Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

I need Help! [Closed]

Virus Malware avast

  • This topic is locked This topic is locked

#1
toobadsco

toobadsco

    New Member

  • Member
  • Pip
  • 3 posts

Hello again!

This is a repost; The first time I tried posting this the webpage kept saying it was unable connect to and I had no Idea this posted.
I apologize for the inconvenience. 
 

BOTH LOGS ARE INCLUDED BELOW

 

For the last few weeks my system has been showing me this pop-up from Avast stating 

Object: http://anythicago.com/3333/Relay...
Infection: URL:Mal

Process: C\:Windows\System32\svchost.exe

I have run Hitman, Avast, Malware-bytes, emsisoft, and just recently Farar Recovery scan tool.

Here are the logs from FRST:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Owner (administrator) on JOEYYSPC on 26-06-2015 02:12:46
Running from C:\Users\Owner\Downloads
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Flux Software LLC) C:\Users\Owner\AppData\Local\FluxSoftware\Flux\flux.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Spotify Ltd) C:\Users\Owner\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cleanmgr.exe
(Microsoft Corporation) C:\Users\Owner\AppData\Local\Temp\0D368FB9-4AFA-4B67-8D18-F3893037E9CE\DismHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212560 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [13840 2013-10-28] (Alienware)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-01] (Avast Software s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4923832 2015-05-26] (Emsisoft Ltd)
HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [f.lux] => C:\Users\Owner\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [Spotify Web Helper] => C:\Users\Owner\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-23] (Spotify Ltd)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Run: [Spotify] => C:\Users\Owner\AppData\Roaming\Spotify\Spotify.exe [7415864 2015-06-23] (Spotify Ltd)
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\MountPoints2: {ff33b6f8-07c0-11e4-80af-806e6f6e6963} - D:\Setup.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-01] (Avast Software s.r.o.)
BootExecute: autocheck autochk * bootdelete
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = 
SearchScopes: HKU\S-1-5-21-3832991755-675204264-3001371093-1000 -> DefaultScope {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-06-01] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-01] (Avast Software s.r.o.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-01] (Oracle Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-01] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-01] (Avast Software s.r.o.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-01] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 71.10.216.1 71.10.216.2
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-01] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @meadco.com/neptune plugin,version=2.0.0.29 -> C:\PROGRA~2\MEADCO~1\npmeadax.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-01]
 
