Malware removal help

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2017

Ran by Ryan (administrator) on DESKTOP-CLM2PDV (04-12-2017 13:26:58)

Running from C:\Users\Ryan\Downloads

Loaded Profiles: Ryan (Available Profiles: Ryan)

Platform: Windows 10 Pro Version 1709 16299.64 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe

(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

(Discord Inc.) C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\Discord.exe

(BitTorrent Inc.) C:\Users\Ryan\AppData\Roaming\uTorrent\uTorrent.exe

(Discord Inc.) C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\Discord.exe

(Spotify Ltd) C:\Users\Ryan\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(BitTorrent Inc.) C:\Users\Ryan\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(BitTorrent Inc.) C:\Users\Ryan\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-10-10] (AVAST Software)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-08-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-11-13] (Dropbox, Inc.)

HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [Sound Blaster Audigy Fx Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe [861184 2013-11-08] (Creative Technology Ltd)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-30] (Valve Corporation)

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Run: [Discord] => C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Run: [Spotify] => C:\Users\Ryan\AppData\Roaming\Spotify\Spotify.exe [15849072 2017-07-23] (Spotify Ltd)

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Run: [uTorrent] => C:\Users\Ryan\AppData\Roaming\uTorrent\uTorrent.exe [1981624 2017-11-29] (BitTorrent Inc.)

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Run: [Spotify Web Helper] => C:\Users\Ryan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1579120 2017-07-23] (Spotify Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{1575b19b-3f50-42b1-9047-44476847dd04}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{5ac5980a-ecb7-4274-9d14-b78198b891a7}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

SearchScopes: HKU\S-1-5-21-4152990390-1726422531-2817282082-1001 -> DefaultScope {A0D747A8-3FB4-4CFA-8A1B-B8687A9B3027} URL =

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-25] (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-28] (Google Inc.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-25] (Oracle Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-25] (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-28] (Google Inc.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-25] (Oracle Corporation)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-28] (Google Inc.)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-28] (Google Inc.)

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

FireFox:

========

FF Plugin: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-09-01] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-25] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-25] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-09-01] ( Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [No File]

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [No File]

Chrome:

=======

CHR Profile: C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default [2017-12-04]

CHR Extension: (Slides) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]

CHR Extension: (Docs) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]

CHR Extension: (Google Drive) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-27]

CHR Extension: (YouTube) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-27]

CHR Extension: (Adblock Plus) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]

CHR Extension: (Sheets) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]

CHR Extension: (Google Docs Offline) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-27]

CHR Extension: (Avast Online Security) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-09]

CHR Extension: (New XKit) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\inobiceghmpkaklcknpniboilbjmlald [2017-10-01] [UpdateUrl: hxxps://new-xkit.github.io/XKit/Extensions/dist/page/FirefoxUpdate.json] <==== ATTENTION

CHR Extension: (Chrome Web Store Payments) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]

CHR Extension: (Gmail) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-27]

CHR Extension: (Chrome Media Router) - C:\Users\Ryan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-26]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7446024 2017-10-10] (AVAST Software s.r.o.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-10-10] (AVAST Software)

R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-28] (Creative Technology Ltd) [File not signed]

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-27] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-27] (Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51016 2017-11-13] (Dropbox, Inc.)

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [383016 2017-07-25] (EasyAntiCheat Ltd)

S2 KMS-R@1n; C:\Windows\[email protected] [26112 2016-11-27] () [File not signed]

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)

R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [58296 2016-08-12] (Micro-Star INT'L CO., LTD.)

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-11-16] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-11-16] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)

R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-16] (NVIDIA Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4297920 2017-09-29] (Microsoft Corporation)

R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-11] (@ByELDI) [File not signed]

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AFXfilt; C:\WINDOWS\system32\drivers\AFXfilt.sys [33792 2017-02-13] (Creative Technology Ltd.)

S1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [183584 2017-11-29] (AVAST Software)

R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [321032 2017-11-29] (AVAST Software s.r.o.)

R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [198968 2017-11-29] (AVAST Software s.r.o.)

R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343288 2017-11-29] (AVAST Software s.r.o.)

R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57728 2017-11-29] (AVAST Software s.r.o.)

S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [105128 2017-10-03] (AVAST Software)

S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [47008 2017-11-29] (AVAST Software)

R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-06] (AVAST Software)

R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [148288 2017-11-29] (AVAST Software)

R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110376 2017-11-29] (AVAST Software)

R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84416 2017-11-29] (AVAST Software)

R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1026232 2017-11-29] (AVAST Software)

R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [455376 2017-11-29] (AVAST Software)

R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [203976 2017-11-29] (AVAST Software)

R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [364464 2017-11-29] (AVAST Software)

S3 cthdb; C:\WINDOWS\system32\DRIVERS\cthdb.sys [33792 2017-02-13] (Creative Technology Ltd)

R3 CtxHdb; C:\WINDOWS\system32\DRIVERS\Ctxhdb.sys [48400 2017-06-22] (Creative Technology Ltd)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-11-04] (Disc Soft Ltd)

S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-11-04] (Disc Soft Ltd)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77432 2017-11-01] ()

U1 lpsport; C:\Windows\System32\Drivers\lpsport.sys [61304 2017-10-10] ()

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193464 2017-11-29] (Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2017-11-29] (Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [46008 2017-11-29] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2017-11-29] (Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2017-12-04] (Malwarebytes)

S3 NTIOLib_ACTIVE_X; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NTIOLib_X64.sys [13776 2016-04-12] (MSI)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_2e7fa54192fe16d0\nvlddmkm.sys [16936048 2017-11-09] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-16] (NVIDIA Corporation)

S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-16] (NVIDIA Corporation)

R2 RAMDriv; C:\WINDOWS\system32\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)

R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

U1 staport; C:\Windows\System32\Drivers\staport.sys [45704 2017-10-10] ()

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)

U4 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2017-09-16] (Basil Projects)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-04 13:26 - 2017-12-04 13:27 - 000021345 _____ C:\Users\Ryan\Downloads\FRST.txt

2017-12-04 13:26 - 2017-12-04 13:26 - 002391552 _____ (Farbar) C:\Users\Ryan\Downloads\FRST64.exe

