Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Avast threat upon startup [Closed]

infection Virus malware

  • This topic is locked This topic is locked

#1
toobadsco

toobadsco

    New Member

  • Member
  • Pip
  • 3 posts

Hello! 


For the last few weeks my system has been showing me this pop-up from Avast stating 

Object: http://anythicago.com/3333/Relay...
Infection: URL:Mal

Process: C\:Windows\System32\svchost.exe

I have run Hitman, Avast, Malware-bytes, emsisoft, and just recently Farar Recovery scan tool.

Here are the logs from FRST:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Owner (administrator) on JOEYYSPC on 26-06-2015 02:12:46
Running from C:\Users\Owner\Downloads
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Flux Software LLC) C:\Users\Owner\AppData\Local\FluxSoftware\Flux\flux.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Spotify Ltd) C:\Users\Owner\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cleanmgr.exe
(Microsoft Corporation) C:\Users\Owner\AppData\Local\Temp\0D368FB9-4AFA-4B67-8D18-F3893037E9CE\DismHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212560 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [13840 2013-10-28] (Alienware)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-01] (Avast Software s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4923832 2015-05-26] (Emsisoft Ltd)
HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [f.lux] => C:\Users\Owner\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [Spotify Web Helper] => C:\Users\Owner\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-23] (Spotify Ltd)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [Spotify] => C:\Users\Owner\AppData\Roaming\Spotify\Spotify.exe [7415864 2015-06-23] (Spotify Ltd)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\MountPoints2: {ff33b6f8-07c0-11e4-80af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-01] (Avast Software s.r.o.)
BootExecute: autocheck autochk * bootdelete
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = 
SearchScopes: HKU\S-1-5-21-3832991755-675204264-3001371093-1000 -> DefaultScope {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-06-01] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-01] (Avast Software s.r.o.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-01] (Oracle Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-01] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-01] (Avast Software s.r.o.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-01] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 71.10.216.1 71.10.216.2
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-01] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @meadco.com/neptune plugin,version=2.0.0.29 -> C:\PROGRA~2\MEADCO~1\npmeadax.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-01]
 