Chrome: 
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-06]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-06-06]
CHR Extension: (Avast Online Security) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-01]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-06-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-05]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2015-06-05]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-09]
CHR Extension: (AlienTube for YouTube™) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\opgodjgjgojjkhlmmhdlojfehcemknnp [2015-06-05]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-01]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5155576 2015-05-26] (Emsisoft Ltd)
R2 AlienFXWindowsService; C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe [14352 2013-10-28] (Alienware)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-01] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-06-01] (Avast Software)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-22] (Electronic Arts)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-05-20] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-01] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-01] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-01] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-01] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-01] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-01] ()
R1 epp64; C:\Windows\System32\DRIVERS\epp64.sys [135800 2015-03-24] (Emsisoft GmbH)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-06-19] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 NTIOLib_Flash; C:\Users\Owner\AppData\Local\Temp\2WSX3EDC\NTIOLib_X64.sys [13368 2014-07-09] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-06-01] (Avast Software)
S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-26 02:12 - 2015-06-26 02:13 - 00020539 _____ C:\Users\Owner\Downloads\FRST.txt
2015-06-26 02:12 - 2015-06-26 02:12 - 00000000 ____D C:\FRST
2015-06-26 02:11 - 2015-06-26 02:12 - 02112512 _____ (Farbar) C:\Users\Owner\Downloads\FRST64.exe
2015-06-26 01:34 - 2015-06-26 01:34 - 00000000 ____D C:\ProgramData\Emsisoft
2015-06-26 01:30 - 2015-06-26 01:30 - 00001091 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-06-26 01:30 - 2015-06-26 01:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-06-26 01:29 - 2015-06-26 02:08 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2015-06-26 01:29 - 2015-03-24 00:17 - 00135800 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp64.sys
2015-06-25 22:30 - 2015-06-25 22:36 - 165903328 _____ (Emsisoft Ltd. ) C:\Users\Owner\Downloads\EmsisoftAntiMalwareSetup.exe
2015-06-20 17:26 - 2015-06-20 17:26 - 00003208 _____ C:\Windows\System32\Tasks\avastBCLRestart_chrome.exe
2015-06-19 18:38 - 2015-06-19 18:38 - 00043664 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2015-06-19 17:04 - 2015-06-19 17:04 - 23838808 _____ (Belkin International, Inc.) C:\Users\Owner\Downloads\ExtenderSetup.RE3000W.1.3.14261.0.exe
2015-06-19 17:03 - 2015-06-19 17:03 - 03475477 _____ C:\Users\Owner\Downloads\FW_RE3000Wv2_v2.0.00.008_20141015.bin
2015-06-14 04:52 - 2015-06-14 04:52 - 00594965 _____ C:\Users\Owner\Downloads\texmod.zip
2015-06-14 04:39 - 2015-06-14 04:39 - 00000000 ____D C:\Users\Owner\Documents\Eidos
2015-06-13 16:15 - 2015-06-13 16:20 - 00000000 ____D C:\Users\Owner\Documents\Witcher 2
2015-06-13 16:15 - 2015-06-13 16:15 - 00000000 ____D C:\Users\Owner\AppData\Local\The Witcher 2
2015-06-12 18:44 - 2015-06-12 18:44 - 00000000 ____D C:\Users\Owner\Downloads\J. cole
2015-06-12 18:42 - 2015-06-12 18:42 - 05832080 _____ (WindSolutions) C:\Users\Owner\Downloads\Install_CopyTransControlCenter.exe
2015-06-12 18:38 - 2015-06-12 18:40 - 113468546 _____ C:\Users\Owner\Downloads\J. Cole.zip
2015-06-11 19:21 - 2015-06-11 19:22 - 05200384 _____ (AVAST Software) C:\Users\Owner\Downloads\aswmbr.exe
2015-06-10 20:08 - 2015-06-10 20:08 - 00000000 ____D C:\Users\Owner\AppData\Local\Alienware
2015-06-10 00:37 - 2015-06-10 00:37 - 00464072 _____ C:\Users\Owner\Downloads\Odin307.zip
2015-06-10 00:32 - 2015-06-10 00:32 - 08110127 _____ C:\Users\Owner\Downloads\recovery.tar.md5
2015-06-10 00:30 - 2015-06-10 00:30 - 00674673 _____ C:\Users\Owner\Downloads\CWM-SuperSU-v0.94 (1).zip
2015-06-09 22:56 - 2015-06-09 22:56 - 06400000 _____ C:\Users\Owner\Downloads\openrecovery-twrp-2.5.0.0-d2tmo.tar
2015-06-09 22:56 - 2015-06-09 22:56 - 00674673 _____ C:\Users\Owner\Downloads\CWM-SuperSU-v0.94.zip
2015-06-09 22:43 - 2015-06-09 22:43 - 09142523 _____ C:\Users\Owner\Downloads\twrp-2.8.1.0-quincyatt.zip
2015-06-09 22:36 - 2015-06-09 22:36 - 00174507 _____ C:\Users\Owner\Downloads\Odin3_v1.85.rar
2015-06-09 22:25 - 2015-06-13 18:27 - 00000000 ____D C:\Users\Owner\Desktop\Note galaxy
2015-06-09 20:59 - 2015-06-09 20:59 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2015-06-09 20:48 - 2015-06-09 20:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\Documents\samsung
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Samsung
2015-06-09 20:44 - 2015-06-09 20:44 - 00000000 ____D C:\Users\Owner\AppData\Local\Samsung
2015-06-09 20:41 - 2014-10-13 00:57 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2015-06-09 20:41 - 2014-10-13 00:57 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2015-06-09 20:41 - 2014-10-13 00:57 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-06-09 20:41 - 2014-10-13 00:57 - 00110336 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-06-09 20:37 - 2015-06-09 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-06-09 20:37 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2015-06-09 20:37 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2015-06-09 20:36 - 2015-06-09 20:41 - 00000000 ____D C:\Program Files (x86)\Samsung
2015-06-09 20:36 - 2015-06-09 20:40 - 00000000 ____D C:\ProgramData\Samsung
2015-06-09 20:33 - 2015-06-09 20:34 - 77663392 _____ (Samsung Electronics Co., Ltd.) C:\Users\Owner\Downloads\KiesSetup.exe
2015-06-09 16:35 - 2015-06-01 14:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 16:35 - 2015-06-01 13:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 16:35 - 2015-05-27 09:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 16:35 - 2015-05-27 09:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 16:35 - 2015-05-25 12:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 16:35 - 2015-05-22 22:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-09 16:35 - 2015-05-22 22:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 16:35 - 2015-05-22 22:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-09 16:35 - 2015-05-22 22:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-09 16:35 - 2015-05-22 22:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 16:35 - 2015-05-22 22:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-09 16:35 - 2015-05-22 22:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 16:35 - 2015-05-22 22:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-09 16:35 - 2015-05-22 22:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-09 16:35 - 2015-05-22 22:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-09 16:35 - 2015-05-22 22:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 16:35 - 2015-05-22 22:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-09 16:35 - 2015-05-22 22:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 16:35 - 2015-05-22 21:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-09 16:35 - 2015-05-22 21:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 16:35 - 2015-05-22 21:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-09 16:35 - 2015-05-22 21:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 16:35 - 2015-05-22 21:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 16:35 - 2015-05-22 21:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 16:35 - 2015-05-22 21:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 16:35 - 2015-05-22 21:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 16:35 - 2015-05-22 21:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-09 16:35 - 2015-05-22 21:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 16:35 - 2015-05-22 21:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 16:35 - 2015-05-22 21:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 16:35 - 2015-05-22 21:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 16:35 - 2015-05-22 14:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-09 16:35 - 2015-05-22 14:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 16:35 - 2015-05-22 14:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 16:35 - 2015-05-22 14:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 16:35 - 2015-05-22 14:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-09 16:35 - 2015-05-22 13:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-09 16:35 - 2015-05-22 13:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-09 16:35 - 2015-05-22 13:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 16:35 - 2015-05-22 13:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-09 16:35 - 2015-05-22 13:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 16:35 - 2015-05-22 13:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-09 16:35 - 2015-05-22 13:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-09 16:35 - 2015-05-22 13:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 16:35 - 2015-05-22 13:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-09 16:35 - 2015-05-22 13:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 16:35 - 2015-05-22 13:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-09 16:35 - 2015-05-22 13:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 16:35 - 2015-05-22 13:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 16:35 - 2015-05-22 13:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-09 16:35 - 2015-05-22 13:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 16:35 - 2015-05-22 13:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 16:35 - 2015-05-22 13:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-09 16:35 - 2015-05-22 12:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 16:35 - 2015-05-22 12:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 16:35 - 2015-05-22 12:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 16:35 - 2015-05-22 12:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-09 16:35 - 2015-05-08 22:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-09 16:35 - 2015-05-08 22:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-09 16:35 - 2015-05-08 22:25 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-09 16:35 - 2015-05-08 22:20 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-09 16:35 - 2015-05-08 22:13 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-09 16:35 - 2015-05-08 22:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 21:01 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-09 16:35 - 2015-05-08 21:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-09 16:35 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 16:35 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 16:35 - 2015-04-29 13:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-09 16:35 - 2015-04-29 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-09 16:35 - 2015-04-29 13:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-09 16:35 - 2015-04-29 13:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-09 16:35 - 2015-04-29 13:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-09 16:35 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-09 16:35 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-09 16:35 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-09 16:35 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-09 16:35 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-09 16:35 - 2015-04-24 13:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 16:35 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-08 22:03 - 2015-06-08 22:03 - 02469824 _____ (mIRC Co. Ltd.) C:\Users\Owner\Downloads\mirc741.exe
2015-06-06 23:46 - 2015-06-06 23:46 - 00000222 _____ C:\Users\Owner\Desktop\Football Manager 2014.url
2015-06-06 21:58 - 2015-06-06 21:58 - 08180736 _____ C:\Users\Owner\Downloads\chromeremotedesktophost.msi
2015-06-05 03:08 - 2015-06-05 03:08 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-06-05 03:08 - 2015-06-05 03:08 - 00000000 ____D C:\Windows\system32\NV
2015-06-05 03:08 - 2015-05-27 22:52 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-06-05 03:07 - 2015-06-05 03:07 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-05 03:07 - 2015-05-28 02:04 - 42719888 _____ C:\Windows\system32\nvcompiler.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 37741712 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 30480528 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 22946960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 16185352 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 15864064 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 14495448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 13304280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 11830512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 10995528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-06-05 03:07 - 2015-05-28 02:04 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435306.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435306.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 01050440 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00982856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00407112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-06-05 03:07 - 2015-05-28 02:04 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-06-05 03:07 - 2015-05-28 02:04 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-06-05 02:57 - 2015-06-05 02:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-05 02:56 - 2015-06-05 02:56 - 00931408 _____ (Google Inc.) C:\Users\Owner\Downloads\ChromeSetup.exe
2015-06-05 01:53 - 2015-06-05 01:53 - 00003622 _____ C:\Windows\System32\Tasks\Xgcslobzh
2015-06-05 01:43 - 2015-06-05 01:43 - 00000000 ____D C:\ProgramData\c13f46a00000723d
2015-06-05 01:40 - 2015-06-26 01:40 - 00001012 _____ C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job
2015-06-05 01:40 - 2015-06-05 01:52 - 00000045 _____ C:\user.js
2015-06-05 01:40 - 2015-06-05 01:41 - 00004038 _____ C:\Windows\System32\Tasks\htmlz62xgQJCrbZeJCIF
2015-06-05 01:40 - 2015-06-05 01:40 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-05 01:40 - 2014-10-06 11:45 - 00000826 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-05 01:39 - 2015-06-05 01:40 - 00000000 ____D C:\ProgramData\Kromtech
2015-06-05 01:28 - 2015-06-05 01:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\iFunbox_UserCache
2015-06-04 14:28 - 2015-06-05 21:11 - 00050876 _____ C:\Windows\system32\.crusader
2015-06-04 14:26 - 2015-06-04 14:26 - 00026992 _____ C:\Users\Owner\Documents\HitmanPro_20150604_1426.log
2015-06-04 14:16 - 2015-06-04 14:28 - 00000000 ____D C:\ProgramData\HitmanPro
2015-06-04 14:05 - 2015-06-04 14:15 - 11024496 _____ (SurfRight B.V.) C:\Users\Owner\Downloads\HitmanPro_x64.exe
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\Users\Owner\Documents\Vindictus
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\ProgramData\NexonUS
2015-06-04 02:31 - 2015-06-04 02:31 - 00000000 ____D C:\ProgramData\Nexon
2015-06-02 19:11 - 2015-06-02 19:11 - 00000791 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-06-02 19:11 - 2015-06-02 19:11 - 00000743 _____ C:\Users\Owner\Desktop\Start Tor Browser.lnk