2017-12-04 13:26 - 2017-12-04 13:26 - 000000000 ____D C:\FRST

2017-12-04 13:24 - 2017-12-04 13:24 - 000000000 ___HD C:\OneDriveTemp

2017-12-04 13:24 - 2017-12-04 13:24 - 000000000 ____D C:\Users\Ryan\AppData\LocalLow\uTorrent

2017-12-02 17:11 - 2017-12-02 17:11 - 000022912 _____ C:\Users\Ryan\Downloads\Employee Contact Master.xlsx

2017-12-01 23:59 - 2017-12-01 23:59 - 035241294 _____ C:\Users\Ryan\Downloads\PokemonShowdownSetup (1).exe

2017-11-30 22:37 - 2017-12-04 01:09 - 000000000 ____D C:\Users\Ryan\AppData\Local\Pokemon Showdown

2017-11-30 22:37 - 2017-11-30 22:37 - 035241294 _____ C:\Users\Ryan\Downloads\PokemonShowdownSetup.exe

2017-11-30 22:37 - 2017-11-30 22:37 - 000002133 _____ C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokemon Showdown.lnk

2017-11-30 22:37 - 2017-11-30 22:37 - 000000000 ____D C:\Program Files (x86)\Pokemon Showdown

2017-11-29 22:24 - 2017-11-29 22:24 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys.151201224681202

2017-11-29 22:24 - 2017-11-29 22:24 - 000045704 _____ () C:\WINDOWS\system32\Drivers\staport.sys.151201224698403

2017-11-29 22:24 - 2017-11-29 22:23 - 000183584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys

2017-11-29 22:23 - 2017-11-29 22:23 - 000365168 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2017-11-29 20:55 - 2017-11-29 22:22 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2017-11-29 20:55 - 2017-11-29 20:55 - 000193464 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2017-11-29 20:55 - 2017-11-29 20:55 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2017-11-29 20:55 - 2017-11-29 20:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2017-11-29 20:55 - 2017-11-29 20:55 - 000000000 ____D C:\ProgramData\MB2Migration

2017-11-29 20:55 - 2017-11-29 20:55 - 000000000 ____D C:\Program Files\Malwarebytes

2017-11-29 20:55 - 2017-11-01 08:54 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys

2017-11-26 01:11 - 2017-11-26 01:11 - 035333424 _____ C:\Users\Ryan\Downloads\CHSPV1.rar

2017-11-26 01:11 - 2017-11-26 01:11 - 000000000 ____D C:\Users\Ryan\Downloads\CHSPV1

2017-11-20 01:11 - 2017-11-20 01:13 - 482406249 _____ C:\Users\Ryan\Downloads\[Over-Time] Kamen Rider Build - 11 [000E94F9].mkv

2017-11-18 23:12 - 2017-11-18 23:16 - 000000000 ____D C:\Users\Ryan\Downloads\What.We.do.in.the.Shadows.2014.1080p.BluRay.x264.anomous

2017-11-18 17:18 - 2017-11-18 17:19 - 000000000 ____D C:\Users\Ryan\Downloads\Cardfight Vanguard Area 1.992

2017-11-18 17:13 - 2017-11-18 17:16 - 908430214 _____ C:\Users\Ryan\Downloads\Cardfight Vanguard Area 1.992.rar

2017-11-18 00:05 - 2017-10-27 11:06 - 000136312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe

2017-11-18 00:04 - 2017-11-09 04:43 - 000540784 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2017-11-15 22:22 - 2017-11-15 22:22 - 000000000 ____D C:\Users\Ryan\Downloads\Hunt.for.the.Wilderpeople.2016.HDRip.XviD.AC3-EVO

2017-11-15 20:49 - 2017-11-15 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2017-11-15 17:49 - 2017-11-28 17:46 - 000000000 ____D C:\Windows.old

2017-11-15 15:17 - 2017-11-15 15:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2017-11-15 15:15 - 2017-11-15 15:15 - 000000020 ___SH C:\Users\Ryan\ntuser.ini

2017-11-15 15:15 - 2017-11-15 15:15 - 000000000 ___RD C:\Users\Ryan\3D Objects

2017-11-15 15:15 - 2017-11-15 15:15 - 000000000 ___HD C:\Users\Ryan\MicrosoftEdgeBackups

2017-11-15 15:00 - 2017-11-29 22:28 - 000956922 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-11-15 15:00 - 2017-11-15 15:00 - 000000000 ____D C:\ProgramData\USOShared

2017-11-15 14:55 - 2017-11-29 22:24 - 000003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update

2017-11-15 14:55 - 2017-11-29 22:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-11-15 14:55 - 2017-11-15 15:17 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4152990390-1726422531-2817282082-1001

2017-11-15 14:55 - 2017-11-15 14:56 - 000007623 _____ C:\WINDOWS\diagwrn.xml

2017-11-15 14:55 - 2017-11-15 14:56 - 000007623 _____ C:\WINDOWS\diagerr.xml

2017-11-15 14:55 - 2017-11-15 14:55 - 000003764 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2017-11-15 14:55 - 2017-11-15 14:55 - 000003762 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore

2017-11-15 14:55 - 2017-11-15 14:55 - 000003450 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA

2017-11-15 14:55 - 2017-11-15 14:55 - 000003446 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2017-11-15 14:55 - 2017-11-15 14:55 - 000003370 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1489584812

2017-11-15 14:55 - 2017-11-15 14:55 - 000003344 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2017-11-15 14:55 - 2017-11-15 14:55 - 000003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000003120 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2017-11-15 14:55 - 2017-11-15 14:55 - 000003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000002962 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000002942 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000002852 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000002810 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-11-15 14:55 - 2017-11-15 14:55 - 000002546 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart

2017-11-15 14:55 - 2017-11-15 14:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\R@1n-KMS

2017-11-15 14:55 - 2017-11-15 14:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software

2017-11-15 14:55 - 2017-11-15 14:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple

2017-11-15 14:53 - 2017-09-29 08:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2017-11-15 14:52 - 2017-11-15 15:24 - 000000000 ____D C:\Users\Ryan\AppData\Local\Packages

2017-11-15 14:52 - 2017-11-15 15:15 - 000000000 ____D C:\Users\Ryan

2017-11-15 14:52 - 2017-11-15 14:52 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2017-11-15 14:51 - 2017-12-02 10:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2017-11-15 14:51 - 2017-11-15 14:54 - 000239944 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-11-14 18:20 - 2017-11-14 18:23 - 518993440 _____ C:\Users\Ryan\Downloads\[Over-Time] Kamen Rider Build - 07 [9399213F].mkv

