Jump to content

isaacjr7

Honorary Members
  • Posts

    22
  • Joined

  • Last visited

Everything posted by isaacjr7

  1. --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.21, February 2015 (build 5.21.11102.0) Started On Tue Feb 17 17:08:31 2015 Engine: 1.1.11302.0 Signatures: 1.191.3593.0 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Tue Feb 17 17:13:20 2015 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.21, February 2015 (build 5.21.11102.0) Started On Tue Feb 17 17:44:56 2015 Engine: 1.1.11302.0 Signatures: 1.191.3593.0 --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.21, February 2015 (build 5.21.11102.0) Started On Tue Feb 17 17:56:18 2015 Engine: 1.1.11302.0 Signatures: 1.191.3593.0 --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.21, February 2015 (build 5.21.11102.0) Started On Tue Feb 17 19:59:07 2015 Engine: 1.1.11302.0 Signatures: 1.191.3593.0 --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.21, February 2015 (build 5.21.11102.0) Started On Wed Feb 18 02:28:58 2015 Engine: 1.1.11302.0 Signatures: 1.191.3593.0 Results Summary: ---------------- No infection found. Microsoft Windows Malicious Software Removal Tool Finished On Wed Feb 18 02:33:02 2015 Return code: 0 (0x0)
  2. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.2 (02.02.2015:1) OS: Windows 8.1 x64 Ran by Isaac on 18/02/2015 at 2:25:35.57 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 18/02/2015 at 2:27:12.20 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  3. # AdwCleaner v4.110 - Logfile created 18/02/2015 at 02:17:16 # Updated 05/02/2015 by Xplode # Database : 2015-02-14.2 [server] # Operating system : Windows 8.1 (x64) # Username : Isaac - ISAAC # Running from : C:\Users\Isaac\Desktop\AdwCleaner.exe # Option : Cleaning ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Scheduled tasks ] ***** ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk ***** [ Registry ] ***** Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113} Key Deleted : HKCU\Software\Optimizer Pro Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E732E5D-E577-451A-9BB1-CBE64A2CBC2F} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4 Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local> ***** [ Web browsers ] ***** -\\ Internet Explorer v11.0.9600.17416 -\\ Mozilla Firefox v33.0.2 (x86 en-US) -\\ Google Chrome v40.0.2214.111 ************************* AdwCleaner[R0].txt - [1755 bytes] - [18/02/2015 02:14:14] AdwCleaner[R1].txt - [1814 bytes] - [18/02/2015 02:16:28] AdwCleaner[s0].txt - [1810 bytes] - [18/02/2015 02:17:16] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [1869 bytes] ##########
  4. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 18/02/2015 Scan Time: 01:58:05 Logfile: Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.02.18.01 Rootkit Database: v2015.02.03.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: Isaac Scan Type: Threat Scan Result: Completed Objects Scanned: 386258 Time Elapsed: 13 min, 59 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end)
  5. Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-02-2015 Ran by Isaac at 2015-02-18 01:49:58 Run:1 Running from C:\Users\Isaac\Desktop Loaded Profiles: Isaac (Available profiles: Isaac) Boot Mode: Normal ============================================== Content of fixlist: ***************** start C:\ProgramData\DP45977C.lfl C:\Users\Isaac\alotic_preferences.dat C:\Users\Isaac\alotic_preferences2.dat C:\Users\Isaac\guardian_noregret_LIVE.dat C:\Users\Isaac\jagex_cl_loginapplet_LIVE.dat C:\Users\Isaac\jagex_cl_oldschool_LIVE.dat C:\Users\Isaac\jagex_cl_runescape_LIVE.dat C:\Users\Isaac\jagex_cl_runescape_LIVE1.dat C:\Users\Isaac\random.dat C:\Users\Isaac\Vindictus.exe C:\Users\Isaac\AppData\Local\Temp\dllnt_dump.dll AlternateDataStreams: C:\Windows:nlsPreferences AlternateDataStreams: C:\Users\Isaac\OneDrive:ms-properties EmptyTemp: end ***************** C:\ProgramData\DP45977C.lfl => Moved successfully. C:\Users\Isaac\alotic_preferences.dat => Moved successfully. C:\Users\Isaac\alotic_preferences2.dat => Moved successfully. C:\Users\Isaac\guardian_noregret_LIVE.dat => Moved successfully. C:\Users\Isaac\jagex_cl_loginapplet_LIVE.dat => Moved successfully. C:\Users\Isaac\jagex_cl_oldschool_LIVE.dat => Moved successfully. C:\Users\Isaac\jagex_cl_runescape_LIVE.dat => Moved successfully. C:\Users\Isaac\jagex_cl_runescape_LIVE1.dat => Moved successfully. C:\Users\Isaac\random.dat => Moved successfully. C:\Users\Isaac\Vindictus.exe => Moved successfully. C:\Users\Isaac\AppData\Local\Temp\dllnt_dump.dll => Moved successfully. C:\Windows => ":nlsPreferences" ADS removed successfully. "C:\Users\Isaac\OneDrive" => ":ms-properties" ADS not found. EmptyTemp: => Removed 408.5 MB temporary data. The system needed a reboot. ==== End of Fixlog 01:50:33 ====
  6. 2015-02-18 00:22:16, Info CSI 0000000a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:16, Info CSI 0000000b [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:19, Info CSI 0000000c [sR] Verify complete 2015-02-18 00:22:19, Info CSI 0000000d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:19, Info CSI 0000000e [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:22, Info CSI 0000000f [sR] Verify complete 2015-02-18 00:22:23, Info CSI 00000010 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:23, Info CSI 00000011 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:26, Info CSI 00000012 [sR] Verify complete 2015-02-18 00:22:26, Info CSI 00000013 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:26, Info CSI 00000014 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:29, Info CSI 00000015 [sR] Verify complete 2015-02-18 00:22:29, Info CSI 00000016 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:29, Info CSI 00000017 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:32, Info CSI 00000018 [sR] Verify complete 2015-02-18 00:22:32, Info CSI 00000019 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:32, Info CSI 0000001a [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:35, Info CSI 0000001b [sR] Verify complete 2015-02-18 00:22:35, Info CSI 0000001c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:35, Info CSI 0000001d [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:39, Info CSI 0000001e [sR] Verify complete 2015-02-18 00:22:39, Info CSI 0000001f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:39, Info CSI 00000020 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:42, Info CSI 00000021 [sR] Verify complete 2015-02-18 00:22:42, Info CSI 00000022 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:42, Info CSI 00000023 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:45, Info CSI 00000024 [sR] Verify complete 2015-02-18 00:22:45, Info CSI 00000025 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:45, Info CSI 00000026 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:49, Info CSI 00000027 [sR] Verify complete 2015-02-18 00:22:49, Info CSI 00000028 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:49, Info CSI 00000029 [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:52, Info CSI 0000002a [sR] Verify complete 2015-02-18 00:22:52, Info CSI 0000002b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:52, Info CSI 0000002c [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:55, Info CSI 0000002d [sR] Verify complete 2015-02-18 00:22:55, Info CSI 0000002e [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:55, Info CSI 0000002f [sR] Beginning Verify and Repair transaction 2015-02-18 00:22:58, Info CSI 00000030 [sR] Verify complete 2015-02-18 00:22:58, Info CSI 00000031 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:22:58, Info CSI 00000032 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:01, Info CSI 00000033 [sR] Verify complete 2015-02-18 00:23:01, Info CSI 00000034 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:01, Info CSI 00000035 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:04, Info CSI 00000036 [sR] Verify complete 2015-02-18 00:23:04, Info CSI 00000037 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:04, Info CSI 00000038 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:07, Info CSI 00000039 [sR] Verify complete 2015-02-18 00:23:07, Info CSI 0000003a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:07, Info CSI 0000003b [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:10, Info CSI 0000003c [sR] Verify complete 2015-02-18 00:23:10, Info CSI 0000003d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:10, Info CSI 0000003e [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:13, Info CSI 0000003f [sR] Verify complete 2015-02-18 00:23:13, Info CSI 00000040 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:13, Info CSI 00000041 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:17, Info CSI 00000042 [sR] Verify complete 2015-02-18 00:23:17, Info CSI 00000043 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:17, Info CSI 00000044 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:20, Info CSI 00000045 [sR] Verify complete 2015-02-18 00:23:20, Info CSI 00000046 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:20, Info CSI 00000047 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:23, Info CSI 00000048 [sR] Verify complete 2015-02-18 00:23:23, Info CSI 00000049 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:23, Info CSI 0000004a [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:26, Info CSI 0000004b [sR] Verify complete 2015-02-18 00:23:26, Info CSI 0000004c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:26, Info CSI 0000004d [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:29, Info CSI 0000004e [sR] Verify complete 2015-02-18 00:23:29, Info CSI 0000004f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:29, Info CSI 00000050 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:34, Info CSI 00000051 [sR] Verify complete 2015-02-18 00:23:34, Info CSI 00000052 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:34, Info CSI 00000053 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:38, Info CSI 00000054 [sR] Verify complete 2015-02-18 00:23:38, Info CSI 00000055 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:38, Info CSI 00000056 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:41, Info CSI 00000057 [sR] Verify complete 2015-02-18 00:23:41, Info CSI 00000058 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:41, Info CSI 00000059 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:44, Info CSI 0000005a [sR] Verify complete 2015-02-18 00:23:44, Info CSI 0000005b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:44, Info CSI 0000005c [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:48, Info CSI 0000005d [sR] Verify complete 2015-02-18 00:23:48, Info CSI 0000005e [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:48, Info CSI 0000005f [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:51, Info CSI 00000060 [sR] Verify complete 2015-02-18 00:23:51, Info CSI 00000061 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:51, Info CSI 00000062 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:55, Info CSI 00000063 [sR] Verify complete 2015-02-18 00:23:55, Info CSI 00000064 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:55, Info CSI 00000065 [sR] Beginning Verify and Repair transaction 2015-02-18 00:23:59, Info CSI 00000066 [sR] Verify complete 2015-02-18 00:23:59, Info CSI 00000067 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:23:59, Info CSI 00000068 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:02, Info CSI 00000069 [sR] Verify complete 2015-02-18 00:24:02, Info CSI 0000006a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:02, Info CSI 0000006b [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:05, Info CSI 0000006c [sR] Verify complete 2015-02-18 00:24:05, Info CSI 0000006d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:05, Info CSI 0000006e [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:09, Info CSI 0000006f [sR] Verify complete 2015-02-18 00:24:09, Info CSI 00000070 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:09, Info CSI 00000071 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:12, Info CSI 00000072 [sR] Verify complete 2015-02-18 00:24:12, Info CSI 00000073 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:12, Info CSI 00000074 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:15, Info CSI 00000075 [sR] Verify complete 2015-02-18 00:24:15, Info CSI 00000076 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:15, Info CSI 00000077 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:18, Info CSI 00000078 [sR] Verify complete 2015-02-18 00:24:18, Info CSI 00000079 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:18, Info CSI 0000007a [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:22, Info CSI 0000007b [sR] Verify complete 2015-02-18 00:24:22, Info CSI 0000007c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:22, Info CSI 0000007d [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:26, Info CSI 0000007e [sR] Verify complete 2015-02-18 00:24:26, Info CSI 0000007f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:26, Info CSI 00000080 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:32, Info CSI 00000081 [sR] Verify complete 2015-02-18 00:24:33, Info CSI 00000082 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:33, Info CSI 00000083 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:38, Info CSI 00000084 [sR] Verify complete 2015-02-18 00:24:38, Info CSI 00000085 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:38, Info CSI 00000086 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:43, Info CSI 00000087 [sR] Verify complete 2015-02-18 00:24:43, Info CSI 00000088 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:43, Info CSI 00000089 [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:49, Info CSI 0000008d [sR] Verify complete 2015-02-18 00:24:49, Info CSI 0000008e [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:49, Info CSI 0000008f [sR] Beginning Verify and Repair transaction 2015-02-18 00:24:55, Info CSI 000000a6 [sR] Verify complete 2015-02-18 00:24:55, Info CSI 000000a7 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:24:55, Info CSI 000000a8 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:03, Info CSI 000000af [sR] Verify complete 2015-02-18 00:25:03, Info CSI 000000b0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:03, Info CSI 000000b1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:10, Info CSI 000000b4 [sR] Verify complete 2015-02-18 00:25:10, Info CSI 000000b5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:10, Info CSI 000000b6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:17, Info CSI 000000bf [sR] Verify complete 2015-02-18 00:25:17, Info CSI 000000c0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:17, Info CSI 000000c1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:24, Info CSI 000000c7 [sR] Verify complete 2015-02-18 00:25:24, Info CSI 000000c8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:24, Info CSI 000000c9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:30, Info CSI 000000ca [sR] Verify complete 2015-02-18 00:25:30, Info CSI 000000cb [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:30, Info CSI 000000cc [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:37, Info CSI 000000ce [sR] Verify complete 2015-02-18 00:25:37, Info CSI 000000cf [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:37, Info CSI 000000d0 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:46, Info CSI 000000f1 [sR] Verify complete 2015-02-18 00:25:46, Info CSI 000000f2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:46, Info CSI 000000f3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:25:54, Info CSI 00000117 [sR] Verify complete 2015-02-18 00:25:54, Info CSI 00000118 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:25:54, Info CSI 00000119 [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:01, Info CSI 00000123 [sR] Verify complete 2015-02-18 00:26:01, Info CSI 00000124 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:01, Info CSI 00000125 [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:08, Info CSI 0000012c [sR] Verify complete 2015-02-18 00:26:09, Info CSI 0000012d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:09, Info CSI 0000012e [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:17, Info CSI 00000146 [sR] Verify complete 2015-02-18 00:26:17, Info CSI 00000147 