Jump to content

reducto

Members
  • Posts

    7
  • Joined

  • Last visited

Posts posted by reducto

  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2014

    Ran by owner (administrator) on XBOXV2 on 03-12-2014 15:38:03

    Running from C:\Users\owner\Desktop

    Loaded Profile: owner (Available profiles: owner)

    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

    Internet Explorer Version 11

    Boot Mode: Normal


     

    ==================== Processes (Whitelisted) =================

     

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

     

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe

    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

    (Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

    () C:\Windows\System32\PnkBstrA.exe

    (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

    (Microsoft Corporation) C:\Windows\System32\rundll32.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe

    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

    (Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

    (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

    (ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe

    (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe

    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe

    (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

     

     

    ==================== Registry (Whitelisted) ==================

     

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

     

    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)

    HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)

    HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

    HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5015040 2012-02-09] (VIA)

    HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)

    HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

    HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

    HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

    HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

    HKU\S-1-5-21-2312796422-406038140-3616973048-1000\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1940160 2014-11-18] (Valve Corporation)

    HKU\S-1-5-21-2312796422-406038140-3616973048-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3618648 2014-11-24] (Electronic Arts)

    HKU\S-1-5-21-2312796422-406038140-3616973048-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)

     

    ==================== Internet (Whitelisted) ====================

     

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

     

    HKU\S-1-5-21-2312796422-406038140-3616973048-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

    HKU\S-1-5-21-2312796422-406038140-3616973048-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

    BHO: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} ->  No File

    BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

    BHO-x32: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} ->  No File

    BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

    BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

    BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

    BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

    Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

     

    FireFox:

    ========

    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()

    FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)

    FF Plugin: @microsoft.com/GENUINE -> disabled No File

    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()

    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

    FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)

    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

    FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

    FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

     

    Chrome: 

    =======

    CHR StartupUrls: Default -> "hxxp://yahoo.com/"

    CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

    CHR Profile: C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default

    CHR Extension: (Google Docs) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-02]

    CHR Extension: (Google Drive) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-02]

    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-02]

    CHR Extension: (YouTube) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-02]

    CHR Extension: (Google Search) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-02]

    CHR Extension: (Adblock Super) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-12-02]

    CHR Extension: (Google Wallet) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-02]

    CHR Extension: (Gmail) - C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-02]

     

    ==================== Services (Whitelisted) =================

     

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

     

    R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()

    R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)

    R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-16] (ASUSTeK Computer Inc.)

    R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-05-02] (ASUSTeK Computer Inc.)

    S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-06-17] () [File not signed]

    S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [476936 2013-09-13] (BitRaider, LLC)

    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

    R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)

    R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)

    R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)

    R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)

    R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)

    S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-24] (Electronic Arts)

    R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-11-11] ()

    R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-11-10] ()

    R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.)

     

    ==================== Drivers (Whitelisted) ====================

     

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

     

    R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)

    R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()

    R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-02] ()

    R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-19] (MCCI Corporation)

    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)

    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-03] (Malwarebytes Corporation)

    R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)

    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)

    R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)

    R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)

    R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)

    R0 sptd; C:\Windows\System32\Drivers\sptd.sys [513080 2013-01-26] () [File not signed]

    S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]

     

    ==================== NetSvcs (Whitelisted) ===================

     

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

     

     

    ==================== One Month Created Files and Folders ========

     

    (If an entry is included in the fixlist, the file\folder will be moved.)

     

    2014-12-03 15:38 - 2014-12-03 15:38 - 00018989 _____ () C:\Users\owner\Desktop\FRST.txt

    2014-12-03 15:37 - 2014-12-03 15:38 - 00000000 ____D () C:\FRST

    2014-12-03 15:37 - 2014-12-03 15:37 - 02117632 _____ (Farbar) C:\Users\owner\Desktop\FRST64.exe

    2014-12-02 22:24 - 2014-12-02 22:24 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

    2014-12-02 22:24 - 2014-12-02 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

    2014-12-02 01:48 - 2014-12-03 15:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

    2014-12-02 01:48 - 2014-12-02 01:48 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

    2014-12-02 01:48 - 2014-12-02 01:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

    2014-12-02 01:48 - 2014-12-02 01:48 - 00000000 ____D () C:\ProgramData\Malwarebytes