2017-11-14 18:20 - 2017-11-14 18:23 - 452417508 _____ C:\Users\Ryan\Downloads\[Over-Time] Kamen Rider Build - 09 [7CDEBD4E].mkv

2017-11-14 18:20 - 2017-11-14 18:22 - 425729167 _____ C:\Users\Ryan\Downloads\[Over-Time] Kamen Rider Build - 08 [15449926].mkv

2017-11-14 18:19 - 2017-11-14 18:22 - 480165295 _____ C:\Users\Ryan\Downloads\[Over-Time] Kamen Rider Build - 10 [9B27ED45].mkv

2017-11-14 15:01 - 2017-11-29 22:24 - 000455376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 001026232 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000455384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys.151201224615604

2017-11-14 15:01 - 2017-11-29 22:23 - 000364464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000343288 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000321032 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000203976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000198968 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000148288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000110376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000084416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000057728 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys

2017-11-14 15:01 - 2017-11-29 22:23 - 000047008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys

2017-11-14 15:01 - 2017-11-15 17:49 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2017-11-14 15:01 - 2017-11-14 15:01 - 000000000 ___DL C:\ProgramData\SWCUTemp

2017-11-14 15:01 - 2017-10-26 10:13 - 001029872 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswb69878aa605a4f67.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000587168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw41bf88bfc790428f.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000363440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf0f3c0e5cd39d155.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000343288 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\asw860613b12da2bc55.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000321032 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswb2acb72c4e1ab5ba.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000201352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw5a2837ef46b294cf.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000198976 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\asw50c74759b6f91010.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000147776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw633ea4262dc20e45.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000110376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw73b7345666451c17.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000084416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswb993ca8b018bb632.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000057736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\asw60ff2435b02934a5.tmp

2017-11-14 15:01 - 2017-10-10 22:13 - 000047008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswd538d45b8236450e.tmp

2017-11-14 15:01 - 2017-09-06 12:40 - 000041832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys

2017-11-14 15:01 - 2017-07-22 09:03 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys.150073219232803

2017-11-14 15:01 - 2017-07-22 09:00 - 000360792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.150073210006206

2017-11-14 15:01 - 2017-07-03 11:10 - 000360792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.149909823203106

2017-11-14 15:01 - 2017-07-03 11:10 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys.150073210181208

2017-11-14 15:01 - 2017-03-13 18:23 - 000547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.148944740451504

2017-11-14 14:57 - 2017-11-14 15:01 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2017-11-14 14:54 - 2017-11-14 14:54 - 000000000 ____D C:\WINDOWS\containers

2017-11-14 14:53 - 2017-11-14 14:53 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 023658496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 021753344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 019339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 018914304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 017083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 008099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 003679232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002781696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 002106368 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001322496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000839928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000710920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2017-11-14 14:53 - 2017-11-14 14:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe

2017-11-14 14:53 - 2017-11-14 14:53 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys

2017-11-14 14:53 - 2017-11-14 14:53 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2017-11-14 14:53 - 2017-11-14 14:53 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2017-11-14 14:44 - 2017-11-14 14:44 - 016735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0001.dll

2017-11-14 14:43 - 2017-11-14 14:43 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2017-11-14 14:43 - 2017-11-14 14:43 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2017-11-14 14:43 - 2017-11-14 14:43 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2017-11-14 14:43 - 2017-11-14 14:43 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2017-11-14 14:43 - 2017-11-14 14:43 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2017-11-14 14:43 - 2017-11-14 14:43 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2017-11-14 14:43 - 2017-11-14 14:43 - 000000000 ____D C:\Program Files\Reference Assemblies

2017-11-14 14:43 - 2017-11-14 14:43 - 000000000 ____D C:\Program Files\MSBuild

2017-11-14 14:43 - 2017-11-14 14:43 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2017-11-14 14:43 - 2017-11-14 14:43 - 000000000 ____D C:\Program Files (x86)\MSBuild

2017-11-14 14:33 - 2017-11-14 14:33 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2017-11-14 13:44 - 2017-11-15 15:15 - 000000000 ___DC C:\WINDOWS\Panther

2017-11-13 05:26 - 2017-11-13 05:26 - 000051016 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2017-11-13 05:26 - 2017-11-13 05:26 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2017-11-13 05:26 - 2017-11-13 05:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2017-11-13 05:26 - 2017-11-13 05:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2017-11-09 04:40 - 2017-11-09 04:40 - 036248176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll

2017-11-09 04:40 - 2017-11-09 04:40 - 029279672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll

2017-11-09 04:39 - 2017-11-09 04:39 - 000989808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2017-11-09 04:39 - 2017-11-09 04:39 - 000940984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2017-11-09 04:39 - 2017-11-09 04:39 - 000054192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll

2017-11-09 04:38 - 2017-11-09 04:38 - 001997752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438813.dll

2017-11-09 04:38 - 2017-11-09 04:38 - 001682544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438813.dll

2017-11-09 04:38 - 2017-11-09 04:38 - 001108408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2017-11-09 04:38 - 2017-11-09 04:38 - 001039800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2017-11-09 04:37 - 2017-11-09 04:37 - 040246384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll

2017-11-09 04:37 - 2017-11-09 04:37 - 035165624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll

2017-11-09 04:37 - 2017-11-09 04:37 - 004210288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2017-11-09 04:37 - 2017-11-09 04:37 - 003623024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2017-11-09 04:30 - 2017-11-09 04:30 - 023474480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll

2017-11-09 04:30 - 2017-11-09 04:30 - 019212720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll

2017-11-09 04:30 - 2017-11-09 04:30 - 013379352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll

2017-11-09 04:30 - 2017-11-09 04:30 - 010986768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll

2017-11-09 04:26 - 2017-11-09 04:26 - 001154296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll

2017-11-09 04:26 - 2017-11-09 04:26 - 000902312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll

2017-11-09 04:25 - 2017-11-09 04:25 - 013994136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2017-11-09 04:25 - 2017-11-09 04:25 - 011891200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2017-11-09 03:57 - 2017-11-09 03:57 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json