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:17, Info CSI 00000148 [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:24, Info CSI 00000150 [sR] Verify complete 2015-02-18 00:26:24, Info CSI 00000151 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:24, Info CSI 00000152 [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:31, Info CSI 00000153 [sR] Verify complete 2015-02-18 00:26:31, Info CSI 00000154 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:31, Info CSI 00000155 [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:38, Info CSI 0000015a [sR] Verify complete 2015-02-18 00:26:38, Info CSI 0000015b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:38, Info CSI 0000015c [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:45, Info CSI 0000016b [sR] Verify complete 2015-02-18 00:26:45, Info CSI 0000016c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:45, Info CSI 0000016d [sR] Beginning Verify and Repair transaction 2015-02-18 00:26:58, Info CSI 0000019b [sR] Verify complete 2015-02-18 00:26:58, Info CSI 0000019c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:26:58, Info CSI 0000019d [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:13, Info CSI 000001d1 [sR] Verify complete 2015-02-18 00:27:13, Info CSI 000001d2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:13, Info CSI 000001d3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:27, Info CSI 000001d5 [sR] Verify complete 2015-02-18 00:27:27, Info CSI 000001d6 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:27, Info CSI 000001d7 [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:32, Info CSI 000001df [sR] Verify complete 2015-02-18 00:27:33, Info CSI 000001e0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:33, Info CSI 000001e1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:39, Info CSI 000001f4 [sR] Verify complete 2015-02-18 00:27:39, Info CSI 000001f5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:39, Info CSI 000001f6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:47, Info CSI 00000208 [sR] Verify complete 2015-02-18 00:27:47, Info CSI 00000209 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:47, Info CSI 0000020a [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:52, Info CSI 0000020b [sR] Verify complete 2015-02-18 00:27:52, Info CSI 0000020c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:52, Info CSI 0000020d [sR] Beginning Verify and Repair transaction 2015-02-18 00:27:57, Info CSI 00000211 [sR] Verify complete 2015-02-18 00:27:57, Info CSI 00000212 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:27:57, Info CSI 00000213 [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:03, Info CSI 0000021c [sR] Verify complete 2015-02-18 00:28:03, Info CSI 0000021d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:03, Info CSI 0000021e [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:11, Info CSI 00000293 [sR] Verify complete 2015-02-18 00:28:11, Info CSI 00000294 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:11, Info CSI 00000295 [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:22, Info CSI 0000029c [sR] Verify complete 2015-02-18 00:28:23, Info CSI 0000029d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:23, Info CSI 0000029e [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:32, Info CSI 000002af [sR] Verify complete 2015-02-18 00:28:32, Info CSI 000002b0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:32, Info CSI 000002b1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:43, Info CSI 000002b2 [sR] Verify complete 2015-02-18 00:28:43, Info CSI 000002b3 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:43, Info CSI 000002b4 [sR] Beginning Verify and Repair transaction 2015-02-18 00:28:52, Info CSI 000002b6 [sR] Verify complete 2015-02-18 00:28:52, Info CSI 000002b7 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:28:52, Info CSI 000002b8 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:01, Info CSI 000002d4 [sR] Verify complete 2015-02-18 00:29:01, Info CSI 000002d5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:01, Info CSI 000002d6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:14, Info CSI 000002e1 [sR] Verify complete 2015-02-18 00:29:14, Info CSI 000002e2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:14, Info CSI 000002e3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:19, Info CSI 000002e4 [sR] Verify complete 2015-02-18 00:29:19, Info CSI 000002e5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:19, Info CSI 000002e6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:33, Info CSI 000002ef [sR] Verify complete 2015-02-18 00:29:33, Info CSI 000002f0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:33, Info CSI 000002f1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:41, Info CSI 00000310 [sR] Verify complete 2015-02-18 00:29:41, Info CSI 00000311 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:41, Info CSI 00000312 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:47, Info CSI 00000317 [sR] Verify complete 2015-02-18 00:29:47, Info CSI 00000318 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:47, Info CSI 00000319 [sR] Beginning Verify and Repair transaction 2015-02-18 00:29:56, Info CSI 00000324 [sR] Verify complete 2015-02-18 00:29:56, Info CSI 00000325 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:29:56, Info CSI 00000326 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:08, Info CSI 00000353 [sR] Verify complete 2015-02-18 00:30:08, Info CSI 00000354 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:08, Info CSI 00000355 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:14, Info CSI 00000358 [sR] Verify complete 2015-02-18 00:30:14, Info CSI 00000359 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:14, Info CSI 0000035a [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:20, Info CSI 00000366 [sR] Verify complete 2015-02-18 00:30:20, Info CSI 00000367 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:20, Info CSI 00000368 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:26, Info CSI 00000379 [sR] Verify complete 2015-02-18 00:30:26, Info CSI 0000037a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:26, Info CSI 0000037b [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:32, Info CSI 00000381 [sR] Verify complete 2015-02-18 00:30:32, Info CSI 00000382 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:32, Info CSI 00000383 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:40, Info CSI 00000393 [sR] Verify complete 2015-02-18 00:30:40, Info CSI 00000394 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:40, Info CSI 00000395 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:46, Info CSI 0000039e [sR] Verify complete 2015-02-18 00:30:46, Info CSI 0000039f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:46, Info CSI 000003a0 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:51, Info CSI 000003a1 [sR] Verify complete 2015-02-18 00:30:51, Info CSI 000003a2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:51, Info CSI 000003a3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:30:59, Info CSI 000003a7 [sR] Verify complete 2015-02-18 00:30:59, Info CSI 000003a8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:30:59, Info CSI 000003a9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:04, Info CSI 000003b9 [sR] Verify complete 2015-02-18 00:31:04, Info CSI 000003ba [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:04, Info CSI 000003bb [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:09, Info CSI 000003bd [sR] Verify complete 2015-02-18 00:31:09, Info CSI 000003be [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:09, Info CSI 000003bf [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:14, Info CSI 000003c0 [sR] Verify complete 2015-02-18 00:31:14, Info CSI 000003c1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:14, Info CSI 000003c2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:24, Info CSI 000003d1 [sR] Verify complete 2015-02-18 00:31:24, Info CSI 000003d2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:24, Info CSI 000003d3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:32, Info CSI 000003d7 [sR] Verify complete 2015-02-18 00:31:32, Info CSI 000003d8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:32, Info CSI 000003d9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:41, Info CSI 000003e6 [sR] Verify complete 2015-02-18 00:31:41, Info CSI 000003e7 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:41, Info CSI 000003e8 [sR] Beginning Verify and Repair transaction 2015-02-18 00:31:53, Info CSI 00000415 [sR] Verify complete 2015-02-18 00:31:53, Info CSI 00000416 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:31:53, Info CSI 00000417 [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:02, Info CSI 0000041e [sR] Verify complete 2015-02-18 00:32:02, Info CSI 0000041f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:02, Info CSI 00000420 [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:10, Info CSI 00000427 [sR] Verify complete 2015-02-18 00:32:10, Info CSI 00000428 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:10, Info CSI 00000429 [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:18, Info CSI 0000042a [sR] Verify complete 2015-02-18 00:32:18, Info CSI 0000042b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:18, Info CSI 0000042c [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:29, Info CSI 0000042d [sR] Verify complete 2015-02-18 00:32:29, Info CSI 0000042e [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:29, Info CSI 0000042f [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:38, Info CSI 00000435 [sR] Verify complete 2015-02-18 00:32:38, Info CSI 00000436 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:38, Info CSI 00000437 [sR] Beginning Verify and Repair transaction 2015-02-18 00:32:51, Info CSI 00000444 [sR] Verify complete 2015-02-18 00:32:51, Info CSI 00000445 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:32:51, Info CSI 00000446 [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:00, Info CSI 00000450 [sR] Verify complete 2015-02-18 00:33:01, Info CSI 00000451 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:01, Info CSI 00000452 [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:12, Info CSI 0000045f [sR] Verify complete 2015-02-18 00:33:12, Info CSI 00000460 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:12, Info CSI 00000461 [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:22, Info CSI 00000476 [sR] Verify complete 2015-02-18 00:33:22, Info CSI 00000477 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:22, Info CSI 00000478 [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:31, Info CSI 0000047a [sR] Verify complete 2015-02-18 00:33:31, Info CSI 0000047b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:31, Info CSI 0000047c [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:42, Info CSI 0000047d [sR] Verify complete 2015-02-18 00:33:42, Info CSI 0000047e [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:42, Info CSI 0000047f [sR] Beginning Verify and Repair transaction 2015-02-18 00:33:56, Info CSI 0000048a [sR] Verify complete 2015-02-18 00:33:56, Info CSI 0000048b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:33:56, Info CSI 0000048c [sR] Beginning Verify and Repair transaction 2015-02-18 00:34:09, Info CSI 000004b7 [sR] Verify complete 2015-02-18 00:34:09, Info CSI 000004b8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:34:09, Info CSI 000004b9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:34:17, Info CSI 000004bc [sR] Verify complete 2015-02-18 00:34:17, Info CSI 000004bd [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:34:17, Info CSI 000004be [sR] Beginning Verify and Repair transaction 2015-02-18 00:34:30, Info CSI 000004cd [sR] Verify complete 2015-02-18 00:34:31, Info CSI 000004ce [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:34:31, Info CSI 000004cf [sR] Beginning Verify and Repair transaction 2015-02-18 00:34:40, Info CSI 000004d0 [sR] Verify complete 2015-02-18 00:34:41, Info CSI 000004d1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:34:41, Info CSI 000004d2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:34:55, Info CSI 000004d4 [sR] Verify complete 2015-02-18 00:34:55, Info CSI 000004d5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:34:55, Info CSI 000004d6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:08, Info CSI 000004d7 [sR] Verify complete 2015-02-18 00:35:08, Info CSI 000004d8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:08, Info CSI 000004d9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:21, Info CSI 000004da [sR] Verify complete 2015-02-18 00:35:21, Info CSI 000004db [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:21, Info CSI 000004dc [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:32, Info CSI 000004dd [sR] Verify complete 2015-02-18 00:35:32, Info CSI 000004de [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:32, Info CSI 000004df [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:41, Info CSI 000004e0 [sR] Verify complete 2015-02-18 00:35:41, Info CSI 000004e1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:41, Info CSI 000004e2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:49, Info CSI 000004e3 [sR] Verify complete 2015-02-18 00:35:49, Info CSI 000004e4 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:49, Info CSI 000004e5 [sR] Beginning Verify and Repair transaction 2015-02-18 00:35:55, Info CSI 000004e6 [sR] Verify complete 2015-02-18 00:35:56, Info CSI 000004e7 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:35:56, Info CSI 000004e8 [sR] Beginning Verify and Repair transaction 2015-02-18 00:36:05, Info CSI 000004e9 [sR] Verify complete 2015-02-18 00:36:05, Info CSI 000004ea [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:36:05, Info CSI 000004eb [sR] Beginning Verify and Repair transaction 2015-02-18 00:36:13, Info CSI 00000508 [sR] Verify complete 2015-02-18 00:36:13, Info CSI 00000509 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:36:13, Info CSI 0000050a [sR] Beginning Verify and Repair transaction 2015-02-18 00:36:20, Info CSI 0000050b [sR] Verify complete 2015-02-18 00:36:21, Info CSI 0000050c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:36:21, Info CSI 0000050d [sR] Beginning Verify and Repair transaction 2015-02-18 00:36:33, Info CSI 00000510 [sR] Verify complete 2015-02-18 00:36:33, Info CSI 00000511 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:36:33, Info CSI 00000512 [sR] Beginning Verify and Repair transaction 2015-02-18 00:36:36, Info CSI 00000514 [sR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-02-18 00:36:48, Info CSI 00000516 [sR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-02-18 00:36:48, Info CSI 00000517 [sR] This component was referenced by [l:186{93}]"Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.INF_prncacla" 2015-02-18 00:36:54, Info CSI 00000518 [sR] Verify complete 2015-02-18 00:36:54, Info CSI 00000519 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:36:54, Info CSI 0000051a [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:04, Info CSI 0000051b [sR] Verify complete 2015-02-18 00:37:04, Info CSI 0000051c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:04, Info CSI 0000051d [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:14, Info CSI 0000051e [sR] Verify complete 2015-02-18 00:37:14, Info CSI 0000051f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:14, Info CSI 00000520 [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:26, Info CSI 00000521 [sR] Verify complete 2015-02-18 00:37:26, Info CSI 00000522 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:26, Info CSI 00000523 [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:38, Info CSI 00000525 [sR] Verify complete 2015-02-18 00:37:38, Info CSI 00000526 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:38, Info CSI 00000527 [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:48, Info CSI 00000531 [sR] Verify complete 2015-02-18 00:37:49, Info CSI 00000532 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:49, Info CSI 00000533 [sR] Beginning Verify and Repair transaction 2015-02-18 00:37:57, Info CSI 00000534 [sR] Verify complete 2015-02-18 00:37:57, Info CSI 00000535 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:37:57, Info CSI 00000536 [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:07, Info CSI 000005a4 [sR] Verify complete 