Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.08.2018 Ran by SYSTEM on MININT-GEUPMHV (26-08-2018 17:22:12) Running from E:\ Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 Boot Mode: Recovery Default: ControlSet001 [b]ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.[/b] Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor) HKLM\...\Run: [IntelliType Pro] => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1464944 2012-11-02] (Microsoft Corporation) HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2076272 2012-11-02] (Microsoft Corporation) HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [662016 2009-08-12] (Sonix) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-07-02] (AVAST Software) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-04-07] (Apple Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation) HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [662016 2009-08-12] (Sonix) HKLM-x32\...\Run: [tsnp2uvc] => C:\Program Files (x86)\Common Files\SNP2UVC\tsnp2uvc.exe [322560 2011-09-07] (Sonix Technology Co., Ltd.) HKLM-x32\...\Run: [ACROX] => C:\Program Files (x86)\Gaming Mouse driver\Hid.exe [1755136 2015-05-28] (Acrox) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-23] (Autodesk Inc.) HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [146800 2018-05-17] (Check Point Software Technologies Ltd.) HKLM-x32\...\Run: [ZaAntiRansomware] => C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe [4305776 2018-05-30] (Check Point Software Technologies Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-06] (Oracle Corporation) HKU\Aleph\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [8899504 2018-08-16] (SUPERAntiSpyware) HKU\Aleph\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18385368 2018-06-24] (Piriform Ltd) HKU\Aleph\...\Run: [Dropbox Update] => C:\Users\Aleph\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) HKU\Aleph\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\Aleph\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [9942704 2018-06-27] (Windscribe Limited) HKU\Aleph\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation) IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\AdAppMgr.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\ahc.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\bridge.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\extendscript toolkit.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\galaxyclient.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\golive.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\itunes.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\originuninstall.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\softwareupdate.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\AVAST Software\Avast Cleanup\autoreactivator.exe" Startup: C:\Users\Aleph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-08-08] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Aleph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2018-08-15] ShortcutTarget: Dropbox.lnk -> (No File) BootExecute: autocheck autochk * sdnclean64.exe ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-02-09] (SUPERAntiSpyware.com) S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-23] (Autodesk Inc.) S4 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-19] (Adobe Systems) S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-03-29] (Apple Inc.) S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7780400 2018-07-02] (AVAST Software) S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-27] (AVAST Software) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-07-02] (AVAST Software) S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-27] (AVAST Software) S2 CleanupPSvc; C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe [8730648 2018-07-26] (AVAST Software) S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8522928 2018-06-30] (Microsoft Corporation) S2 CPEFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [2498296 2018-05-30] (Check Point Software Technologies Ltd.) S2 CpSbaCipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [35064 2018-03-19] () S2 CpSbaUpdater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [35064 2018-03-19] () S2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-07-10] (Digital Wave Ltd.) S4 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [686664 2018-07-12] (GOG.com) S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8942664 2018-07-12] (GOG.com) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3981360 2015-12-16] (INCA Internet Co., Ltd.) S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-04-24] (Electronic Arts) S2 RemediationService; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [17656 2018-03-22] (Check Point Software Technologies Ltd.) S2 TESvc; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [196344 2018-04-23] (Check Point Software Technologies Ltd.) S2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4292984 2018-05-17] (Check Point Software Technologies Ltd.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation) S2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [490672 2018-06-27] (Windscribe Limited) S2 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [56688 2018-04-16] (Check Point Software Technologies Ltd.) S2 ZAARUpdateService; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe [45936 2018-05-30] () S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2018-05-15] (Check Point Software Technologies, Ltd.) S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [197160 2018-07-02] (AVAST Software) S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [0 2018-07-02] () <==== ATTENTION (zero byte File/Folder) S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [0 2018-07-02] () <==== ATTENTION (zero byte File/Folder) S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-07-02] (AVAST Software) S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59592 2018-07-02] (AVAST Software) S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [239680 2018-07-02] (AVAST Software) S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [0 2018-07-02] () <==== ATTENTION (zero byte File/Folder) S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159640 2018-07-02] (AVAST Software) S1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111872 2018-07-02] (AVAST Software) S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [0 2018-07-02] () <==== ATTENTION (zero byte File/Folder) S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027728 2018-07-02] (AVAST Software) S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467064 2018-07-24] (AVAST Software) S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [211160 2018-07-02] (AVAST Software) S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381584 2018-07-02] (AVAST Software) S2 cpbak; C:\Windows\System32\DRIVERS\cpbak.sys [61592 2018-04-10] (Check Point Software Technologies Ltd.) S1 CPEPMon; C:\Windows\System32\DRIVERS\CPEPMon.sys [68280 2017-11-29] (Check Point Software Technologies Ltd.) S1 epnetflt; C:\Windows\system32\drivers\epnetflt.sys [117400 2017-12-10] (Check Point Software Technologies) S1 epregflt; C:\Windows\system32\drivers\epregflt.sys [101552 2017-10-23] (Check Point Software Technologies) S2 ISWKL; C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\Bin\ISWKL.sys [57024 2016-12-08] (Check Point Software Technologies Ltd.) S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3567232 2011-09-09] () S3 tapwindscribe0901; C:\Windows\System32\DRIVERS\tapwindscribe0901.sys [45560 2017-09-13] (The OpenVPN Project) S1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [461240 2018-02-18] (Check Point Software Technologies Ltd.) S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-15] (MBB) S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X] S3 iswSvc; no ImagePath S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-08-26 17:22 - 2018-08-26 17:22 - 000000000 ____D C:\FRST 2018-08-20 01:05 - 2018-08-20 01:05 - 029456176 __RSH C:\$UGM 2018-08-20 01:05 - 2018-08-07 03:16 - 158859264 _____ C:\Windows\System32\config\SOFTWARE.TPBAK 2018-08-20 01:05 - 2018-08-07 03:16 - 023068672 _____ C:\Windows\System32\config\SYSTEM.TPBAK 2018-08-20 01:05 - 2018-08-07 03:16 - 000262144 _____ C:\Windows\System32\config\SECURITY.TPBAK 2018-08-20 01:05 - 2018-08-07 03:16 - 000262144 _____ C:\Windows\System32\config\SAM.TPBAK 2018-08-18 17:25 - 2018-08-18 17:25 - 000016384 _____ C:\bcdbackup 2018-08-18 17:20 - 2018-08-18 17:20 - 000016384 _____ C:\BCD_Backup 2018-08-18 12:03 - 2018-08-18 12:03 - 000000000 ____D C:\Temp 2018-08-18 09:21 - 2018-08-18 09:21 - 000003544 ____N C:\bootsqm.dat 2018-08-18 09:16 - 2018-08-18 09:16 - 000000000 __SHD C:\found.000 2018-08-18 08:45 - 2018-08-18 08:45 - 000001096 _____ C:\Windows\cpepmon.mlf 2018-08-18 08:44 - 2018-08-18 08:44 - 000000000 ___SD C:\Users\Public\Documents\CPProtection_Directory_Do NotDelete 2018-08-18 08:12 - 2018-08-18 08:12 - 000001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2018-08-18 08:09 - 2018-07-02 06:40 - 000378072 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe 2018-08-16 17:07 - 2018-08-16 17:07 - 000117076 _____ C:\Users\Aleph\Documents\aleph-build-47.aup 2018-08-16 17:07 - 2018-08-16 17:07 - 000000000 ____D C:\Users\Aleph\Documents\aleph-build-47_data 2018-08-09 17:50 - 2018-08-09 17:50 - 000174881 _____ C:\Users\Aleph\Documents\aleph-laserknees-72.aup 2018-08-09 17:50 - 2018-08-09 17:50 - 000000000 ____D C:\Users\Aleph\Documents\aleph-laserknees-72_data 2018-08-03 14:49 - 2018-08-03 14:49 - 000001202 _____ C:\Users\Aleph\Desktop\Format Factory.lnk 2018-08-03 13:05 - 2018-08-03 13:05 - 000002164 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk 2018-08-02 15:32 - 2018-08-02 15:32 - 000148089 _____ C:\Users\Aleph\Documents\aleph-build-45-46.aup 2018-08-02 15:32 - 2018-08-02 15:32 - 000000000 ____D C:\Users\Aleph\Documents\aleph-build-45-46_data 2018-07-31 14:19 - 2018-07-31 14:19 - 006162852 _____ C:\Users\Aleph\Documents\reality_scene.flm 2018-07-31 13:48 - 2018-07-31 14:18 - 000235061 _____ C:\Users\Aleph\Documents\reality_scene.lxs 2018-07-31 13:48 - 2018-07-31 14:18 - 000054499 _____ C:\Users\Aleph\Documents\reality_scene.lxi 2018-07-31 13:48 - 2018-07-31 13:48 - 000000000 ____D C:\Users\Aleph\Documents\reality_scene-Resources 2018-07-31 13:19 - 2018-08-17 07:25 - 000000000 ____D C:\ProgramData\boost_interprocess 2018-07-31 13:17 - 2018-07-31 13:17 - 000000000 ____D C:\Program Files\Reality_DS 2018-07-31 00:38 - 2018-08-17 12:25 - 000853597 _____ C:\Users\Aleph\Documents\Reality_plugin_Log.txt 2018-07-31 00:38 - 2018-07-31 13:29 - 000297072 _____ C:\Users\Aleph\Documents\RealityInstaller_Log.txt 2018-07-31 00:38 - 2018-07-31 00:38 - 000000000 ____D C:\Users\Aleph\Documents\Pret-a-3D 2018-07-30 01:55 - 2018-07-30 01:55 - 000100950 _____ C:\Users\Aleph\Downloads\p.txt 2018-07-30 01:55 - 2018-07-30 01:55 - 000100950 _____ C:\Users\Aleph\Downloads\p (1).txt 2018-07-29 16:50 - 2018-07-29 16:50 - 000167400 _____ C:\Users\Aleph\Documents\aleph-laserknees-71.aup 2018-07-29 16:49 - 2018-07-29 16:49 - 000000000 ____D C:\Users\Aleph\Documents\aleph-laserknees-71_data 2018-07-27 00:30 - 2018-07-27 00:30 - 000000000 ___SD C:\Users\Public\Documents\CPSecurity0DataDo not0Delete 2018-07-27 00:30 - 2018-07-27 00:30 - 000000000 ___SD C:\Users\Aleph\Documents\!Check Point!ProtectionDirectory!Don't!Discard ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-08-21 09:49 - 2012-08-29 02:25 - 000000000 ____D C:\Program Files (x86)\Adobe 2018-08-18 14:09 - 2009-07-13 21:32 - 000032768 _____ C:\Windows\System32\config\BCD-Template 2018-08-18 08:44 - 2016-10-23 04:08 - 000065536 _____ C:\Windows\System32\spu_storage.bin 2018-08-18 08:43 - 2012-12-17 11:04 - 000000000 ____D C:\Users\Aleph\AppData\Local\ElevatedDiagnostics 2018-08-18 08:32 - 2018-03-28 04:12 - 000000625 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc 2018-08-18 08:23 - 2009-07-13 20:45 - 000028944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2018-08-18 08:23 - 2009-07-13 20:45 - 000028944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2018-08-18 08:12 - 2017-03-19 02:06 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2018-08-18 08:08 - 2018-03-27 04:40 - 000000000 ____D C:\Users\Aleph\AppData\Local\AVAST Software 2018-08-18 08:07 - 2015-06-17 02:16 - 000001014 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3310751362-2506820872-2796058767-1001UA.job 2018-08-18 08:03 - 2009-07-13 21:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-08-18 07:29 - 2017-05-22 18:47 - 000000000 ____D C:\Users\Aleph\AppData\Local\itch 2018-08-18 07:29 - 2017-03-12 16:25 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\DAZ 3D 2018-08-18 07:29 - 2016-11-16 04:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-08-18 07:29 - 2016-08-31 06:46 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\discord 2018-08-18 07:29 - 2016-07-12 02:42 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\Spotify 2018-08-18 07:29 - 2016-02-15 08:51 - 000000000 ____D C:\Program Files (x86)\Gaming Mouse driver 2018-08-18 07:29 - 2015-12-03 08:31 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software 2018-08-18 07:29 - 2015-09-14 20:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-08-18 07:29 - 2015-01-22 02:08 - 000000000 ____D C:\Program Files\CCleaner 2018-08-18 07:29 - 2014-10-07 19:45 - 000000000 ____D C:\Users\Aleph\AppData\Local\MEGAsync 2018-08-18 07:29 - 2014-02-06 05:37 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\Audacity 2018-08-18 07:29 - 2014-01-18 07:00 - 000000000 ____D C:\Program Files (x86)\Combined Community Codec Pack 2018-08-18 07:29 - 2013-05-16 17:25 - 000000000 ____D C:\Program Files (x86)\FLAC 2018-08-18 07:29 - 2012-12-17 09:57 - 000000000 ____D C:\Program Files (x86)\Steam 2018-08-18 07:29 - 2012-12-17 09:37 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\Dropbox 2018-08-18 07:29 - 2012-12-17 09:24 - 000000000 ____D C:\Program Files\SUPERAntiSpyware 2018-08-18 07:29 - 2010-11-21 03:48 - 000000000 ___RD C:\Users\Public\Recorded TV 2018-08-18 07:29 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\inf 2018-08-18 04:30 - 2015-06-17 02:16 - 000000962 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3310751362-2506820872-2796058767-1001Core.job 2018-08-17 12:25 - 2016-11-16 10:27 - 000000000 ____D C:\Users\Aleph\AppData\LocalLow\Mozilla 2018-08-17 12:08 - 2018-05-28 07:08 - 000003718 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2018-08-17 12:08 - 2018-05-28 06:45 - 000003154 _____ C:\Windows\System32\Tasks\StartCN 2018-08-17 12:08 - 2018-05-28 06:45 - 000003068 _____ C:\Windows\System32\Tasks\StartDVR 2018-08-17 12:08 - 2017-10-30 06:09 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update 2018-08-17 12:08 - 2015-06-17 02:16 - 000003994 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3310751362-2506820872-2796058767-1001UA 2018-08-17 12:08 - 2015-06-17 02:16 - 000003598 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3310751362-2506820872-2796058767-1001Core 2018-08-17 12:08 - 2015-01-22 02:08 - 000002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2018-08-17 12:08 - 2014-06-01 02:36 - 000003428 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2018-08-17 12:08 - 2014-06-01 02:36 - 000003300 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2018-08-17 11:15 - 2017-03-12 16:36 - 000000000 ____D C:\Users\Public\Documents\My DAZ 3D Library 2018-08-17 11:15 - 2015-11-23 00:50 - 000000000 ____D C:\Users\Aleph\Documents\Reality 2018-08-16 14:14 - 2014-12-27 06:57 - 000004478 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2018-08-16 11:52 - 2018-03-28 04:10 - 000000000 ___HD C:\SandBlastBackup 2018-08-16 01:23 - 2017-09-25 14:29 - 000000000 _____ C:\Windows\SysWOW64\last.dump 2018-08-15 09:23 - 2012-12-17 09:38 - 000000000 ___RD C:\Users\Aleph\Dropbox 2018-08-11 08:24 - 2012-12-17 09:20 - 000000000 ____D C:\Program Files (x86)\Google 2018-08-09 13:33 - 2016-07-12 02:42 - 000000000 ____D C:\Users\Aleph\AppData\Local\Spotify 2018-08-09 01:59 - 2014-12-05 04:00 - 000000000 ____D C:\Windows\Minidump 2018-08-09 01:59 - 2014-07-09 17:09 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\MPC-HC 2018-08-09 01:59 - 2012-12-17 13:02 - 000000000 ____D C:\Users\Aleph\AppData\Local\CrashDumps 2018-08-06 13:01 - 2012-12-17 11:38 - 000000000 ____D C:\ProgramData\McAfee 2018-08-06 06:08 - 2012-12-17 09:49 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\DC++ 2018-08-03 14:06 - 2018-06-15 12:54 - 000000000 ____D C:\Users\Aleph\AppData\Roaming\obs-studio 2018-08-03 13:05 - 2012-12-17 09:22 - 000000000 ____D C:\Program Files\Google 2018-07-31 07:27 - 2012-12-18 09:32 - 000000000 ____D C:\Users\Aleph\Documents\My PSP8 Files ==================== Known DLLs (Whitelisted) ========================= ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\dnsapi.dll => MD5 is legit C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== Association (Whitelisted) ============= ==================== Restore Points ========================= ==================== Memory info =========================== Percentage of memory in use: 9% Total physical RAM: 16316.74 MB Available physical RAM: 14783.33 MB Total Virtual: 16314.94 MB Available Virtual: 14869.54 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:1863.01 GB) (Free:86.18 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (GSP1RMCHPXFRER_EN_DVD) (CDROM) (Total:3.09 GB) (Free:0 GB) UDF Drive e: () (Removable) (Total:7.76 GB) (Free:2.13 GB) NTFS Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 2A3021EB) Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Protective MBR) (Size: 7.8 GB) (Disk ID: 00000000) Partition: GPT. LastRegBack: 2018-08-07 03:16 ==================== End of FRST.txt ============================