    2014-12-02 01:48 - 2014-12-02 01:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

    2014-12-02 01:48 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

    2014-12-02 01:48 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

    2014-12-02 01:48 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

    2014-12-02 01:47 - 2014-12-02 01:47 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\owner\Downloads\mbam-setup-2.0.3.1025.exe

    2014-12-01 21:02 - 2014-12-03 15:20 - 00002006 _____ () C:\Windows\PFRO.log

    2014-12-01 17:45 - 2014-12-01 17:45 - 00001413 _____ () C:\Users\owner\Desktop\Internet Explorer.lnk

    2014-12-01 00:29 - 2014-12-03 15:20 - 00001680 _____ () C:\Windows\setupact.log

    2014-12-01 00:29 - 2014-12-01 00:29 - 00000000 _____ () C:\Windows\setuperr.log

    2014-11-30 23:31 - 2014-12-01 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft

    2014-11-30 22:51 - 2014-11-30 22:51 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe

    2014-11-30 22:42 - 2014-11-30 22:42 - 00000000 __SHD () C:\Users\owner\AppData\Local\EmieBrowserModeList

    2014-11-30 22:22 - 2014-11-30 22:22 - 00000000 ____D () C:\Windows\ERUNT

    2014-11-30 22:13 - 2014-07-01 09:37 - 00020872 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS

    2014-11-30 15:36 - 2014-11-30 15:36 - 00000222 _____ () C:\Users\owner\Desktop\Saints Row IV.url

    2014-11-26 23:03 - 2014-11-26 23:03 - 00000220 _____ () C:\Users\owner\Desktop\Garry's Mod.url

    2014-11-25 18:41 - 2014-11-25 18:41 - 04443312 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

    2014-11-23 20:42 - 2014-11-23 20:42 - 00000000 ____D () C:\Users\owner\Documents\4A Games

    2014-11-23 20:38 - 2014-11-23 20:38 - 00000000 ____D () C:\Users\owner\AppData\Local\4A Games

    2014-11-23 19:06 - 2014-11-23 19:06 - 00000221 _____ () C:\Users\owner\Desktop\Metro 2033.url

    2014-11-18 18:54 - 2014-11-10 19:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

    2014-11-18 18:54 - 2014-11-10 19:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

    2014-11-18 18:54 - 2014-11-10 18:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

    2014-11-18 18:54 - 2014-11-10 18:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

    2014-11-13 23:37 - 2014-11-13 23:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET

    2014-11-11 19:26 - 2014-11-07 11:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

    2014-11-11 19:26 - 2014-11-07 11:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

    2014-11-11 19:26 - 2014-11-05 20:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

    2014-11-11 19:26 - 2014-11-05 20:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

    2014-11-11 19:26 - 2014-11-05 20:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

    2014-11-11 19:26 - 2014-11-05 19:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

    2014-11-11 19:26 - 2014-11-05 19:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

    2014-11-11 19:26 - 2014-11-05 19:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

    2014-11-11 19:26 - 2014-11-05 19:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

    2014-11-11 19:26 - 2014-11-05 19:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

    2014-11-11 19:26 - 2014-11-05 19:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

    2014-11-11 19:26 - 2014-11-05 19:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

    2014-11-11 19:26 - 2014-11-05 19:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

    2014-11-11 19:26 - 2014-11-05 19:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

    2014-11-11 19:26 - 2014-11-05 19:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

    2014-11-11 19:26 - 2014-11-05 19:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

    2014-11-11 19:26 - 2014-11-05 19:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

    2014-11-11 19:26 - 2014-11-05 19:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

    2014-11-11 19:26 - 2014-11-05 19:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

    2014-11-11 19:26 - 2014-11-05 19:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

    2014-11-11 19:26 - 2014-11-05 19:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

    2014-11-11 19:26 - 2014-11-05 19:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

    2014-11-11 19:26 - 2014-11-05 19:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

    2014-11-11 19:26 - 2014-11-05 19:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

    2014-11-11 19:26 - 2014-11-05 19:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

    2014-11-11 19:26 - 2014-11-05 19:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

    2014-11-11 19:26 - 2014-11-05 19:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

    2014-11-11 19:26 - 2014-11-05 19:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

    2014-11-11 19:26 - 2014-11-05 19:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