Chrome: 
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-06]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-06-06]
CHR Extension: (Avast Online Security) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-01]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-06-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-05]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2015-06-05]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-09]
CHR Extension: (AlienTube for YouTube™) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\opgodjgjgojjkhlmmhdlojfehcemknnp [2015-06-05]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-01]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5155576 2015-05-26] (Emsisoft Ltd)
R2 AlienFXWindowsService; C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe [14352 2013-10-28] (Alienware)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-01] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-06-01] (Avast Software)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-22] (Electronic Arts)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-05-20] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-01] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-01] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-01] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-01] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-01] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-01] ()
R1 epp64; C:\Windows\System32\DRIVERS\epp64.sys [135800 2015-03-24] (Emsisoft GmbH)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-06-19] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 NTIOLib_Flash; C:\Users\Owner\AppData\Local\Temp\2WSX3EDC\NTIOLib_X64.sys [13368 2014-07-09] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-06-01] (Avast Software)
S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-26 02:12 - 2015-06-26 02:13 - 00020539 _____ C:\Users\Owner\Downloads\FRST.txt
2015-06-26 02:12 - 2015-06-26 02:12 - 00000000 ____D C:\FRST
2015-06-26 02:11 - 2015-06-26 02:12 - 02112512 _____ (Farbar) C:\Users\Owner\Downloads\FRST64.exe
2015-06-26 01:34 - 2015-06-26 01:34 - 00000000 ____D C:\ProgramData\Emsisoft
2015-06-26 01:30 - 2015-06-26 01:30 - 00001091 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-06-26 01:30 - 2015-06-26 01:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-06-26 01:29 - 2015-06-26 02:08 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2015-06-26 01:29 - 2015-03-24 00:17 - 00135800 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp64.sys
2015-06-25 22:30 - 2015-06-25 22:36 - 165903328 _____ (Emsisoft Ltd. ) C:\Users\Owner\Downloads\EmsisoftAntiMalwareSetup.exe
2015-06-20 17:26 - 2015-06-20 17:26 - 00003208 _____ C:\Windows\System32\Tasks\avastBCLRestart_chrome.exe
2015-06-19 18:38 - 2015-06-19 18:38 - 00043664 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2015-06-19 17:04 - 2015-06-19 17:04 - 23838808 _____ (Belkin International, Inc.) C:\Users\Owner\Downloads\ExtenderSetup.RE3000W.1.3.14261.0.exe
2015-06-19 17:03 - 2015-06-19 17:03 - 03475477 _____ C:\Users\Owner\Downloads\FW_RE3000Wv2_v2.0.00.008_20141015.bin
2015-06-14 04:52 - 2015-06-14 04:52 - 00594965 _____ C:\Users\Owner\Downloads\texmod.zip
2015-06-14 04:39 - 2015-06-14 04:39 - 00000000 ____D C:\Users\Owner\Documents\Eidos
2015-06-13 16:15 - 2015-06-13 16:20 - 00000000 ____D C:\Users\Owner\Documents\Witcher 2
2015-06-13 16:15 - 2015-06-13 16:15 - 00000000 ____D C:\Users\Owner\AppData\Local\The Witcher 2
2015-06-12 18:44 - 2015-06-12 18:44 - 00000000 ____D C:\Users\Owner\Downloads\J. cole
2015-06-12 18:42 - 2015-06-12 18:42 - 05832080 _____ (WindSolutions) C:\Users\Owner\Downloads\Install_CopyTransControlCenter.exe
2015-06-12 18:38 - 2015-06-12 18:40 - 113468546 _____ C:\Users\Owner\Downloads\J. Cole.zip
2015-06-11 19:21 - 2015-06-11 19:22 - 05200384 _____ (AVAST Software) C:\Users\Owner\Downloads\aswmbr.exe
2015-06-10 20:08 - 2015-06-10 20:08 - 00000000 ____D C:\Users\Owner\AppData\Local\Alienware
2015-06-10 00:37 - 2015-06-10 00:37 - 00464072 _____ C:\Users\Owner\Downloads\Odin307.zip
2015-06-10 00:32 - 2015-06-10 00:32 - 08110127 _____ C:\Users\Owner\Downloads\recovery.tar.md5
2015-06-10 00:30 - 2015-06-10 00:30 - 00674673 _____ C:\Users\Owner\Downloads\CWM-SuperSU-v0.94 (1).zip
2015-06-09 22:56 - 2015-06-09 22:56 - 06400000 _____ C:\Users\Owner\Downloads\openrecovery-twrp-2.5.0.0-d2tmo.tar
2015-06-09 22:56 - 2015-06-09 22:56 - 00674673 _____ C:\Users\Owner\Downloads\CWM-SuperSU-v0.94.zip
2015-06-09 22:43 - 2015-06-09 22:43 - 09142523 _____ C:\Users\Owner\Downloads\twrp-2.8.1.0-quincyatt.zip
2015-06-09 22:36 - 2015-06-09 22:36 - 00174507 _____ C:\Users\Owner\Downloads\Odin3_v1.85.rar
2015-06-09 22:25 - 2015-06-13 18:27 - 00000000 ____D C:\Users\Owner\Desktop\Note galaxy
2015-06-09 20:59 - 2015-06-09 20:59 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2015-06-09 20:48 - 2015-06-09 20:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\Documents\samsung
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Samsung
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\AppData\Local\Samsung
2015-06-09 20:41 - 2014-10-13 00:57 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2015-06-09 20:41 - 2014-10-13 00:57 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2015-06-09 20:41 - 2014-10-13 00:57 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-06-09 20:41 - 2014-10-13 00:57 - 00110336 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-06-09 20:37 - 2015-06-09 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-06-09 20:37 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2015-06-09 20:37 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2015-06-09 20:36 - 2015-06-09 20:41 - 00000000 ____D C:\Program Files (x86)\Samsung
2015-06-09 20:36 - 2015-06-09 20:40 - 00000000 ____D C:\ProgramData\Samsung
2015-06-09 20:33 - 2015-06-09 20:34 - 77663392 _____ (Samsung Electronics Co., Ltd.) C:\Users\Owner\Downloads\KiesSetup.exe
2015-06-09 16:35 - 2015-06-01 14:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 16:35 - 2015-06-01 13:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 16:35 - 2015-05-27 09:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 16:35 - 2015-05-27 09:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 16:35 - 2015-05-25 12:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 16:35 - 2015-05-22 22:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-09 16:35 - 2015-05-22 22:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 16:35 - 2015-05-22 22:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-09 16:35 - 2015-05-22 22:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-09 16:35 - 2015-05-22 22:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 16:35 - 2015-05-22 22:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-09 16:35 - 2015-05-22 22:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 16:35 - 2015-05-22 22:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-09 16:35 - 2015-05-22 22:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-09 16:35 - 2015-05-22 22:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-09 16:35 - 2015-05-22 22:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 16:35 - 2015-05-22 22:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-09 16:35 - 2015-05-22 22:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 16:35 - 2015-05-22 21:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-09 16:35 - 2015-05-22 21:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 16:35 - 2015-05-22 21:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-09 16:35 - 2015-05-22 21:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 16:35 - 2015-05-22 21:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 16:35 - 2015-05-22 21:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 16:35 - 2015-05-22 21:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 16:35 - 2015-05-22 21:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 16:35 - 2015-05-22 21:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-09 16:35 - 2015-05-22 21:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 16:35 - 2015-05-22 21:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 16:35 - 2015-05-22 21:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 16:35 - 2015-05-22 21:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 16:35 - 2015-05-22 14:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-09 16:35 - 2015-05-22 14:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 16:35 - 2015-05-22 14:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 16:35 - 2015-05-22 14:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-09 16:35 - 2015-05-22 13:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-09 16:35 - 2015-05-22 13:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-09 16:35 - 2015-05-22 13:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 16:35 - 2015-05-22 13:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-09 16:35 - 2015-05-22 13:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-09 16:35 - 2015-05-22 13:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-09 16:35 - 2015-05-22 13:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 16:35 - 2015-05-22 13:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-09 16:35 - 2015-05-22 13:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 16:35 - 2015-05-22 13:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-09 16:35 - 2015-05-22 13:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 16:35 - 2015-05-22 13:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 16:35 - 2015-05-22 13:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-09 16:35 - 2015-05-22 13:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 16:35 - 2015-05-22 13:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 16:35 - 2015-05-22 13:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-09 16:35 - 2015-05-22 12:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 16:35 - 2015-05-22 12:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 16:35 - 2015-05-22 12:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 16:35 - 2015-05-22 12:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-09 16:35 - 2015-05-08 22:25 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-09 16:35 - 2015-05-08 22:20 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-09 16:35 - 2015-05-08 22:13 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 21:01 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-09 16:35 - 2015-05-08 21:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-09 16:35 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 16:35 - 2015-04-29 13:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-09 16:35 - 2015-04-29 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-09 16:35 - 2015-04-29 13:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-09 16:35 - 2015-04-29 13:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-09 16:35 - 2015-04-29 13:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-09 16:35 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-09 16:35 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-09 16:35 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-09 16:35 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-09 16:35 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-09 16:35 - 2015-04-24 13:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 16:35 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-08 22:03 - 2015-06-08 22:03 - 02469824 _____ (mIRC Co. Ltd.) C:\Users\Owner\Downloads\mirc741.exe