2015-06-02 19:10 - 2015-06-02 19:10 - 00000000 ____D C:\Users\Owner\Desktop\Tor Browser
2015-06-02 16:47 - 2015-06-02 17:00 - 35854880 _____ C:\Users\Owner\Downloads\torbrowser-install-4.5.1_en-US.exe
2015-06-01 03:03 - 2015-06-01 03:03 - 00000000 ____D C:\Users\Owner\Desktop\Fruit
2015-06-01 02:59 - 2015-06-16 16:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Windows\SysWOW64\vbox
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Windows\system32\vbox
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\Users\Owner\AppData\Roaming\AVAST Software
2015-06-01 02:59 - 2015-06-01 02:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-06-01 02:58 - 2015-06-01 02:58 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-06-01 02:58 - 2015-06-01 02:58 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2015-06-01 02:58 - 2015-06-01 02:58 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-06-01 02:58 - 2015-06-01 02:58 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys
2015-06-01 02:57 - 2015-06-01 02:57 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-01 02:57 - 2015-06-01 02:57 - 00000000 ____D C:\Program Files\AVAST Software
2015-06-01 02:54 - 2015-06-15 04:28 - 00000000 ____D C:\ProgramData\fce75a100000761a
2015-06-01 02:48 - 2015-06-05 01:48 - 00000024 _____ C:\Users\Owner\AppData\Roaming\appdataFr25.bin
2015-05-29 00:31 - 2015-05-29 00:31 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-05-29 00:31 - 2015-05-29 00:31 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Program Files\Image-Line
2015-05-29 00:30 - 2015-05-29 00:30 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2015-05-29 00:26 - 2015-05-29 00:31 - 00000000 ____D C:\Program Files (x86)\Image-Line
2015-05-29 00:19 - 2015-05-29 00:22 - 453908579 ____R C:\Users\Owner\Downloads\Image-Line FL Studio 12.0.1 Producer Edition - Final [ENG] [RegKey-R2R] [AT-TEAM].rar
2015-05-28 23:26 - 2015-05-28 23:56 - 00000000 ____D C:\ProgramData\Ableton
2015-05-28 23:26 - 2015-05-28 23:27 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Ableton
2015-05-28 20:18 - 2015-05-28 20:18 - 00001226 _____ C:\Users\Owner\AppData\Local\recently-used.xbel
2015-05-28 20:15 - 2015-05-28 20:18 - 00000000 ____D C:\Users\Owner\AppData\Local\gtk-2.0
2015-05-28 20:03 - 2015-05-28 20:18 - 00000000 ____D C:\Users\Owner\AppData\Roaming\HexChat
2015-05-28 19:59 - 2015-05-28 19:59 - 06655160 _____ (HexChat ) C:\Users\Owner\Downloads\HexChat 2.10.2 x86.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-06-26 01:41 - 2014-07-09 14:33 - 01089779 _____ C:\Windows\WindowsUpdate.log
2015-06-26 01:40 - 2014-11-08 02:00 - 00003830 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415430012
2015-06-26 01:40 - 2014-11-08 02:00 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-26 01:31 - 2014-07-09 14:43 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-26 01:29 - 2014-10-06 11:06 - 00001334 _____ C:\Windows\Tasks\PDFU.job
2015-06-26 01:29 - 2009-07-13 23:51 - 00140727 _____ C:\Windows\setupact.log
2015-06-25 22:41 - 2014-10-06 11:05 - 00001338 _____ C:\Windows\Tasks\BTOSQF.job
2015-06-25 22:28 - 2015-01-22 17:55 - 00000000 ____D C:\Users\Owner\AppData\Local\Spotify
2015-06-25 22:28 - 2015-01-22 17:54 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Spotify
2015-06-25 22:26 - 2014-07-09 14:43 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-25 02:46 - 2009-07-13 23:45 - 00021296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 02:46 - 2009-07-13 23:45 - 00021296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 02:45 - 2009-07-14 00:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-25 02:38 - 2014-07-09 15:52 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-25 02:38 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-24 22:59 - 2014-12-28 02:56 - 00000000 ____D C:\Users\Owner\AppData\Local\Popcorn-Time
2015-06-23 03:15 - 2014-07-22 00:54 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-20 17:06 - 2010-11-20 22:47 - 00216834 _____ C:\Windows\PFRO.log
2015-06-19 17:04 - 2015-04-04 22:31 - 00000000 ____D C:\ProgramData\Linksys
2015-06-19 14:05 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-16 21:41 - 2014-12-10 12:49 - 00000000 ____D C:\Users\Owner\Documents\My Games
2015-06-16 21:40 - 2014-07-09 14:35 - 00321629 _____ C:\Windows\DirectX.log
2015-06-12 21:09 - 2014-12-24 23:55 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-06-12 21:09 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-12 21:06 - 2015-05-23 02:40 - 00000000 ____D C:\Users\Owner\Desktop\New folder
2015-06-11 20:25 - 2014-12-25 19:57 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-10 13:37 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
2015-06-10 04:26 - 2009-07-13 23:45 - 00297088 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 04:25 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 03:03 - 2014-07-09 15:53 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 03:00 - 2014-07-09 14:36 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 20:36 - 2014-07-09 16:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-09 20:35 - 2014-07-09 16:28 - 00000000 ____D C:\Users\Owner\AppData\Local\Downloaded Installations
2015-06-05 03:09 - 2014-07-30 01:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-06-05 03:09 - 2014-07-09 16:44 - 00000000 ____D C:\temp
2015-06-05 03:09 - 2014-07-09 15:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-05 03:09 - 2014-07-09 15:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-06-05 03:08 - 2014-07-09 15:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-06-05 01:56 - 2009-07-13 21:34 - 00000505 _____ C:\Windows\win.ini
2015-06-05 01:54 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Globalization
2015-06-02 00:09 - 2014-07-21 23:53 - 00000000 ____D C:\ProgramData\Oracle
2015-06-01 22:53 - 2014-07-09 14:44 - 00000000 ____D C:\Program Files\Java
2015-06-01 22:48 - 2014-11-08 23:44 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-01 22:48 - 2014-11-08 23:44 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-01 22:48 - 2014-07-09 14:44 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-06-01 03:23 - 2014-12-25 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-01 03:23 - 2014-12-25 19:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-01 03:19 - 2014-07-09 14:46 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-06-01 03:00 - 2014-07-09 14:46 - 00000000 ____D C:\ProgramData\Adobe
2015-05-29 01:46 - 2014-07-09 14:46 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Apple Computer
2015-05-28 23:57 - 2014-07-09 14:43 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-28 23:26 - 2015-05-04 21:21 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-05-28 23:26 - 2014-07-09 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2015-05-28 02:04 - 2015-03-21 22:51 - 17486856 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-05-28 02:04 - 2015-03-21 22:51 - 14987528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-05-28 02:04 - 2014-07-30 01:53 - 01558848 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 12852152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 03379680 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 02986392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-05-28 02:04 - 2013-08-27 06:53 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-05-27 23:15 - 2014-07-09 15:52 - 06872904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 03491984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-05-27 23:15 - 2014-07-09 15:52 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-05-27 23:15 - 2014-07-09 15:52 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-05-27 05:48 - 2014-07-09 15:52 - 04408727 _____ C:\Windows\system32\nvcoproc.bin
 
