfNdisf

bdftdif

Error: (03/25/2015 08:02:30 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Forrige avslutning av systemet klokken 20:01:06 den ‎25.‎03.‎2015 var uventet.

Microsoft Office Sessions:

=========================

Error: (03/25/2015 08:46:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:29:58 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:28:16 PM) (Source: System Restore) (EventID: 8210) (User: )

Description: Planlagt kontrollpunkt0x80070005

Error: (03/25/2015 08:15:10 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:04:13 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 08:02:34 PM) (Source: ESENT) (EventID: 455) (User: )

Description: taskhost4144WebCacheLocal: C:\Users\Bahgra\AppData\Local\Microsoft\Windows\WebCache\V01011C8.log-1811

Error: (03/25/2015 07:13:58 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073415161

Error: (03/25/2015 06:26:07 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/25/2015 05:20:35 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Explorer.EXE6.1.7601.175678b001d0623c2f35448737C:\Windows\Explorer.EXEdbefd74e-d30a-11e4-a907-00ac56af7384

Error: (03/25/2015 06:41:30 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\CCleaner\CCleaner.exe

CodeIntegrity Errors:

===================================

Date: 2015-03-25 20:11:30.609

Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-25 20:11:30.579

Date: 2015-03-25 20:11:30.549

Date: 2015-03-25 20:11:30.519

Date: 2013-07-06 17:18:33.262

Date: 2013-07-06 17:18:33.247

==================== Memory info ===========================

Processor: Intel® Core™ i5-2500 CPU @ 3.30GHz

Percentage of memory in use: 18%

Total physical RAM: 16351.89 MB

Available physical RAM: 13399.55 MB

Total Pagefile: 18350.08 MB

Available Pagefile: 15115.95 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:33.46 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: () (Fixed) (Total:931.51 GB) (Free:157.88 GB) NTFS

Drive h: (Seagate Expansion Drive) (Fixed) (Total:2794.51 GB) (Free:1968.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 62242170)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 62242140)

Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

Could not read MBR for disk 2.

==================== End Of Log ============================

Security → Virus, Spyware, Malware Removal → Having Powersheel.exe Issues ... Need fixlist.txt Started by raj0171 , 19 Mar 2024 Virus, HELP, Malwarebytes	5 replies 2,670 views	DR M 06 Apr 2024
Security → Virus, Spyware, Malware Removal → HP desktop - google.com is in Norwegian [Solved] Started by wayneman50 , 23 Jul 2023 internet, google, virus and 1 more... 1 2 3	Hot 41 replies 24,280 views	wayneman50 17 Aug 2023
Security → Virus, Spyware, Malware Removal → Possible Malware infection - help request [Solved] Started by Maffu , 07 May 2023 malware, advapi and 1 more... 1 2 3 4	Hot 51 replies 12,726 views	DR M 26 Jun 2023
Security → Virus, Spyware, Malware Removal → Help getting started checking laptop for malware [Solved] Started by triedeverything , 12 Apr 2023 help, malware, spyware 1 2	Hot 19 replies 5,791 views	DR M 16 Apr 2023
Security → Virus, Spyware, Malware Removal → Virus Infection Started by ForrestGump , 05 Oct 2022 Virus 1 2 3 8 →	Hot 110 replies 15,982 views	RKinner 14 Nov 2022

#1
Bahgra

Posted 25 March 2015 - 02:14 PM

Advertisements

Similar Topics

Also tagged with one or more of these keywords: Malware, Adware, Virus

Having Powersheel.exe Issues ... Need fixlist.txt

HP desktop - google.com is in Norwegian [Solved]

Possible Malware infection - help request [Solved]

Help getting started checking laptop for malware [Solved]

Virus Infection

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Tracking Cookie Adtech and Casalemedia

#1 Bahgra Posted 25 March 2015 - 02:14 PM

Advertisements

Similar Topics

Also tagged with one or more of these keywords: Malware, Adware, Virus

0 user(s) are reading this topic

As Featured On:

Connect With Us

Sign In

#1
Bahgra

Posted 25 March 2015 - 02:14 PM