2015-02-18 00:38:08, Info CSI 000005a5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:08, Info CSI 000005a6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:17, Info CSI 000005a9 [sR] Verify complete 2015-02-18 00:38:17, Info CSI 000005aa [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:17, Info CSI 000005ab [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:26, Info CSI 000005ac [sR] Verify complete 2015-02-18 00:38:26, Info CSI 000005ad [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:26, Info CSI 000005ae [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:35, Info CSI 000005af [sR] Verify complete 2015-02-18 00:38:35, Info CSI 000005b0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:35, Info CSI 000005b1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:44, Info CSI 000005b2 [sR] Verify complete 2015-02-18 00:38:44, Info CSI 000005b3 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:44, Info CSI 000005b4 [sR] Beginning Verify and Repair transaction 2015-02-18 00:38:53, Info CSI 000005b5 [sR] Verify complete 2015-02-18 00:38:53, Info CSI 000005b6 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:38:53, Info CSI 000005b7 [sR] Beginning Verify and Repair transaction 2015-02-18 00:39:12, Info CSI 000005c6 [sR] Verify complete 2015-02-18 00:39:12, Info CSI 000005c7 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:39:12, Info CSI 000005c8 [sR] Beginning Verify and Repair transaction 2015-02-18 00:39:27, Info CSI 000005de [sR] Verify complete 2015-02-18 00:39:27, Info CSI 000005df [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:39:27, Info CSI 000005e0 [sR] Beginning Verify and Repair transaction 2015-02-18 00:40:00, Info CSI 000005f1 [sR] Verify complete 2015-02-18 00:40:01, Info CSI 000005f2 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:40:01, Info CSI 000005f3 [sR] Beginning Verify and Repair transaction 2015-02-18 00:40:22, Info CSI 000005f5 [sR] Verify complete 2015-02-18 00:40:22, Info CSI 000005f6 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:40:22, Info CSI 000005f7 [sR] Beginning Verify and Repair transaction 2015-02-18 00:40:37, Info CSI 000005f8 [sR] Verify complete 2015-02-18 00:40:38, Info CSI 000005f9 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:40:38, Info CSI 000005fa [sR] Beginning Verify and Repair transaction 2015-02-18 00:41:06, Info CSI 00000607 [sR] Verify complete 2015-02-18 00:41:06, Info CSI 00000608 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:41:06, Info CSI 00000609 [sR] Beginning Verify and Repair transaction 2015-02-18 00:41:32, Info CSI 0000060b [sR] Verify complete 2015-02-18 00:41:33, Info CSI 0000060c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:41:33, Info CSI 0000060d [sR] Beginning Verify and Repair transaction 2015-02-18 00:42:01, Info CSI 0000062f [sR] Verify complete 2015-02-18 00:42:02, Info CSI 00000630 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:42:02, Info CSI 00000631 [sR] Beginning Verify and Repair transaction 2015-02-18 00:42:31, Info CSI 0000063a [sR] Verify complete 2015-02-18 00:42:31, Info CSI 0000063b [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:42:31, Info CSI 0000063c [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:08, Info CSI 00000649 [sR] Verify complete 2015-02-18 00:43:08, Info CSI 0000064a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:08, Info CSI 0000064b [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:20, Info CSI 0000066b [sR] Verify complete 2015-02-18 00:43:20, Info CSI 0000066c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:20, Info CSI 0000066d [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:30, Info CSI 000006b4 [sR] Verify complete 2015-02-18 00:43:30, Info CSI 000006b5 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:30, Info CSI 000006b6 [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:36, Info CSI 000006b7 [sR] Verify complete 2015-02-18 00:43:36, Info CSI 000006b8 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:36, Info CSI 000006b9 [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:42, Info CSI 000006ba [sR] Verify complete 2015-02-18 00:43:42, Info CSI 000006bb [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:42, Info CSI 000006bc [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:48, Info CSI 000006c0 [sR] Verify complete 2015-02-18 00:43:48, Info CSI 000006c1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:48, Info CSI 000006c2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:43:56, Info CSI 000006dc [sR] Verify complete 2015-02-18 00:43:56, Info CSI 000006dd [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:43:56, Info CSI 000006de [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:04, Info CSI 00000705 [sR] Verify complete 2015-02-18 00:44:04, Info CSI 00000706 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:04, Info CSI 00000707 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:10, Info CSI 00000708 [sR] Verify complete 2015-02-18 00:44:10, Info CSI 00000709 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:10, Info CSI 0000070a [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:16, Info CSI 00000712 [sR] Verify complete 2015-02-18 00:44:16, Info CSI 00000713 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:16, Info CSI 00000714 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:22, Info CSI 00000716 [sR] Verify complete 2015-02-18 00:44:23, Info CSI 00000717 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:23, Info CSI 00000718 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:29, Info CSI 00000724 [sR] Verify complete 2015-02-18 00:44:29, Info CSI 00000725 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:29, Info CSI 00000726 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:37, Info CSI 00000745 [sR] Verify complete 2015-02-18 00:44:37, Info CSI 00000746 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:37, Info CSI 00000747 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:44, Info CSI 0000075e [sR] Verify complete 2015-02-18 00:44:44, Info CSI 0000075f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:44, Info CSI 00000760 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:48, Info CSI 00000761 [sR] Verify complete 2015-02-18 00:44:48, Info CSI 00000762 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:48, Info CSI 00000763 [sR] Beginning Verify and Repair transaction 2015-02-18 00:44:54, Info CSI 00000765 [sR] Verify complete 2015-02-18 00:44:55, Info CSI 00000766 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:44:55, Info CSI 00000767 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:04, Info CSI 00000771 [sR] Verify complete 2015-02-18 00:45:04, Info CSI 00000772 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:04, Info CSI 00000773 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:16, Info CSI 00000774 [sR] Verify complete 2015-02-18 00:45:16, Info CSI 00000775 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:16, Info CSI 00000776 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:23, Info CSI 0000078f [sR] Verify complete 2015-02-18 00:45:23, Info CSI 00000790 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:23, Info CSI 00000791 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:29, Info CSI 00000793 [sR] Verify complete 2015-02-18 00:45:29, Info CSI 00000794 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:29, Info CSI 00000795 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:41, Info CSI 000007af [sR] Verify complete 2015-02-18 00:45:41, Info CSI 000007b0 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:41, Info CSI 000007b1 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:48, Info CSI 000007c0 [sR] Verify complete 2015-02-18 00:45:48, Info CSI 000007c1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:48, Info CSI 000007c2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:45:59, Info CSI 000007cd [sR] Verify complete 2015-02-18 00:45:59, Info CSI 000007ce [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:45:59, Info CSI 000007cf [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:05, Info CSI 000007f0 [sR] Verify complete 2015-02-18 00:46:05, Info CSI 000007f1 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:05, Info CSI 000007f2 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:11, Info CSI 000007fb [sR] Verify complete 2015-02-18 00:46:11, Info CSI 000007fc [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:11, Info CSI 000007fd [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:17, Info CSI 00000807 [sR] Verify complete 2015-02-18 00:46:17, Info CSI 00000808 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:17, Info CSI 00000809 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:21, Info CSI 0000080e [sR] Verify complete 2015-02-18 00:46:22, Info CSI 0000080f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:22, Info CSI 00000810 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:27, Info CSI 00000812 [sR] Verify complete 2015-02-18 00:46:27, Info CSI 00000813 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:27, Info CSI 00000814 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:33, Info CSI 00000819 [sR] Verify complete 2015-02-18 00:46:34, Info CSI 0000081a [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:34, Info CSI 0000081b [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:40, Info CSI 00000820 [sR] Verify complete 2015-02-18 00:46:40, Info CSI 00000821 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:40, Info CSI 00000822 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:45, Info CSI 00000825 [sR] Verify complete 2015-02-18 00:46:45, Info CSI 00000826 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:45, Info CSI 00000827 [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:50, Info CSI 0000082c [sR] Verify complete 2015-02-18 00:46:50, Info CSI 0000082d [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:50, Info CSI 0000082e [sR] Beginning Verify and Repair transaction 2015-02-18 00:46:56, Info CSI 00000830 [sR] Verify complete 2015-02-18 00:46:56, Info CSI 00000831 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:46:56, Info CSI 00000832 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:02, Info CSI 00000835 [sR] Verify complete 2015-02-18 00:47:02, Info CSI 00000836 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:02, Info CSI 00000837 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:10, Info CSI 00000841 [sR] Verify complete 2015-02-18 00:47:10, Info CSI 00000842 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:10, Info CSI 00000843 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:20, Info CSI 00000844 [sR] Verify complete 2015-02-18 00:47:20, Info CSI 00000845 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:20, Info CSI 00000846 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:27, Info CSI 00000848 [sR] Verify complete 2015-02-18 00:47:27, Info CSI 00000849 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:27, Info CSI 0000084a [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:33, Info CSI 0000084b [sR] Verify complete 2015-02-18 00:47:33, Info CSI 0000084c [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:33, Info CSI 0000084d [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:41, Info CSI 0000084e [sR] Verify complete 2015-02-18 00:47:41, Info CSI 0000084f [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:41, Info CSI 00000850 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:46, Info CSI 00000851 [sR] Verify complete 2015-02-18 00:47:46, Info CSI 00000852 [sR] Verifying 100 (0x0000000000000064) components 2015-02-18 00:47:46, Info CSI 00000853 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:52, Info CSI 00000854 [sR] Verify complete 2015-02-18 00:47:53, Info CSI 00000855 [sR] Verifying 98 (0x0000000000000062) components 2015-02-18 00:47:53, Info CSI 00000856 [sR] Beginning Verify and Repair transaction 2015-02-18 00:47:59, Info CSI 00000859 [sR] Verify complete 2015-02-18 00:47:59, Info CSI 0000085a [sR] Repairing 1 components 2015-02-18 00:47:59, Info CSI 0000085b [sR] Beginning Verify and Repair transaction 2015-02-18 00:48:00, Info CSI 0000085d [sR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-02-18 00:48:00, Info CSI 0000085f [sR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch 2015-02-18 00:48:00, Info CSI 00000860 [sR] This component was referenced by [l:186{93}]"Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~6.3.9600.16384.INF_prncacla" 2015-02-18 00:48:00, Info CSI 00000861 [sR] Repair complete 2015-02-18 00:48:00, Info CSI 00000862 [sR] Committing transaction 2015-02-18 00:48:00, Info CSI 00000867 [sR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired
  7. SystemLook 30.07.11 by jpshortstuff Log created at 23:43 on 17/02/2015 by Isaac Administrator - Elevation successful ========== filefind ========== Searching for "hal.dll" C:\Windows\System32\hal.dll --a---- 423768 bytes [16:12 02/12/2014] [02:10 02/06/2014] 08DCA300264238F9AE941302321F3D54 C:\Windows\WinSxS\amd64_microsoft-windows-hal_31bf3856ad364e35_6.3.9600.17031_none_9c1a44f32d7b883b\hal.dll --a---- 24467 bytes [07:23 24/09/2014] [11:58 13/12/2014] 2635F50EAF3E1B4A8D32B21E1203E130 C:\Windows\WinSxS\amd64_microsoft-windows-hal_31bf3856ad364e35_6.3.9600.17196_none_9bde68c32da7abbb\hal.dll --a---- 423768 bytes [16:12 02/12/2014] [02:10 02/06/2014] 08DCA300264238F9AE941302321F3D54 -= EOF =-
  8. I just noticed there is no volume option on my computer now :S The systemlook is taking long to scan
  9. ================================================== Dump File : 021715-61390-01.dmp Crash Time : 17/02/2015 20:39:57 Bug Check String : Bug Check Code : 0x00000139 Parameter 1 : 00000000`00000003 Parameter 2 : ffffd001`7bd81d70 Parameter 3 : ffffd001`7bd81cc8 Parameter 4 : 00000000`00000000 Caused By Driver : hal.dll Caused By Address : hal.dll+669a File Description : Product Name : Company : File Version : Processor : x64 Crash Address : ntoskrnl.exe+1509a0 Stack Address 1 : Stack Address 2 : Stack Address 3 : Computer Name : Full Path : C:\WINDOWS\Minidump\021715-61390-01.dmp Processors Count : 4 Major Version : 15 Minor Version : 9600 Dump File Size : 329,256 Dump File Time : 17/02/2015 20:42:35 ================================================== This is the 2nd blue screen thing I saved just now, just incase my laptop shuts down and I'm never able to go on it again
  10. There is a file on my desktop that says "This PC" and "Isaac Mensah" It's basically "Computer" and "User" on windows 7 but it just appeared randomly on my desktop when I logged in again I deleted both but they aren't in my recycling bin they are restored to the original location
  11. Okay, I'm starting to get scared now, my laptop just shut off instead of crashing, for no reason
  12. Thanks: ================================================== Dump File : 021715-61390-01.dmpCrash Time : 17/02/2015 20:39:57Bug Check String : Bug Check Code : 0x00000139Parameter 1 : 00000000`00000003Parameter 2 : ffffd001`7bd81d70Parameter 3 : ffffd001`7bd81cc8Parameter 4 : 00000000`00000000Caused By Driver : hal.dllCaused By Address : hal.dll+669aFile Description : Product Name : Company : File Version : Processor : x64Crash Address : ntoskrnl.exe+1509a0Stack Address 1 : Stack Address 2 : Stack Address 3 : Computer Name : Full Path : C:\WINDOWS\Minidump\021715-61390-01.dmpProcessors Count : 4Major Version : 15Minor Version : 9600Dump File Size : 329,256Dump File Time : 17/02/2015 20:42:35==================================================
  13. hal.dll hal.dll+669a fffff803`f5c0a000 fffff803`f5c7a000 0x00070000 0x538bade8 01/06/2014 22:49:12 ntoskrnl.exe ntoskrnl.exe+15c4e9 fffff803`f5c7a000 fffff803`f640e000 0x00794000 0x54b0c2f7 10/01/2015 06:13:11 had errors