2017-11-09 03:57 - 2017-11-09 03:57 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json

2017-11-09 01:11 - 2017-11-09 01:14 - 365151178 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 04 [720p][Multiple Subtitle].mkv

2017-11-09 01:11 - 2017-11-09 01:13 - 368481884 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 05 [720p][Multiple Subtitle].mkv

2017-11-09 01:11 - 2017-11-09 01:12 - 394089498 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 06 [720p][Multiple Subtitle].mkv

2017-11-09 00:40 - 2017-11-09 00:40 - 014893393 _____ C:\Users\Ryan\Downloads\- Rapture.hikarinoakariost.inf.zip

2017-11-09 00:34 - 2017-11-09 00:38 - 382590361 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 03 [720p][Multiple Subtitle].mkv

2017-11-09 00:34 - 2017-11-09 00:37 - 372747350 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 02 [720p][Multiple Subtitle].mkv

2017-11-09 00:07 - 2017-11-09 00:12 - 368612519 _____ C:\Users\Ryan\Downloads\[Erai-raws] Juuni Taisen - 01 [720p][Multiple Subtitle].mkv

2017-11-07 22:33 - 2017-11-07 22:33 - 000000000 ____D C:\Users\Ryan\Downloads\MADEinaby.hikarinoakariost.info

2017-11-07 13:07 - 2017-11-07 13:08 - 278964031 _____ C:\Users\Ryan\Downloads\MADEinaby.hikarinoakariost.info.zip

2017-11-06 23:33 - 2017-11-06 23:34 - 000000000 ____D C:\Users\Ryan\Downloads\[HorribleSubs] Made in Abyss [1080p]

2017-11-04 16:26 - 2017-11-04 16:26 - 000000000 ____D C:\Users\Public\Documents\Steam

2017-11-04 16:24 - 2017-11-15 17:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hack G U Last Recode

2017-11-04 16:24 - 2017-11-04 16:24 - 000000640 _____ C:\Users\Ryan\Desktop\hack G U Last Recode.lnk

2017-11-04 16:09 - 2017-11-04 16:09 - 000000000 ____D C:\Users\Ryan\AppData\Local\Disc_Soft_Ltd

2017-11-04 15:55 - 2017-11-04 15:55 - 000047672 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys

2017-11-04 15:55 - 2017-11-04 15:55 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images

2017-11-04 15:54 - 2017-11-04 15:55 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\DAEMON Tools Lite

2017-11-04 15:54 - 2017-11-04 15:54 - 000030264 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys

2017-11-04 15:54 - 2017-11-04 15:54 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-04 13:25 - 2016-11-27 01:39 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\Spotify

2017-12-04 13:24 - 2017-07-23 23:45 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\uTorrent

2017-12-04 13:24 - 2016-11-27 16:57 - 000000000 __RDL C:\Users\Ryan\OneDrive

2017-12-04 13:24 - 2016-11-27 01:38 - 000000000 ____D C:\Program Files (x86)\Steam

2017-12-04 13:23 - 2016-11-27 01:18 - 000000000 ____D C:\ProgramData\NVIDIA

2017-12-04 11:05 - 2016-11-27 01:44 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2017-12-04 11:02 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization

2017-12-02 20:32 - 2017-09-29 08:46 - 000000000 ___HD C:\Program Files\WindowsApps

2017-12-02 20:32 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\AppReadiness

2017-11-30 22:38 - 2016-11-27 10:02 - 000000000 ____D C:\Users\Ryan\Documents\My Games

2017-11-29 22:22 - 2017-09-29 03:45 - 001572864 _____ C:\WINDOWS\system32\config\BBI

2017-11-29 22:22 - 2017-01-06 16:46 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2017-11-29 22:22 - 2016-11-27 01:44 - 000046008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2017-11-29 20:55 - 2016-11-27 01:44 - 000000000 ____D C:\ProgramData\Malwarebytes

2017-11-29 20:55 - 2016-11-27 01:44 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2017-11-26 09:11 - 2017-09-29 08:44 - 000000000 ____D C:\WINDOWS\INF

2017-11-25 16:07 - 2016-11-28 01:06 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\vlc

2017-11-18 19:19 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\rescache

2017-11-18 00:05 - 2017-07-21 23:40 - 000000000 ____D C:\Program Files (x86)\VulkanRT

2017-11-18 00:05 - 2017-05-22 23:20 - 000000000 ____D C:\ProgramData\NVIDIA Corporation

2017-11-18 00:04 - 2017-05-22 23:20 - 000000000 ____D C:\Program Files\NVIDIA Corporation

2017-11-18 00:04 - 2017-05-22 23:20 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2017-11-16 14:54 - 2017-09-29 08:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2017-11-16 11:25 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\appcompat

2017-11-15 20:49 - 2016-11-27 01:39 - 000000000 ____D C:\Program Files (x86)\Dropbox

2017-11-15 17:50 - 2017-09-29 08:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2017-11-15 17:49 - 2017-09-29 08:49 - 000000000 ____D C:\WINDOWS\Setup

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\spool

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\NDF

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\Macromed

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Help

2017-11-15 17:49 - 2017-09-29 08:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2017-11-15 17:49 - 2017-09-20 14:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2017-11-15 17:49 - 2017-09-07 02:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico

2017-11-15 17:49 - 2017-09-06 15:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder

2017-11-15 17:49 - 2017-07-25 13:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cockatrice

2017-11-15 17:49 - 2017-07-25 03:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends

2017-11-15 17:49 - 2017-07-25 03:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2017-11-15 17:49 - 2017-07-22 08:47 - 000000000 ____D C:\WINDOWS\system32\appmgmt

2017-11-15 17:49 - 2017-05-22 23:20 - 000000000 ____D C:\ProgramData\Creative

2017-11-15 17:49 - 2017-05-10 12:42 - 000000000 ____D C:\Program Files\UNP

2017-11-15 17:49 - 2017-03-18 16:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2017-11-15 17:49 - 2017-03-15 13:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-11-15 17:49 - 2016-12-06 23:41 - 000000000 ____D C:\Program Files\Common Files\logishrd

2017-11-15 17:49 - 2016-11-29 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch

2017-11-15 17:49 - 2016-11-29 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2017-11-15 17:49 - 2016-11-28 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative

2017-11-15 17:49 - 2016-11-27 09:23 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2017-11-15 17:49 - 2016-11-27 01:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2017-11-15 17:49 - 2016-11-27 01:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2017-11-15 17:49 - 2016-11-27 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe

2017-11-15 17:49 - 2016-11-27 01:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2017-11-15 17:49 - 2016-11-27 01:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2017-11-15 17:49 - 2016-11-27 01:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack 64bit

2017-11-15 17:49 - 2016-11-27 01:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2017-11-15 17:49 - 2016-11-27 01:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2017-11-15 17:49 - 2016-11-27 01:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-11-15 17:49 - 2016-11-27 00:59 - 000000000 ____D C:\Program Files\Intel

2017-11-15 15:23 - 2016-11-27 09:18 - 000000000 ____D C:\Users\Ryan\AppData\Local\ElevatedDiagnostics

2017-11-15 15:22 - 2016-11-27 09:22 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2017-11-15 15:17 - 2016-11-29 22:31 - 000000000 ____D C:\Users\Ryan\AppData\Local\ConnectedDevicesPlatform

2017-11-15 15:17 - 2016-11-27 16:57 - 000002364 _____ C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-11-15 15:15 - 2016-11-27 16:55 - 000000000 __RHD C:\Users\Public\AccountPictures

2017-11-15 15:15 - 2016-11-27 16:55 - 000000000 ____D C:\Users\Ryan\AppData\Local\TileDataLayer

2017-11-15 14:58 - 2016-11-27 09:22 - 000000000 ____D C:\WINDOWS\system32\DAX2

2017-11-15 14:57 - 2017-09-29 08:46 - 000000000 ____D C:\ProgramData\USOPrivate

2017-11-15 14:55 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Registration

2017-11-15 14:55 - 2016-11-29 21:00 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat

2017-11-15 14:55 - 2016-11-27 01:39 - 000000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job

2017-11-15 14:55 - 2016-11-27 01:39 - 000000932 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job

2017-11-15 14:55 - 2016-11-27 01:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2017-11-15 14:53 - 2016-11-27 09:31 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2017-11-15 14:53 - 2016-11-27 01:38 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2017-11-15 14:52 - 2017-09-29 08:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2017-11-15 14:52 - 2016-12-06 23:41 - 000000000 ____D C:\Users\Ryan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc

2017-11-15 14:51 - 2017-09-29 03:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep

2017-11-15 14:51 - 2017-05-22 23:20 - 000000159 ___RH C:\WINDOWS\ctfile.rfc

2017-11-14 15:05 - 2017-10-11 10:22 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe

2017-11-14 15:05 - 2017-09-29 08:46 - 000000000 __RHD C:\Users\Public\Libraries

2017-11-14 15:05 - 2016-11-27 06:51 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-11-14 15:01 - 2016-11-27 23:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2017-11-14 15:01 - 2016-11-27 09:23 - 000000000 ____D C:\WINDOWS\system32\BestPractices

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\zu-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\yo-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\xh-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\wo-SN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\vi-VN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ur-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ug-CN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\tt-RU

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\tn-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\tk-TM

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ti-ET

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\te-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ta-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\sw-KE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\sq-AL

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\si-LK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\rw-RW

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\quz-PE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\prs-AF

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\pa-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\or-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\nso-ZA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\nn-NO

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ne-NP

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\mt-MT

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\mr-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\mn-MN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ml-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\mk-MK

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\mi-NZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\lo-LA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\lb-LU

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ky-KG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\kok-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\kn-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\km-KH

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\kk-KZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ka-GE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\is-IS

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ig-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\id-ID

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\hy-AM

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\gu-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ga-IE

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\fil-PH

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\fa-IR

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\cy-GB

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\bn-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\bn-BD

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\be-BY

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\as-IN

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\am-ET

2017-11-14 14:54 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\system32\af-ZA

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\system32\F12

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\TextInput

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-11-14 14:54 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\appraiser

2017-11-14 14:54 - 2017-09-29 03:45 - 000000000 ____D C:\WINDOWS\system32\Dism

2017-11-14 14:42 - 2017-09-29 09:41 - 000000000 ____D C:\WINDOWS\OCR

2017-11-14 12:12 - 2016-11-27 01:39 - 000000000 ____D C:\ProgramData\Skype

2017-11-09 04:43 - 2017-09-29 09:42 - 000446392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll

2017-11-09 04:38 - 2017-10-09 11:14 - 001624168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll

2017-11-09 04:38 - 2017-10-09 11:14 - 000233904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

2017-11-09 04:25 - 2017-10-09 11:06 - 004533184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2017-11-09 04:25 - 2017-10-09 11:06 - 003859848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2017-11-09 03:57 - 2017-10-09 10:47 - 000048442 _____ C:\WINDOWS\system32\nvinfo.pb

2017-11-07 22:34 - 2016-11-29 16:46 - 000000000 ____D C:\Program Files (x86)\Battle.net

2017-11-07 22:33 - 2016-11-29 16:46 - 000000000 ____D C:\Users\Ryan\AppData\Local\Battle.net

2017-11-07 00:09 - 2016-11-27 01:39 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk

==================== Files in the root of some directories =======

2017-07-24 10:47 - 2017-07-24 10:47 - 000000876 _____ () C:\Users\Ryan\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-25 21:34

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-11-2017

Ran by Ryan (04-12-2017 13:27:30)

Running from C:\Users\Ryan\Downloads

Windows 10 Pro Version 1709 16299.64 (X64) (2017-11-15 19:57:09)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-4152990390-1726422531-2817282082-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4152990390-1726422531-2817282082-503 - Limited - Disabled)

Guest (S-1-5-21-4152990390-1726422531-2817282082-501 - Limited - Disabled)

Ryan (S-1-5-21-4152990390-1726422531-2817282082-1001 - Administrator - Enabled) => C:\Users\Ryan

WDAGUtilityAccount (S-1-5-21-4152990390-1726422531-2817282082-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\uTorrent) (Version: 3.5.0.44294 - BitTorrent Inc.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)

Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)

Apple Application Support (32-bit) (HKLM-x32\...\{3D1290E6-1F77-46D5-A715-A56679C8D4E3}) (Version: 6.0.2 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{D0E45DEC-F4B9-4370-A9DF-66837789C2EF}) (Version: 6.0.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E3C4B99B-BE71-4C27-8E3C-4FAE3C46E1D5}) (Version: 11.0.0.30 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)

Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)

Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)

Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Cockatrice (HKLM-x32\...\Cockatrice) (Version: - )

Combined Community Codec Pack 64bit 2015-10-18 (HKLM\...\Combined Community Codec Pack 64bit_is1) (Version: 2015.10.19.0 - CCCP Project)

Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)

Discord (HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)

Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden

GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)

Google Chrome (HKLM\...\{B7C7346E-405F-3494-8C7F-7CE63551D9A2}) (Version: 56.0.2924.87 - Google, Inc.)

Google Drive (HKLM-x32\...\{AC117AF9-316B-4E1D-959E-F0EB85B0DC5F}) (Version: 2.34.7100.0000 - Google, Inc.)

Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

hack G U Last Recode (HKLM-x32\...\hack G U Last Recode_is1) (Version: - )

Intel® Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel® Corporation) Hidden

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)

Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)

iTunes (HKLM\...\{94E81D4F-FB5A-4B29-B385-33896CC9BE7E}) (Version: 12.7.0.166 - Apple Inc.)

Java 8 Update 141 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180141F0}) (Version: 8.0.1410.15 - Oracle Corporation)

Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation)

KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )

League of Legends (HKLM-x32\...\{E80C09B5-A296-47E9-BD4B-BCCF2FDCA13E}) (Version: 4.1.2 - Riot Games) Hidden

League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)

Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.12 - Magical Jelly Bean)

Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)

Microsoft OneDrive (HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 RC Redistributable (x64) - 14.0.22816 (HKLM-x32\...\{e2495eb6-cca8-47aa-91ea-3410ca44d7b7}) (Version: 14.0.22816.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.1.0.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)

NVIDIA Graphics Driver 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.1.0.52 - NVIDIA Corporation) Hidden

NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 1.2.0.0 - NVIDIA Corporation) Hidden

Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)

Pokemon Showdown (HKLM-x32\...\Pokemon Showdown) (Version: - "Pokemon Showdown")

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7910 - Realtek Semiconductor Corp.)

Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)

SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden

SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0330 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.1.0.52 - NVIDIA Corporation) Hidden

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)

Sound Blaster Audigy Fx (HKLM-x32\...\{D81021F7-48D0-44B2-9B0E-95EF6DBE9E79}) (Version: 1.00.07 - Creative Technology Limited)

Sound Blaster Audigy Fx Extras (HKLM-x32\...\{52272D09-08E0-4A57-BC14-BC09F5D7AE26}) (Version: 1.0 - Creative Technology Limited)

Spotify (HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\...\Spotify) (Version: 1.0.59.395.ge6ca9946 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)

univcredist (HKLM-x32\...\{2d9d4a60-1d22-46c1-84bb-1de04b4715d7}) (Version: 1.0.0.0 - Motiga)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)

Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-10] (AVAST Software)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-10] (AVAST Software)

ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-10] (AVAST Software)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-10-09] (Google)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-10] (AVAST Software)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-10-09] (Google)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> No File

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-10] (AVAST Software)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0E7B44A6-CFCB-40B4-A45A-BB3F0FA9C9D1} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-16] (NVIDIA Corporation)

Task: {2CB9E656-724A-4FA5-81F2-62BD2A62778F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-16] (NVIDIA Corporation)

Task: {31932D27-A113-4B6B-B098-F91E7644DD37} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-16] (NVIDIA Corporation)

Task: {35CD83EF-E5F8-4A0D-BC88-25E586AA0F34} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-27] (Dropbox, Inc.)

Task: {3890B827-65CD-4983-B233-50935360434C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-14] (Adobe Systems Incorporated)

Task: {3F026E89-62A5-4780-A119-CD021EF6C874} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-16] (NVIDIA Corporation)

Task: {4473BB98-489A-4794-9713-CEC27BD85FB0} - System32\Tasks\R@1n-KMS\Windows64Professional => wmic [Argument = path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate]

Task: {48F4B373-F496-4FB5-99B6-6D4961883F4D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-16] (NVIDIA Corporation)

Task: {4A9C0757-9E4A-4636-8A99-A940C06553F0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)

Task: {5E0AF2CE-8B71-458A-9B6E-C286DDF4754E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-27] (Google Inc.)

Task: {693626E7-3BE9-4CD5-AB51-D056737977C4} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2016-01-11] (@ByELDI)

Task: {71E65D1B-9D60-461F-AE43-4AA5497230C8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-27] (Google Inc.)

Task: {78908D36-AAD2-42C9-8437-19883F1C1AC5} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

Task: {C9A9540C-4E4B-46DE-B14B-DF1EF8619E1C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

Task: {DAD49C87-F8B0-438D-A5E3-B15AF2102011} - System32\Tasks\SafeZone scheduled Autoupdate 1489584812 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)

Task: {F6827559-88C7-4081-B50E-EA05871EFF06} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-27] (Dropbox, Inc.)

Task: {F8FF006E-20E4-4D16-9A43-22267EF14D6E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)

Task: {FA611137-58C5-4B1C-A392-7A6F9662EE44} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-16] (NVIDIA Corporation)

Task: {FE9EB407-D825-4A42-9135-FB5FB2BA3DC6} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-29] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-10-05 21:17 - 2016-10-05 21:17 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2017-09-01 01:49 - 2017-09-01 01:49 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-11-27 01:24 - 2016-11-16 21:06 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-11-27 01:24 - 2016-11-16 21:06 - 004489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll

2016-11-27 01:24 - 2016-11-16 21:06 - 000418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll

2017-11-29 20:55 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2017-11-29 20:55 - 2017-11-01 08:54 - 002358736 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2017-09-16 23:00 - 2017-09-16 23:00 - 000016896 _____ () C:\Program Files\KMSpico\WinDivert.dll

2017-09-29 08:41 - 2017-09-29 08:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-09-29 08:42 - 2017-09-29 09:42 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2017-09-29 08:42 - 2017-09-29 09:42 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-11-29 20:24 - 2017-11-29 20:24 - 000087040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-11-29 20:24 - 2017-11-29 20:24 - 000202752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-11-29 20:24 - 2017-11-29 20:24 - 025600000 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2017-11-29 20:24 - 2017-11-29 20:24 - 002546176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\skypert.dll

2017-11-29 20:24 - 2017-11-29 20:24 - 000672256 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll

2017-09-11 13:45 - 2017-09-11 13:45 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll

2017-09-11 13:45 - 2017-09-11 13:45 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll

2017-09-26 15:04 - 2017-09-21 02:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll

2017-09-26 15:04 - 2017-09-21 02:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll

2016-11-27 01:24 - 2016-11-16 21:06 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll

2017-07-03 11:10 - 2017-07-03 11:10 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll

2017-10-10 22:13 - 2017-10-10 22:13 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll

2017-10-26 10:13 - 2017-10-26 10:13 - 000703336 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll

2016-11-27 09:27 - 2017-09-09 14:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2016-11-27 09:27 - 2016-08-31 20:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll

2016-11-27 09:27 - 2017-10-30 22:22 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll

2016-11-27 09:27 - 2016-08-31 20:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2016-11-27 09:27 - 2016-08-31 20:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2016-11-27 09:27 - 2016-01-27 02:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2016-11-27 09:27 - 2016-01-27 02:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2016-11-27 09:27 - 2016-01-27 02:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2016-11-27 09:27 - 2016-01-27 02:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2016-11-27 09:27 - 2016-01-27 02:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2016-11-27 09:27 - 2017-10-30 22:22 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2016-11-27 09:27 - 2016-07-04 17:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

2016-12-13 13:17 - 2017-08-16 17:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll

2017-06-09 10:04 - 2017-09-06 21:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll

2016-11-27 09:27 - 2015-09-24 18:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

2017-08-09 18:19 - 2017-08-08 14:13 - 001893880 _____ () C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\ffmpeg.dll

2017-08-09 18:20 - 2017-08-09 18:20 - 001577976 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node

2017-08-09 18:19 - 2017-08-08 14:13 - 001938424 _____ () C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\libglesv2.dll

2017-08-09 18:19 - 2017-08-08 14:13 - 000095736 _____ () C:\Users\Ryan\AppData\Local\Discord\app-0.0.298\libegl.dll

2017-08-09 18:20 - 2017-10-05 22:26 - 009722360 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node

2017-08-09 18:20 - 2017-11-22 14:38 - 001494520 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node

2017-12-04 13:24 - 2017-12-04 13:24 - 000148992 _____ () \\?\C:\Users\Ryan\AppData\Local\Temp\D8A0.tmp.node

2017-08-09 18:20 - 2017-08-09 18:20 - 002658296 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node

2017-08-09 18:20 - 2017-11-27 22:09 - 002739192 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node

2017-11-23 00:46 - 2017-11-23 00:46 - 001505272 _____ () \\?\C:\Users\Ryan\AppData\Roaming\discord\0.0.298\modules\discord_game_utils\discord_game_utils.node

2017-11-15 20:49 - 2017-11-13 05:26 - 000725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll

2017-11-15 20:49 - 2017-11-13 05:26 - 002075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll

2016-11-27 01:40 - 2017-11-13 05:26 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd

2016-11-27 01:40 - 2017-11-13 05:28 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 001856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd

2017-11-15 20:49 - 2017-11-13 05:26 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd

2017-11-15 20:49 - 2017-11-13 05:26 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll

2016-11-27 01:40 - 2017-11-13 05:26 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd

2016-11-27 01:40 - 2017-11-13 05:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd

2017-11-15 20:49 - 2017-11-13 05:26 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll

2017-11-15 20:49 - 2017-11-13 05:26 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd

2016-11-27 01:40 - 2017-11-13 05:28 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd

2016-11-27 01:40 - 2017-11-13 05:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd

2017-09-21 21:43 - 2017-11-13 05:26 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd

2017-09-08 23:44 - 2017-11-13 05:29 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd

2017-05-17 21:59 - 2017-11-13 05:29 - 000066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd

2016-11-27 01:40 - 2017-11-13 05:29 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd

2017-02-27 23:09 - 2017-11-13 05:29 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd

2017-01-23 23:59 - 2017-11-13 05:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd

2016-11-27 01:40 - 2017-11-13 05:29 - 000100688 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd

2017-01-23 23:59 - 2017-11-13 05:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd

2017-01-23 23:59 - 2017-11-13 05:29 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd

2017-01-23 23:59 - 2017-11-13 05:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd

2016-11-27 01:40 - 2017-11-13 05:26 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd

2016-11-27 01:40 - 2017-11-13 05:29 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd

2017-11-15 20:49 - 2017-11-13 05:26 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll

2017-11-15 20:49 - 2017-11-13 05:28 - 000032600 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd

2017-11-15 20:49 - 2017-11-13 05:26 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll

2017-11-15 20:49 - 2017-11-13 05:28 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL

2016-11-27 01:40 - 2017-11-13 05:29 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd

2017-11-15 20:49 - 2017-11-13 05:28 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL

2017-11-15 20:49 - 2017-11-13 05:28 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll

2016-11-27 01:40 - 2017-11-13 05:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 02:24 - 2015-10-30 02:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4152990390-1726422531-2817282082-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ryan\Desktop\thumb-1920-837215.png

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4159E225-4A7C-4118-AFC8-9CD5B8CBF9AC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{7748BEBE-0DE2-479B-A990-7496E339378B}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{0231EE11-8E71-4E68-AFA6-97534AA7930A}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe

FirewallRules: [{6A89ED9E-FD7C-427F-8570-ED9742DFDB4D}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe

FirewallRules: [UDP Query User{17AFB0AC-5517-4B76-8831-E0BA29A46F25}C:\program files (x86)\gigantic_en\binaries\win64\rxgame-win64-shipping.exe] => (Allow) C:\program files (x86)\gigantic_en\binaries\win64\rxgame-win64-shipping.exe

FirewallRules: [TCP Query User{91205CEB-5238-4FC7-959B-62DC549F3A8A}C:\program files (x86)\gigantic_en\binaries\win64\rxgame-win64-shipping.exe] => (Allow) C:\program files (x86)\gigantic_en\binaries\win64\rxgame-win64-shipping.exe

FirewallRules: [UDP Query User{66D64739-EEE3-4DF8-9DD5-BCA2BAD3831C}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe

FirewallRules: [TCP Query User{ED5EE1DA-6463-4A85-8F58-76575D7A6356}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe

FirewallRules: [{6BC08892-13A9-40EE-9559-A1ECA677019C}] => (Allow) C:\Users\Ryan\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{C06000F2-B554-44D2-BC39-65BDCF4DB80F}] => (Allow) C:\Users\Ryan\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{BA7569AC-0D11-4CA3-93B9-1D3B253D524A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY IX\FF9_Launcher.exe

FirewallRules: [{BBB7E4E4-9D71-4E52-A153-5F7981D5C97C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY IX\FF9_Launcher.exe

FirewallRules: [{FD4DEA11-9964-4C68-B591-FC8825349DEF}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe

FirewallRules: [UDP Query User{452C4B1E-12D9-4AB4-87ED-F82885A1E0A9}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [TCP Query User{62B6DEB0-25AB-4CAA-9303-68810EA690F7}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe

FirewallRules: [{C3FBC512-AEDD-422D-A69D-617E15A57FF7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{D69972C2-20B6-4825-BEAA-75DEB0151658}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe

FirewallRules: [{BE3F7129-CFFD-4C3C-9407-130589A7580B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe

FirewallRules: [{52249E7A-4F04-4DAF-9007-F32328E348A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe

FirewallRules: [{3B523BC5-4418-48CC-AA8C-68D651A123BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Transistor\x64\Transistor.exe

FirewallRules: [{39F40845-D990-4DE7-98BF-BB780035665D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Transistor\x64\Transistor.exe

FirewallRules: [{E48B77BD-4D4C-4A18-A1D7-BAD26F52EB2F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{DE937A78-F06E-4DDD-9AB7-4B7B594B1CA7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{27C2B7A1-37AD-47D7-9B65-7657E8A80A76}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{32854BCB-F0D0-4088-A382-A72986EC608B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{A50A4090-36E9-4BED-83D6-EB3091ACAEBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe

FirewallRules: [{69A974D5-4935-43D9-AD81-4A3434FA699A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe

FirewallRules: [{BDE15A7A-B605-4351-8D8A-7E316E5FECAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe

FirewallRules: [{37311987-1C13-463C-90FC-40DADF95F814}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe

FirewallRules: [{45A1DB7C-104B-47CD-93FE-91E8C7BE38FF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{961BFC75-87EA-4FF7-8BAD-2724A205B89A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{99AE2BB2-9B20-4973-BF27-9993F2FCB27F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{41840A05-EE4D-4F1A-8939-90B504BC2FB4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{228FB34A-DC62-4FDC-9526-55D6A6F92D98}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{FD9CCA4E-061A-4D5E-AFC3-B527483093B4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{C9D358A5-7008-41FB-AC3B-12E08DC36441}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{3341814A-3EB4-430B-9DB7-730920FAD542}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{494E1F83-B3C1-460B-A843-13A6CCC510FB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{44CFFCE3-54D7-4A58-B36E-9248E4F45355}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{F9EA993E-3BF9-45D9-BCE8-2D247E4B9C01}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{968C7000-024E-4A90-95A3-78F9FE289CF4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{C4482FE4-77CF-423A-B1A1-C646C6A76AC6}] => (Allow) C:\Windows\[email protected]

FirewallRules: [{B34AC5E9-4941-4D30-81E4-E9C0CADF52B5}] => (Allow) C:\Windows\[email protected]

FirewallRules: [{907BC2BE-832C-4C30-823B-C4AB0C59CED1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{9EC6F88A-36C5-4EB4-AD3A-67438929E8C2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{689D38B5-BEA4-4C93-A9BB-601A30CC3920}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe

FirewallRules: [{61D40302-DA66-47F0-B1B8-4B4A81C00A27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe

FirewallRules: [TCP Query User{7A809C61-4F2A-4506-8B7A-8B388F010154}C:\users\ryan\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ryan\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{F64D5FBE-F821-45F5-9CD5-9B7594138C6E}C:\users\ryan\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ryan\appdata\roaming\spotify\spotify.exe

FirewallRules: [{1772A26A-9954-4FE4-84FE-88C6675E4B5F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{7C09EE3D-D953-4746-9E52-C68830E82084}] => (Allow) LPort=1688

FirewallRules: [{02269E7C-962C-48C2-AD3B-0C8CB77BF9F9}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe

FirewallRules: [{A02C451B-AB12-4773-809A-CE5D7DB175E6}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe

FirewallRules: [{96FA5016-630D-40CA-8089-F219372906CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\D4 Dark Dreams Don't Die\D4.exe

FirewallRules: [{D9B1644A-F099-4FA9-8525-410B27A24296}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\D4 Dark Dreams Don't Die\D4.exe

FirewallRules: [{3567E469-0968-42A7-B4E5-A6D1833EADEB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{B785C222-006E-487F-9D6E-4D4C9EFA5B27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

==================== Restore Points =========================

25-11-2017 21:35:01 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/29/2017 10:22:56 PM) (Source: KMS-QAD) (EventID: 1001) (User: )

Description: Event-ID 1001

Error: (11/18/2017 05:46:32 PM) (Source: KMS-QAD) (EventID: 1001) (User: )

Description: Event-ID 1001

Error: (11/15/2017 03:24:11 PM) (Source: KMS-QAD) (EventID: 1001) (User: )

Description: Event-ID 1001

Error: (11/15/2017 02:55:24 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )

Description: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A

Error: (11/15/2017 02:54:36 PM) (Source: ESENT) (EventID: 455) (User: )

Description: mighost (5036,R,0) TILEREPOSITORYS-1-0-0: Error -1023 (0xfffffc01) occurred while opening logfile C:\Users\Default\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (11/15/2017 02:54:27 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )

Description: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A

Error: (11/15/2017 02:54:27 PM) (Source: MSDTC 2) (EventID: 4104) (User: )

Description: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A

Error: (11/15/2017 02:54:27 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )

Description: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A

Error: (11/15/2017 02:54:13 PM) (Source: KMS-QAD) (EventID: 1001) (User: )

Description: Event-ID 1001

System errors:

=============

Error: (12/04/2017 01:24:29 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-CLM2PDV)