    2014-11-11 19:26 - 2014-11-05 19:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

    2014-11-11 19:26 - 2014-11-05 19:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

    2014-11-11 19:26 - 2014-11-05 19:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

    2014-11-11 19:26 - 2014-11-05 18:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

    2014-11-11 19:26 - 2014-11-05 18:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

    2014-11-11 19:26 - 2014-11-05 18:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

    2014-11-11 19:26 - 2014-11-05 18:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

    2014-11-11 19:26 - 2014-11-05 18:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

    2014-11-11 19:26 - 2014-11-05 18:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

    2014-11-11 19:26 - 2014-11-05 18:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

    2014-11-11 19:26 - 2014-11-05 18:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

    2014-11-11 19:26 - 2014-11-05 18:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

    2014-11-11 19:26 - 2014-11-05 18:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

    2014-11-11 19:26 - 2014-11-05 18:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

    2014-11-11 19:26 - 2014-11-05 18:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

    2014-11-11 19:26 - 2014-11-05 18:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

    2014-11-11 19:26 - 2014-11-05 18:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

    2014-11-11 19:26 - 2014-11-05 18:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

    2014-11-11 19:26 - 2014-11-05 18:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

    2014-11-11 19:26 - 2014-11-05 18:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

    2014-11-11 19:26 - 2014-11-05 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

    2014-11-11 19:26 - 2014-11-05 18:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

    2014-11-11 19:26 - 2014-11-05 18:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

    2014-11-11 19:26 - 2014-11-05 17:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

    2014-11-11 19:26 - 2014-11-05 17:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

    2014-11-11 19:26 - 2014-11-05 17:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

    2014-11-11 19:26 - 2014-11-05 17:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

    2014-11-11 19:26 - 2014-10-13 18:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

    2014-11-11 19:26 - 2014-10-13 18:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

    2014-11-11 19:26 - 2014-10-13 18:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

    2014-11-11 19:26 - 2014-10-13 18:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

    2014-11-11 19:26 - 2014-10-13 18:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

    2014-11-11 19:26 - 2014-10-13 17:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

    2014-11-11 19:26 - 2014-10-13 17:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

    2014-11-11 19:26 - 2014-10-13 17:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

    2014-11-11 19:26 - 2014-10-13 17:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

    2014-11-11 19:26 - 2014-10-02 18:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

    2014-11-11 19:26 - 2014-08-20 22:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

    2014-11-11 19:26 - 2014-08-20 22:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

    2014-11-11 19:26 - 2014-08-20 22:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

    2014-11-11 19:26 - 2014-08-20 22:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

    2014-11-11 19:26 - 2014-08-11 18:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

    2014-11-11 19:26 - 2014-08-11 17:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

    2014-11-11 19:25 - 2014-10-24 17:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

    2014-11-11 19:25 - 2014-10-24 17:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

    2014-11-11 19:25 - 2014-10-17 18:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

    2014-11-11 19:25 - 2014-10-17 17:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

    2014-11-11 19:25 - 2014-10-13 18:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

    2014-11-11 19:25 - 2014-10-13 17:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

    2014-11-11 19:25 - 2014-10-09 16:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

    2014-11-11 19:25 - 2014-10-02 18:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

    2014-11-11 19:25 - 2014-10-02 18:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

    2014-11-11 19:25 - 2014-10-02 18:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

    2014-11-11 19:25 - 2014-10-02 18:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

    2014-11-11 19:25 - 2014-10-02 17:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

    2014-11-11 19:25 - 2014-10-02 17:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

    2014-11-11 19:25 - 2014-10-02 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

    2014-11-11 19:25 - 2014-09-19 01:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

    2014-11-11 19:25 - 2014-09-19 01:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

    2014-11-11 17:25 - 2014-11-11 17:25 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe

    2014-11-11 16:34 - 2014-11-11 16:34 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

    2014-11-11 16:34 - 2014-11-03 12:25 - 00615568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

    2014-11-11 16:30 - 2014-11-06 13:02 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

    2014-11-11 16:30 - 2014-11-06 13:02 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 31891784 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 24555208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 20923712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 17259848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 14031448 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 13943904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 13207184 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

    2014-11-11 16:30 - 2014-11-03 16:04 - 11397208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 11335408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 04289168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 02849736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434465.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434465.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00962704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00922256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00898192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00870624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00391824 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00349504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

    2014-11-11 16:30 - 2014-11-03 16:04 - 00027094 _____ () C:\Windows\system32\nvinfo.pb

    2014-11-11 16:27 - 2014-11-12 16:43 - 00000000 ____D () C:\Users\owner\AppData\Local\NVIDIA Corporation

    2014-11-11 16:22 - 2014-11-06 09:06 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

    2014-11-11 16:22 - 2014-11-06 09:06 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

    2014-11-11 16:22 - 2014-11-06 09:06 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

    2014-11-11 16:22 - 2014-11-06 09:06 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

    2014-11-11 16:09 - 2014-11-11 16:09 - 32021112 _____ (NVIDIA Corporation) C:\Users\owner\Downloads\GeForce_Experience_v2.1.4.0.exe

    2014-11-11 15:04 - 2014-11-11 15:04 - 00000222 _____ () C:\Users\owner\Desktop\Insurgency.url

    2014-11-11 00:05 - 2014-11-11 00:06 - 00000000 ____D () C:\Users\owner\Documents\Battlefield 4

    2014-11-11 00:04 - 2014-11-11 00:04 - 01402920 _____ () C:\Users\owner\Downloads\battlelog-web-plugins_2.5.1_149.exe

    2014-11-10 23:35 - 2014-11-10 23:35 - 00001215 _____ () C:\Users\Public\Desktop\Battlefield 4.lnk

    2014-11-10 23:35 - 2014-11-10 23:35 - 00001191 _____ () C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk

    2014-11-10 23:33 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

    2014-11-10 23:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

    2014-11-10 23:33 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

    2014-11-10 23:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

    2014-11-10 23:33 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

    2014-11-10 23:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

    2014-11-10 23:02 - 2014-11-10 23:02 - 00000000 ____D () C:\Windows\System32\Tasks\Games

    2014-11-06 00:24 - 2014-11-30 18:13 - 00000000 ____D () C:\Users\owner\Documents\personal statement

     

    ==================== One Month Modified Files and Folders =======

     

    (If an entry is included in the fixlist, the file\folder will be moved.)

     

    2014-12-03 15:31 - 2014-10-27 19:54 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

    2014-12-03 15:31 - 2013-01-26 12:09 - 01050447 _____ () C:\Windows\WindowsUpdate.log

    2014-12-03 15:29 - 2009-07-13 20:45 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    2014-12-03 15:29 - 2009-07-13 20:45 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

    2014-12-03 15:24 - 2013-01-26 15:46 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D05917D0-780C-49DA-A969-8E418E8D2A97}

    2014-12-03 15:22 - 2013-02-02 18:38 - 00000000 ____D () C:\Program Files (x86)\Steam

    2014-12-03 15:21 - 2013-02-09 17:15 - 00000000 ____D () C:\Program Files (x86)\Origin

    2014-12-03 15:21 - 2013-02-09 17:13 - 00000000 ____D () C:\ProgramData\Origin

    2014-12-03 15:20 - 2013-08-03 22:05 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

    2014-12-03 15:20 - 2013-01-26 18:26 - 00000000 ____D () C:\ProgramData\NVIDIA

    2014-12-03 15:20 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

    2014-12-03 00:10 - 2013-08-03 22:05 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

    2014-12-02 23:52 - 2014-09-02 22:22 - 00000000 ____D () C:\Users\owner\Documents\erwc 12

    2014-12-02 23:42 - 2013-10-08 17:35 - 00000336 _____ () C:\Windows\BRCALIB.INI

    2014-12-02 22:24 - 2013-08-03 22:05 - 00000000 ____D () C:\Users\owner\AppData\Local\Google

    2014-12-02 22:24 - 2013-08-03 22:05 - 00000000 ____D () C:\Program Files (x86)\Google

    2014-12-02 19:56 - 2013-08-30 21:09 - 00000000 ____D () C:\Users\owner\AppData\Roaming\Skype

    2014-12-01 22:47 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\system32\NDF

    2014-11-30 23:32 - 2013-01-26 18:27 - 00000000 ____D () C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVGA Precision X

    2014-11-30 23:32 - 2013-01-26 11:44 - 00000000 ____D () C:\Windows\Panther

    2014-11-30 22:40 - 2009-07-13 21:37 - 00000000 ____D () C:\Windows\DigitalLocker

    2014-11-28 21:48 - 2013-08-22 23:20 - 00281032 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

    2014-11-28 21:48 - 2013-08-22 23:17 - 00281032 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

    2014-11-27 23:01 - 2013-08-22 23:17 - 00281032 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0

    2014-11-25 18:41 - 2014-10-27 19:54 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

    2014-11-25 18:41 - 2013-02-10 16:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

    2014-11-25 18:41 - 2013-02-10 16:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

    2014-11-21 14:02 - 2009-07-13 21:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI

    2014-11-13 20:39 - 2014-09-24 19:16 - 00000000 ____D () C:\Windows\rescache

    2014-11-12 22:05 - 2013-08-03 22:05 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

    2014-11-12 22:05 - 2013-08-03 22:05 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

    2014-11-12 16:43 - 2013-01-26 15:46 - 00109296 _____ () C:\Users\owner\AppData\Local\GDIPFONTCACHEV1.DAT

    2014-11-12 16:42 - 2009-07-13 20:45 - 00408216 _____ () C:\Windows\system32\FNTCACHE.DAT

    2014-11-11 22:21 - 2013-10-08 16:08 - 00000000 ____D () C:\ProgramData\Microsoft Help

    2014-11-11 22:18 - 2013-08-14 22:59 - 00000000 ____D () C:\Windows\system32\MRT

    2014-11-11 22:15 - 2013-01-26 19:07 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

    2014-11-11 16:34 - 2013-01-26 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

    2014-11-11 16:34 - 2013-01-26 18:25 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

    2014-11-11 16:34 - 2013-01-26 18:25 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

    2014-11-11 16:32 - 2013-01-26 18:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

    2014-11-11 16:28 - 2013-10-11 23:18 - 00000000 ____D () C:\Users\owner\AppData\Local\NVIDIA

    2014-11-11 14:54 - 2013-10-11 23:03 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins

    2014-11-11 00:05 - 2013-02-09 17:23 - 00000000 ____D () C:\Users\owner\AppData\Local\Origin

    2014-11-11 00:05 - 2013-02-09 17:13 - 00000000 ____D () C:\ProgramData\Electronic Arts

    2014-11-10 23:35 - 2013-08-22 23:17 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

    2014-11-10 23:35 - 2009-07-13 21:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

    2014-11-10 23:02 - 2013-02-09 16:53 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts

    2014-11-09 19:04 - 2009-07-13 21:08 - 00032590 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

    2014-11-06 13:02 - 2013-01-26 18:25 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

    2014-11-04 18:41 - 2013-02-09 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin

    2014-11-03 16:04 - 2013-10-11 23:23 - 18514080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

    2014-11-03 16:04 - 2013-02-25 23:32 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

    2014-11-03 16:04 - 2013-01-26 18:25 - 20985544 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

    2014-11-03 16:04 - 2013-01-26 18:25 - 03238040 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

    2014-11-03 16:04 - 2013-01-26 18:25 - 00987520 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

    2014-11-03 16:04 - 2013-01-26 18:25 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

    2014-11-03 16:04 - 2013-01-26 18:25 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

    2014-11-03 14:02 - 2013-07-04 17:20 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

    2014-11-03 14:02 - 2013-01-26 18:25 - 06882448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

    2014-11-03 14:02 - 2013-01-26 18:25 - 03531464 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

    2014-11-03 14:02 - 2013-01-26 18:25 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

    2014-11-03 14:02 - 2013-01-26 18:25 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

    2014-11-03 14:02 - 2013-01-26 18:25 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

    2014-11-03 03:58 - 2013-01-26 18:25 - 04099264 _____ () C:\Windows\system32\nvcoproc.bin

     

    Files to move or delete:

    ====================

    C:\Users\owner\jagex_cl_oldschool_LIVE.dat

    C:\Users\owner\jagex_cl_runescape_LIVE.dat

    C:\Users\owner\random.dat

     

     

    Some content of TEMP:

    ====================

    C:\Users\owner\AppData\Local\Temp\_is6D71.exe

     

     

    ==================== Bamital & volsnap Check =================

     

    (There is no automatic fix for files that do not pass verification.)

     

    C:\Windows\System32\winlogon.exe => File is digitally signed

    C:\Windows\System32\wininit.exe => File is digitally signed

    C:\Windows\SysWOW64\wininit.exe => File is digitally signed

    C:\Windows\explorer.exe => File is digitally signed

    C:\Windows\SysWOW64\explorer.exe => File is digitally signed

    C:\Windows\System32\svchost.exe => File is digitally signed

    C:\Windows\SysWOW64\svchost.exe => File is digitally signed

    C:\Windows\System32\services.exe => File is digitally signed

    C:\Windows\System32\User32.dll => File is digitally signed

    C:\Windows\SysWOW64\User32.dll => File is digitally signed

    C:\Windows\System32\userinit.exe => File is digitally signed

    C:\Windows\SysWOW64\userinit.exe => File is digitally signed

    C:\Windows\System32\rpcss.dll => File is digitally signed

    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

     

     

    LastRegBack: 2014-12-02 17:51

     

    ==================== End Of Log ============================

  2. Hey Adam and Twinhead!

    Here are my results.

     

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-12-2014
    Ran by owner at 2014-12-03 15:38:41
    Running from C:\Users\owner\Desktop
    Boot Mode: Normal
    ==========================================================
     
     
    ==================== Security Center ========================
     
    (If an entry is included in the fixlist, it will be removed.)
     
    AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
    AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
     
    ==================== Installed Programs ======================
     
    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
     
    Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)
    Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
    AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.00.01 - ASUSTeK Computer Inc.)
    Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
    Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
    Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
    BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.8.1 - BitRaider, LLC)
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
    Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
    Crysis® 2 (HKLM-x32\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.0.0.0 - Electronic Arts)
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
    EA Download Manager (HKLM-x32\...\EADM) (Version: 7.2.0.32 - Electronic Arts, Inc.)
    EVGA Precision X 3.0.3 (HKLM-x32\...\PrecisionX) (Version: 3.0.3 - EVGA Corporation)
    Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
    Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
    Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
    iTunes (HKLM\...\{A535111D-95C8-487F-869E-CE4C239972D2}) (Version: 11.1.1.11 - Apple Inc.)
    Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
    Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    Killing Floor (HKLM-x32\...\Steam App 1250) (Version:  - Tripwire Interactive)
    Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
    Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
    Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - 4A Games)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
    Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
    Microsoft SkyDrive (HKU\S-1-5-21-2312796422-406038140-3616973048-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
    Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
    NVIDIA 3D Vision Controller Driver 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.65 - NVIDIA Corporation)
    NVIDIA 3D Vision Driver 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.65 - NVIDIA Corporation)
    NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
    NVIDIA Graphics Driver 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.65 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
    Origin (HKLM-x32\...\Origin) (Version: 9.1.12.73 - Electronic Arts, Inc.)
    Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Sony Online Entertainment)
    Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
    PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek)
    Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
    Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
    Rising Storm/Red Orchestra 2 Multiplayer (HKLM-x32\...\Steam App 35450) (Version:  - Tripwire Interactive)
    Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
    SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
    SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
    Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
    Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
    Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 7.0.0.12 - Bioware/EA)
    Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
    Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
    VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
     
    ==================== Custom CLSID (selected items): ==========================
     
    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
     
    CustomCLSID: HKU\S-1-5-21-2312796422-406038140-3616973048-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\owner\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-2312796422-406038140-3616973048-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\owner\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-2312796422-406038140-3616973048-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\owner\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-2312796422-406038140-3616973048-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\owner\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
     
    ==================== Restore Points  =========================
     
    27-11-2014 20:52:01 Windows Update
    01-12-2014 06:30:36 Windows Update
    01-12-2014 06:50:10 Checkpoint by HitmanPro
    01-12-2014 06:51:08 Checkpoint by HitmanPro
    01-12-2014 07:31:29 Anvi CSB 3.5
     
    ==================== Hosts content: ==========================
     
    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
     
    2009-07-13 18:34 - 2009-06-10 13:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
     
    ==================== Scheduled Tasks (whitelisted) =============
     
    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
     
    Task: {1E324C7A-2D16-4DF2-A3E2-B8855E7E30D1} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2012-05-02] (ASUSTeK Computer Inc.)
    Task: {1E9FE6D4-0971-412A-9A91-14E6E83C47F1} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2312796422-406038140-3616973048-1000
    Task: {41D4D612-6631-4E6A-BAC2-E618D66C419D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-03] (Google Inc.)
    Task: {82738B87-8CCC-4B4F-9E3E-10F57CD3DD45} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-03] (Google Inc.)
    Task: {990D6471-B536-4874-911F-1AC140F36C52} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] ()
    Task: {B4D36BCE-1A7A-4F41-A7A7-48AB48301CF4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25] (Adobe Systems Incorporated)
    Task: {BE7B3F8D-93AA-4AD3-B2A1-6CE57FDA17CD} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
    Task: {C87C2172-29D1-4BE7-8ECB-5C9C0E4AD906} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
    Task: {DA4312F4-B849-471D-A199-E428258E51BD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
     
    ==================== Loaded Modules (whitelisted) =============
     
    2013-01-26 18:25 - 2014-11-03 14:02 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2012-06-01 01:42 - 2012-06-01 01:42 - 00920736 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
    2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
    2010-10-20 14:23 - 2010-10-20 14:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
    2014-11-11 17:25 - 2014-11-11 17:25 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
    2013-01-26 15:41 - 2011-12-06 01:58 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
    2013-01-26 15:41 - 2011-12-06 01:58 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
    2012-11-28 14:13 - 2012-11-28 14:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    2012-11-28 14:13 - 2012-11-28 14:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    2013-01-26 18:07 - 2014-12-03 15:20 - 00023552 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
    2013-01-26 18:07 - 2010-06-28 18:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
    2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
    2010-10-20 14:45 - 2010-10-20 14:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
    2013-01-26 18:08 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll
    2013-01-26 18:08 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll
    2013-01-26 18:10 - 2011-09-26 19:36 - 00869376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll
    2013-01-26 18:08 - 2012-03-21 12:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll
    2013-01-26 18:12 - 2012-06-19 12:56 - 01305600 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll
    2013-01-26 18:14 - 2012-07-12 11:27 - 01125376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\Network iControl.dll
    2013-01-26 18:15 - 2012-02-10 11:29 - 01047040 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll
    2013-01-26 18:08 - 2012-05-25 10:33 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll
    2013-01-26 18:08 - 2012-05-28 21:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll
    2013-01-26 18:08 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll
    2013-01-26 18:08 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll
    2013-01-26 18:08 - 2011-10-14 20:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll
    2013-01-26 18:07 - 2010-08-22 18:17 - 00662016 ____R () C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll
    2013-01-26 18:08 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll
    2013-01-26 18:08 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
    2014-01-29 21:52 - 2014-11-24 23:56 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
    2014-01-29 21:52 - 2014-11-24 23:55 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
    2013-01-26 18:14 - 2012-07-11 13:57 - 00152064 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\gep.dll
    2013-01-26 18:14 - 2012-05-10 16:38 - 00786432 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\func.dll
    2013-01-26 18:14 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\pngio.dll
    2013-01-26 15:43 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
    2014-12-02 22:24 - 2014-11-24 22:39 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
    2014-12-02 22:24 - 2014-11-24 22:39 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\libegl.dll
    2014-12-02 22:24 - 2014-11-24 22:39 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\pdf.dll
    2014-12-02 22:24 - 2014-11-24 22:39 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll
     
    ==================== Alternate Data Streams (whitelisted) =========
     
    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
     
     
    ==================== Safe Mode (whitelisted) ===================
     
    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
     
     
    ==================== EXE Association (whitelisted) =============
     
    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
     
     
    ==================== MSCONFIG/TASK MANAGER disabled items =========
     
    (Currently there is no automatic fix for this section.)
     
     
    ========================= Accounts: ==========================
     
    Administrator (S-1-5-21-2312796422-406038140-3616973048-500 - Administrator - Disabled)
    Guest (S-1-5-21-2312796422-406038140-3616973048-501 - Limited - Disabled)
    owner (S-1-5-21-2312796422-406038140-3616973048-1000 - Administrator - Enabled) => C:\Users\owner
     
    ==================== Faulty Device Manager Devices =============
     
     
    ==================== Event log errors: =========================
     
    Application errors:
    ==================
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 9999
     
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 9999
     
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 9001
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 9001
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 8002
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 8002
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:55:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 7004
     
     
    System errors:
    =============
    Error: (12/03/2014 03:20:37 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    cdrom
     
    Error: (12/02/2014 10:40:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    cdrom
     
    Error: (12/02/2014 10:39:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The UPnP Device Host service failed to start due to the following error: 
    %%1069
     
    Error: (12/02/2014 10:39:59 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
    Description: The upnphost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
    %%1352
     
    To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
     
    Error: (12/02/2014 10:39:59 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}
     
    Error: (12/02/2014 05:34:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load: 
    cdrom
     
    Error: (12/02/2014 01:50:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: 
    %%1068
     
    Error: (12/02/2014 01:50:35 AM) (Source: DCOM) (EventID: 10005) (User: )
    Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
     
    Error: (12/02/2014 01:50:35 AM) (Source: DCOM) (EventID: 10005) (User: )
    Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
     
    Error: (12/02/2014 01:50:34 AM) (Source: DCOM) (EventID: 10005) (User: )
    Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}
     
     
    Microsoft Office Sessions:
    =========================
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 9999
     
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 9999
     
    Error: (12/02/2014 07:56:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 9001
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 9001
     
    Error: (12/02/2014 07:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 8002
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 8002
     
    Error: (12/02/2014 07:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: Continuously busy for more than a second
     
    Error: (12/02/2014 07:55:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 7004
     
     
    ==================== Memory info =========================== 
     
    Processor: Intel® Core i5-2400 CPU @ 3.10GHz
    Percentage of memory in use: 28%
    Total physical RAM: 8144.88 MB
    Available physical RAM: 5838.45 MB
    Total Pagefile: 16287.95 MB
    Available Pagefile: 13558.86 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.83 MB
     
    ==================== Drives ================================
     
    Drive c: () (Fixed) (Total:2047.9 GB) (Free:1805.52 GB) NTFS
     
    ==================== MBR & Partition Table ==================
     
    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 6495E5D4)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=2047.9 GB) - (Type=07 NTFS)
     
    ==================== End Of Log ============================
  3. Hey guys, first off I would like to thank you for any input and help. It would be much appreciated. I'm not really a techie or computer savvy person but I am running on windows 7.


     


    So to start off, I have been playing video games and wanted to upload a mod onto one of my games but required winrar to unzip one of my files, yes you can see where this is going. So yesterday, I stupidly just searched up winrar and downloaded off of some site which wasn't the main website. I obliviously just accepted all the terms and ta-da! I got hit with the trovi adware.


     


    First off, a toolbar and url page would appear at the top of my desktop and whenever I opened google chrome or internet explorer, my homepage would be trovi. Like any other person would I searched up how to remove this trovi thing. So I read up on a couple of guides and followed what they said.


     


    1. I downloaded the adware cleaner, scanned it, deleted all the infected files.


    2. I downloaded junkremover tool and launched it, it did its thing after I pressed any key.


    3. I downloaded the anti-malwarebytes, scanned and launched the program and quarantined the infected files.


    4. Finally I downloaded hitmanpro, the latest version and launched that and removed the files.


     


    My homepage still remained as trovi and the toolbar on my desktop still was there. So I reset my google chrome homepage, search bar, and reset the whole google chrome. I also reset my internet explorer as well. After doing so, my homepage and all were completely fine. However, the toolbar was still on my desktop so I went to control panel->uninstall programs->(some toolbar file). I deleted this toolbar file along with all the other recent anti-malware programs I downloaded and the toolbar on my desktop disappeared.


     


    Furthermore I have been searching everywhere for the remnants of this adware. I have organized my files in my downloads, control panel programs, and documents in date when downloaded and removed any unfamiliar files that were recently downloaded. I also went through the run command and went to "regedit" and went to edit->find-> "trovi" and also "conduit". Nothing comes up with trovi but when I type in conduit it comes up with: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll


    I do have an iphone that is synched to my computer, could it be that apple uses this conduit and this file is safe? 


    I also reset all of my browsers, cleared cookies, history, and cache etc after.


     


    In the end it seems that I was able to remove trovi within 30 minutes to an hour and a half of when I got it. However I had a few questions: Could any of my saved information such as sensitive info be released even if I did not input them into the trovi search? Are there any places that malwarebytes could not detect trovi? Should I worry about it re-installing/building itself.


Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.