==================== Files in the root of some directories =======
 
2015-06-01 02:48 - 2015-06-05 01:48 - 0000024 _____ () C:\Users\Owner\AppData\Roaming\appdataFr25.bin
2015-04-22 21:14 - 2015-05-13 14:46 - 0000020 _____ () C:\Users\Owner\AppData\Roaming\appdataFr3.bin
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Owner\AppData\Roaming\BTOSQF
2015-04-19 07:20 - 2015-04-19 07:20 - 0005872 _____ () C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF
2014-09-01 03:18 - 2014-09-01 03:18 - 0002086 _____ () C:\Users\Owner\AppData\Roaming\PDFU
2015-05-28 20:18 - 2015-05-28 20:18 - 0001226 _____ () C:\Users\Owner\AppData\Local\recently-used.xbel
2014-07-10 14:04 - 2014-07-10 14:04 - 0007598 _____ () C:\Users\Owner\AppData\Local\Resmon.ResmonCfg
2015-04-15 17:45 - 2015-04-23 16:17 - 0011710 _____ () C:\Users\Owner\AppData\Local\Temp-log.txt
 
Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\Gw2.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Owner\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Owner\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Owner\AppData\Local\Temp\mirc741.exe
C:\Users\Owner\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Owner\AppData\Local\Temp\nvStInst.exe
C:\Users\Owner\AppData\Local\Temp\pyl5D32.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylA2BA.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylB4A4.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylC892.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylD464.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylE5A3.tmp.exe
C:\Users\Owner\AppData\Local\Temp\pylFD1E.tmp.exe
C:\Users\Owner\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Owner\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Owner\AppData\Local\Temp\System.Data.SQLite33936.dll
C:\Users\Owner\AppData\Local\Temp\vlc-2.1.5-win32.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-06-23 01:05
 
==================== End of log ============================

The additional log is below
Additional scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Owner at 2015-06-26 02:13:52
Running from C:\Users\Owner\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3832991755-675204264-3001371093-500 - Administrator - Disabled)
Guest (S-1-5-21-3832991755-675204264-3001371093-501 - Limited - Disabled)
Owner (S-1-5-21-3832991755-675204264-3001371093-1000 - Administrator - Enabled) => C:\Users\Owner
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Emsisoft Anti-Malware (Enabled - Up to date) {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {9425001D-A331-13F4-34E6-D05C71B96A74}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Alan Wake (HKLM-x32\...\Steam App 108710) (Version:  - Remedy Entertainment)
AlienAutopsy (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Alienware Command Center (HKLM-x32\...\InstallShield_{2E70AFA8-D2C9-4AD7-88F7-538D97C5FB2D}) (Version: 3.5.10.0 - Alienware Corp.)
Alienware Command Center (Version: 3.5.10.0 - Alienware Corp.) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version:  - Stunlock Studios)
Dell System Detect (HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\9204f5692a8faf3b) (Version: 5.8.1.1 - Dell)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Dolphin (HKLM-x32\...\Dolphin) (Version: 4.0.2 - Dolphin Development Team)
EA SPORTS™ FIFA World (HKLM-x32\...\{8F9AC744-EEF6-43DB-A4B6-FA1A18F1C640}) (Version: 9.3.0.58666 - Electronic Arts, Inc.)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 10.0 - Emsisoft Ltd.)
Epic Games Launcher (HKLM\...\{8727C279-A122-40B8-8ACA-271E1809DAA5}) (Version: 1.1.23.0 - Epic Games, Inc.)
f.lux (HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Flux) (Version:  - )
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Football Manager 2014 (HKLM-x32\...\Steam App 231670) (Version:  - Sports Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Hacker Evolution (HKLM-x32\...\Steam App 70100) (Version:  - exosyphen studios)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{30FF5906-91BB-35BF-9AB8-9EE0B007FD75}) (Version: 4.5.52213 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{C87EF11D-36E9-479D-9898-7541EA1E8A6A}) (Version: 4.10.9764 - Apache Software Foundation)
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )
PPSSPP version 0.9.8 (HKLM-x32\...\PPSSPP_is1) (Version: 0.9.8 - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.15045.4 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.15045.4 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)
Spotify (HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer)
The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version:  - CD PROJEKT RED)
Tomb Raider: Underworld (HKLM-x32\...\Steam App 8140) (Version:  - Crystal Dynamics)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-3832991755-675204264-3001371093-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 
==================== Restore Points =========================
 
ATTENTION: System Restore is disabled
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2014-10-06 11:45 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {2A8788EB-FD4F-46F6-8772-2CC928CBEAD6} - \RocketTab No Task File <==== ATTENTION
Task: {2F44379F-59CD-413A-B423-E3FD01539852} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2014-07-09] (Microsoft Corporation)
Task: {2FC874EC-D075-4F08-BCD0-58BCE92ED589} - System32\Tasks\Xgcslobzh => C:\Program Files\shopperz\Qoreab.bat <==== ATTENTION
Task: {37343125-BE9E-45B2-9532-F48D77DBB2AE} - \YTDownloader No Task File <==== ATTENTION
Task: {5A870176-FA12-48BA-BF7E-6B04FCD7655E} - \RocketTab Update Task No Task File <==== ATTENTION
Task: {6E032CD8-F0BE-49F7-A14A-E6687B482E1E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {7E3748F6-7EB2-4720-A162-1A40FDC94BB9} - \LuckyTab No Task File <==== ATTENTION
Task: {87425120-D58D-4F25-8824-13B09988E117} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.)
Task: {9BB56F1F-7390-497C-A12B-EAF84E694668} - System32\Tasks\PDFU => C:\Users\Owner\AppData\Roaming\PDFU.exe <==== ATTENTION
Task: {9DA5C755-5EC2-4041-ADFE-0953944C9D37} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {9F439CDF-F6B3-4179-ACA0-C8E226B53C30} - System32\Tasks\htmlz62xgQJCrbZeJCIF => C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF.exe <==== ATTENTION
Task: {B0C119EE-C5F9-4860-914B-7FA2787D5089} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {CEE06FBB-2F42-4BC5-B382-DD343E949083} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {CF84F7A3-8A0E-4EE7-8B0D-BABFE0BB9203} - System32\Tasks\BTOSQF => C:\Users\Owner\AppData\Roaming\BTOSQF.exe <==== ATTENTION
Task: {D6E6088B-3034-4114-8AA6-CC9FDB38D0AA} - \avabvbyvyc No Task File <==== ATTENTION
Task: {EE571FD6-399F-4F7A-8963-8366650954C1} - System32\Tasks\Opera scheduled Autoupdate 1415430012 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software)
Task: {F3A338BD-223C-4127-A31D-D9F931ED380A} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\AlienAutopsy\sessionchecker.exe [2014-01-10] (PC-Doctor, Inc.)
Task: {F47FF460-F16C-488A-A6D4-6D429C64D620} - System32\Tasks\avastBCLRestart_chrome.exe => Chrome.exe 
Task: {FD9568A1-41C7-47D0-AF7A-68AAB3E43726} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.)
Task: C:\Windows\Tasks\BTOSQF.job => C:\Users\Owner\AppData\Roaming\BTOSQF.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job => C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PDFU.job => C:\Users\Owner\AppData\Roaming\PDFU.exe <==== ATTENTION
 
==================== Loaded Modules (Whitelisted) ==============
 
2013-08-27 06:53 - 2015-05-28 02:04 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-07-09 15:52 - 2015-05-27 23:15 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-06-01 02:58 - 2015-06-01 02:58 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-06-01 02:58 - 2015-06-01 02:58 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-06-24 22:44 - 2015-06-24 22:44 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15062402\algo.dll
2015-06-25 22:28 - 2015-06-25 22:28 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15062501\algo.dll
2014-04-23 15:05 - 2014-04-23 15:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 15:04 - 2014-04-23 15:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-09 16:34 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2013-08-27 06:53 - 2015-05-28 02:04 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-06-01 02:58 - 2015-06-01 02:58 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-06-23 01:59 - 2015-06-20 00:46 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll
2015-06-23 01:59 - 2015-06-20 00:46 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
IE trusted site: HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-3832991755-675204264-3001371093-1000\...\sony.com -> sony.com
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1 - 71.10.216.1
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupreg: iFunBox Fast App Install Handler => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox.exe /tray
MSCONFIG\startupreg: PCKeeper2 => "C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe" /autorun
MSCONFIG\startupreg: YTDownloader => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{B0C5F501-7E11-42D5-9E9D-98F0F5CCE3BE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{9F4E4C06-17BB-4112-9522-E1943FB05503}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{DBC000C8-047C-4D1B-8342-2C197B34BE64}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{3B56415C-12A4-4B5F-B742-8054D7920FC7}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{0C8A1C40-9095-481B-A151-32C7D3AE3F40}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8B62C906-7AC5-4537-8320-DBD47AB8AC86}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6CFC70F6-D214-4658-BFFA-D4FFB4C25DC5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{69C6CF0F-E983-44B9-925F-EB278A2B7129}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C40AFB81-6578-43B2-BCDC-0A7F21C38875}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{A0A02B41-F9A9-44B6-B9BF-D94DEBA400B5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{1AE25031-269E-45EF-9E2B-592D46203244}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{43050060-326A-4257-A1EF-E4A9D472B5C0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AB92B27D-A570-49B6-8576-D92D0DC06364}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{91FC3217-F151-4DDD-AC98-9D40D7A223CA}C:\users\owner\appdata\local\temp\gw2.exe] => (Allow) C:\users\owner\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{EA2F2FE0-EA26-4B4F-9D84-EE303B673132}C:\users\owner\appdata\local\temp\gw2.exe] => (Allow) C:\users\owner\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{7E415D9C-5888-4446-BE70-9325DE12771B}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{C41B8BE6-03C3-45DF-9AC7-824FE17B2508}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [TCP Query User{79ABC745-62F5-4084-8201-0AA420743211}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms na\game\ncsa-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms na\game\ncsa-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{78E9F092-E3C0-4242-8CE2-D9C1E815697A}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms na\game\ncsa-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms na\game\ncsa-live\ghostreconphantoms.exe
FirewallRules: [{6D7292AD-4E75-48AC-85FA-308EAB6A6F0D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{639328A1-558B-47C0-9DEB-5A4DE604B444}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{43B864E8-AB61-44F2-A625-CF7D3994DCC3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C4AE15F5-5451-439D-9F5C-DE3A0482E4C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{87845255-64E1-40C7-B0FE-DDBB3954A092}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{892DA4F7-43B5-419F-A9FC-ADBE3007A482}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{33E402FA-716B-4062-A24F-679144CC6670}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{0E2D6474-CAB2-41E0-ADDF-845F97F37E28}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [{9E375420-7BA5-4E99-AF9E-FA337FEC1F0B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D9BF1ED5-E2E4-44D3-9395-7FCFAD6C5A7C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{F4447A39-52DB-4183-A9D0-CED901DBE074}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{01EA1BF5-3104-47A1-BC53-183ED3CF5D36}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{4CDBA60A-A6E2-4B79-BD88-1B34154D54C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{9A223FFF-1ABB-4419-86BD-8D08E94E28EE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{6861FB4E-BFF9-44C2-A676-4D52AC7637A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{495AD4A7-AB3E-4ACA-848A-3AAA817F3A58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E7BFFC5A-3489-48BB-B6E2-1419D842BE32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{6BB8DA82-4C08-44B2-A831-B9DB953D29A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BB7DBE99-2AE2-4C1F-B008-5F67E2F4E0FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{51E78DCE-465E-493B-9913-02D7F7DE3D63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E715E50D-98EF-4900-BC8F-FFC3BF0A431C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{FAB6C684-A042-4178-BE59-38F8ED236E95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{F40069D8-D892-477B-80C9-1B17A2524053}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{085284A0-462A-44D8-998A-7BABB6D016B5}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [TCP Query User{53835382-BB8C-4B87-BD89-68DEE3BED827}C:\program files (x86)\wifipad server\wifipadserver.exe] => (Allow) C:\program files (x86)\wifipad server\wifipadserver.exe
FirewallRules: [UDP Query User{903D5E7F-DAD6-4ECB-970D-C2E30A3298F4}C:\program files (x86)\wifipad server\wifipadserver.exe] => (Allow) C:\program files (x86)\wifipad server\wifipadserver.exe
FirewallRules: [{EFB99379-D8E1-4271-BB8A-4F3AEE56F83D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [{1059E204-80D7-4490-9A92-62067F119356}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dead Island Epidemic\Dead Island Epidemic - Launcher.exe
FirewallRules: [{E0030001-D7B4-4F34-B127-49920735C0AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{7BB5B9AF-9AE2-4B8B-9505-74C373497887}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B4C0DAFB-670C-44E2-A520-958D0B910292}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2AD465F1-7418-4C72-BBE5-062307ADD878}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [TCP Query User{CC2EA7BE-A19B-4AE2-BD84-042F70333ACE}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{E745A42B-5373-4333-9A07-BD69E5FF9838}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
FirewallRules: [{A408AEC2-6C8A-4273-9D04-6AF752B130E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{88F5E964-9DE3-4361-977B-0F8D5239795B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{130AEED1-DDE8-4957-AA44-0259D8C22E80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Football Manager 2014\fm.exe
FirewallRules: [{C22CA63C-66FA-42FD-AB4F-A4D6D5D6E63A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Football Manager 2014\fm.exe
FirewallRules: [TCP Query User{C1821886-4A49-4BF9-9F9F-E732C808566A}C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{C0563F75-FCF5-4731-9072-DE499644814A}C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [{528DAC00-4C79-4F45-B707-91746285C1A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{D7078ADF-54B9-4535-BD50-F1423051EB4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{2C6474DF-D2E1-4EE3-89C6-28EEABAECE74}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{35DEC529-C0E5-4FA0-BA0C-51305E526D5E}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [TCP Query User{A21888D6-D2A9-4C39-BB3F-B1BC8D074DD7}C:\program files (x86)\origin games\fifa world\fifaworld.exe] => (Allow) C:\program files (x86)\origin games\fifa world\fifaworld.exe
FirewallRules: [UDP Query User{C883C603-9FE4-440F-A149-DB194C2745C8}C:\program files (x86)\origin games\fifa world\fifaworld.exe] => (Allow) C:\program files (x86)\origin games\fifa world\fifaworld.exe
FirewallRules: [TCP Query User{6621545F-94C8-427D-8D7E-871391E09AD8}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{75DFA3FD-5BE5-4FC3-8A65-93DA32A1E17C}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{3163362A-03A2-40A8-A211-191EF840A916}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{61E0D76D-1C92-4CD8-9827-868BB303098D}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{B5379D25-B800-419A-AE3D-9AD8D64BF0D5}C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Block) C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{0BB3F5A0-D7B5-442D-BC0F-88087A89628F}C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Block) C:\users\owner\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [TCP Query User{5FC15D72-1489-43CB-B83D-0C4A35D41AE4}C:\users\owner\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\owner\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E0947707-D598-4375-96D7-A2A18C0DE550}C:\users\owner\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\owner\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{64ABF840-70AB-4AFC-8AB5-56E987704C58}C:\users\owner\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\owner\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{B325CB73-F3F9-4EF5-98E6-4D6556FC32FC}C:\users\owner\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\owner\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{A628C44A-440C-41C8-B2B2-324E07C86312}C:\program files (x86)\hexchat\hexchat.exe] => (Block) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [UDP Query User{E689058E-8F01-4C22-B5E9-6E3E0D44E0A4}C:\program files (x86)\hexchat\hexchat.exe] => (Block) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [{724C1221-B2C6-41A0-A8E4-560E25D4E4D6}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
FirewallRules: [{4429D002-E33D-4BC5-A9EC-1308A7BF78C3}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
FirewallRules: [{A97F6C53-85DE-4664-8D72-D845C0864994}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
FirewallRules: [{3B7674C9-4E80-47BF-AEBE-C03754A3EF4A}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
FirewallRules: [{73790820-EDC2-4243-BCB8-95AFC87022B2}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
FirewallRules: [{E204BE5F-C310-4C22-A57B-F6ABF090C86C}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
FirewallRules: [{85A1CFC2-87E8-487A-82AC-90B29C4CF6C3}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
FirewallRules: [{B40BA2DA-CD5B-4F4F-A30D-BA1CDF669B78}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
FirewallRules: [{A3C2B968-5F43-4E2D-97B2-04AAC423AB4E}] => (Allow) C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe
FirewallRules: [{448153C0-E4AB-4D09-917E-C11BC1DD2914}] => (Allow) C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe
FirewallRules: [{996CE3AD-2951-491F-BCB0-21129FBDC7CA}] => (Allow) C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe
FirewallRules: [{6A834242-50EC-4FE4-9368-B09E727ED93F}] => (Allow) C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe
FirewallRules: [{C855A061-4602-4F48-B362-ADC476C0C514}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{659DDA52-3CC4-4C62-AAA5-4BBF5E7D20D3}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{66AE8E0F-E98A-4D5F-A1A1-4885B0C3FC0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{F39ECE7F-0D6E-42AD-A2A3-EDBC4DE78A90}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{C229DD28-22CB-4496-9FD3-2CEF0A6B284B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [{D058A2BF-508E-4F2D-A05D-435536F52BB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [TCP Query User{79D408DF-2785-4C58-B923-C25A84DFFD31}E:\mirc\ssl extras\mirc.exe] => (Allow) E:\mirc\ssl extras\mirc.exe
FirewallRules: [UDP Query User{936D5A38-7770-414A-A825-CB58A4E57D26}E:\mirc\ssl extras\mirc.exe] => (Allow) E:\mirc\ssl extras\mirc.exe
FirewallRules: [{E7412F37-CF33-4309-9AF8-62DAE0FE6B4A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\the witcher 2\Launcher.exe
FirewallRules: [{64CE4B4C-BC21-40C7-A063-144F000C8CDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\the witcher 2\Launcher.exe
FirewallRules: [{D6BE8132-C50F-44D0-9381-F29BE4A83E8D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{0C3453B4-0B82-4866-B048-4A72C52DC3B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{F376AFC1-8ECB-43DF-8FCB-CC6D72FF21AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [{B8245A14-5AA2-457A-93D0-1EB0821736B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [TCP Query User{5D4705EC-1560-48B6-80B2-AF49679D1F0D}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
FirewallRules: [UDP Query User{C96602C4-49AD-4FEC-9B5A-CC4DD43CB96C}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
FirewallRules: [{54438066-4084-4179-9146-B2008E9444FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolution.exe
FirewallRules: [{BCCD9660-8297-4BB5-A8EB-FA7786E5B10F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolution.exe
FirewallRules: [{4F0DFE28-3E40-4AA8-8E30-5EBEB81BF563}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolutionModEditor.exe
FirewallRules: [{6AAEC90C-6971-4A90-81A1-1F7640658BF8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution\HackerEvolutionModEditor.exe
FirewallRules: [{2E335E4B-963B-4F5B-8A9A-72001F741CF8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{741B38C5-8F51-4339-8C9C-747D366A8CCA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{F984C67B-10EE-4C6E-B719-99CF06168F08}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Faulty Device Manager Devices =============
 
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
Name: Universal Serial Bus (USB) Controller
Description: Universal Serial Bus (USB) Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (06/25/2015 02:38:54 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3011
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3011
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 999
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
System errors:
=============
Error: (06/22/2015 11:26:18 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 114.28.0.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 11:26:18 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 11:26:18 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 11:26:18 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY59
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\SYSTEM
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 01:54:12 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 114.28.0.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 01:54:12 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 01:54:12 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY51
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\NETWORK SERVICE
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/22/2015 01:54:12 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
 
New Signature Version: 
 
Previous Signature Version: 1.199.3175.0
 
Update Source: %NT AUTHORITY59
 
Update Stage: 4.8.0204.00
 
Source Path: 4.8.0204.01
 
Signature Type: %NT AUTHORITY602
 
Update Type: %NT AUTHORITY604
 
User: NT AUTHORITY\SYSTEM
 
Current Engine Version: %NT AUTHORITY605
 
Previous Engine Version: %NT AUTHORITY606
 
Error code: %NT AUTHORITY607
 
Error description: %NT AUTHORITY608
 
Error: (06/21/2015 00:26:13 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 
Error: (06/21/2015 03:00:17 AM) (Source: nvlddmkm) (EventID: 14) (User: )
Description: \Device\Video715a4(519c) 00000000 00000000
 
 
Microsoft Office:
=========================
Error: (06/25/2015 02:38:54 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3011
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3011
 
Error: (06/23/2015 10:36:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997
 
Error: (06/23/2015 10:36:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 999
 
Error: (06/23/2015 10:36:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-12-25 20:34:30.003
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:29.958
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:14.088
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:14.046
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:13.005
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:12.962
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:12.444
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:12.401
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:12.356
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-12-25 20:34:12.314
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\xb1usb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-3330 CPU @ 3.00GHz
Percentage of memory in use: 41%
Total physical RAM: 8087.19 MB
Available physical RAM: 4693.37 MB
Total Pagefile: 16172.57 MB
Available Pagefile: 11776.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:223.23 GB) (Free:65.8 GB) NTFS
Drive d: (Setup) (CDROM) (Total:0.07 GB) (Free:0 GB) CDFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 506F125C)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.2 GB) - (Type=07 NTFS)
 
==================== End of log ============================
 

All input/Help will be joyously appreciated! 

Again,. thank you!
Jesse 

  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi there lets get you sorted.. This should stop the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3832991755-675204264-3001371093-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
2015-06-05 03:07 - 2015-06-05 03:07 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-05 01:53 - 2015-06-05 01:53 - 00003622 _____ C:\Windows\System32\Tasks\Xgcslobzh
2015-06-05 01:43 - 2015-06-05 01:43 - 00000000 ____D C:\ProgramData\c13f46a00000723d
2015-06-05 01:40 - 2015-06-26 01:40 - 00001012 _____ C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job
2015-06-05 01:40 - 2015-06-05 01:52 - 00000045 _____ C:\user.js
2015-06-05 01:40 - 2015-06-05 01:41 - 00004038 _____ C:\Windows\System32\Tasks\htmlz62xgQJCrbZeJCIF
2015-06-05 01:40 - 2015-06-05 01:40 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-05 01:39 - 2015-06-05 01:40 - 00000000 ____D C:\ProgramData\Kromtech
2015-06-05 01:28 - 2015-06-05 01:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\iFunbox_UserCache
2015-06-01 02:54 - 2015-06-15 04:28 - 00000000 ____D C:\ProgramData\fce75a100000761a
2015-06-26 01:29 - 2014-10-06 11:06 - 00001334 _____ C:\Windows\Tasks\PDFU.job
2015-06-25 22:41 - 2014-10-06 11:05 - 00001338 _____ C:\Windows\Tasks\BTOSQF.job
2015-06-05 01:54 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Globalization
2014-09-01 03:18 - 2014-09-01 03:18 - 0001248 _____ () C:\Users\Owner\AppData\Roaming\BTOSQF
2015-04-19 07:20 - 2015-04-19 07:20 - 0005872 _____ () C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF
2014-09-01 03:18 - 2014-09-01 03:18 - 0002086 _____ () C:\Users\Owner\AppData\Roaming\PDFU
Task: {2A8788EB-FD4F-46F6-8772-2CC928CBEAD6} - \RocketTab No Task File <==== ATTENTION
Task: {2FC874EC-D075-4F08-BCD0-58BCE92ED589} - System32\Tasks\Xgcslobzh => C:\Program Files\shopperz\Qoreab.bat <==== ATTENTION
Task: {37343125-BE9E-45B2-9532-F48D77DBB2AE} - \YTDownloader No Task File <==== ATTENTION
Task: {5A870176-FA12-48BA-BF7E-6B04FCD7655E} - \RocketTab Update Task No Task File <==== ATTENTION
Task: {7E3748F6-7EB2-4720-A162-1A40FDC94BB9} - \LuckyTab No Task File <==== ATTENTION
Task: {9BB56F1F-7390-497C-A12B-EAF84E694668} - System32\Tasks\PDFU => C:\Users\Owner\AppData\Roaming\PDFU.exe <==== ATTENTION
Task: {9F439CDF-F6B3-4179-ACA0-C8E226B53C30} - System32\Tasks\htmlz62xgQJCrbZeJCIF => C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF.exe <==== ATTENTION
Task: {CF84F7A3-8A0E-4EE7-8B0D-BABFE0BB9203} - System32\Tasks\BTOSQF => C:\Users\Owner\AppData\Roaming\BTOSQF.exe <==== ATTENTION
Task: {D6E6088B-3034-4114-8AA6-CC9FDB38D0AA} - \avabvbyvyc No Task File <==== ATTENTION
Task: C:\Windows\Tasks\BTOSQF.job => C:\Users\Owner\AppData\Roaming\BTOSQF.exe <==== ATTENTION
Task: C:\Windows\Tasks\htmlz62xgQJCrbZeJCIF.job => C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF.exe <==== ATTENTION
Task: C:\Windows\Tasks\PDFU.job => C:\Users\Owner\AppData\Roaming\PDFU.exe <==== ATTENTION
C:\Program Files\shopperz
C:\Users\Owner\AppData\Roaming\PDFU.exe
C:\Users\Owner\AppData\Roaming\htmlz62xgQJCrbZeJCIF.exe
C:\Users\Owner\AppData\Roaming\BTOSQF.exe
C:\Program Files (x86)\YTDownloader
C:\Program Files (x86)\i-Funbox DevTeam
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.

  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.


  • 0






Similar Topics


Also tagged with one or more of these keywords: Virus, Malware, avast

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP