Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Constant redirects to random sites in Chrome.

Started by V4Vendetta , Jun 10 2017 01:17 PM

This topic is locked

#1
V4Vendetta

Posted 10 June 2017 - 01:17 PM

New Member

Member
6 posts

Malwarebytes shows 0 found infections.

Windows Malicious removal tool found 0 infected files.

Sophos antivirus found zero files infected.

Yet when I open Google chrome, sometimes it will automatically redirect me to a random site or this will happen when I click a link from a search I perform.

Below are the results of the 2 .txt files from the scan.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-06-2017

Ran by VendettaAW (administrator) on FATHACHUIL (10-06-2017 22:11:38)

Running from C:\Users\VendettaAW\Desktop

Loaded Profiles: VendettaAW (Available Profiles: VendettaAW)

Platform: Windows 10 Home Version 1703 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(Windows ® Win 7 DDK provider) C:\Windows\System32\AdminService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe

(Dell) C:\Users\VendettaAW\AppData\Local\Apps\2.0\05YEZX4Z.VM3\EJ300PTR.A93\dell..tion_831211ca63b981c5_0008.0005_9a48d74816d64e41\DellSystemDetect.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienwareTactXMacroController.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(Compal Inc.) C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe

(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe

(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe

(Dell) C:\Program Files\Alienware\Dell Foundation Services\DFSSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Dell) C:\Program Files\Alienware\Dell Foundation Services\DFS.Common.Agent.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-07-09] (Synaptics Incorporated)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [35576 2015-06-30] (Alienware)

HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [Sound Blaster Recon3Di SBX Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe [1129984 2014-03-20] (Creative Technology Ltd)

HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [3746560 2015-04-02] (Compal Inc.)

HKU\S-1-5-21-4058992635-72630536-3984333171-1001\...\Run: [DellSystemDetect] => C:\Users\VendettaAW\AppData\Local\Apps\2.0\05YEZX4Z.VM3\EJ300PTR.A93\dell..tion_831211ca63b981c5_0008.0005_9a48d74816d64e41\DellSystemDetect.exe [313264 2017-06-10] (Dell)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2017-06-10]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-4058992635-72630536-3984333171-1001] => hxxp://webunstop.net/wpad.dat?3ffb3f8c9f0323b3b8c4a6ab5d7bd50c33287454

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{84839967-e76c-49fd-a79f-0a2b487442bd}: [DhcpNameServer] 192.168.1.1

ManualProxies: 0hxxp://webunstop.net/wpad.dat?3ffb3f8c9f0323b3b8c4a6ab5d7bd50c33287454

Internet Explorer:

==================

FireFox:

========

FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-08] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-08] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-10] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-10] (Google Inc.)

Chrome:

=======

CHR Profile: C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default [2017-06-10]

CHR Extension: (Google Slides) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-10]

CHR Extension: (Google Docs) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-10]

CHR Extension: (Google Drive) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-10]

CHR Extension: (YouTube) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-10]

CHR Extension: (Google Sheets) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-10]

CHR Extension: (Google Docs Offline) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-10]

CHR Extension: (Chrome Web Store Payments) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-10]

CHR Extension: (Gmail) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-10]

CHR Extension: (Chrome Media Router) - C:\Users\VendettaAW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Windows\system32\AdminService.exe [347056 2016-10-25] (Windows ® Win 7 DDK provider)

R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-29] (Creative Technology Ltd) [File not signed]

R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [142352 2015-10-22] (Creative Technology Ltd)

R2 Dell Foundation Services; C:\Program Files\Alienware\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell)

R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-19] (Intel Corporation)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [356352 2017-01-08] (Intel Corporation)

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Corporation)

S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-01] (iolo technologies, LLC)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [158496 2014-10-10] (Intel Corporation)

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [401920 2015-06-26] (Rivet Networks) [File not signed]

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-03] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-03] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-08] (NVIDIA Corporation)

R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-06-08] (NVIDIA Corporation)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-07-09] (Synaptics Incorporated)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW10x64.sys [114224 2015-06-26] (Rivet Networks, LLC.)

R3 cthda; C:\Windows\system32\drivers\cthda.sys [1084192 2015-10-22] (Creative Technology Ltd)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [19440 2015-05-08] (OSR Open Systems Resources, Inc.)

R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [41824 2014-09-19] (Intel Corporation)

R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-19] (Intel Corporation)

R0 EMSC; C:\Windows\System32\drivers\EMSC.SYS [36424 2015-07-13] ()

R0 EMSC; C:\Windows\SysWOW64\drivers\EMSC.SYS [33864 2015-07-13] ()

R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-19] (Intel Corporation)

R3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [124464 2015-04-27] (Qualcomm Atheros, Inc.)

R3 kiox_ff_driver; C:\Windows\System32\drivers\kiox_ff_driver.sys [32736 2014-10-09] (Kionix, Inc.)

R0 kxdiskprot; C:\Windows\System32\DRIVERS\kxdiskprot.sys [30664 2014-10-09] (Kionix, Inc.)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-10-10] (Intel Corporation)

R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_0afdcedf7f2c091a\nvlddmkm.sys [14461344 2017-06-09] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-05-03] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48064 2017-05-03] (NVIDIA Corporation)

R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-06-08] (NVIDIA Corporation)

R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2257816 2015-05-27] (Atheros Communications, Inc.)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466648 2014-02-22] (Realsil Semiconductor Corporation)

S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-07-09] (Synaptics Incorporated)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-11 03:01 - 2017-06-10 16:02 - 00000000 ____D C:\Windows\Panther

2017-06-10 22:11 - 2017-06-10 22:11 - 00014921 _____ C:\Users\VendettaAW\Desktop\FRST.txt

2017-06-10 22:10 - 2017-06-10 22:11 - 00000000 ____D C:\FRST

2017-06-10 22:10 - 2017-06-10 22:09 - 02437120 _____ (Farbar) C:\Users\VendettaAW\Desktop\FRST64.exe

2017-06-10 22:09 - 2017-06-10 22:09 - 02437120 _____ (Farbar) C:\Users\VendettaAW\Downloads\FRST64.exe

2017-06-10 20:06 - 2017-06-10 20:07 - 43370704 _____ (Microsoft Corporation) C:\Users\VendettaAW\Downloads\Windows-KB890830-x64-V5.48.exe

2017-06-10 19:42 - 2017-06-10 19:42 - 00002775 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk

2017-06-10 19:42 - 2017-06-10 19:42 - 00000000 ____D C:\ProgramData\Sophos

2017-06-10 19:42 - 2017-06-10 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos

2017-06-10 19:42 - 2017-06-10 19:42 - 00000000 ____D C:\Program Files (x86)\Sophos

2017-06-10 19:37 - 2017-06-10 19:41 - 169259848 _____ (Sophos Limited) C:\Users\VendettaAW\Downloads\Sophos Virus Removal Tool.exe

2017-06-10 19:31 - 2017-06-10 19:36 - 00000000 ____D C:\AdwCleaner

2017-06-10 19:30 - 2017-06-10 19:30 - 04110280 _____ C:\Users\VendettaAW\Downloads\adwcleaner_6.047.exe

2017-06-10 19:22 - 2017-06-10 19:24 - 28624592 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Application_41TTF_WN_0.33.0.14C_A00.EXE

2017-06-10 19:19 - 2017-06-10 19:19 - 08650440 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Application_T43VY_WN32_3.1.1117.0_A00.EXE

2017-06-10 18:55 - 2017-06-10 18:55 - 00000916 _____ C:\Users\Public\Desktop\VLC media player.lnk

2017-06-10 18:55 - 2017-06-10 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2017-06-10 18:55 - 2017-06-10 18:55 - 00000000 ____D C:\ProgramData\Alienware

2017-06-10 18:55 - 2017-06-10 18:55 - 00000000 ____D C:\Program Files\VideoLAN

2017-06-10 18:54 - 2017-06-10 18:54 - 13438480 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Application_THYGX_WN64_3.4.16100.0_A00.EXE

2017-06-10 18:38 - 2017-06-10 18:39 - 32100680 _____ C:\Users\VendettaAW\Downloads\vlc-2.2.6-win64.exe

2017-06-10 18:29 - 2017-06-10 18:29 - 00000000 ____D C:\Program Files\Kionix

2017-06-10 18:29 - 2017-06-10 18:29 - 00000000 ____D C:\Program Files\DIFX

2017-06-10 18:29 - 2014-10-09 17:38 - 00030664 _____ (Kionix, Inc.) C:\Windows\system32\Drivers\kxdiskprot.sys

2017-06-10 18:24 - 2017-06-10 18:28 - 77325000 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\System-Utilities_Driver_TGP2J_WN_1.1.2.8_A00.EXE

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\Windows\Downloaded Installations

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\Users\VendettaAW\Documents\AlienFX

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\XP32

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Winblue64

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Winblue32

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win864

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win832

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win764

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win732

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win1064

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Win1032

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Vista64

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\ProgramData\Vista32

2017-06-10 18:18 - 2017-06-10 18:18 - 00000000 ____D C:\Program Files (x86)\Alienware On-Screen Display

2017-06-10 18:17 - 2017-06-10 18:17 - 00000000 ____D C:\Users\VendettaAW\Documents\Alienware TactX

2017-06-10 18:17 - 2017-06-10 18:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\DBG

2017-06-10 18:17 - 2017-06-10 18:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\CrashDumps

2017-06-10 18:17 - 2017-06-10 18:17 - 00000000 ____D C:\ProgramData\iolo

2017-06-10 18:16 - 2017-06-10 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alienware

2017-06-10 18:16 - 2017-06-10 18:55 - 00000000 ____D C:\Program Files\Alienware

2017-06-10 18:16 - 2017-06-10 18:16 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installations

2017-06-10 18:12 - 2017-06-10 18:14 - 31637072 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Application_3304N_WN64_0.33.0.19C_A00.EXE

2017-06-10 18:10 - 2017-06-10 18:14 - 92761184 _____ C:\Users\VendettaAW\Downloads\App_NB_AWCC4.5.16.0_W81_W10_Setup_2J54X_ZPE (1).exe

2017-06-10 18:06 - 2017-06-10 18:19 - 00003838 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473

2017-06-10 18:06 - 2017-06-10 18:19 - 00003604 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon

2017-06-10 18:01 - 2017-06-10 18:05 - 51011624 _____ C:\Users\VendettaAW\Downloads\App_NB_AWCC4.5.16.0_W81_W10_Setup_2J54X_ZPE.exe

2017-06-10 17:57 - 2017-06-10 18:05 - 00000000 ____D C:\Users\VendettaAW\Documents\Dell Downloads

2017-06-10 17:55 - 2017-06-10 19:32 - 00001375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-06-10 17:45 - 2017-06-10 21:56 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Google

2017-06-10 17:45 - 2017-06-10 17:55 - 00000000 ____D C:\Program Files (x86)\Google

2017-06-10 17:45 - 2017-06-10 17:45 - 00003416 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2017-06-10 17:45 - 2017-06-10 17:45 - 00003292 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2017-06-10 17:23 - 2017-06-10 17:23 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2017-06-10 17:23 - 2017-06-08 02:38 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2017-06-10 17:23 - 2017-03-11 00:17 - 00536864 _____ C:\Windows\system32\vulkan-1.dll

2017-06-10 17:23 - 2017-03-11 00:17 - 00525600 _____ C:\Windows\SysWOW64\vulkan-1.dll

2017-06-10 17:23 - 2017-03-11 00:17 - 00254240 _____ C:\Windows\system32\vulkaninfo.exe

2017-06-10 17:23 - 2017-03-11 00:17 - 00233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2017-06-10 17:20 - 2017-06-08 04:45 - 40201664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 35390584 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 35281344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 28624320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 11056272 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 11028664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 10551256 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 09248144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 09014976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 08808488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 03796928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 03256440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 01988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438253.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 01606776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438253.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 01278712 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 01275944 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 01056888 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00995736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00994240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00993360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00964216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00914880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00775864 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00688784 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00612088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00609728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00577728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll

2017-06-10 17:20 - 2017-06-08 04:45 - 00499320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2017-06-10 17:08 - 2017-06-10 17:29 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\NVIDIA Corporation

2017-06-10 17:08 - 2017-06-10 17:08 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-06-10 17:08 - 2017-06-10 17:08 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\NVIDIA

2017-06-10 17:08 - 2017-06-10 17:08 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\CEF

2017-06-10 17:08 - 2017-06-10 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2017-06-10 17:08 - 2017-06-08 04:45 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat

2017-06-10 17:08 - 2017-05-03 23:16 - 01893312 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2017-06-10 17:08 - 2017-05-03 23:16 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2017-06-10 17:08 - 2017-05-03 23:16 - 01477056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2017-06-10 17:08 - 2017-05-03 23:16 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2017-06-10 17:08 - 2017-05-03 23:16 - 00121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2017-06-10 17:08 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2017-06-10 17:07 - 2017-06-08 04:45 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys

2017-06-10 17:07 - 2017-05-03 23:16 - 00175552 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2017-06-10 17:07 - 2017-05-03 23:16 - 00143296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2017-06-10 17:07 - 2017-05-03 23:16 - 00048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2017-06-10 17:05 - 2017-06-10 16:59 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2017-06-10 17:04 - 2017-06-10 20:09 - 132223576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2017-06-10 17:04 - 2017-06-10 17:04 - 00000000 ____D C:\Windows\system32\MRT

2017-06-10 17:04 - 2017-06-10 17:04 - 00000000 ____D C:\Program Files\Common Files\Atheros

2017-06-10 17:03 - 2017-05-20 12:13 - 01333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2017-06-10 17:03 - 2017-05-20 12:13 - 00626528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe

2017-06-10 17:03 - 2017-05-20 11:55 - 00606960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2017-06-10 17:03 - 2017-05-20 11:53 - 02259760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll

2017-06-10 17:03 - 2017-05-20 11:48 - 04469832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2017-06-10 17:03 - 2017-05-20 11:47 - 01474800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2017-06-10 17:03 - 2017-05-20 11:46 - 05821496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll

2017-06-10 17:03 - 2017-05-20 11:46 - 01266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll

2017-06-10 17:03 - 2017-05-20 11:46 - 00754080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll

2017-06-10 17:03 - 2017-05-20 11:45 - 00349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2017-06-10 17:03 - 2017-05-20 11:44 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2017-06-10 17:03 - 2017-05-20 11:44 - 00181664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 06760024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 05802968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 04672848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 02424016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 01529384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 01455592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 01120864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2017-06-10 17:03 - 2017-05-20 11:43 - 00354400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll

2017-06-10 17:03 - 2017-05-20 11:42 - 20373920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2017-06-10 17:03 - 2017-05-20 11:40 - 00583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll

2017-06-10 17:03 - 2017-05-20 11:29 - 13840384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2017-06-10 17:03 - 2017-05-20 11:29 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll

2017-06-10 17:03 - 2017-05-20 11:27 - 02199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll

2017-06-10 17:03 - 2017-05-20 11:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll

2017-06-10 17:03 - 2017-05-20 11:26 - 00059904 _____ C:\Windows\SysWOW64\xboxgipsynthetic.dll

2017-06-10 17:03 - 2017-05-20 11:26 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll

2017-06-10 17:03 - 2017-05-20 11:25 - 20505088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2017-06-10 17:03 - 2017-05-20 11:25 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSMDesktopProvider.dll

2017-06-10 17:03 - 2017-05-20 11:25 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll

2017-06-10 17:03 - 2017-05-20 11:24 - 00362496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll

2017-06-10 17:03 - 2017-05-20 11:23 - 06728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2017-06-10 17:03 - 2017-05-20 11:22 - 19334656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-06-10 17:03 - 2017-05-20 11:22 - 01292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll

2017-06-10 17:03 - 2017-05-20 11:22 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll

2017-06-10 17:03 - 2017-05-20 11:22 - 00394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll

2017-06-10 17:03 - 2017-05-20 11:21 - 01984000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll

2017-06-10 17:03 - 2017-05-20 11:21 - 00476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll

2017-06-10 17:03 - 2017-05-20 11:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll

2017-06-10 17:03 - 2017-05-20 11:20 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll

2017-06-10 17:03 - 2017-05-20 11:20 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-06-10 17:03 - 2017-05-20 11:20 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe

2017-06-10 17:03 - 2017-05-20 11:20 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll

2017-06-10 17:03 - 2017-05-20 11:19 - 05719040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll

2017-06-10 17:03 - 2017-05-20 11:19 - 00636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll

2017-06-10 17:03 - 2017-05-20 11:18 - 06292992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2017-06-10 17:03 - 2017-05-20 11:18 - 01450496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2017-06-10 17:03 - 2017-05-20 11:18 - 01248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll

2017-06-10 17:03 - 2017-05-20 11:17 - 11870720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-06-10 17:03 - 2017-05-20 11:17 - 00952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2017-06-10 17:03 - 2017-05-20 11:17 - 00909312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll

2017-06-10 17:03 - 2017-05-20 11:17 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe

2017-06-10 17:03 - 2017-05-20 11:17 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll

2017-06-10 17:03 - 2017-05-20 11:16 - 05225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2017-06-10 17:03 - 2017-05-20 11:16 - 03667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll

2017-06-10 17:03 - 2017-05-20 11:16 - 02588160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll

2017-06-10 17:03 - 2017-05-20 11:16 - 02298368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2017-06-10 17:03 - 2017-05-20 11:16 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2017-06-10 17:03 - 2017-05-20 11:15 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll

2017-06-10 17:03 - 2017-05-20 11:15 - 01019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 04559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 04417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 04056576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 02679296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 02211328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll

2017-06-10 17:03 - 2017-05-20 11:14 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll

2017-06-10 17:03 - 2017-05-20 11:11 - 01536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2017-06-10 17:03 - 2017-05-20 11:10 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll

2017-06-10 17:03 - 2017-05-20 11:10 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll

2017-06-10 17:03 - 2017-05-20 11:10 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll

2017-06-10 17:03 - 2017-05-20 11:08 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll

2017-06-10 17:03 - 2017-05-20 10:08 - 01459728 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2017-06-10 17:03 - 2017-05-20 10:08 - 01147296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe

2017-06-10 17:03 - 2017-05-20 10:08 - 01024928 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe

2017-06-10 17:03 - 2017-05-20 10:08 - 00750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe

2017-06-10 17:03 - 2017-05-20 10:08 - 00543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe

2017-06-10 17:03 - 2017-05-20 10:07 - 00287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2017-06-10 17:03 - 2017-05-20 10:03 - 08320928 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2017-06-10 17:03 - 2017-05-20 10:03 - 00777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2017-06-10 17:03 - 2017-05-20 10:02 - 02969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll

2017-06-10 17:03 - 2017-05-20 10:01 - 00923040 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll

2017-06-10 17:03 - 2017-05-20 09:59 - 00112544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys

2017-06-10 17:03 - 2017-05-20 09:58 - 00188824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2017-06-10 17:03 - 2017-05-20 09:56 - 04847928 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2017-06-10 17:03 - 2017-05-20 09:56 - 02444192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2017-06-10 17:03 - 2017-05-20 09:56 - 00712608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys

2017-06-10 17:03 - 2017-05-20 09:56 - 00370928 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2017-06-10 17:03 - 2017-05-20 09:55 - 07325584 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 05477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 01911752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 01506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 01055648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 00961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll

2017-06-10 17:03 - 2017-05-20 09:55 - 00211872 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll

2017-06-10 17:03 - 2017-05-20 09:54 - 00872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll

2017-06-10 17:03 - 2017-05-20 09:54 - 00730016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys

2017-06-10 17:03 - 2017-05-20 09:54 - 00546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2017-06-10 17:03 - 2017-05-20 09:54 - 00144288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys

2017-06-10 17:03 - 2017-05-20 09:53 - 00654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2017-06-10 17:03 - 2017-05-20 09:53 - 00411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2017-06-10 17:03 - 2017-05-20 09:53 - 00363424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2017-06-10 17:03 - 2017-05-20 09:53 - 00335808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe

2017-06-10 17:03 - 2017-05-20 09:53 - 00255904 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2017-06-10 17:03 - 2017-05-20 09:52 - 07904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll

2017-06-10 17:03 - 2017-05-20 09:52 - 04709528 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2017-06-10 17:03 - 2017-05-20 09:52 - 01700408 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 21352176 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 06551856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 02604256 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 01670496 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 01219560 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2017-06-10 17:03 - 2017-05-20 09:51 - 00406064 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll

2017-06-10 17:03 - 2017-05-20 09:48 - 00387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll

2017-06-10 17:03 - 2017-05-20 09:22 - 23677440 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00809472 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll

2017-06-10 17:03 - 2017-05-20 09:10 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksthunk.sys

2017-06-10 17:03 - 2017-05-20 09:09 - 17365504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2017-06-10 17:03 - 2017-05-20 09:09 - 02199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll

2017-06-10 17:03 - 2017-05-20 09:09 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll

2017-06-10 17:03 - 2017-05-20 09:08 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2017-06-10 17:03 - 2017-05-20 09:08 - 00086016 _____ C:\Windows\system32\xboxgipsynthetic.dll

2017-06-10 17:03 - 2017-05-20 09:08 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll

2017-06-10 17:03 - 2017-05-20 09:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys

2017-06-10 17:03 - 2017-05-20 09:07 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys

2017-06-10 17:03 - 2017-05-20 09:07 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll

2017-06-10 17:03 - 2017-05-20 09:07 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe

2017-06-10 17:03 - 2017-05-20 09:06 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\NPSMDesktopProvider.dll

2017-06-10 17:03 - 2017-05-20 09:06 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll

2017-06-10 17:03 - 2017-05-20 09:06 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.AccountManager.dll

2017-06-10 17:03 - 2017-05-20 09:05 - 07931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2017-06-10 17:03 - 2017-05-20 09:05 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll

2017-06-10 17:03 - 2017-05-20 09:05 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2017-06-10 17:03 - 2017-05-20 09:04 - 00778240 _____ C:\Windows\system32\MBR2GPT.EXE

2017-06-10 17:03 - 2017-05-20 09:03 - 23681024 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 08331264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00892416 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll

2017-06-10 17:03 - 2017-05-20 09:03 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe

2017-06-10 17:03 - 2017-05-20 09:02 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll

2017-06-10 17:03 - 2017-05-20 09:02 - 00601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 01878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00590848 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll

2017-06-10 17:03 - 2017-05-20 09:01 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\embeddedmodesvc.dll

2017-06-10 17:03 - 2017-05-20 09:00 - 01078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll

2017-06-10 17:03 - 2017-05-20 09:00 - 01067008 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll

2017-06-10 17:03 - 2017-05-20 09:00 - 00925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll

2017-06-10 17:03 - 2017-05-20 09:00 - 00846848 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2017-06-10 17:03 - 2017-05-20 09:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe

2017-06-10 17:03 - 2017-05-20 09:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 01818624 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 01468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 01260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe

2017-06-10 17:03 - 2017-05-20 08:59 - 01141760 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 01028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 00972800 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll

2017-06-10 17:03 - 2017-05-20 08:59 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 08244736 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 03784704 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 03135488 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 01886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll

2017-06-10 17:03 - 2017-05-20 08:58 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe

2017-06-10 17:03 - 2017-05-20 08:57 - 12787200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2017-06-10 17:03 - 2017-05-20 08:57 - 02801664 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2017-06-10 17:03 - 2017-05-20 08:57 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll

2017-06-10 17:03 - 2017-05-20 08:56 - 02730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe

2017-06-10 17:03 - 2017-05-20 08:56 - 02624512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2017-06-10 17:03 - 2017-05-20 08:56 - 02056192 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2017-06-10 17:03 - 2017-05-20 08:56 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2017-06-10 17:03 - 2017-05-20 08:55 - 04396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll

2017-06-10 17:03 - 2017-05-20 08:55 - 03332096 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2017-06-10 17:03 - 2017-05-20 08:55 - 02499584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll

2017-06-10 17:03 - 2017-05-20 08:55 - 01293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll

2017-06-10 17:03 - 2017-05-20 08:55 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 05557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 04707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 04537344 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 03803136 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 02938880 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 02516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2017-06-10 17:03 - 2017-05-20 08:54 - 01275904 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll

2017-06-10 17:03 - 2017-05-20 08:52 - 01356800 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2017-06-10 17:03 - 2017-05-20 08:52 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2017-06-10 17:03 - 2017-05-20 08:52 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll

2017-06-10 17:03 - 2017-05-20 08:52 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll

2017-06-10 17:03 - 2017-05-20 08:51 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2017-06-10 17:03 - 2017-05-20 08:51 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll

2017-06-10 17:03 - 2017-05-20 08:50 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll

2017-06-10 17:03 - 2017-05-20 08:50 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll

2017-06-10 17:03 - 2017-05-20 08:48 - 02438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll

2017-06-10 17:03 - 2017-05-20 08:48 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll

2017-06-10 17:03 - 2017-05-20 08:47 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll

2017-06-10 17:03 - 2017-05-20 08:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll

2017-06-10 17:03 - 2017-05-20 08:47 - 00064512 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe

2017-06-10 17:03 - 2017-04-28 04:38 - 01411128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll

2017-06-10 17:03 - 2017-04-28 04:19 - 01839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2017-06-10 17:03 - 2017-04-28 04:16 - 00599576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2017-06-10 17:03 - 2017-04-28 04:12 - 01604312 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll

2017-06-10 17:03 - 2017-04-28 04:11 - 02158544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2017-06-10 17:03 - 2017-04-28 04:09 - 01557288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2017-06-10 17:03 - 2017-04-28 04:08 - 02399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2017-06-10 17:03 - 2017-04-28 04:08 - 02330520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2017-06-10 17:03 - 2017-04-28 04:07 - 00988168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2017-06-10 17:03 - 2017-04-28 04:06 - 00708712 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2017-06-10 17:03 - 2017-04-28 04:03 - 00667040 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2017-06-10 17:03 - 2017-04-28 03:59 - 02635336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2017-06-10 17:03 - 2017-04-28 03:59 - 00388000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2017-06-10 17:03 - 2017-04-28 03:59 - 00027040 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe

2017-06-10 17:03 - 2017-04-28 03:58 - 01852776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2017-06-10 17:03 - 2017-04-28 03:57 - 03116184 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2017-06-10 17:03 - 2017-04-28 03:55 - 01325456 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2017-06-10 17:03 - 2017-04-28 03:52 - 02957824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys

2017-06-10 17:03 - 2017-04-28 03:52 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll

2017-06-10 17:03 - 2017-04-28 03:49 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2017-06-10 17:03 - 2017-04-28 03:46 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll

2017-06-10 17:03 - 2017-04-28 03:46 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2017-06-10 17:03 - 2017-04-28 03:45 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2017-06-10 17:03 - 2017-04-28 03:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2017-06-10 17:03 - 2017-04-28 03:44 - 00266240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2017-06-10 17:03 - 2017-04-28 03:42 - 00663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-06-10 17:03 - 2017-04-28 03:40 - 02008576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2017-06-10 17:03 - 2017-04-28 03:40 - 00799232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll

2017-06-10 17:03 - 2017-04-28 03:39 - 03655680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-06-10 17:03 - 2017-04-28 03:39 - 02859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-06-10 17:03 - 2017-04-28 03:37 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-06-10 17:03 - 2017-04-28 03:34 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe

2017-06-10 17:03 - 2017-04-28 03:15 - 03672064 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2017-06-10 17:03 - 2017-04-28 03:15 - 01051648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll

2017-06-10 17:03 - 2017-04-28 03:11 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2017-06-10 17:03 - 2017-04-28 03:11 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys

2017-06-10 17:03 - 2017-04-28 03:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2017-06-10 17:03 - 2017-04-28 03:08 - 00457728 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll

2017-06-10 17:03 - 2017-04-28 03:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll

2017-06-10 17:03 - 2017-04-28 03:08 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2017-06-10 17:03 - 2017-04-28 03:07 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2017-06-10 17:03 - 2017-04-28 03:06 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll

2017-06-10 17:03 - 2017-04-28 03:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2017-06-10 17:03 - 2017-04-28 03:06 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2017-06-10 17:03 - 2017-04-28 03:05 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2017-06-10 17:03 - 2017-04-28 03:04 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll

2017-06-10 17:03 - 2017-04-28 03:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2017-06-10 17:03 - 2017-04-28 03:03 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2017-06-10 17:03 - 2017-04-28 03:01 - 02077184 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2017-06-10 17:03 - 2017-04-28 02:59 - 03307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2017-06-10 17:03 - 2017-04-28 02:58 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll

2017-06-10 17:03 - 2017-04-28 02:57 - 04730368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2017-06-10 17:03 - 2017-04-28 02:57 - 01803264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2017-06-10 17:03 - 2017-04-28 02:54 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2017-06-10 17:03 - 2017-04-28 02:54 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe

2017-06-10 17:03 - 2017-04-28 02:54 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2017-06-10 17:03 - 2017-04-28 02:54 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2017-06-10 17:03 - 2017-04-28 02:52 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.ps.dll

2017-06-10 17:03 - 2017-04-19 10:06 - 00651680 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2017-06-10 17:03 - 2017-04-19 10:04 - 00142240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys

2017-06-10 17:03 - 2017-04-19 10:02 - 00716440 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll

2017-06-10 17:03 - 2017-04-19 09:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll

2017-06-10 17:03 - 2017-04-19 09:18 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys

2017-06-10 17:03 - 2017-04-19 09:16 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2017-06-10 17:03 - 2017-04-19 09:15 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2017-06-10 17:03 - 2017-04-19 09:14 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\LockHostingFramework.dll

2017-06-10 17:03 - 2017-04-19 09:13 - 00980992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2017-06-10 17:03 - 2017-04-19 09:12 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll

2017-06-10 17:03 - 2017-04-19 09:12 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll

2017-06-10 17:03 - 2017-04-19 09:11 - 04446208 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll

2017-06-10 17:03 - 2017-04-19 09:10 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll

2017-06-10 17:03 - 2017-04-19 09:10 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-06-10 17:03 - 2017-04-19 09:10 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2017-06-10 17:03 - 2017-04-19 09:07 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll

2017-06-10 17:03 - 2017-04-19 09:07 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2017-06-10 17:03 - 2017-04-19 09:02 - 00559000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2017-06-10 17:03 - 2017-04-19 09:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll

2017-06-10 17:03 - 2017-04-19 08:59 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2017-06-10 17:03 - 2017-04-19 08:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll

2017-06-10 17:03 - 2017-04-19 08:34 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll

2017-06-10 17:03 - 2017-04-19 08:34 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll

2017-06-10 17:03 - 2017-04-19 08:32 - 01285120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2017-06-10 17:03 - 2017-04-14 03:35 - 00741784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll

2017-06-10 17:03 - 2017-04-14 03:35 - 00673112 _____ (Microsoft Corporation) C:\Windows\system32\AppResolver.dll

2017-06-10 17:03 - 2017-04-14 03:33 - 02085280 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll

2017-06-10 17:03 - 2017-04-14 03:32 - 01320352 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll

2017-06-10 17:03 - 2017-04-14 03:30 - 00105456 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2017-06-10 17:03 - 2017-04-14 02:43 - 00523296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppResolver.dll

2017-06-10 17:03 - 2017-04-14 02:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll

2017-06-10 17:03 - 2017-04-14 02:40 - 00095584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2017-06-10 17:03 - 2017-04-14 02:39 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\mmgaserver.exe

2017-06-10 17:03 - 2017-04-14 02:39 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll

2017-06-10 17:03 - 2017-04-14 02:39 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll

2017-06-10 17:03 - 2017-04-14 02:38 - 00251904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll

2017-06-10 17:03 - 2017-04-14 02:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll

2017-06-10 17:03 - 2017-04-14 02:37 - 00450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe

2017-06-10 17:03 - 2017-04-14 02:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll

2017-06-10 17:03 - 2017-04-14 02:37 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll

2017-06-10 17:03 - 2017-04-14 02:37 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll

2017-06-10 17:03 - 2017-04-14 02:36 - 00524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll

2017-06-10 17:03 - 2017-04-14 02:36 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll

2017-06-10 17:03 - 2017-04-14 02:35 - 01433600 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll

2017-06-10 17:03 - 2017-04-14 02:35 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll

2017-06-10 17:03 - 2017-04-14 02:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2017-06-10 17:03 - 2017-04-14 02:34 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll

2017-06-10 17:03 - 2017-04-14 02:33 - 01269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2017-06-10 17:03 - 2017-04-14 02:33 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll

2017-06-10 17:03 - 2017-04-14 02:31 - 01611776 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll

2017-06-10 17:03 - 2017-04-14 02:31 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll

2017-06-10 17:03 - 2017-04-14 02:29 - 01583616 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2017-06-10 17:03 - 2017-04-14 02:29 - 01295872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll

2017-06-10 17:03 - 2017-04-14 02:29 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2017-06-10 17:03 - 2017-04-14 02:29 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll

2017-06-10 17:03 - 2017-04-14 02:28 - 02443776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2017-06-10 17:03 - 2017-04-14 02:26 - 01257472 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll

2017-06-10 17:03 - 2017-04-14 02:25 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll

2017-06-10 17:03 - 2017-04-14 02:24 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2017-06-10 17:03 - 2017-04-14 02:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll

2017-06-10 17:03 - 2017-04-14 02:18 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmgaserver.exe

2017-06-10 17:03 - 2017-04-14 02:15 - 00282112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll

2017-06-10 17:03 - 2017-04-14 02:15 - 00232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll

2017-06-10 17:03 - 2017-04-14 02:13 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll

2017-06-10 17:03 - 2017-04-14 02:13 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2017-06-10 17:03 - 2017-04-14 02:08 - 01463296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-06-10 17:03 - 2017-04-14 02:06 - 00987648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll

2017-06-10 17:03 - 2017-04-14 02:04 - 00392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll

2017-06-10 17:03 - 2017-04-14 02:01 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll

2017-06-10 17:03 - 2017-04-01 04:04 - 00382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2017-06-10 17:03 - 2017-04-01 03:57 - 00311192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2017-06-10 17:03 - 2017-04-01 03:52 - 00409504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2017-06-10 17:03 - 2017-04-01 03:51 - 01760264 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2017-06-10 17:03 - 2017-04-01 03:29 - 01518088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2017-06-10 17:03 - 2017-04-01 03:28 - 00354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll

2017-06-10 17:03 - 2017-04-01 03:11 - 00038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2017-06-10 17:03 - 2017-04-01 03:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll

2017-06-10 17:03 - 2017-04-01 03:05 - 00047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2017-06-10 17:03 - 2017-04-01 03:04 - 00364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll

2017-06-10 17:03 - 2017-04-01 03:04 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll

2017-06-10 17:03 - 2017-04-01 03:02 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll

2017-06-10 17:03 - 2017-04-01 03:01 - 00429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2017-06-10 17:03 - 2017-04-01 02:58 - 01506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2017-06-10 17:03 - 2017-04-01 02:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll

2017-06-10 17:03 - 2017-04-01 02:56 - 01060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2017-06-10 17:03 - 2017-04-01 02:55 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2017-06-10 17:03 - 2017-04-01 02:55 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll

2017-06-10 17:03 - 2017-04-01 02:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll

2017-06-10 17:03 - 2017-04-01 02:52 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll

2017-06-10 17:03 - 2017-04-01 02:50 - 01657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2017-06-10 17:03 - 2017-04-01 02:50 - 01605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2017-06-10 17:03 - 2017-04-01 02:45 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll

2017-06-10 17:03 - 2017-04-01 02:44 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2017-06-10 17:03 - 2017-04-01 00:00 - 00032004 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin

2017-06-10 17:00 - 2017-06-10 17:06 - 86191168 _____ (NVIDIA Corporation) C:\Users\VendettaAW\Downloads\GeForce_Experience_v3.6.0.74.exe

2017-06-10 16:55 - 2017-06-10 16:55 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2017-06-10 16:55 - 2017-06-10 16:55 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2017-06-10 16:55 - 2017-06-10 16:55 - 00123480 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2017-06-10 16:55 - 2017-06-10 16:55 - 00109144 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2017-06-10 16:55 - 2017-06-10 16:55 - 00000595 ___RH C:\Windows\ctfile.rfc

2017-06-10 16:55 - 2017-06-10 16:55 - 00000000 ____D C:\Users\Public\Creative

2017-06-10 16:55 - 2017-06-10 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative

2017-06-10 16:55 - 2017-06-10 16:55 - 00000000 ____D C:\Program Files (x86)\Creative

2017-06-10 16:55 - 2014-10-13 10:45 - 01898496 ____N (Creative) C:\Windows\system32\Sens_oal.dll

2017-06-10 16:55 - 2014-10-13 10:36 - 01609728 ____N (Creative) C:\Windows\SysWOW64\Sens_oal.dll

2017-06-10 16:55 - 2014-08-18 16:13 - 00025088 _____ C:\Windows\FUNC_01&VEN_1102&DEV_0011&SUBSYS_10280685.reg

2017-06-10 16:55 - 2003-06-12 23:25 - 00007062 _____ C:\Windows\SysWOW64\audiopid.vxd

2017-06-10 16:55 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\Windows\Updreg.EXE

2017-06-10 16:52 - 2017-03-05 16:25 - 00017856 _____ (NVIDIA Corporation) C:\Windows\system32\NVMUPEventMsg.dll

2017-06-10 16:51 - 2017-06-10 16:51 - 00000000 ____D C:\Windows\nvmup

2017-06-10 16:50 - 2017-06-10 16:50 - 00017322 _____ C:\Windows\system32\results.xml

2017-06-10 16:47 - 2017-06-10 16:48 - 56411344 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Audio_Driver_483TY_WN32_1.1.0_A00.EXE

2017-06-10 16:45 - 2017-06-10 16:45 - 00000724 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® HD Graphics Control Panel.lnk

2017-06-10 16:42 - 2017-06-10 19:34 - 00000000 ____D C:\ProgramData\NVIDIA

2017-06-10 16:42 - 2017-06-10 17:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2017-06-10 16:42 - 2017-06-08 03:01 - 00001951 _____ C:\Windows\NvContainerRecovery.bat

2017-06-10 16:42 - 2017-06-08 02:55 - 06467008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 02479552 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 01762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 00549312 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 00392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 00082040 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2017-06-10 16:42 - 2017-06-08 02:55 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2017-06-10 16:42 - 2017-06-07 15:42 - 08075477 _____ C:\Windows\system32\nvcoproc.bin

2017-06-10 16:41 - 2017-06-10 17:23 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2017-06-10 16:41 - 2017-06-10 17:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2017-06-10 16:38 - 2017-06-10 16:47 - 551904696 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\nVIDIA-GeForce-GTX-860M-960M-965M-970M-980M-Drive_VXHY0_WIN_21.21.13.7689_A02.EXE

2017-06-10 16:38 - 2017-06-10 16:44 - 223085488 _____ (Dell Inc.) C:\Users\VendettaAW\Downloads\Video_Driver_R9FR7_WN32_20.19.15.4531_A04.EXE

2017-06-10 16:36 - 2017-06-10 17:57 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Deployment

2017-06-10 16:36 - 2017-06-10 16:36 - 00000000 ____D C:\Users\VendettaAW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell

2017-06-10 16:36 - 2017-06-10 16:36 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Apps\2.0

2017-06-10 16:35 - 2017-06-10 19:33 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2017-06-10 16:35 - 2017-06-10 19:33 - 00000000 __SHD C:\Users\VendettaAW\IntelGraphicsProfiles

2017-06-10 16:35 - 2017-06-10 18:29 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Downloaded Installations

2017-06-10 16:35 - 2017-06-10 16:45 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat

2017-06-10 16:35 - 2017-06-10 16:35 - 00000000 ____D C:\dell

2017-06-10 16:35 - 2017-06-10 16:35 - 00000000 _____ C:\Windows\system32\GfxValDisplayLog.bin

2017-06-10 16:35 - 2017-05-18 07:56 - 00521816 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL

2017-06-10 16:35 - 2017-05-18 07:56 - 00427608 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL

2017-06-10 16:31 - 2017-06-10 16:32 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\MicrosoftEdge

2017-06-10 16:28 - 2017-06-10 16:28 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf

2017-06-10 16:28 - 2017-06-10 16:28 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf

2017-06-10 16:28 - 2017-06-10 16:28 - 00000000 ____D C:\Program Files\Synaptics

2017-06-10 16:28 - 2015-07-10 13:03 - 00609960 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys

2017-06-10 16:28 - 2015-07-09 16:16 - 00245416 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo32-1.dll

2017-06-10 16:28 - 2015-07-09 16:15 - 00755880 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll

2017-06-10 16:28 - 2015-07-09 16:15 - 00411304 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll

2017-06-10 16:28 - 2015-07-09 16:15 - 00260264 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll

2017-06-10 16:28 - 2015-07-09 16:15 - 00033960 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel_Aux.sys

2017-06-10 16:28 - 2015-07-09 16:15 - 00033960 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys

2017-06-10 16:28 - 2015-07-09 16:15 - 00033448 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_AMDASF_Aux.sys

2017-06-10 16:26 - 2017-06-10 16:26 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Comms

2017-06-10 16:25 - 2017-06-10 16:26 - 00000000 ____D C:\ProgramData\Killer

2017-06-10 16:25 - 2017-06-10 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking

2017-06-10 16:24 - 2017-06-10 16:25 - 00000000 ____D C:\ProgramData\Downloaded Installations

2017-06-10 16:24 - 2017-06-10 16:24 - 00000000 ____D C:\Program Files\Killer Networking

2017-06-10 16:24 - 2017-06-10 16:24 - 00000000 _____ C:\Users\VendettaAW\AppData\Local\Driver_LOM_8161Present.flag

2017-06-10 16:24 - 2017-06-10 16:24 - 00000000 _____ C:\Users\VendettaAW\AppData\Local\Driver_11ACPresent.flag

2017-06-10 16:24 - 2015-05-27 17:48 - 02257816 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\Qcamain10x64.sys

2017-06-10 16:24 - 2015-05-27 17:48 - 00773440 _____ C:\Windows\system32\Drivers\qca61x420.bin

2017-06-10 16:24 - 2015-05-27 17:48 - 00008124 _____ C:\Windows\system32\Drivers\eeprom_ar6320_2p1_NFA344i_highTX.bin

2017-06-10 16:23 - 2017-06-10 16:23 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth

2017-06-10 16:23 - 2017-06-10 16:23 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite

2017-06-10 16:21 - 2017-06-10 16:44 - 00000000 ____D C:\Intel

2017-06-10 16:21 - 2014-09-19 11:36 - 01037568 _____ (Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe

2017-06-10 16:21 - 2014-09-19 11:36 - 00216360 _____ (Intel Corporation) C:\Windows\system32\Drivers\esif_lf.sys

2017-06-10 16:21 - 2014-09-19 11:36 - 00041824 _____ (Intel Corporation) C:\Windows\system32\Drivers\dptf_acpi.sys

2017-06-10 16:21 - 2014-09-19 11:36 - 00038720 _____ (Intel Corporation) C:\Windows\system32\Drivers\dptf_cpu.sys

2017-06-10 16:21 - 2014-09-19 11:04 - 00849360 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110.dll

2017-06-10 16:21 - 2014-09-19 11:04 - 00661456 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110.dll

2017-06-10 16:21 - 2013-06-19 06:34 - 02356592 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01011.dll

2017-06-10 16:21 - 2013-06-19 06:34 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01011.dll

2017-06-10 16:20 - 2017-06-10 18:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2017-06-10 16:20 - 2017-06-10 16:35 - 00000000 ____D C:\Program Files (x86)\Intel

2017-06-10 16:20 - 2017-06-10 16:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2017-06-10 16:20 - 2017-06-10 16:20 - 00000000 ____D C:\Windows\SysWOW64\sda

2017-06-10 16:20 - 2017-06-10 16:20 - 00000000 ____D C:\ProgramData\Intel

2017-06-10 16:20 - 2017-06-10 16:20 - 00000000 ____D C:\Program Files (x86)\Realtek

2017-06-10 16:20 - 2014-02-22 00:40 - 00466648 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys

2017-06-10 16:20 - 2014-01-27 22:39 - 09890008 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll

2017-06-10 16:19 - 2017-06-10 18:16 - 00000000 ____D C:\ProgramData\Package Cache

2017-06-10 16:19 - 2017-06-10 16:50 - 00000000 ____D C:\ProgramData\Dell

2017-06-10 16:19 - 2017-06-10 16:34 - 00000000 ____D C:\Program Files\Intel

2017-06-10 16:19 - 2017-06-10 16:19 - 00003300 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2

2017-06-10 16:19 - 2017-06-10 16:19 - 00002378 _____ C:\Users\VendettaAW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-06-10 16:19 - 2017-06-10 16:19 - 00000000 ___RD C:\Users\VendettaAW\OneDrive

2017-06-10 16:18 - 2017-06-10 16:18 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2017-06-10 16:17 - 2017-06-10 17:56 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Packages

2017-06-10 16:17 - 2017-06-10 17:27 - 00000000 __RHD C:\Users\Public\AccountPictures

2017-06-10 16:17 - 2017-06-10 17:27 - 00000000 ____D C:\Users\VendettaAW

2017-06-10 16:17 - 2017-06-10 16:17 - 00000020 ___SH C:\Users\VendettaAW\ntuser.ini

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 _SHDL C:\Users\VendettaAW\My Documents

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 _SHDL C:\Users\VendettaAW\Documents\My Videos

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 _SHDL C:\Users\VendettaAW\Documents\My Pictures

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 _SHDL C:\Users\VendettaAW\Documents\My Music

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Roaming\Adobe

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\VirtualStore

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\TileDataLayer

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\Publishers

2017-06-10 16:17 - 2017-06-10 16:17 - 00000000 ____D C:\Users\VendettaAW\AppData\Local\ConnectedDevicesPlatform

2017-06-10 16:14 - 2017-06-10 16:14 - 00000000 ____D C:\ProgramData\USOShared

2017-06-10 16:08 - 2017-06-10 19:39 - 01033108 _____ C:\Windows\system32\PerfStringBackup.INI

2017-06-10 16:06 - 2017-03-18 23:56 - 02233344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Public\Documents\My Videos

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Public\Documents\My Pictures

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Public\Documents\My Music

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default\My Documents

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default\Documents\My Videos

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default\Documents\My Music

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Users\Default User\Documents\My Music

2017-06-10 16:03 - 2017-06-10 16:03 - 00000000 _SHDL C:\Documents and Settings

2017-06-10 16:01 - 2017-06-10 21:49 - 00000000 ____D C:\Windows\system32\SleepStudy

2017-06-10 16:01 - 2017-06-10 19:33 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2017-06-10 16:01 - 2017-06-10 19:20 - 00221848 _____ C:\Windows\system32\FNTCACHE.DAT

2017-06-10 16:01 - 2017-06-10 16:01 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2017-06-10 16:01 - 2017-06-10 16:01 - 00000000 ____D C:\Windows\ServiceProfiles

2017-05-18 07:52 - 2017-05-18 07:52 - 01996704 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438205.dll

2017-05-18 07:52 - 2017-05-18 07:52 - 01598368 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438205.dll

2017-05-18 07:50 - 2017-06-08 04:45 - 04115112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2017-05-18 07:50 - 2017-06-08 04:45 - 03625992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2017-05-18 04:34 - 2017-06-08 04:45 - 00045163 _____ C:\Windows\system32\nvinfo.pb

2017-05-18 04:34 - 2017-05-18 04:34 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json

2017-05-18 04:34 - 2017-05-18 04:34 - 00000669 _____ C:\Windows\system32\nv-vk64.json

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-11 03:01 - 2017-03-19 00:03 - 00028672 _____ C:\Windows\system32\config\BCD-Template

2017-06-10 20:51 - 2017-03-19 00:03 - 00000000 ___HD C:\Program Files\WindowsApps

2017-06-10 19:32 - 2017-03-18 14:40 - 00524288 _____ C:\Windows\system32\config\BBI

2017-06-10 18:29 - 2017-03-19 00:01 - 00000000 ____D C:\Windows\INF

2017-06-10 18:01 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\AppReadiness

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ___SD C:\Windows\SysWOW64\F12

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ___SD C:\Windows\system32\F12

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ___RD C:\Program Files\Windows Defender

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\SysWOW64\Dism

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\oobe

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\appraiser

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\ShellExperiences

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\Provisioning

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2017-06-10 17:26 - 2017-03-19 00:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-06-10 17:26 - 2017-03-18 14:40 - 00000000 ____D C:\Windows\system32\Dism

2017-06-10 17:04 - 2017-03-18 23:51 - 00000000 ____D C:\Windows\CbsTemp

2017-06-10 16:42 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\Help

2017-06-10 16:17 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\WinBioDatabase

2017-06-10 16:14 - 2017-03-19 00:03 - 00000000 ____D C:\ProgramData\USOPrivate

2017-06-10 16:06 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\spool

2017-06-10 16:06 - 2017-03-19 00:03 - 00000000 ____D C:\Windows\system32\FxsTmp

2017-06-10 16:03 - 2017-03-19 00:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-06-10 16:02 - 2017-03-19 05:31 - 00000000 ____D C:\Windows\HoloShell

2017-06-10 16:02 - 2017-03-19 00:03 - 00000000 ___RD C:\Windows\PrintDialog

2017-06-10 16:02 - 2017-03-19 00:03 - 00000000 ___RD C:\Windows\MiracastView

2017-06-10 16:02 - 2017-03-18 14:40 - 00032768 _____ C:\Windows\system32\config\ELAM

2017-06-10 16:02 - 2017-03-18 14:40 - 00000000 ____D C:\Windows\system32\Sysprep

==================== Files in the root of some directories =======

2017-06-10 16:24 - 2017-06-10 16:24 - 0000000 _____ () C:\Users\VendettaAW\AppData\Local\Driver_11ACPresent.flag

2017-06-10 16:24 - 2017-06-10 16:24 - 0000000 _____ () C:\Users\VendettaAW\AppData\Local\Driver_LOM_8161Present.flag

Some files in TEMP:

====================

2017-06-10 17:20 - 2017-05-01 23:14 - 0367552 _____ (NVIDIA Corporation) C:\Users\VendettaAW\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-06-10 16:01

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-06-2017

Ran by VendettaAW (10-06-2017 22:12:00)

Running from C:\Users\VendettaAW\Desktop

Windows 10 Home Version 1703 (X64) (2017-06-10 13:03:19)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-4058992635-72630536-3984333171-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4058992635-72630536-3984333171-503 - Limited - Disabled)

Guest (S-1-5-21-4058992635-72630536-3984333171-501 - Limited - Disabled)

VendettaAW (S-1-5-21-4058992635-72630536-3984333171-1001 - Administrator - Enabled) => C:\Users\VendettaAW

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Alienware Command Center (HKLM-x32\...\InstallShield_{D5BC2B54-1297-4765-ABF5-FE43ED0067DD}) (Version: 4.5.16.0 - Dell Inc.)

Alienware Command Center (Version: 4.5.16.0 - Dell Inc.) Hidden

Alienware On-Screen Display (HKLM-x32\...\InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.33.0.19C - )

Alienware On-Screen Display (x32 Version: 0.33.0.19C - ) Hidden

Ansel (Version: 382.53 - NVIDIA Corporation) Hidden

Dell Foundation Services (HKLM\...\{BDB50421-E961-42F3-B803-6DAC6F173834}) (Version: 3.4.16100.0 - Dell Inc.)

Dell System Detect (HKU\S-1-5-21-4058992635-72630536-3984333171-1001\...\d24084d039586cae) (Version: 8.5.0.4 - Dell)

EMSC (x32 Version: 0.0.0.28 - Compal Electronics, Inc.) Hidden

Free Fall Data Protection (HKLM\...\{5141F653-8707-4B96-9349-247C66319C11}) (Version: 1.1.2.8 - Kionix, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.86 - Google Inc.)

Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden

Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel® Corporation) Hidden

Intel® Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.30.1072 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.54.1217 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.54.1217 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.54.1217 - Rivet Networks) Hidden

Killer Network Manager Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.54.1217 - Rivet Networks)

Killer Wireless Drivers (HKLM-x32\...\{9A183937-DD01-4E4B-B38D-39A35ADB08F4}) (Version: 1.1.53.1210 - Rivet Networks)

Killer Wireless-AC Drivers (Version: 1.1.53.1210 - Rivet Networks) Hidden

Microsoft OneDrive (HKU\S-1-5-21-4058992635-72630536-3984333171-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

NVIDIA 3D Vision Driver 382.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.53 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)

NVIDIA Graphics Driver 382.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.53 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)

NvNodejs (Version: 3.6.0.74 - NVIDIA Corporation) Hidden

NvTelemetry (Version: 2.4.10.0 - NVIDIA Corporation) Hidden

NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden

Qualcomm Atheros 61x4 Bluetooth Suite (64) (HKLM\...\{628988B4-3FA5-4EA6-BAA3-DA640F6718BD}) (Version: 12.0.0.102 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21249 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 7.1.0370 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 3.6.0.74 - NVIDIA Corporation) Hidden

Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.6.0 - Sophos Limited)

Sound Blaster Recon3Di (HKLM-x32\...\{EE5FF981-6CC0-4ED1-BB01-BCE4B01EF9A4}) (Version: 1.01.00 - Creative Technology Limited)

Sound Blaster Recon3Di Extras (HKLM-x32\...\{C45E715E-442E-4D82-BD46-A08A0870957C}) (Version: 1.0 - Creative Technology Limited)

Touchpad (HKLM\...\SynTPDeinstKey) (Version: 19.0.15.2 - Synaptics Incorporated)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)

Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)

Windows Driver Package - Kionix, Inc. (kiox_ff_driver) Sensor I/O devices (10/09/2014 1.1.2.8) (HKLM\...\8DF797456310A45326D5CA27FA380061A19FA127) (Version: 10/09/2014 1.1.2.8 - Kionix, Inc.)

Windows Driver Package - Kionix, Inc. kxdiskprot DiskDrive (10/09/2014 1.1.2.8) (HKLM\...\7115C5B3174715E634D96D0883A6ACF1B11140A8) (Version: 10/09/2014 1.1.2.8 - Kionix, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B006553-0ECB-4ECF-BD6F-4719CC954377} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-03] (NVIDIA Corporation)

Task: {3E8D0F91-AA1F-468C-900E-D287BF394281} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-03] (NVIDIA Corporation)

Task: {4CE2485C-D7E1-437B-8558-FD0401A05A94} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-03] (NVIDIA Corporation)

Task: {553122D1-FAA0-4E0A-AE8C-E34AD69B67CE} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe

Task: {5EDA79F3-6A82-4290-9572-05629A6E34C2} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-03] (NVIDIA Corporation)

Task: {6057F1BB-ABF6-47A5-B757-BB06B047F5E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-10] (Google Inc.)

Task: {791D3EF5-4252-4639-A7BB-251A62CA9BBB} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe

Task: {7B397EF3-4C8F-4C20-BE21-020350117FA5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-10] (Google Inc.)

Task: {87DDB7DE-32F1-4444-B99E-18BEE8D786B5} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-03] (NVIDIA Corporation)

Task: {8D98E0C6-AC1D-4843-9331-9B0C80AF79BD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-03] (NVIDIA Corporation)

Task: {B1CA9931-EECF-4F87-B745-873321C34DEE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-03] (NVIDIA Corporation)

Task: {BEA23D03-DC83-46A3-A1A1-5D72726683C1} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-03] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2017-06-10 17:08 - 2017-05-03 23:16 - 01267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-07-12 06:14 - 2017-01-08 22:28 - 00384512 _____ () C:\Windows\system32\igfxTray.exe

2017-03-18 23:58 - 2017-03-18 23:58 - 00138000 _____ () C:\Windows\SYSTEM32\inputhost.dll

2017-03-18 23:59 - 2017-03-19 05:31 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-06-10 17:55 - 2017-06-03 11:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.86\libglesv2.dll

2017-06-10 17:55 - 2017-06-03 11:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.86\libegl.dll

2017-06-10 17:08 - 2017-05-03 23:16 - 01040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2017-06-10 17:08 - 2017-05-03 23:15 - 65708992 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

2014-05-30 16:34 - 2014-05-30 16:34 - 00939008 _____ () C:\Windows\SYSTEM32\EMSC.dll

2014-10-10 09:37 - 2014-10-10 09:37 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-19 00:03 - 2017-03-19 00:01 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4058992635-72630536-3984333171-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\VendettaAW\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2A76E683-FF1D-4884-9FF7-68AB6B79CA73}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{04108793-AD06-4EFA-8B83-EB6FA1DD00A9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{9B1C68E8-F419-49FA-BAE7-0FCA839D8BF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{B6D4CB64-60A4-4ED0-AC61-F7BB541B35AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{F86E37AA-0EE9-4981-9F98-26A3287857EE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{BAD387EC-1A8B-4130-A240-8050988BE59F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (06/10/2017 07:23:29 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: FATHACHUIL)

Description: Package Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy+SecHealthUI was terminated because it took too long to suspend.

Error: (06/10/2017 07:19:28 PM) (Source: MsiInstaller) (EventID: 10005) (User: FATHACHUIL)

Description: Product: Dell Digital Delivery -- This application requires .NET Framework 3.5. Please install the .NET Framework then run this installer again.

Error: (06/10/2017 07:19:24 PM) (Source: MsiInstaller) (EventID: 10005) (User: FATHACHUIL)

Description: Product: Dell Digital Delivery -- This application requires .NET Framework 3.5. Please install the .NET Framework then run this installer again.

Error: (06/10/2017 06:17:40 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: regsvr32.exe, version: 10.0.15063.0, time stamp: 0x92d00021

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x00000000

Faulting process id: 0xb8c

Faulting application start time: 0x01d2e1fcb260e83a

Faulting application path: C:\Windows\SysWOW64\regsvr32.exe

Faulting module path: unknown

Report Id: 9a6708e0-79e6-498a-bbb6-bb99f9c0de30

Faulting package full name:

Faulting package-relative application ID:

Error: (06/10/2017 06:17:38 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: regsvr32.exe, version: 10.0.15063.0, time stamp: 0x467eb8c9

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x0000000000000000

Faulting process id: 0x20d0

Faulting application start time: 0x01d2e1fcb0d1aeb9

Faulting application path: C:\Windows\system32\regsvr32.exe

Faulting module path: unknown

Report Id: 6ce7f355-ea08-4d15-af4f-350dadf7fcb6

Faulting package full name:

Faulting package-relative application ID:

Error: (06/10/2017 05:07:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: FATHACHUIL)

Description: Activation of app Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/10/2017 05:04:33 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (06/10/2017 04:54:17 PM) (Source: NVMUP) (EventID: 4) (User: )

Description: Update Update Failed

Package Display.Driver

Log file: C:\Windows\nvmup\updatepackage\log\nvmup.log

Exit Code = 1602 (User Cancel)

Error: (06/10/2017 04:52:39 PM) (Source: NVMUP) (EventID: 4) (User: )

Description: Update Update Failed

Package Display.Driver

Log file: C:\Windows\nvmup\updatepackage\log\nvmup.log

Exit Code = 1603 (Error)

Error: (06/10/2017 04:52:25 PM) (Source: NVMUP) (EventID: 4) (User: )

Description: Update Update Failed

Package Display.Driver

Log file: C:\Windows\nvmup\updatepackage\log\nvmup.log

Exit Code = 1602 (User Cancel)

System errors:

=============

Error: (06/10/2017 07:33:51 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

and APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (06/10/2017 07:33:51 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

and APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (06/10/2017 07:33:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The CldFlt service failed to start due to the following error:

The request is not supported.

Error: (06/10/2017 07:32:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Windows Search service failed to start due to the following error:

The service did not start due to a logon failure.

Error: (06/10/2017 07:32:39 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: The WSearch service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error:

The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (06/10/2017 07:32:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Intel® Dynamic Application Loader Host Interface Service service terminated unexpectedly. It has done this 1 time(s).

Error: (06/10/2017 07:32:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Alienware Fusion Service service terminated unexpectedly. It has done this 1 time(s).

Error: (06/10/2017 07:32:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (06/10/2017 07:32:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The NVIDIA Telemetry Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (06/10/2017 07:32:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The ESIF Upper Framework Service service terminated unexpectedly. It has done this 1 time(s).

==================== Memory info ===========================

Processor: Intel® Core™ i5-4210H CPU @ 2.90GHz

Percentage of memory in use: 34%

Total physical RAM: 8077.66 MB

Available physical RAM: 5289.79 MB

Total Virtual: 9997.66 MB

Available Virtual: 7156.59 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:118.69 GB) (Free:91.52 GB) NTFS

Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:769.49 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: A2FED777)

Partition: GPT.

========================================================

Disk: 1 (Size: 119.2 GB) (Disk ID: C30F8DA4)

Partition: GPT.

==================== End of Addition.txt ============================

Attached Files

Addition.txt 20.14KB 221 downloads
FRST.txt 85.31KB 201 downloads

#2
zep516

Posted 10 June 2017 - 01:36 PM

Trusted Helper

Malware Removal
8,093 posts

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

A few items to fix

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.

start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [] => [X]
AutoConfigURL: [S-1-5-21-4058992635-72630536-3984333171-1001] => hxxp://webunstop.net/wpad.dat?3ffb3f8c9f0323b3b8c4a6ab5d7bd50c33287454
hosts:
Emptytemp:

Click Format and ensure Wordwrap is unchecked.
Save as Fixlist.txt to your Desktop (Must be in this location)
Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.

Next

Please download Junkware Removal Tool to your Desktop.
Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.

#3
V4Vendetta

Posted 10 June 2017 - 01:46 PM

New Member

Topic Starter
Member
6 posts

This is the contents from the fixlog.txt file

Fix result of Farbar Recovery Scan Tool (x64) Version: 10-06-2017

Ran by VendettaAW (10-06-2017 22:42:29) Run:1

Running from C:\Users\VendettaAW\Desktop

Loaded Profiles: VendettaAW (Available Profiles: VendettaAW)

Boot Mode: Normal

==============================================

fixlist content:

*****************

start

CloseProcesses:

CreateRestorePoint:

HKLM\...\Run: [] => [X]

AutoConfigURL: [S-1-5-21-4058992635-72630536-3984333171-1001] => hxxp://webunstop.net/wpad.dat?3ffb3f8c9f0323b3b8c4a6ab5d7bd50c33287454

hosts:

Emptytemp:

*****************

Processes closed successfully.

Error: (0) Failed to create a restore point.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully

HKU\S-1-5-21-4058992635-72630536-3984333171-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value removed successfully

C:\Windows\System32\Drivers\etc\hosts => moved successfully

Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13802398 B

Java, Flash, Steam htmlcache => 0 B

Windows/system/drivers => 448509 B

Edge => 38227454 B

Chrome => 22544759 B

Firefox => 0 B

Opera => 0 B

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 128 B

systemprofile32 => 0 B

LocalService => 0 B

NetworkService => 4830 B

VendettaAW => 246807062 B

RecycleBin => 0 B

EmptyTemp: => 313.2 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 22:42:34 ====

#4
V4Vendetta

Posted 10 June 2017 - 01:51 PM

New Member

Topic Starter
Member
6 posts

This is the contents of the JRT report

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.1.3 (04.10.2017)

Operating System: Windows 10 Home x64

Ran by VendettaAW (Administrator) on 10-Jun-17 at 22:48:15.84

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 10-Jun-17 at 22:49:24.86

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#5
V4Vendetta

Posted 10 June 2017 - 01:52 PM

New Member

Topic Starter
Member
6 posts

So, from glancing at the contents of the .txt files, am I to assume something hit my registry? Thus no removal tool could find any infected file?

#6
zep516

Posted 10 June 2017 - 01:58 PM

Trusted Helper

Malware Removal
8,093 posts

Hello,

I'm not certain where this devil is, thought i had it in the FRST fix. Some hidden browser redirect maybe.

If the problem is still there reset the Chrome browser

to do that

https://www.howtogee...fault-settings/

#7
V4Vendetta

Posted 10 June 2017 - 02:00 PM

New Member

Topic Starter
Member
6 posts

it seems to be working just fine now with no redirects so far. I really do have to say, spectacular work that you are all doing here. I really do appreciate it and I will go out of my way to make sure you all get recognition.

Thank you very much

#8
zep516

Posted 10 June 2017 - 02:05 PM

Trusted Helper

Malware Removal
8,093 posts

Hello,

It appears it was this file causing issue.

AutoConfigURL: [S-1-5-21-4058992635-72630536-3984333171-1001] => hxxp://webunstop.net/wpad.dat?3ffb3f8c9f0323b3b8c4a6ab5d7bd50c33287454

We need to remove the tools we/ you used and then close the topic.

The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

Why we need to remove some of our tools:
Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight. They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.

Download DelFix by Xplode and save it to your desktop.

Run the tool by right click on the icon and Run as administrator option.
Make sure that these ones are checked:
- Remove disinfection tools
- Purge system restore
- Reset system settings
Push Run.
The program will run for a few seconds and display a notepad report.
Paste it for my review.

#9
V4Vendetta

Posted 10 June 2017 - 02:08 PM

New Member

Topic Starter
Member
6 posts

# DelFix v1.010 - Logfile created 10/06/2017 at 23:07:53

# Updated 26/04/2015 by Xplode

# Username : VendettaAW - FATHACHUIL

# Operating System : Windows 10 Home (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\VendettaAW\Desktop\Addition.txt

Deleted : C:\Users\VendettaAW\Desktop\Fixlog.txt

Deleted : C:\Users\VendettaAW\Desktop\FRST.txt

Deleted : C:\Users\VendettaAW\Desktop\FRST64.exe

Deleted : C:\Users\VendettaAW\Desktop\JRT.exe

Deleted : C:\Users\VendettaAW\Desktop\JRT.txt

Deleted : C:\Users\VendettaAW\Downloads\adwcleaner_6.047.exe

Deleted : C:\Users\VendettaAW\Downloads\FRST64.exe

Deleted : C:\Users\VendettaAW\Downloads\JRT.exe

~ Cleaning system restore ...

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

#10
zep516

Posted 10 June 2017 - 02:09 PM

Trusted Helper

Malware Removal
8,093 posts

Well done !

Thank you for using the forum for your computer issues today. Topic closing in 5 mins.

#11
zep516

Posted 10 June 2017 - 02:15 PM

Trusted Helper

Malware Removal
8,093 posts

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

Safe Computing Practices please read Here

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Thanks
Joe