  14. FRST: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-02-2015Ran by Isaac (administrator) on ISAAC on 17-02-2015 22:25:55Running from C:\Users\Isaac\DownloadsLoaded Profiles: Isaac (Available profiles: Isaac)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe() C:\Windows\SysWOW64\PnkBstrA.exe(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe() C:\Users\Isaac\Desktop\RogueKiller.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.237\deploy\LoLLauncher.exe() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.21\deploy\LoLPatcher.exe(Resplendence Software Projects) C:\Program Files\WhoCrashed\WhoCrashedEx.exe() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.129\deploy\LolClient.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Farbar) C:\Users\Isaac\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)HKLM\...\Run: [synLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-11-30] (Synaptics)HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-03-19] (Lenovo (Beijing) Limited)HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-03-19] (Lenovo(beijing) Limited)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated)HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-07-26] (Dolby Laboratories Inc.)HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)HKLM-x32\...\Run: [intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)HKLM-x32\...\Run: [MuteSync] => C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe [343040 2012-02-04] (Lenovo)HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3977576 2015-01-20] (LogMeIn Inc.)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKLM\...\Policies\Explorer: [NoFolderOptions] 0HKLM\...\Policies\Explorer: [NoControlPanel] 0HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-17] (Valve Corporation)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30873192 2014-12-11] (Skype Technologies S.A.)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [GoogleChromeAutoLaunch_66D9B4593984BB5EE437F9BA7B8E9ADA] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)Startup: C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()ShellIconOverlayIdentifiers: [sugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-778363092-4269730154-400294747-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONHKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.comHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.comSearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = SearchScopes: HKU\S-1-5-21-778363092-4269730154-400294747-1001 -> DefaultScope {12DCC037-EDE2-4208-8285-54B6BBFF8718} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100Tcpip\..\Interfaces\{CFE635AC-4570-42E1-9C0A-DAC330745037}: [NameServer] 8.8.8.8,8.8.4.4 FireFox:========FF ProfilePath: C:\Users\Isaac\AppData\Roaming\Mozilla\Firefox\Profiles\3hgc6nfp.defaultFF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)FF Extension: Adblock Plus - C:\Users\Isaac\AppData\Roaming\Mozilla\Firefox\Profiles\3hgc6nfp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-29] Chrome: =======CHR HomePage: Default -> hxxp://www.google.com/CHR StartupUrls: Default -> "hxxp://www.google.co.uk/"CHR DefaultSearchKeyword: Default -> google.co.uk_CHR DefaultSearchURL: Default -> http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=CHR DefaultSuggestURL: Default -> CHR Profile: C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Slides) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-21]CHR Extension: (Google Docs) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-21]CHR Extension: (Google Drive) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-21]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-21]CHR Extension: (WOT) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-01-13]CHR Extension: (YouTube) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-21]CHR Extension: (Adblock Plus) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-21]CHR Extension: (Ratings Preview for YouTube™) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbhdenfmgbagncdmgbholejjpmmiank [2014-09-23]CHR Extension: (Google Search) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-21]CHR Extension: (Help Me) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnpiaklebapgfbhkdibfgemmajmgkon [2015-01-22]CHR Extension: (Tampermonkey) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-12-31]CHR Extension: (Google Sheets) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-21]CHR Extension: (Cookie Manager) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbnfbcpkiaganjpcanopcgeoehkleeck [2015-01-13]CHR Extension: (Google Wallet) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-21]CHR Extension: (Enhanced Steam) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2015-01-13]CHR Extension: (Gmail) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-21] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231040 2012-11-01] (Qualcomm Atheros Commnucations)R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [182304 2014-11-29] (EasyAntiCheat Ltd)S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1580416 2015-01-11] (Echobit LLC)R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-01-14] (LogMeIn, Inc.)R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2014-12-07] ()S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-12-02] (Microsoft Corporation)R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-12-02] (Microsoft Corporation)R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-11-01] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-11-01] (Qualcomm Atheros)R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)R3 EvolveVirtualAdapter; C:\Windows\system32\DRIVERS\evolve.sys [21656 2015-01-11] (Echobit, LLC)R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-01-20] (LogMeIn Inc.)S3 HP8107Fltr; C:\Windows\System32\drivers\HP8107.sys [13824 2010-02-04] (Windows ® Win 7 DDK provider)S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-17] (Malwarebytes Corporation)R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated)U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-02-17] ()R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-12-02] (Microsoft Corporation)S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-17 22:25 - 2015-02-17 22:26 - 00018391 _____ () C:\Users\Isaac\Downloads\FRST.txt2015-02-17 22:25 - 2015-02-17 22:25 - 02085888 _____ (Farbar) C:\Users\Isaac\Downloads\FRST64 (1).exe2015-02-17 21:15 - 2015-02-17 21:16 - 10236270 _____ () C:\Users\Isaac\Downloads\tweaking.com_windows_repair_aio.zip2015-02-17 21:03 - 2015-02-17 21:03 - 15494232 _____ () C:\Users\Isaac\Desktop\RogueKiller.exe2015-02-17 21:02 - 2015-02-17 21:03 - 15494232 _____ () C:\Users\Isaac\Downloads\RogueKiller.exe2015-02-17 20:56 - 2015-02-17 21:54 - 00000000 ____D () C:\Program Files\WhoCrashed2015-02-17 20:56 - 2015-02-17 20:56 - 02727584 _____ (Resplendence Software Projects Sp. ) C:\Users\Isaac\Downloads\whocrashedsetup.exe2015-02-17 20:56 - 2015-02-17 20:56 - 00000859 _____ () C:\Users\Isaac\Desktop\WhoCrashed.lnk2015-02-17 20:56 - 2015-02-17 20:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed2015-02-17 20:42 - 2015-02-17 20:42 - 00329256 _____ () C:\WINDOWS\Minidump\021715-61390-01.dmp2015-02-17 19:45 - 2015-02-17 20:42 - 654072502 _____ () C:\WINDOWS\MEMORY.DMP2015-02-17 17:43 - 2015-01-12 03:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2015-02-17 17:43 - 2015-01-12 02:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2015-02-17 17:43 - 2015-01-12 02:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2015-02-17 17:43 - 2015-01-12 02:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2015-02-17 17:43 - 2015-01-12 02:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll2015-02-17 17:43 - 2015-01-12 02:32 - 06041088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2015-02-17 17:43 - 2015-01-12 02:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2015-02-17 17:43 - 2015-01-12 02:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll2015-02-17 17:43 - 2015-01-12 02:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2015-02-17 17:43 - 2015-01-12 02:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2015-02-17 17:43 - 2015-01-12 02:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2015-02-17 17:43 - 2015-01-12 02:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2015-02-17 17:43 - 2015-01-12 01:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll2015-02-17 17:43 - 2015-01-12 01:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll2015-02-17 17:43 - 2015-01-12 01:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll2015-02-17 17:43 - 2015-01-12 01:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2015-02-17 17:43 - 2015-01-12 01:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2015-02-17 17:43 - 2015-01-12 01:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2015-02-17 17:43 - 2015-01-12 01:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2015-02-17 17:43 - 2015-01-12 01:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll2015-02-17 17:43 - 2015-01-12 01:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2015-02-17 17:43 - 2015-01-12 01:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll2015-02-17 17:43 - 2015-01-12 01:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll2015-02-17 17:43 - 2015-01-12 01:29 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2015-02-17 17:43 - 2015-01-12 01:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll2015-02-17 17:43 - 2015-01-12 01:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2015-02-17 17:43 - 2015-01-12 01:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll2015-02-17 17:43 - 2015-01-12 01:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2015-02-17 17:43 - 2015-01-12 01:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2015-02-17 17:43 - 2015-01-12 01:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2015-02-17 17:43 - 2015-01-12 01:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2015-02-17 17:43 - 2015-01-12 01:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2015-02-17 17:43 - 2015-01-12 01:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2015-02-17 17:43 - 2015-01-12 01:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2015-02-17 17:43 - 2015-01-12 00:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2015-02-17 17:43 - 2015-01-12 00:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2015-02-17 17:26 - 2015-02-17 17:26 - 00001625 _____ () C:\Users\Public\Desktop\League of Legends.lnk2015-02-17 17:26 - 2015-02-17 17:26 - 00000000 ____D () C:\Riot Games2015-02-17 17:26 - 2015-02-17 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends2015-02-17 17:26 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll2015-02-17 17:26 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll2015-02-17 17:26 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll2015-02-17 17:25 - 2015-02-17 17:25 - 30668968 _____ (Riot Games) C:\Users\Isaac\Downloads\LeagueofLegends_EUW_Installer_9_15_2014 (1).exe2015-02-17 17:24 - 2015-02-17 17:24 - 30668968 _____ (Riot Games) C:\Users\Isaac\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe2015-02-17 17:15 - 2015-02-17 21:49 - 00000308 _____ () C:\WINDOWS\setupact.log2015-02-17 17:15 - 2015-02-17 17:15 - 00000000 _____ () C:\WINDOWS\setuperr.log2015-02-17 16:43 - 2015-02-03 23:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2015-02-17 16:43 - 2015-02-03 23:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll2015-02-17 16:43 - 2015-02-03 23:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll2015-02-17 16:43 - 2015-02-02 23:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2015-02-17 16:43 - 2015-02-02 23:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll2015-02-17 16:43 - 2015-02-02 23:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll2015-02-17 16:43 - 2015-01-19 18:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll2015-02-17 16:43 - 2015-01-15 22:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys2015-02-17 16:43 - 2015-01-15 22:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys2015-02-17 16:43 - 2015-01-14 04:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll2015-02-17 16:43 - 2015-01-14 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll2015-02-17 16:43 - 2015-01-13 22:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll2015-02-17 16:43 - 2015-01-13 22:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll2015-02-17 16:43 - 2015-01-10 09:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe2015-02-17 16:43 - 2015-01-10 09:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll2015-02-17 16:43 - 2015-01-10 08:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll2015-02-17 16:43 - 2015-01-10 08:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2015-02-17 16:43 - 2015-01-10 07:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll2015-02-17 16:43 - 2015-01-10 06:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll2015-02-17 16:43 - 2014-12-19 08:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll2015-02-17 16:43 - 2014-12-19 08:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll2015-02-17 16:43 - 2014-12-09 03:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll2015-02-17 16:43 - 2014-12-09 01:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll2015-02-17 16:43 - 2014-12-08 23:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml2015-02-17 16:43 - 2014-10-29 02:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll2015-02-17 16:43 - 2014-10-29 02:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll2015-02-17 16:43 - 2014-10-29 02:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll2015-02-17 16:43 - 2014-10-29 02:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll2015-02-17 16:43 - 2014-10-29 02:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll2015-02-17 16:43 - 2014-10-29 02:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll2015-02-17 16:43 - 2014-10-29 01:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll2015-02-17 16:43 - 2014-10-29 01:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll2015-02-17 16:43 - 2014-10-29 01:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll2015-02-17 16:43 - 2014-10-29 01:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll2015-02-17 16:43 - 2014-10-29 01:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe2015-02-17 16:43 - 2014-10-29 01:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe2015-02-17 16:43 - 2014-10-29 01:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe2015-02-14 22:52 - 2015-02-14 22:52 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Geckofx2015-02-13 17:12 - 2015-02-17 22:10 - 02018823 _____ () C:\WINDOWS\WindowsUpdate.log2015-02-06 17:26 - 2015-02-06 17:26 - 00000000 _____ () C:\Users\Isaac\Desktop\YxmLtxuR.txt2015-02-06 17:24 - 2015-02-06 17:24 - 00000000 _____ () C:\Users\Isaac\Desktop\jirizsDs.txt2015-02-06 14:58 - 2015-02-06 14:58 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Steam2015-02-03 19:24 - 2015-02-17 20:42 - 00000000 ____D () C:\WINDOWS\Minidump2015-02-02 00:08 - 2015-02-17 20:49 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job2015-02-02 00:08 - 2015-02-06 15:49 - 00003718 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater2015-02-02 00:08 - 2015-02-02 09:27 - 00000892 _____ () C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job2015-02-02 00:08 - 2015-02-02 00:08 - 00003850 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier2015-02-02 00:01 - 2015-02-02 00:10 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Adobe2015-02-01 23:57 - 2015-02-01 23:57 - 05006144 _____ (Adobe Systems Inc.) C:\Users\Isaac\Downloads\Shockwave_Installer_Slim.exe2015-02-01 23:57 - 2015-02-01 23:57 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe2015-02-01 22:07 - 2015-02-01 22:06 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll2015-02-01 22:06 - 2015-02-01 22:06 - 00000000 ____D () C:\Program Files\Java2015-02-01 22:00 - 2015-02-01 22:05 - 93427112 _____ (Oracle Corporation) C:\Users\Isaac\Downloads\jre-8u31-windows-x64.exe2015-01-30 20:33 - 2015-01-30 20:33 - 05325208 _____ (Piriform Ltd) C:\Users\Isaac\Downloads\ccsetup502 (1).exe2015-01-30 20:27 - 2015-01-30 20:28 - 05325208 _____ (Piriform Ltd) C:\Users\Isaac\Downloads\ccsetup502.exe2015-01-25 13:06 - 2015-02-02 23:08 - 00000000 ___RD () C:\Users\Isaac\Desktop\Stream Mew-TwoSic2015-01-22 16:44 - 2015-01-22 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi2015-01-22 16:44 - 2015-01-22 16:44 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi2015-01-21 07:52 - 2015-01-21 07:56 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Curse Advertising2015-01-21 07:52 - 2015-01-21 07:52 - 00000000 ____D () C:\Users\Isaac\Documents\My Curse2015-01-21 07:52 - 2015-01-21 07:52 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse2015-01-21 07:51 - 2015-01-27 16:19 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Deployment2015-01-21 07:51 - 2015-01-21 07:51 - 00402696 _____ () C:\Users\Isaac\Downloads\setup.exe2015-01-20 13:16 - 2015-01-20 13:16 - 00044296 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-17 22:25 - 2014-12-31 15:34 - 00000000 ____D () C:\FRST2015-02-17 22:17 - 2014-09-26 14:56 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Skype2015-02-17 22:00 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru2015-02-17 21:55 - 2014-09-23 16:42 - 00000000 ___RD () C:\Users\Isaac\Desktop\My Games2015-02-17 21:55 - 2014-09-21 15:19 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-778363092-4269730154-400294747-10012015-02-17 21:51 - 2015-01-02 14:53 - 00035064 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys2015-02-17 21:51 - 2014-12-14 13:13 - 00000000 ____D () C:\Users\Isaac\AppData\Local\LogMeIn Hamachi2015-02-17 21:51 - 2014-12-02 07:46 - 00000000 ____D () C:\Users\Isaac\OneDrive2015-02-17 21:51 - 2014-09-21 15:16 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2015-02-17 21:49 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2015-02-17 21:36 - 2014-09-21 15:16 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2015-02-17 21:11 - 2014-09-22 17:42 - 00000000 ____D () C:\Program Files (x86)\Steam2015-02-17 20:59 - 2014-09-22 15:58 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2015-02-17 20:12 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2015-02-17 20:01 - 2014-12-01 21:35 - 00000000 ____D () C:\Users\Isaac2015-02-17 17:29 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2015-02-17 17:27 - 2014-09-21 15:35 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Riot Games2015-02-17 17:15 - 2013-08-22 14:44 - 00483000 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2015-02-17 17:13 - 2014-09-21 18:05 - 00000000 ____D () C:\WINDOWS\system32\MRT2015-02-17 17:13 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI2015-02-17 17:08 - 2014-09-21 18:05 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2015-02-17 17:06 - 2014-12-12 02:01 - 00000000 ____D () C:\WINDOWS\system32\appraiser2015-02-17 17:06 - 2014-09-24 09:50 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2015-02-17 17:00 - 2014-09-23 15:14 - 00000000 ____D () C:\Users\Isaac\AppData\Local\CrashDumps2015-02-17 16:57 - 2014-10-25 07:22 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Battle.net2015-02-17 16:20 - 2014-11-07 22:13 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Glyph2015-02-17 16:20 - 2014-10-30 22:04 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\OBS2015-02-17 16:20 - 2014-10-25 07:23 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2015-02-17 16:20 - 2014-10-25 07:22 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Battle.net2015-02-17 16:20 - 2014-10-25 07:22 - 00000000 ____D () C:\Program Files (x86)\Battle.net2015-02-17 16:20 - 2014-09-26 14:24 - 00000000 ____D () C:\Program Files (x86)\Guild Wars 22015-02-17 16:20 - 2013-08-22 15:36 - 00000000 __RSD () C:\WINDOWS\Media2015-02-17 16:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\rescache2015-02-17 16:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions2015-02-17 16:20 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared2015-02-17 16:20 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep2015-02-17 16:20 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\servicing2015-02-17 16:09 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\registration2015-02-17 16:06 - 2014-09-21 15:11 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Packages2015-02-13 15:49 - 2014-10-28 15:20 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\TS3Client2015-02-09 08:17 - 2015-01-12 23:49 - 00000000 ____D () C:\Users\Isaac\Documents\Richards Things2015-02-06 15:31 - 2014-09-21 15:16 - 00003890 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA2015-02-06 15:31 - 2014-09-21 15:16 - 00003654 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore2015-02-03 19:31 - 2014-12-04 16:00 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2015-02-03 19:31 - 2014-12-04 16:00 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2015-02-02 11:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF2015-02-01 22:06 - 2014-09-27 20:12 - 00000000 ____D () C:\ProgramData\Oracle2015-02-01 21:58 - 2014-11-07 22:13 - 00000000 ____D () C:\Program Files (x86)\Glyph2015-01-31 18:41 - 2014-09-24 14:28 - 00000000 ___RD () C:\Users\Isaac\Desktop\Lenovo Stuff2015-01-31 18:14 - 2015-01-09 01:10 - 00000000 ____D () C:\Users\Isaac\Desktop\PVHUD2015-01-31 18:14 - 2014-09-24 14:29 - 00000000 ___RD () C:\Users\Isaac\Desktop\Other Stuff2015-01-30 22:57 - 2015-01-06 16:51 - 00000000 ____D () C:\Program Files\CCleaner2015-01-26 22:12 - 2014-10-26 17:58 - 00000000 ____D () C:\Users\Isaac\AppData\Local\osu!2015-01-24 17:26 - 2014-10-30 22:03 - 00000000 ____D () C:\Program Files\OBS2015-01-21 07:52 - 2015-01-17 23:48 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft2015-01-21 07:52 - 2014-11-08 21:24 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\.minecraft2015-01-18 17:34 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports ==================== Files in the root of some directories ======= 2013-03-19 22:02 - 2013-03-19 22:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Files to move or delete:====================C:\Users\Isaac\alotic_preferences.datC:\Users\Isaac\alotic_preferences2.datC:\Users\Isaac\guardian_noregret_LIVE.datC:\Users\Isaac\jagex_cl_loginapplet_LIVE.datC:\Users\Isaac\jagex_cl_oldschool_LIVE.datC:\Users\Isaac\jagex_cl_runescape_LIVE.datC:\Users\Isaac\jagex_cl_runescape_LIVE1.datC:\Users\Isaac\random.datC:\Users\Isaac\Vindictus.exe Some content of TEMP:====================C:\Users\Isaac\AppData\Local\Temp\dllnt_dump.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-17 19:59 ==================== End Of Log ============================ Addition:Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-02-2015Ran by Isaac at 2015-02-17 22:26:37Running from C:\Users\Isaac\DownloadsBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)Adobe Flash Player 16 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)Amazon Browser App (HKLM-x32\...\{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}) (Version: 1.0.0.0 - Amazon)APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)Awesomenauts (HKLM-x32\...\Steam App 204300) (Version: - Ronimo Games)Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) HiddenBehaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) HiddenBioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)BlazBlue: Calamity Trigger (HKLM-x32\...\Steam App 263300) (Version: - Arc System Works Co., Ltd.)Build Tools - amd64 (Version: 12.0.30723 - Microsoft Corporation) HiddenBuild Tools - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) HiddenBuild Tools Language Resources - amd64 (Version: 12.0.30723 - Microsoft Corporation) HiddenBuild Tools Language Resources - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) HiddenCall of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version: - Sledgehammer Games)CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)Curse Client (HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version: - Stunlock Studios)Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - )Dream Pinball 3D (HKLM-x32\...\Steam App 215790) (Version: - ASK Homework)Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)Energy Management (x32 Version: 8.0.2.4 - Lenovo) HiddenEntity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.10 - Echobit, LLC)Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)Five Nights at Freddy's (HKLM-x32\...\Steam App 319510) (Version: - Scott Cawthon)Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.26.9 - Google Inc.) HiddenGuild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)Injustice: Gods Among Us Ultimate Edition (HKLM-x32\...\Steam App 242700) (Version: - NetherRealm Studios)Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)League of Legends (x32 Version: 3.0.1 - Riot Games) HiddenLeft 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333}) (Version: 1.12.824.1 - Vimicro)Lenovo MuteSync (HKLM-x32\...\{16D5D9E9-C8DE-4014-A09C-B9B5ABA0F7FA}) (Version: 1.0.10 - Lenovo)Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) HiddenLenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4310.52 - CyberLink Corp.)Lenovo PowerDVD10 (x32 Version: 10.0.4310.52 - CyberLink Corp.) HiddenLenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.)Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) HiddenLocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) HiddenLogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.303 - LogMeIn, Inc.)LogMeIn Hamachi (x32 Version: 2.2.0.303 - LogMeIn, Inc.) HiddenMalwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 3 (HKLM-x32\...\{1ef771b4-b774-439e-a015-23dec292d9a4}) (Version: 12.0.30723.0 - Microsoft Corporation)MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)Mozilla Firefox 33.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 en-US)) (Version: 33.0.2 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) HiddenOffice 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) HiddenOldSchool RuneScape Launcher 1.2.3 (HKLM-x32\...\{CCCEAAD4-3D2F-42C1-9AAA-08D458DB3509}) (Version: 1.2.3 - Jagex Ltd)Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.0 - Lenovo)Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )osu! (HKLM-x32\...\{722730b6-a49c-4c28-9fcc-de3977e9ac95}) (Version: latest - ppy Pty Ltd)PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)Pokemon Showdown (HKLM-x32\...\Pokemon Showdown) (Version: - "Pokemon Showdown")Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)Python Tools Redirection Template (x32 Version: 1.0 - Microsoft Corporation) HiddenQualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.214 - Qualcomm Atheros Communications)Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition)Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Skullgirls (HKLM-x32\...\Steam App 245170) (Version: - Lab Zero Games)Skullgirls ∞Endless Beta∞ (HKLM-x32\...\Steam App 208610) (Version: - )Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) HiddenSynaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.4.0 - Synaptics Incorporated)Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) HiddenTeam Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)Team Fortress 2 Server (HKLM-x32\...\Team Fortress 2 Server) (Version: - )TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl)Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios)Trove (HKLM-x32\...\Glyph Trove) (Version: - Trion Worlds, Inc.)TypeScript Power Tool (x32 Version: 1.0.3.1 - Microsoft Corporation) HiddenTypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.3.1 - Microsoft Corporation) HiddenUltra Street Fighter IV (HKLM-x32\...\Steam App 45760) (Version: - Capcom)Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)UserGuide (x32 Version: 1.0.0.9 - Lenovo) HiddenVindictus EU (HKLM-x32\...\Vindictus EU) (Version: - )Visual Studio 2013 Update 3 (KB2829760) (HKLM-x32\...\{86438e3d-7f83-4dd2-94aa-047e7c3974cb}) (Version: 12.0.30723 - Microsoft Corporation)VS Update core components (x32 Version: 12.0.30723 - Microsoft Corporation) HiddenWhoCrashed 5.03 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)Windows Driver Package - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)WinRAR 5.20 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.2 - win.rar GmbH)World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)Yahoo Community Smartbar (HKLM-x32\...\{4E732E5D-E577-451A-9BB1-CBE64A2CBC2F}) (Version: 11.112.66.19229 - Linkury Inc.) <==== ATTENTION ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-778363092-4269730154-400294747-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) ==================== Restore Points ========================= 28-01-2015 02:24:38 Scheduled Checkpoint06-02-2015 17:44:52 Installed DirectX11-02-2015 20:48:02 Windows Update17-02-2015 15:59:01 Restore Operation ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 13:25 - 2013-08-22 13:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {207A1B82-FED8-454D-8D47-9336937B5F20} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)Task: {43A8E392-6280-4BAC-8BFD-7903AC0B4921} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-21] (Google Inc.)Task: {4A6611C4-A19F-4B9B-84CB-1CA8D1D873DB} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)Task: {6299EF8C-66B5-43F1-A8EF-67E6BBE20829} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-11-30] (Synaptics Incorporated)Task: {9976C616-B4C7-46D6-9A2E-84EDA08D8ABD} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-07-03] ()Task: {B24C6975-B26B-44CF-8A20-99349079DE5D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-02-17] (Microsoft Corporation)Task: {C37C58EF-5CDF-4696-A8C6-F5246EDC7038} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)Task: {CB246933-C890-4042-89E5-DA09A26D3CD6} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_296_pepper.exeTask: {F5344EF8-C2A0-42FE-8BF5-9FC6105ABE20} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-01-08] (Microsoft Corporation)Task: {FEFA3600-EE51-4A13-AD3A-D36F961CA040} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-21] (Google Inc.)Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_296_pepper.exeTask: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Loaded Modules (whitelisted) ============== 2015-01-08 19:23 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll2014-12-07 13:15 - 2014-12-07 14:06 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe2015-01-08 19:27 - 2015-01-08 19:27 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll2015-02-17 21:03 - 2015-02-17 21:03 - 15494232 _____ () C:\Users\Isaac\Desktop\RogueKiller.exe2014-01-21 16:54 - 2015-02-17 17:27 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe2015-02-17 17:27 - 2015-02-17 17:27 - 02445816 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.237\deploy\LoLLauncher.exe2015-02-17 17:27 - 2015-02-17 17:27 - 04233720 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.21\deploy\LoLPatcher.exe2015-02-17 17:41 - 2015-02-17 17:41 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.129\deploy\LolClient.exe2015-02-05 22:31 - 2015-02-04 09:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll2015-02-05 22:31 - 2015-02-04 09:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll2015-02-05 22:31 - 2015-02-04 09:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll2013-03-19 21:39 - 2012-06-25 17:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll2015-02-17 17:27 - 2015-02-17 17:27 - 01618424 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.21\deploy\RiotLauncher.dll2015-02-17 20:56 - 2014-12-19 16:08 - 00118528 _____ () C:\Program Files\WhoCrashed\WhoCrashed32.dll2015-02-17 20:56 - 2014-12-19 16:08 - 00247552 _____ () C:\Program Files\WhoCrashed\rspSymSrv32.dll2015-02-17 17:33 - 2015-02-17 17:33 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.129\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll2015-02-17 17:33 - 2015-02-17 17:33 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.129\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows:nlsPreferencesAlternateDataStreams: C:\Users\Isaac\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-778363092-4269730154-400294747-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaperDNS Servers: 8.8.8.8 - 8.8.4.4 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run: => "RtHDVBg_Dolby"HKLM\...\StartupApproved\Run: => "EnergyUtility"HKLM\...\StartupApproved\Run: => "OnekeyStudio"HKLM\...\StartupApproved\Run: => "RtHDVCpl"HKLM\...\StartupApproved\Run32: => "YouCam Tray"HKLM\...\StartupApproved\Run32: => "Dolby Home Theater v4"HKLM\...\StartupApproved\Run32: => "MuteSync"HKLM\...\StartupApproved\Run32: => "mcpltui_exe"HKLM\...\StartupApproved\Run32: => "mcui_exe"HKLM\...\StartupApproved\Run32: => "YouCam Mirage"HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\StartupApproved\Run: => "Skype"HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\StartupApproved\Run: => "Steam"HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\StartupApproved\Run: => "Akamai NetSession Interface" ==================== Accounts: ============================= Administrator (S-1-5-21-778363092-4269730154-400294747-500 - Administrator - Disabled)Guest (S-1-5-21-778363092-4269730154-400294747-501 - Limited - Disabled)Isaac (S-1-5-21-778363092-4269730154-400294747-1001 - Administrator - Enabled) => C:\Users\Isaac ==================== Faulty Device Manager Devices ============= Name: Bluetooth Audio DeviceDescription: Bluetooth Audio DeviceClass Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}Manufacturer: Qualcomm Atheros CommunicationsService: BTATH_A2DPProblem: : This device cannot start. (Code10)Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Virtual Bluetooth Support (Include Audio)Description: Virtual Bluetooth Support (Include Audio)Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}Manufacturer: Qualcomm Atheros CommunicationsService: AthBTPortProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver Name: Bluetooth LWFLT DeviceDescription: Bluetooth LWFLT DeviceClass Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}Manufacturer: Qualcomm Atheros CommunicationsService: BTATH_LWFLTProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver ==================== Event log errors: ========================= Application errors:==================Error: (02/17/2015 09:55:13 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: aec Start Time: 01d04afbae76bf98 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: a2388813-b6ef-11e4-bec2-2cd05aa4dad0 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 Error: (02/17/2015 04:59:32 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)Description: There was an error with the Windows Location Provider database Error: (02/17/2015 04:57:04 PM) (Source: ESENT) (EventID: 455) (User: )Description: svchost (1376) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\WINDOWS\system32\SRU\SRU00724.log. Error: (02/17/2015 04:34:12 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/17/2015 11:35:49 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (02/17/2015 00:55:36 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/16/2015 00:55:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/16/2015 00:18:01 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program [EXE]toounfair - ROTMG.exe version 16.0.0.296 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1468 Start Time: 01d049751803b477 Termination Time: 4294967295 Application Path: C:\Users\Isaac\Desktop\My Games\[EXE]toounfair - ROTMG.exe Report Id: 43391923-b571-11e4-bec3-2cd05aa4dad0 Faulting package full name: Faulting package-relative application ID: Error: (02/14/2015 11:02:58 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: multibox.exe, version: 2.1.206.1, time stamp: 0x4b7971abFaulting module name: PwnBoxerHK.dll, version: 6.3.9600.17630, time stamp: 0x54b0d74fException code: 0xc0000135Fault offset: 0x0009e0b2Faulting process id: 0xf78Faulting application start time: 0xmultibox.exe0Faulting application path: multibox.exe1Faulting module path: multibox.exe2Report Id: multibox.exe3Faulting package full name: multibox.exe4Faulting package-relative application ID: multibox.exe5 Error: (02/14/2015 08:48:24 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: eb0 Start Time: 01d04896da43d323 Termination Time: 4294967295 Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe Report Id: ce19a19b-b48a-11e4-bec0-2cd05aa4dad0 Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 System errors:=============Error: (02/17/2015 09:51:52 PM) (Source: Application Popup) (EventID: 1060) (User: )Description: \??\C:\Windows\System32\drivers\TrueSight.sys Error: (02/17/2015 09:49:12 PM) (Source: EventLog) (EventID: 6008) (User: )Description: The previous system shutdown at 9:22:21 PM on ‎2/‎17/‎2015 was unexpected. Error: (02/17/2015 09:03:38 PM) (Source: Application Popup) (EventID: 1060) (User: )Description: \??\C:\Windows\System32\drivers\TrueSight.sys Error: (02/17/2015 08:42:35 PM) (Source: BugCheck) (EventID: 1001) (User: )Description: 0x00000139 (0x0000000000000003, 0xffffd0017bd81d70, 0xffffd0017bd81cc8, 0x0000000000000000)C:\WINDOWS\MEMORY.DMP021715-61390-01 Error: (02/17/2015 08:42:21 PM) (Source: EventLog) (EventID: 6008) (User: )Description: The previous system shutdown at 8:27:57 PM on ‎2/‎17/‎2015 was unexpected. Error: (02/17/2015 07:47:57 PM) (Source: EventLog) (EventID: 6008) (User: )Description: The previous system shutdown at 7:15:27 PM on ‎2/‎17/‎2015 was unexpected. Error: (02/17/2015 06:45:54 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 20. Error: (02/17/2015 05:13:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)Description: Installation Failure: Windows failed to install the following update with error 0x8007045b: Security Update for Windows 8.1 for x64-based Systems (KB3023562). Error: (02/17/2015 05:13:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)Description: Installation Failure: Windows failed to install the following update with error 0x8007045b: Update for Windows 8.1 for x64-based Systems (KB3020338). Error: (02/17/2015 05:13:20 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)Description: Installation Failure: Windows failed to install the following update with error 0x8007045b: Security Update for Internet Explorer Flash Player for Windows 8.1 for x64-based Systems (KB3021953). Microsoft Office Sessions:=========================Error: (02/17/2015 09:55:13 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.20689aec01d04afbae76bf984294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exea2388813-b6ef-11e4-bec2-2cd05aa4dad0microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 Error: (02/17/2015 04:59:32 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)Description: -2147024883 Error: (02/17/2015 04:57:04 PM) (Source: ESENT) (EventID: 455) (User: )Description: svchost1376SRUJet: C:\WINDOWS\system32\SRU\SRU00724.log-1811 (0xfffff8ed) Error: (02/17/2015 04:34:12 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/17/2015 11:35:49 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (02/17/2015 00:55:36 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/16/2015 00:55:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )Description: Subscription licensing service failed: -1073415161 Error: (02/16/2015 00:18:01 AM) (Source: Application Hang) (EventID: 1002) (User: )Description: [EXE]toounfair - ROTMG.exe16.0.0.296146801d049751803b4774294967295C:\Users\Isaac\Desktop\My Games\[EXE]toounfair - ROTMG.exe43391923-b571-11e4-bec3-2cd05aa4dad0 Error: (02/14/2015 11:02:58 PM) (Source: Application Error) (EventID: 1000) (User: )Description: multibox.exe2.1.206.14b7971abPwnBoxerHK.dll6.3.9600.1763054b0d74fc00001350009e0b2f7801d048aa5ee0f6cfC:\Users\Isaac\Desktop\MPGH\Misc\multibox\multibox.exePwnBoxerHK.dll9d859dd0-b49d-11e4-bec0-2cd05aa4dad0 Error: (02/14/2015 08:48:24 PM) (Source: Application Hang) (EventID: 1002) (User: )Description: LiveComm.exe17.5.9600.20689eb001d04896da43d3234294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exece19a19b-b48a-11e4-bec0-2cd05aa4dad0microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1 ==================== Memory info =========================== Processor: Intel® Core i5-3230M CPU @ 2.60GHzPercentage of memory in use: 36%Total physical RAM: 8052.91 MBAvailable physical RAM: 5149.05 MBTotal Pagefile: 16244.91 MBAvailable Pagefile: 13513.07 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:883.74 GB) (Free:521.4 GB) NTFS ==>[system with boot components (obtained from reading drive)]Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:24.9 GB) NTFS ==================== MBR & Partition Table ================== ==================== End Of Log ============================
  15. I did a malwarebytes scan, nothing was found but this issue keeps happening
  16. Every 1 hour or so my laptop crashes for a random reason bringing up a blue screen, I installed "WhoCrashed" on my laptop and I got this: On Tue 17/02/2015 20:39:57 GMT your computer crashed crash dump file: C:\WINDOWS\Minidump\021715-61390-01.dmp This was probably caused by the following module: ntoskrnl.exe (nt+0x1509A0) Bugcheck code: 0x139 (0x3, 0xFFFFD0017BD81D70, 0xFFFFD0017BD81CC8, 0x0) Error: KERNEL_SECURITY_CHECK_FAILURE file path: C:\WINDOWS\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System Bug check description: The kernel has detected the corruption of a critical data structure. The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. On Tue 17/02/2015 20:39:57 GMT your computer crashed crash dump file: C:\WINDOWS\memory.dmp This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0) Bugcheck code: 0x139 (0x3, 0xFFFFD0017BD81D70, 0xFFFFD0017BD81CC8, 0x0) Error: KERNEL_SECURITY_CHECK_FAILURE Bug check description: The kernel has detected the corruption of a critical data structure. The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. Conclusion 2 crash dumps have been found and analyzed. No offending third party drivers have been found. Connsider using WhoCrashed Professional which offers more detailed analysis using symbol resolution. Also configuring your system to produce a full memory dump may help you. Read the topic general suggestions for troubleshooting system crashes for more information. Note that it's not always possible to state with certainty whether a reported driver is responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.
  17. I think my computer is affected by keylogger, this all started when I downloaded an addon for a game I like to play. Windows defender picked up malware, It showed up on the top right hand corner of my screen, I did a full scan on windows defender and malwarebytes, neither of them picked up anything, I then went to 'history' on windows defender and saw that it found something caled 'perfectkeylogger' I removed it straight away, I did another scan, but nothing could be found. I still think there could be a virus on my computer, but I don't know how to find it, or how to remove it, I have logs from FRST 64: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014Ran by Isaac (administrator) on ISAAC on 31-12-2014 15:34:58Running from C:\Users\Isaac\DownloadsLoaded Profiles: Isaac & (Available profiles: Isaac)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE() C:\Windows\SysWOW64\PnkBstrA.exe(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe(LoL Skin Installer) C:\Users\Isaac\Desktop\SIU 4.34-Lite\Skin Installer Ultimate.exe(Microsoft Corporation) C:\Windows\System32\SndVol.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\System32\WWAHost.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)HKLM\...\Run: [btPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-11-01] ()HKLM\...\Run: [synLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-11-30] (Synaptics)HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-03-19] (Lenovo (Beijing) Limited)HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-03-19] (Lenovo(beijing) Limited)HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-30] (Synaptics Incorporated)HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-07-26] (Dolby Laboratories Inc.)HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkeyHKLM-x32\...\Run: [intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)HKLM-x32\...\Run: [MuteSync] => C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe [343040 2012-02-04] (Lenovo)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3838800 2014-12-13] (LogMeIn Inc.)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKLM\...\Policies\Explorer: [NoFolderOptions] 0HKLM\...\Policies\Explorer: [NoControlPanel] 0HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1940160 2014-11-18] (Valve Corporation)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30873192 2014-12-11] (Skype Technologies S.A.)HKU\S-1-5-21-778363092-4269730154-400294747-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095328 2014-09-16] (Nota Inc.)HKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1940160 2014-11-18] (Valve Corporation)HKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30873192 2014-12-11] (Skype Technologies S.A.)HKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095328 2014-09-16] (Nota Inc.)ShellIconOverlayIdentifiers: [sugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)ShellIconOverlayIdentifiers: [sugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-778363092-4269730154-400294747-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONHKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONHKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.comHKU\S-1-5-21-778363092-4269730154-400294747-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.comHKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankHKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.comHKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.comSearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = SearchScopes: HKU\S-1-5-21-778363092-4269730154-400294747-1001 -> DefaultScope {12DCC037-EDE2-4208-8285-54B6BBFF8718} URL = SearchScopes: HKU\S-1-5-21-778363092-4269730154-400294747-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {12DCC037-EDE2-4208-8285-54B6BBFF8718} URL = BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095} Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100 FireFox:========FF ProfilePath: C:\Users\Isaac\AppData\Roaming\Mozilla\Firefox\Profiles\3hgc6nfp.defaultFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)FF Extension: Adblock Plus - C:\Users\Isaac\AppData\Roaming\Mozilla\Firefox\Profiles\3hgc6nfp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-29] Chrome: =======CHR Profile: C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Slides) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-21]CHR Extension: (Google Docs) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-21]CHR Extension: (Google Drive) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-21]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-21]CHR Extension: (YouTube) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-21]CHR Extension: (Adblock Plus) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-21]CHR Extension: (Ratings Preview for YouTube™) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbhdenfmgbagncdmgbholejjpmmiank [2014-09-23]CHR Extension: (Google Search) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-21]CHR Extension: (Help Me) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcnpiaklebapgfbhkdibfgemmajmgkon [2014-11-25]CHR Extension: (Tampermonkey) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-12-31]CHR Extension: (Google Sheets) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-21]CHR Extension: (Google Wallet) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-21]CHR Extension: (Gmail) - C:\Users\Isaac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-21] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231040 2012-11-01] (Qualcomm Atheros Commnucations)S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [182304 2014-11-29] (EasyAntiCheat Ltd)R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2012-12-14] (Nitro PDF Software)R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2014-12-07] ()S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-12-02] (Microsoft Corporation)R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-12-02] (Microsoft Corporation)R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-11-01] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-11-01] (Qualcomm Atheros)R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45112 2014-12-13] (LogMeIn Inc.)R3 HP8107Fltr; C:\Windows\System32\drivers\HP8107.sys [13824 2010-02-04] (Windows ® Win 7 DDK provider)R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-31] (Malwarebytes Corporation)R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-30] (Synaptics Incorporated)R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-12-02] (Microsoft Corporation)S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-31 15:34 - 2014-12-31 15:36 - 00018574 _____ () C:\Users\Isaac\Downloads\FRST.txt2014-12-31 15:34 - 2014-12-31 15:35 - 00000000 ____D () C:\FRST2014-12-31 15:34 - 2014-12-31 15:34 - 02123264 _____ (Farbar) C:\Users\Isaac\Downloads\FRST64.exe2014-12-31 15:34 - 2014-12-31 15:34 - 02123264 _____ (Farbar) C:\Users\Isaac\Desktop\FRST64.exe2014-12-31 03:30 - 2014-12-31 03:30 - 00304000 _____ () C:\Users\Isaac\Downloads\greasemonkey-2.3-fx.xpi2014-12-30 17:24 - 2014-12-31 15:16 - 00000000 ____D () C:\Users\Isaac\Desktop\SIU 4.34-Lite2014-12-30 17:24 - 2014-12-30 16:33 - 07916654 _____ () C:\Users\Isaac\Desktop\SIU 4.34-Lite.zip2014-12-30 16:39 - 2014-12-30 16:39 - 07916654 _____ () C:\Users\Isaac\Downloads\SIU 4.34-Lite (1).zip2014-12-30 16:33 - 2014-12-30 16:33 - 07916654 _____ () C:\Users\Isaac\Downloads\SIU 4.34-Lite.zip2014-12-30 13:33 - 2014-12-30 13:33 - 00000949 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk2014-12-30 13:33 - 2014-12-30 13:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi2014-12-30 13:33 - 2014-12-30 13:33 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi2014-12-28 19:43 - 2014-12-28 19:43 - 05806592 _____ () C:\Users\Isaac\Downloads\adap_gc_1515.ppt2014-12-26 17:44 - 2014-12-26 17:44 - 00000219 _____ () C:\Users\Isaac\Desktop\Left 4 Dead 2.url2014-12-25 11:18 - 2014-12-25 11:18 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\MMFApplications2014-12-25 11:10 - 2014-12-25 11:10 - 00000222 _____ () C:\Users\Isaac\Desktop\Five Nights at Freddy's.url2014-12-14 13:13 - 2014-12-30 13:35 - 00000000 ____D () C:\Users\Isaac\AppData\Local\LogMeIn Hamachi2014-12-14 13:13 - 2014-12-14 13:13 - 00000000 ____D () C:\Users\Isaac\AppData\Local\LogMeIn2014-12-14 13:13 - 2014-12-14 13:13 - 00000000 ____D () C:\ProgramData\LogMeIn2014-12-14 13:10 - 2014-12-14 13:10 - 08527872 _____ () C:\Users\Isaac\Downloads\Hamachi.msi2014-12-14 12:55 - 2014-12-14 12:56 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\mineshafter_squared2014-12-14 12:55 - 2014-12-14 12:55 - 01405498 _____ () C:\Users\Isaac\Downloads\MineshafterSquared.exe2014-12-13 20:28 - 2014-12-13 20:28 - 00125138 _____ () C:\Users\Isaac\Downloads\XRay-1.8.1-v2.15.2.jar2014-12-13 20:24 - 2014-12-13 20:25 - 01148074 _____ () C:\Users\Isaac\Downloads\(1.2)TheSimpleXrayModInstaller(2.0)(MC1.8)thehen101.jar2014-12-13 19:58 - 2014-12-13 19:58 - 00675988 _____ () C:\Users\Isaac\Downloads\Minecraft (1).exe2014-12-13 19:58 - 2014-12-13 19:58 - 00675988 _____ () C:\Users\Isaac\Desktop\Minecraft (1).exe2014-12-13 17:01 - 2014-12-13 17:01 - 00045112 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys2014-12-12 23:03 - 2014-12-12 23:03 - 00000222 _____ () C:\Users\Isaac\Desktop\Awesomenauts.url2014-12-12 19:23 - 2014-12-12 19:23 - 00000000 ____D () C:\Users\Isaac\Documents\Klei2014-12-12 19:21 - 2014-12-12 19:21 - 00000222 _____ () C:\Users\Isaac\Desktop\Don't Starve Together Beta.url2014-12-12 17:49 - 2014-10-30 22:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe2014-12-12 17:49 - 2014-10-30 22:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe2014-12-12 02:01 - 2014-12-12 02:01 - 00000000 ____D () C:\WINDOWS\system32\appraiser2014-12-10 23:09 - 2014-11-10 02:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll2014-12-10 23:09 - 2014-11-10 01:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll2014-12-10 23:09 - 2014-10-30 23:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll2014-12-10 23:09 - 2014-10-30 23:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll2014-12-10 23:00 - 2014-12-03 23:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-12-10 23:00 - 2014-12-03 23:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll2014-12-10 23:00 - 2014-12-02 23:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-12-10 23:00 - 2014-12-02 23:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll2014-12-10 23:00 - 2014-12-02 23:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll2014-12-10 23:00 - 2014-12-02 23:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll2014-12-10 23:00 - 2014-12-02 23:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll2014-12-10 23:00 - 2014-11-22 03:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-12-10 23:00 - 2014-11-22 02:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2014-12-10 23:00 - 2014-11-22 02:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-12-10 23:00 - 2014-11-22 02:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec2014-12-10 23:00 - 2014-11-22 02:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2014-12-10 23:00 - 2014-11-22 02:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll2014-12-10 23:00 - 2014-11-22 02:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-12-10 23:00 - 2014-11-22 02:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-12-10 23:00 - 2014-11-22 02:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-12-10 23:00 - 2014-11-22 02:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2014-12-10 23:00 - 2014-11-22 02:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec2014-12-10 23:00 - 2014-11-22 02:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll2014-12-10 23:00 - 2014-11-22 02:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-12-10 23:00 - 2014-11-22 02:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2014-12-10 23:00 - 2014-11-22 02:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-12-10 23:00 - 2014-11-22 01:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll2014-12-10 23:00 - 2014-11-22 01:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll2014-12-10 23:00 - 2014-11-22 01:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll2014-12-10 23:00 - 2014-11-22 01:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-12-10 23:00 - 2014-11-22 01:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-12-10 23:00 - 2014-11-22 01:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2014-12-10 23:00 - 2014-11-22 01:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-12-10 23:00 - 2014-11-22 01:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-12-10 23:00 - 2014-11-22 01:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-12-10 23:00 - 2014-11-22 01:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll2014-12-10 23:00 - 2014-11-22 01:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-12-10 23:00 - 2014-11-22 01:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-12-10 23:00 - 2014-11-22 01:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll2014-12-10 23:00 - 2014-11-22 01:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-12-10 23:00 - 2014-11-22 01:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll2014-12-10 23:00 - 2014-11-22 01:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-12-10 23:00 - 2014-11-22 01:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2014-12-10 23:00 - 2014-11-22 01:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-12-10 23:00 - 2014-11-22 01:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-12-10 23:00 - 2014-11-22 01:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-12-10 23:00 - 2014-11-22 01:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2014-12-10 23:00 - 2014-11-22 01:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-12-10 23:00 - 2014-11-22 00:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-12-10 23:00 - 2014-11-22 00:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2014-12-10 23:00 - 2014-11-07 04:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll2014-12-10 23:00 - 2014-11-07 03:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll2014-12-10 23:00 - 2014-10-31 23:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll2014-12-10 23:00 - 2014-10-31 23:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll2014-12-07 18:45 - 2014-12-07 18:52 - 107672480 _____ () C:\Users\Isaac\Downloads\J. Cole - 2014 Forest Hills Drive.zip2014-12-07 18:42 - 2014-12-07 18:42 - 00013118 _____ () C:\Users\Isaac\Downloads\J._Cole_-_2014_Forest_Hills_Drive_[MP3_320_KBPS].torrent2014-12-07 14:01 - 2014-12-07 14:06 - 00347464 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr2014-12-07 14:01 - 2014-12-07 14:01 - 00000000 ____D () C:\Users\Isaac\AppData\Local\PunkBuster2014-12-07 13:15 - 2014-12-07 14:06 - 00347464 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe2014-12-07 13:15 - 2014-12-07 14:06 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe2014-12-07 13:15 - 2014-12-07 14:01 - 00281288 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex02014-12-06 21:32 - 2014-12-06 21:32 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\StunlockStudios2014-12-04 22:12 - 2014-12-04 22:14 - 297327075 _____ () C:\Users\Isaac\Downloads\Holiday Extras Consol Sales AS IF CHANGES SEPT14.xlsx2014-12-04 17:55 - 2014-12-04 17:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf2014-12-04 16:00 - 2014-11-26 21:10 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe2014-12-04 16:00 - 2014-11-26 21:10 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl2014-12-04 15:55 - 2014-12-04 16:04 - 00000000 ___RD () C:\WINDOWS\BrowserChoice2014-12-02 16:22 - 2014-08-23 07:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe2014-12-02 16:22 - 2014-08-23 07:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe2014-12-02 16:22 - 2014-08-23 06:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll2014-12-02 16:22 - 2014-08-23 05:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll2014-12-02 16:22 - 2014-08-23 04:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll2014-12-02 16:22 - 2014-08-15 00:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys2014-12-02 16:21 - 2014-08-16 04:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll2014-12-02 16:21 - 2014-08-16 04:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll2014-12-02 16:21 - 2014-08-16 03:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll2014-12-02 16:21 - 2014-08-16 03:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll2014-12-02 16:21 - 2014-08-16 03:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll2014-12-02 16:21 - 2014-08-16 01:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll2014-12-02 16:21 - 2014-08-16 01:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll2014-12-02 16:21 - 2014-08-16 00:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll2014-12-02 16:21 - 2014-08-16 00:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll2014-12-02 16:21 - 2014-08-16 00:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll2014-12-02 16:21 - 2014-08-16 00:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll2014-12-02 16:21 - 2014-08-16 00:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll2014-12-02 16:21 - 2014-08-16 00:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll2014-12-02 16:21 - 2014-08-16 00:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll2014-12-02 16:21 - 2014-08-16 00:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll2014-12-02 16:21 - 2014-08-16 00:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-12-02 16:21 - 2014-08-16 00:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll2014-12-02 16:21 - 2014-08-16 00:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll2014-12-02 16:21 - 2014-08-16 00:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll2014-12-02 16:21 - 2014-08-16 00:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-12-02 16:21 - 2014-08-16 00:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll2014-12-02 16:21 - 2014-08-16 00:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll2014-12-02 16:21 - 2014-08-16 00:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll2014-12-02 16:21 - 2014-08-16 00:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll2014-12-02 16:21 - 2014-08-16 00:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll2014-12-02 16:21 - 2014-08-16 00:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll2014-12-02 16:21 - 2014-08-16 00:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-12-02 16:21 - 2014-08-16 00:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe2014-12-02 16:21 - 2014-08-16 00:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll2014-12-02 16:21 - 2014-08-16 00:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-12-02 16:14 - 2014-08-02 00:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll2014-12-02 16:13 - 2014-07-15 18:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe2014-12-02 16:13 - 2014-07-15 08:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll2014-12-02 16:13 - 2014-07-15 08:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll2014-12-02 16:13 - 2014-07-15 08:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll2014-12-02 16:13 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe2014-12-02 16:13 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe2014-12-02 16:12 - 2014-07-10 04:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll2014-12-02 16:12 - 2014-06-02 02:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll2014-12-02 16:12 - 2014-05-31 06:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys2014-12-02 16:12 - 2014-05-31 06:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys2014-12-02 16:12 - 2014-05-31 04:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe2014-12-02 16:12 - 2014-05-31 04:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll2014-12-02 16:12 - 2014-05-31 04:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll2014-12-02 16:12 - 2014-05-27 09:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll2014-12-02 16:12 - 2014-05-27 09:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll2014-12-02 16:12 - 2014-05-03 05:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll2014-12-02 16:12 - 2014-05-03 05:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll2014-12-02 16:12 - 2014-05-03 05:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll2014-12-02 16:12 - 2014-05-03 05:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll2014-12-02 16:12 - 2014-05-03 04:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll2014-12-02 16:12 - 2014-05-03 04:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll2014-12-02 16:12 - 2014-05-03 04:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll2014-12-02 16:12 - 2014-05-02 23:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat2014-12-02 16:12 - 2014-04-30 06:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys2014-12-02 16:12 - 2014-04-30 06:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys2014-12-02 16:12 - 2014-04-30 06:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys2014-12-02 16:12 - 2014-04-30 06:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys2014-12-02 16:12 - 2014-04-30 05:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe2014-12-02 16:12 - 2014-04-30 04:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe2014-12-02 16:12 - 2014-04-30 04:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll2014-12-02 16:12 - 2014-04-30 04:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll2014-12-02 16:12 - 2014-04-30 04:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll2014-12-02 16:12 - 2014-04-30 04:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll2014-12-02 16:12 - 2014-04-30 04:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL2014-12-02 16:12 - 2014-04-30 03:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL2014-12-02 16:12 - 2014-04-30 03:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll2014-12-02 16:12 - 2014-04-30 03:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll2014-12-02 16:12 - 2014-04-30 03:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll2014-12-02 16:12 - 2014-04-30 03:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll2014-12-02 16:12 - 2014-04-30 03:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll2014-12-02 16:12 - 2014-04-28 22:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll2014-12-02 16:12 - 2014-04-26 16:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll2014-12-02 16:12 - 2014-04-14 09:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll2014-12-02 16:12 - 2014-04-14 08:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll2014-12-02 16:12 - 2014-04-14 05:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll2014-12-02 16:11 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll2014-12-02 16:11 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll2014-12-02 16:11 - 2014-07-12 04:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe2014-12-02 07:46 - 2014-12-30 13:36 - 00000000 ____D () C:\Users\Isaac\OneDrive2014-12-02 07:46 - 2014-12-02 07:46 - 00000000 ____D () C:\Program Files\Common Files\Atheros2014-12-02 07:42 - 2014-12-02 07:42 - 00001453 _____ () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2014-12-02 07:41 - 2014-12-02 07:41 - 00000020 ___SH () C:\Users\Isaac\ntuser.ini2014-12-02 05:25 - 2014-12-02 05:25 - 00000000 __SHD () C:\Recovery2014-12-02 05:24 - 2014-12-03 00:00 - 00000000 ___DC () C:\WINDOWS\Panther2014-12-02 05:24 - 2014-12-02 05:24 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll2014-12-02 05:24 - 2014-12-02 05:24 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll2014-12-02 05:24 - 2014-12-02 05:24 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll2014-12-02 05:24 - 2014-12-02 05:24 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll2014-12-02 05:23 - 2014-12-02 05:23 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll2014-12-02 05:23 - 2014-12-02 05:23 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll2014-12-02 05:23 - 2014-12-02 05:23 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-12-02 05:23 - 2014-12-02 05:23 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe2014-12-02 05:23 - 2014-12-02 05:23 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys2014-12-02 05:23 - 2014-12-02 05:23 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys2014-12-02 05:23 - 2014-12-02 05:23 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe2014-12-02 05:23 - 2014-12-02 05:23 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys2014-12-02 05:23 - 2014-12-02 05:23 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00054592 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll2014-12-02 05:23 - 2014-12-02 05:23 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys2014-12-02 05:22 - 2014-12-02 05:22 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll2014-12-02 05:22 - 2014-12-02 05:22 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll2014-12-02 05:22 - 2014-12-02 05:22 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll2014-12-02 05:22 - 2014-12-02 05:22 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll2014-12-02 05:22 - 2014-12-02 05:22 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll2014-12-02 05:22 - 2014-12-02 05:22 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx2014-12-02 05:22 - 2014-12-02 05:22 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx2014-12-02 05:22 - 2014-12-02 05:22 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys2014-12-02 05:22 - 2014-12-02 05:22 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll2014-12-02 05:22 - 2014-12-02 05:22 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe2014-12-02 05:22 - 2014-12-02 05:22 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe2014-12-02 05:20 - 2014-12-02 05:20 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-12-02 05:20 - 2014-12-02 05:20 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-12-02 05:20 - 2014-12-02 05:20 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll2014-12-02 05:20 - 2014-12-02 05:20 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll2014-12-02 05:20 - 2014-12-02 05:20 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe2014-12-02 05:20 - 2014-12-02 05:20 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll2014-12-02 05:20 - 2014-12-02 05:20 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-12-02 05:20 - 2014-12-02 05:20 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll2014-12-02 05:20 - 2014-12-02 05:20 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll2014-12-02 05:20 - 2014-12-02 05:20 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys2014-12-02 05:20 - 2014-12-02 05:20 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS2014-12-02 05:20 - 2014-12-02 05:20 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml2014-12-02 05:20 - 2014-12-02 05:20 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00148800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS2014-12-02 05:20 - 2014-12-02 05:20 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll2014-12-02 05:20 - 2014-12-02 05:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe2014-12-02 05:19 - 2014-12-02 05:19 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll2014-12-02 05:19 - 2014-12-02 05:19 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe2014-12-02 05:19 - 2014-12-02 05:19 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe2014-12-02 05:19 - 2014-12-02 05:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe2014-12-02 05:19 - 2014-12-02 05:19 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll2014-12-02 05:19 - 2014-12-02 05:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll2014-12-02 05:18 - 2014-12-02 05:18 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-12-02 05:18 - 2014-12-02 05:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff2014-12-02 05:15 - 2014-12-02 05:15 - 00000000 ____D () C:\Program Files\Reference Assemblies2014-12-02 05:15 - 2014-12-02 05:15 - 00000000 ____D () C:\Program Files\MSBuild2014-12-02 05:15 - 2014-12-02 05:15 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies2014-12-02 05:15 - 2014-12-01 21:42 - 00000000 ____D () C:\Program Files (x86)\MSBuild2014-12-02 05:14 - 2013-08-03 04:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll2014-12-02 05:14 - 2013-08-03 04:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll2014-12-02 05:14 - 2013-08-03 04:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll2014-12-02 05:14 - 2013-08-03 04:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll2014-12-01 21:57 - 2014-12-31 15:32 - 01593545 _____ () C:\WINDOWS\WindowsUpdate.log2014-12-01 21:56 - 2014-12-01 21:56 - 00022744 _____ () C:\WINDOWS\system32\emptyregdb.dat2014-12-01 21:44 - 2014-12-01 21:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk2014-12-01 21:37 - 2014-12-01 21:37 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate2014-12-01 21:35 - 2014-12-21 04:26 - 00000000 ____D () C:\Users\Isaac2014-12-01 21:35 - 2014-12-01 21:56 - 00020958 _____ () C:\WINDOWS\diagwrn.xml2014-12-01 21:35 - 2014-12-01 21:56 - 00020958 _____ () C:\WINDOWS\diagerr.xml2014-12-01 21:35 - 2014-12-01 21:37 - 00000000 ___RD () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-12-01 21:35 - 2014-12-01 21:37 - 00000000 ___RD () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-12-01 21:35 - 2014-09-24 07:23 - 00000369 _____ () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk2014-12-01 21:35 - 2014-09-24 07:23 - 00000369 _____ () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk2014-12-01 21:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2014-12-01 21:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance2014-12-01 21:30 - 2014-12-01 21:30 - 00000000 ____D () C:\Program Files (x86)\USB Camera22014-12-01 21:29 - 2014-12-01 21:42 - 00000000 ____D () C:\Program Files (x86)\Intel2014-12-01 21:29 - 2014-12-01 21:29 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job2014-12-01 21:29 - 2014-12-01 21:29 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf2014-12-01 21:28 - 2014-12-01 21:42 - 00000000 ____D () C:\Program Files\Intel2014-12-01 21:28 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL2014-12-01 21:28 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL2014-12-01 21:27 - 2014-12-01 21:27 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf2014-12-01 21:27 - 2014-12-01 21:27 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM2014-12-01 21:27 - 2014-12-01 21:27 - 00000000 ____D () C:\Program Files\Synaptics2014-12-01 21:27 - 2014-12-01 21:27 - 00000000 ____D () C:\Program Files\Realtek ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-31 15:31 - 2014-09-21 15:16 - 00000918 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job2014-12-31 15:17 - 2014-09-26 14:56 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Skype2014-12-31 15:16 - 2014-09-22 15:58 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2014-12-31 15:00 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru2014-12-31 13:58 - 2014-09-21 15:19 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-778363092-4269730154-400294747-10012014-12-31 13:47 - 2014-09-22 17:42 - 00000000 ____D () C:\Program Files (x86)\Steam2014-12-30 21:31 - 2014-09-21 15:16 - 00000914 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job2014-12-30 13:33 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-12-30 13:32 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI2014-12-30 13:31 - 2014-10-25 07:22 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Battle.net2014-12-30 04:36 - 2014-10-28 15:20 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\TS3Client2014-12-28 13:34 - 2013-08-22 14:46 - 00289384 _____ () C:\WINDOWS\setupact.log2014-12-28 00:15 - 2014-09-24 14:28 - 00000000 ___RD () C:\Users\Isaac\Desktop\Lenovo Stuff2014-12-27 22:58 - 2014-11-30 17:19 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Pokemon Showdown2014-12-26 22:19 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF2014-12-26 17:44 - 2014-09-23 15:10 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam2014-12-26 11:10 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\tracing2014-12-25 14:17 - 2014-09-24 14:29 - 00000000 ___RD () C:\Users\Isaac\Desktop\Other Stuff2014-12-25 14:17 - 2014-09-23 16:42 - 00000000 ___RD () C:\Users\Isaac\Desktop\My Games2014-12-24 15:21 - 2014-11-08 21:24 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\.minecraft2014-12-23 20:21 - 2014-10-04 18:14 - 00000024 _____ () C:\Users\Isaac\random.dat2014-12-23 18:43 - 2014-10-17 17:31 - 00000044 _____ () C:\Users\Isaac\jagex_cl_oldschool_LIVE.dat2014-12-23 06:51 - 2014-09-26 14:56 - 00000000 ___RD () C:\Program Files (x86)\Skype2014-12-23 06:51 - 2014-09-26 14:55 - 00000000 ____D () C:\ProgramData\Skype2014-12-22 18:48 - 2014-09-22 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-12-22 18:48 - 2014-09-22 15:58 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-12-22 01:08 - 2014-11-07 22:13 - 00000000 ____D () C:\Program Files (x86)\Glyph2014-12-18 08:06 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-12-18 07:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2014-12-17 09:03 - 2014-10-25 07:23 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2014-12-14 13:56 - 2014-10-25 07:22 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-12-14 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\rescache2014-12-12 19:23 - 2014-10-10 23:54 - 00001558 _____ () C:\Users\Isaac\songList.txt2014-12-12 19:23 - 2014-10-10 23:54 - 00000013 _____ () C:\Users\Isaac\rlvote.txt2014-12-12 17:19 - 2014-09-21 18:05 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-12-12 17:12 - 2014-09-21 18:05 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-12-12 02:01 - 2014-09-24 09:50 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2014-12-12 02:01 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS2014-12-12 02:01 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS2014-12-12 02:01 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions2014-12-09 16:00 - 2014-09-24 07:15 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-12-09 15:54 - 2014-09-24 07:03 - 00085334 _____ () C:\WINDOWS\PFRO.log2014-12-07 13:56 - 2014-09-26 18:49 - 00061918 _____ () C:\WINDOWS\DirectX.log2014-12-07 13:16 - 2014-09-23 16:29 - 00000000 ____D () C:\ProgramData\Package Cache2014-12-04 16:04 - 2014-09-21 15:11 - 00000000 ____D () C:\Users\Isaac\AppData\Local\Packages2014-12-04 15:59 - 2013-08-22 14:44 - 00337840 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-12-04 15:55 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ToastData2014-12-04 15:55 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\WinStore2014-12-04 15:54 - 2014-10-31 02:05 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense2014-12-03 23:28 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\restore2014-12-02 07:46 - 2013-08-22 14:46 - 00000262 _____ () C:\WINDOWS\setuperr.log2014-12-02 07:46 - 2013-03-19 21:49 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite2014-12-02 07:42 - 2014-09-22 15:46 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat2014-12-02 05:24 - 2013-08-22 15:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template2014-12-02 05:22 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-12-02 05:22 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-12-02 05:22 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows Defender2014-12-02 05:22 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender2014-12-02 05:20 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel2014-12-02 05:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\MediaViewer2014-12-02 05:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\FileManager2014-12-02 05:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Camera2014-12-01 21:57 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Registration2014-12-01 21:57 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM2014-12-01 21:56 - 2014-11-05 20:04 - 00008139 _____ () C:\WINDOWS\comsetup.log2014-12-01 21:54 - 2013-08-22 15:36 - 00000000 __RSD () C:\WINDOWS\Media2014-12-01 21:54 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Public\Libraries2014-12-01 21:47 - 2014-09-23 16:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\10332014-12-01 21:47 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep2014-12-01 21:46 - 2014-11-16 00:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java2014-12-01 21:46 - 2014-11-07 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph2014-12-01 21:46 - 2014-10-30 22:03 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software2014-12-01 21:46 - 2014-10-29 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo2014-12-01 21:46 - 2014-10-28 15:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client2014-12-01 21:46 - 2014-10-25 07:58 - 00000000 ____D () C:\Users\Isaac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR2014-12-01 21:46 - 2014-10-25 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR2014-12-01 21:46 - 2014-10-25 07:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone2014-12-01 21:46 - 2014-10-25 07:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net2014-12-01 21:46 - 2014-09-26 14:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-12-01 21:46 - 2014-09-26 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 22014-12-01 21:46 - 2014-09-23 16:44 - 00000000 ____D () C:\WINDOWS\system32\10332014-12-01 21:46 - 2014-09-23 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 20132014-12-01 21:46 - 2014-09-22 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2014-12-01 21:46 - 2014-09-22 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy2014-12-01 21:46 - 2014-09-21 15:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends2014-12-01 21:46 - 2014-09-21 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2014-12-01 21:46 - 2013-03-19 22:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery2014-12-01 21:46 - 2013-03-19 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center2014-12-01 21:46 - 2013-03-19 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo2014-12-01 21:46 - 2013-03-19 22:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby2014-12-01 21:44 - 2014-09-24 06:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN2014-12-01 21:44 - 2014-09-24 06:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep2014-12-01 21:44 - 2014-09-24 06:33 - 00000000 ____D () C:\WINDOWS\system32\WCN2014-12-01 21:44 - 2013-08-22 15:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\spool2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\MUI2014-12-01 21:44 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\IME2014-12-01 21:44 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI2014-12-01 21:44 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\oobe2014-12-01 21:44 - 2013-03-19 21:59 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda2014-12-01 21:44 - 2012-07-26 05:37 - 00000000 ____D () C:\Users\Default.migrated2014-12-01 21:42 - 2014-10-24 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon2014-12-01 21:42 - 2014-09-23 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits2014-12-01 21:42 - 2013-08-22 15:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker2014-12-01 21:42 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar2014-12-01 21:42 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar2014-12-01 21:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Resources2014-12-01 21:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Help2014-12-01 21:42 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared2014-12-01 21:42 - 2012-10-09 23:10 - 00000000 ____D () C:\ProgramData\PRICache2014-12-01 21:37 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery2014-12-01 21:30 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\System2014-12-01 21:26 - 2013-08-22 13:36 - 00000000 __RHD () C:\Users\Default2014-12-01 21:05 - 2013-03-19 21:30 - 02022479 _____ () C:\WINDOWS\WindowsUpdate (1).log2014-12-01 16:51 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent Files to move or delete:====================C:\Users\Isaac\alotic_preferences.datC:\Users\Isaac\alotic_preferences2.datC:\Users\Isaac\guardian_noregret_LIVE.datC:\Users\Isaac\jagex_cl_loginapplet_LIVE.datC:\Users\Isaac\jagex_cl_oldschool_LIVE.datC:\Users\Isaac\jagex_cl_runescape_LIVE.datC:\Users\Isaac\random.datC:\Users\Isaac\Vindictus.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-31 13:59 ==================== End Of Log ============================ If anyone could help me, I'd appreciate it Addition.txt FRST.txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.