2015-06-06 23:46 - 2015-06-06 23:46 - 00000222 _____ C:\Users\Owner\Desktop\Football Manager 2014.url
2015-06-06 21:58 - 2015-06-06 21:58 - 08180736 _____ C:\Users\Owner\Downloads\chromeremotedesktophost.msi
2015-06-05 03:08 - 2015-06-05 03:08 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-06-05 03:08 - 2015-06-05 03:08 - 00000000 ____D C:\Windows\system32\NV
2015-06-05 03:08 - 2015-05-27 22:52 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-06-05 03:07 - 2015-06-05 03:07 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-05 03:07 - 2015-05-28 02:04 - 42719888 _____ C:\Windows\system32\nvcompiler.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 37741712 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 30480528 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 22946960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 16185352 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 15864064 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 14495448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 13304280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 11830512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 10995528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-06-05 03:07 - 2015-05-28 02:04 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435306.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435306.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01050440 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00982856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00407112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-06-05 03:07 - 2015-05-28 02:04 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-06-05 02:57 - 2015-06-05 02:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-05 02:56 - 2015-06-05 02:56 - 00931408 _____ (Google Inc.) C:\Users\Owner\Downloads\ChromeSetup.exe
2015-06-05 01:53 - 2015-06-05 01:53 - 00003622 _____ C:\Windows\System32\Tasks\Xgcslobzh
2015-06-05 01:43 - 2015-06-05 01:43 - 00000000 ____D C:\ProgramData\c13f46a00000723d
2015-06-05 01:40 - 2015-06-26 01:40 - 00001012 _____ C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job
2015-06-05 01:40 - 2015-06-05 01:52 - 00000045 _____ C:\user.js
2015-06-05 01:40 - 2015-06-05 01:41 - 00004038 _____ C:\Windows\System32\Tasks\htmlz62xgQJCrbZeJCIF
2015-06-05 01:40 - 2015-06-05 01:40 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-05 01:40 - 2014-10-06 11:45 - 00000826 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-05 01:39 - 2015-06-05 01:40 - 00000000 ____D C:\ProgramData\Kromtech
2015-06-05 01:28 - 2015-06-05 01:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\iFunbox_UserCache
2015-06-04 14:28 - 2015-06-05 21:11 - 00050876 _____ C:\Windows\system32\.crusader
2015-06-04 14:26 - 2015-06-04 14:26 - 00026992 _____ C:\Users\Owner\Documents\HitmanPro_20150604_1426.log
2015-06-04 14:16 - 2015-06-04 14:28 - 00000000 ____D C:\ProgramData\HitmanPro
2015-06-04 14:05 - 2015-06-04 14:15 - 11024496 _____ (SurfRight B.V.) C:\Users\Owner\Downloads\HitmanPro_x64.exe
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\Users\Owner\Documents\Vindictus
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\ProgramData\NexonUS
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\ProgramData\Nexon
2015-06-02 19:11 - 2015-06-02 19:11 - 00000791 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-06-02 19:11 - 2015-06-02 19:11 - 00000743 _____ C:\Users\Owner\Desktop\Start Tor Browser.lnk
2015-06-02 19:10 - 2015-06-02 19:10 - 00000000 ____D C:\Users\Owner\Desktop\Tor Browser
2015-06-02 16:47 - 2015-06-02 17:00 - 35854880 _____ C:\Users\Owner\Downloads\torbrowser-install-4.5.1_en-US.exe
2015-06-01 03:03 - 2015-06-01 03:03 - 00000000 ____D C:\Users\Owner\Desktop\Fruit
2015-06-01 02:59 - 2015-06-16 16:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Windows\SysWOW64\vbox
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Windows\system32\vbox
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Users\Owner\AppData\Roaming\AVAST Software
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-06-01 02:58 - 2015-06-01 02:58 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-06-01 02:58 - 2015-06-01 02:58 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-06-01 02:58 - 2015-06-01 02:58 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys
2015-06-01 02:57 - 2015-06-01 02:57 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-01 02:57 - 2015-06-01 02:57 - 00000000 ____D C:\Program Files\AVAST Software
2015-06-01 02:54 - 2015-06-15 04:28 - 00000000 ____D C:\ProgramData\fce75a100000761a
2015-06-01 02:48 - 2015-06-05 01:48 - 00000024 _____ C:\Users\Owner\AppData\Roaming\appdataFr25.bin
2015-05-29 00:31 - 2015-05-29 00:31 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-05-29 00:31 - 2015-05-29 00:31 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Program Files\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2015-05-29 00:26 - 2015-05-29 00:31 - 00000000 ____D C:\Program Files (x86)\Image-Line
2015-05-29 00:19 - 2015-05-29 00:22 - 453908579 ____R C:\Users\Owner\Downloads\Image-Line FL Studio 12.0.1 Producer Edition - Final [ENG] [RegKey-R2R] [AT-TEAM].rar
2015-05-28 23:26 - 2015-05-28 23:56 - 00000000 ____D C:\ProgramData\Ableton
2015-05-28 23:26 - 2015-05-28 23:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Ableton
2015-05-28 20:18 - 2015-05-28 20:18 - 00001226 _____ C:\Users\Owner\AppData\Local\recently-used.xbel
2015-05-28 20:15 - 2015-05-28 20:18 - 00000000 ____D C:\Users\Owner\AppData\Local\gtk-2.0
2015-05-28 20:03 - 2015-05-28 20:18 - 00000000 ____D C:\Users\Owner\AppData\Roaming\HexChat
2015-05-28 19:59 - 2015-05-28 19:59 - 06655160 _____ (HexChat ) C:\Users\Owner\Downloads\HexChat 2.10.2 x86.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-26 01:41 - 2014-07-09 14:33 - 01089779 _____ C:\Windows\WindowsUpdate.log
2015-06-26 01:40 - 2014-11-08 02:00 - 00003830 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415430012
2015-06-26 01:40 - 2014-11-08 02:00 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-26 01:31 - 2014-07-09 14:43 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-26 01:29 - 2014-10-06 11:06 - 00001334 _____ C:\Windows\Tasks\PDFU.job
2015-06-26 01:29 - 2009-07-13 23:51 - 00140727 _____ C:\Windows\setupact.log
2015-06-25 22:41 - 2014-10-06 11:05 - 00001338 _____ C:\Windows\Tasks\BTOSQF.job
2015-06-25 22:28 - 2015-01-22 17:55 - 00000000 ____D C:\Users\Owner\AppData\Local\Spotify
2015-06-25 22:28 - 2015-01-22 17:54 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Spotify
2015-06-25 22:26 - 2014-07-09 14:43 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-25 02:46 - 2009-07-13 23:45 - 00021296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 02:46 - 2009-07-13 23:45 - 00021296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 02:45 - 2009-07-14 00:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-25 02:38 - 2014-07-09 15:52 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-25 02:38 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-24 22:59 - 2014-12-28 02:56 - 00000000 ____D C:\Users\Owner\AppData\Local\Popcorn-Time
2015-06-23 03:15 - 2014-07-22 00:54 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-20 17:06 - 2010-11-20 22:47 - 00216834 _____ C:\Windows\PFRO.log
2015-06-19 17:04 - 2015-04-04 22:31 - 00000000 ____D C:\ProgramData\Linksys
2015-06-19 14:05 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-16 21:41 - 2014-12-10 12:49 - 00000000 ____D C:\Users\Owner\Documents\My Games
2015-06-16 21:40 - 2014-07-09 14:35 - 00321629 _____ C:\Windows\DirectX.log
2015-06-12 21:09 - 2014-12-24 23:55 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-06-12 21:09 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-12 21:06 - 2015-05-23 02:40 - 00000000 ____D C:\Users\Owner\Desktop\New folder
2015-06-11 20:25 - 2014-12-25 19:57 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-10 13:37 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
2015-06-10 04:26 - 2009-07-13 23:45 - 00297088 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 04:25 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 03:03 - 2014-07-09 15:53 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 03:00 - 2014-07-09 14:36 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 20:36 - 2014-07-09 16:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-09 20:35 - 2014-07-09 16:28 - 00000000 ____D C:\Users\Owner\AppData\Local\Downloaded Installations
2015-06-05 03:09 - 2014-07-30 01:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-06-05 03:09 - 2014-07-09 16:44 - 00000000 ____D C:\temp
2015-06-05 03:09 - 2014-07-09 15:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-05 03:09 - 2014-07-09 15:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-06-05 03:08 - 2014-07-09 15:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-06-05 01:56 - 2009-07-13 21:34 - 00000505 _____ C:\Windows\win.ini
2015-06-05 01:54 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Globalization
2015-06-02 00:09 - 2014-07-21 23:53 - 00000000 ____D C:\ProgramData\Oracle
2015-06-01 22:53 - 2014-07-09 14:44 - 00000000 ____D C:\Program Files\Java
2015-06-01 22:48 - 2014-11-08 23:44 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-01 22:48 - 2014-11-08 23:44 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-01 22:48 - 2014-07-09 14:44 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-06-01 03:23 - 2014-12-25 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-01 03:23 - 2014-12-25 19:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-01 03:19 - 2014-07-09 14:46 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-06-01 03:00 - 2014-07-09 14:46 - 00000000 ____D C:\ProgramData\Adobe
2015-05-29 01:46 - 2014-07-09 14:46 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Apple Computer
2015-05-28 23:57 - 2014-07-09 14:43 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-28 23:26 - 2015-05-04 21:21 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-05-28 23:26 - 2014-07-09 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2015-05-28 02:04 - 2015-03-21 22:51 - 17486856 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-05-28 02:04 - 2015-03-21 22:51 - 14987528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-05-28 02:04 - 2014-07-30 01:53 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 12852152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 03379680 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 02986392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-05-27 23:15 - 2014-07-09 15:52 - 06872904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 03491984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-05-27 23:15 - 2014-07-09 15:52 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-05-27 05:48 - 2014-07-09 15:52 - 04408727 _____ C:\Windows\system32\nvcoproc.bin
 
==================== Files in the root of some directories =======
 
2015-06-01 02:48 - 2015-06-05 01:48 - 0000024 _____ () C:\Users\Owner\AppData\Roaming\appdataFr25.bin
2015-04-22 21:14 - 2015-05-13 14:46 - 0000020 _____ () C:\Users\Owner\AppData\Roaming\appdataFr3.bin
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Owner\AppData\Roaming\BTOSQF
2015-04-19 07:20 - 2015-04-19 07:20 - 0005872 _____ () C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF
2014-09-01 03:18 - 2014-09-01 03:18 - 0002086 _____ () C:\Users\Owner\AppData\Roaming\PDFU
2015-05-28 20:18 - 2015-05-28 20:18 - 0001226 _____ () C:\Users\Owner\AppData\Local\recently-used.xbel
2014-07-10 14:04 - 2014-07-10 14:04 - 0007598 _____ () C:\Users\Owner\AppData\Local\Resmon.ResmonCfg
2015-04-15 17:45 - 2015-04-23 16:17 - 0011710 _____ () C:\Users\Owner\AppData\Local\Temp-log.txt
 
Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\Gw2.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Owner\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Owner\AppData\Local\Temp\mirc741.exe
C:\Users\Owner\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Owner\AppData\Local\Temp\nvStInst.exe
C:\Users\Owner\AppData\Local\Temp\pyl5D32.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylA2BA.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylB4A4.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylC892.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylD464.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylE5A3.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylFD1E.tmp.exe
C:\Users\Owner\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Owner\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Owner\AppData\Local\Temp\System.Data.SQLite33936.dll
C:\Users\Owner\AppData\Local\Temp\vlc-2.1.5-win32.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-06-23 01:05
 
==================== End of log ============================

If you Need the Addition log from Notepad as well let me know

All input/Help will be joyously appreciated! 

Thank you!
Jesse 

  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you post the addition txt please, meanwhile lets stop the Avast alert

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
2015-06-05 03:07 - 2015-06-05 03:07 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-05 01:53 - 2015-06-05 01:53 - 00003622 _____ C:\Windows\System32\Tasks\Xgcslobzh
2015-06-05 01:43 - 2015-06-05 01:43 - 00000000 ____D C:\ProgramData\c13f46a00000723d
2015-06-05 01:40 - 2015-06-26 01:40 - 00001012 _____ C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job
2015-06-05 01:40 - 2015-06-05 01:52 - 00000045 _____ C:\user.js
2015-06-05 01:40 - 2015-06-05 01:41 - 00004038 _____ C:\Windows\System32\Tasks\htmlz62xgQJCrbZeJCIF
2015-06-05 01:40 - 2015-06-05 01:40 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-01 02:54 - 2015-06-15 04:28 - 00000000 ____D C:\ProgramData\fce75a100000761a
2015-06-25 22:41 - 2014-10-06 11:05 - 00001338 _____ C:\Windows\Tasks\BTOSQF.job
2015-06-05 01:54 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Globalization
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Owner\AppData\Roaming\BTOSQF
2015-04-19 07:20 - 2015-04-19 07:20 - 0005872 _____ () C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.


  • 0






Similar Topics


Also tagged with one or more of these keywords: infection, Virus, malware

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP