My Malwarebytes won't start

wizjdiez · June 12, 2014

This has happened before where my malwarebytes won't open and last time it was due to an infestation. Could someone possibly help me?

FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02

Ran by John (administrator) on FLUFFYBUNNY-PC on 12-06-2014 15:49:34

Running from C:\Users\John\Downloads

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 10

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Rosetta Stone Ltd.) C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneLtdController.exe

(Rosetta Stone Ltd.) C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneLtdServer.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe

(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe

(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

( ) C:\Program Files (x86)\LockKey\LockKey.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe

(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe

(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

() C:\Program Files (x86)\Gameiki\Gameiki Mod Installer\Gameiki Mod Installer.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Google Inc.) C:\Users\John\AppData\Local\Programs\Google\MusicManager\MusicManager.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\nacl64.exe

(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\nacl64.exe

(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [synLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [410896 2011-12-15] (Synaptics)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)

HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)

HKLM\...\Run: [updatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)

HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2012-07-03] (Lenovo (Beijing) Limited)

HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6200368 2012-07-03] (Lenovo(beijing) Limited)

HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [206176 2012-07-03] (Lenovo)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

HKLM\...\Run: [shadowPlay] => C:\Windows\system32\nvspcap64.dll [1279480 2014-05-29] (NVIDIA Corporation)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-29] (NVIDIA Corporation)

HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-11] (Intel Corporation)

HKLM-x32\...\Run: [LockKey] => C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )

HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)

HKLM-x32\...\Run: [bDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-27] (cyberlink)

HKLM-x32\...\Run: [updateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)

HKLM-x32\...\Run: [updatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)

HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)

HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [switchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)

HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1279120 2012-09-27] (CANON INC.)

HKLM-x32\...\Run: [iJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)

HKLM-x32\...\Run: [Gameiki] => C:\Program Files (x86)\Gameiki\Gameiki Mod Installer\Gameiki Mod Installer.exe [358912 2014-02-23] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1

HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [Google Update] => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-08] (Google Inc.)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [Facebook Update] => C:\Users\John\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-24] (Facebook Inc.)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [MusicManager] => C:\Users\John\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7631872 2014-05-15] (Google Inc.)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [Epson Stylus Photo R3000(Network)] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGHA.EXE [224768 2010-01-12] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\Run: [GoogleChromeAutoLaunch_DC7C249942899F83C1747FF3FB5BD5F3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\MountPoints2: {baa6ba92-7066-11e2-803c-08edb9d7ac70} - G:\Setup.exe

HKU\S-1-5-21-2349498154-4169554833-2041502127-1001\...\MountPoints2: {bcd693e8-8607-11e2-aea3-08edb9d7ac70} - H:\TL-Bootstrap.exe

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk

ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=U017&ocid=U017DHP&dt=052713

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN

HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/

URLSearchHook: HKLM-x32 - NewFreeScreensavers Toolbar - {535ae879-ef3b-449c-8726-e1e644ae2290} - C:\Program Files (x86)\NewFreeScreensavers\prxtbNewF.dll (Conduit Ltd.)

URLSearchHook: HKCU - NewFreeScreensavers Toolbar - {535ae879-ef3b-449c-8726-e1e644ae2290} - C:\Program Files (x86)\NewFreeScreensavers\prxtbNewF.dll (Conduit Ltd.)

SearchScopes: HKCU - D145A7771702482A85C848D62EED4640 URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN_enUS496

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {C040541D-8AC0-418A-81EB-09CAA9D47C9D} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3185678

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: NewFreeScreensavers Toolbar - {535ae879-ef3b-449c-8726-e1e644ae2290} - C:\Program Files (x86)\NewFreeScreensavers\prxtbNewF.dll (Conduit Ltd.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - NewFreeScreensavers Toolbar - {535ae879-ef3b-449c-8726-e1e644ae2290} - C:\Program Files (x86)\NewFreeScreensavers\prxtbNewF.dll (Conduit Ltd.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

Toolbar: HKCU - No Name - {535AE879-EF3B-449C-8726-E1E644AE2290} - No File

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\b4gyatfj.default

FF SearchEngineOrder.3: Bing

FF SelectedSearchEngine: Google

FF Homepage: hxxp://www.youtube.com/feed/subscriptions

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @ogplanet.com/npOGPPlugin - C:\Windows\system32\npOGPPlugin.dll No File

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\John\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\John\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\John\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\b4gyatfj.default\searchplugins\bingp.xml

FF Extension: NewFreeScreensavers - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\b4gyatfj.default\Extensions\{535ae879-ef3b-449c-8726-e1e644ae2290} [2013-12-12]

FF Extension: Walnut for Firefox - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\b4gyatfj.default\Extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}.xpi [2012-08-31]

FF Extension: Adblock Plus - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\b4gyatfj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-27]

Chrome:

=======

CHR HomePage: hxxp://www.msn.com/?pc=U017&ocid=U017DHP&dt=052713

CHR StartupUrls: "hxxp://www.youtube.com/feed/subscriptions"

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Chrome NaCl) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()

CHR Plugin: (McAfee SiteAdvisor) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll No File

CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll No File

CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-23]

CHR Extension: (Ancient Map) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2014-01-20]

CHR Extension: (Adblock Plus) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-01-20]

CHR Extension: (Adblock for Youtube™) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2014-01-20]

CHR Extension: (Google Play Music) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2014-06-10]

CHR Extension: (AdBlock) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-20]

CHR Extension: (Google Wallet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-25]

CHR Extension: (NewFreeScreensavers) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\obhnedkdjofgblpkmlbamogmcbhgdkdj [2012-09-30]

CHR HKCU\...\Chrome\Extension: [obhnedkdjofgblpkmlbamogmcbhgdkdj] - C:\Users\John\AppData\Local\CRE\obhnedkdjofgblpkmlbamogmcbhgdkdj.crx [2012-08-29]

CHR HKLM-x32\...\Chrome\Extension: [obhnedkdjofgblpkmlbamogmcbhgdkdj] - C:\Users\John\AppData\Local\CRE\obhnedkdjofgblpkmlbamogmcbhgdkdj.crx [2012-08-29]

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-11-23] () [File not signed]

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-01] (Broadcom Corporation.)

S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [93048 2014-06-10] (EasyAntiCheat Ltd)

R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]

R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-28] (Hi-Rez Studios) [File not signed]

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5312448 2014-03-19] (INCA Internet Co., Ltd.)

S2 NSDSvc; C:\Windows\System32\NSDSvc.exe [120160 2011-12-23] (Lenovo)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-29] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-29] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-04-19] ()

R2 RosettaStoneLtdController; C:\Program Files (x86)\RosettaStoneLtdServices\RosettaStoneLtdController.exe [352312 2008-09-16] (Rosetta Stone Ltd.) [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [4774208 2013-03-04] (RealVNC Ltd)

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [635160 2014-04-03] (Wacom Technology, Corp.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.)

R3 hswpan; C:\Windows\System32\DRIVERS\hswpan.sys [109056 2012-01-27] (Ozmo Inc)

R0 NSD; C:\Windows\System32\drivers\nsd.sys [24160 2011-12-23] (Lenovo Corporation")

R1 Nsdfltr; C:\Windows\System32\drivers\Nsdfltr.sys [59488 2011-12-21] (Lenovo Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-29] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8208488 2011-09-06] (Realtek Semiconductor Corp.)

U3 BcmSqlStartupSvc;

U2 CLKMSVC10_C3B3B687;

S3 cpuz136; \??\C:\Users\John\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]

U2 DriverService;

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

U2 iATAgentService;

U2 idealife Update Service;

U3 IGRS;

U2 IviRegMgr;

U2 Oasis2Service;

U2 PCCarerService;

U2 ReadyComm.DirectRouter;

U2 RichVideo;

U2 RtLedService;

U2 SeaPort;

U2 SoftwareService;

U3 SQLWriter;

S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [X]

S3 X6va010; \??\C:\Windows\SysWOW64\Drivers\X6va010 [X]

S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-06-12 15:49 - 2014-06-12 15:50 - 00030026 _____ () C:\Users\John\Downloads\FRST.txt

2014-06-12 15:49 - 2014-06-12 15:49 - 02081792 _____ (Farbar) C:\Users\John\Downloads\FRST64.exe

2014-06-12 15:49 - 2014-06-12 15:49 - 00000000 ____D () C:\FRST

2014-06-12 15:47 - 2014-06-12 15:47 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-12 15:47 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-06-12 15:47 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-06-12 15:45 - 2014-06-12 15:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\John\Downloads\mbam-setup-consumer-2.0.2.1012.exe

2014-06-12 15:27 - 2014-06-12 15:28 - 00002444 _____ () C:\Users\John\Desktop\Rkill.txt

2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\John\Desktop\rkill

2014-06-12 15:26 - 2014-06-12 15:27 - 01940216 _____ (Bleeping Computer, LLC) C:\Users\John\Downloads\rkill.exe

2014-06-10 19:25 - 2014-06-10 19:24 - 00093048 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe

2014-06-10 15:29 - 2014-06-10 15:29 - 02896539 _____ () C:\Users\John\Documents\secret 2.wma

2014-06-10 02:08 - 2014-06-10 02:09 - 164661561 _____ () C:\Users\John\Downloads\TRANSISTOR_BREACHED.zip

2014-06-10 01:55 - 2014-06-10 01:57 - 00000000 ____D () C:\Users\John\Downloads\[OST] Transistor OST 2014 Digital Edition (320 CBR MP3)

2014-06-10 01:53 - 2014-06-10 01:53 - 00021799 _____ () C:\Users\John\Downloads\[kickass.to]ost.transistor.ost.2014.digital.edition.320.cbr.mp3.torrent

2014-06-09 23:06 - 2014-06-09 23:08 - 00000000 ____D () C:\Users\John\Documents\Dawngate

2014-06-09 23:02 - 2014-06-09 23:02 - 00002185 _____ () C:\Users\Public\Desktop\Dawngate.lnk

2014-06-09 23:02 - 2014-06-09 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dawngate

2014-06-09 23:00 - 2014-06-09 23:00 - 09269248 _____ () C:\Users\John\Downloads\Dawngate_en_us (2).msi

2014-06-09 22:58 - 2014-06-09 22:59 - 09269248 _____ () C:\Users\John\Downloads\Dawngate_en_us (1).msi

2014-06-03 17:29 - 2014-05-29 16:07 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2014-06-03 17:29 - 2014-05-29 16:07 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2014-06-03 13:55 - 2014-06-03 13:55 - 00000219 _____ () C:\Users\John\Desktop\Alien Swarm.url

2014-06-03 02:27 - 2014-06-03 02:27 - 44199212 _____ () C:\Users\John\Downloads\Pentakill-SmiteandIgnite.zip

2014-05-31 13:57 - 2014-05-31 13:57 - 00000000 ____D () C:\Users\John\AppData\Roaming\roi

2014-05-31 13:51 - 2014-05-31 13:51 - 00000222 _____ () C:\Users\John\Desktop\Rise of Incarnates.url

2014-05-29 19:41 - 2014-05-29 19:41 - 00000000 ____D () C:\Users\John\Documents\Steam Cloud

2014-05-29 19:39 - 2014-05-29 19:39 - 00000000 ____D () C:\Users\John\Documents\RPGVXAce

2014-05-29 19:36 - 2014-05-29 19:36 - 00000222 _____ () C:\Users\John\Desktop\RPG Maker VX Ace.url

2014-05-29 19:35 - 2014-05-29 19:37 - 535408072 _____ () C:\Users\John\Downloads\RPGMaker_FreeGamesBundle1.zip

2014-05-26 22:49 - 2014-03-31 09:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-05-26 22:49 - 2014-03-31 09:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-05-23 18:12 - 2014-05-23 18:12 - 00001919 _____ () C:\Users\John\Desktop\Supraball.lnk

2014-05-23 18:12 - 2014-05-23 18:12 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supraball

2014-05-23 18:08 - 2014-05-23 18:09 - 00000000 ____D () C:\Program Files (x86)\Supraball

2014-05-23 18:07 - 2014-05-23 18:07 - 00000000 ____D () C:\Program Files\Common Files\INCA Shared

2014-05-23 18:07 - 2014-03-19 03:59 - 05312448 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des

2014-05-23 18:04 - 2014-05-23 18:07 - 255486794 _____ () C:\Users\John\Downloads\supraball_0.2.5.exe

2014-05-23 16:37 - 2014-05-23 16:37 - 00000000 ____D () C:\Program Files (x86)\GamesCampus

2014-05-23 16:15 - 2014-05-23 16:21 - 1600956497 _____ (Nimonix Inc.) C:\Users\John\Downloads\RFR_SETUP_NA_20140518.EXE

2014-05-21 16:02 - 2014-05-21 16:02 - 00000000 ____D () C:\Users\John\AppData\Local\{3AC31F14-B96F-472A-AE90-4CB395EF76A8}

2014-05-21 00:14 - 2014-05-28 13:41 - 00000000 ____D () C:\Users\John\Documents\Macro Scheduler 12

2014-05-19 20:45 - 2014-05-19 20:45 - 00417829 _____ () C:\Users\John\Downloads\Honors History Final Review 10th grade.pages.zip

2014-05-19 16:00 - 2014-05-19 16:00 - 00001163 _____ () C:\Users\John\Desktop\Stellar Phoenix Photo Recovery.lnk

2014-05-19 16:00 - 2014-05-19 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Photo Recovery

2014-05-19 16:00 - 2014-05-19 16:00 - 00000000 ____D () C:\Program Files (x86)\Stellar Phoenix Photo Recovery

2014-05-19 15:59 - 2014-05-19 16:00 - 10612576 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\John\Downloads\stellarphoenixphotorecovery.exe

2014-05-18 21:17 - 2014-05-18 21:17 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll

2014-05-18 21:17 - 2014-05-18 21:17 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll

2014-05-18 21:17 - 2014-05-18 21:17 - 00122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll

2014-05-18 21:17 - 2014-05-18 21:17 - 00109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

2014-05-18 21:17 - 2014-05-18 21:17 - 00000000 ____D () C:\Program Files (x86)\OpenAL

2014-05-18 21:16 - 2014-05-18 21:16 - 00000222 _____ () C:\Users\John\Desktop\Hammerwatch.url

2014-05-14 19:00 - 2014-05-14 19:00 - 00005093 _____ () C:\Users\John\Downloads\TRIALSCRIPT (1)

2014-05-14 18:58 - 2014-05-14 18:58 - 00005093 _____ () C:\Users\John\Downloads\TRIALSCRIPT

2014-05-13 12:03 - 2014-05-13 12:03 - 00000000 ____D () C:\Users\John\Documents\TecmoKoei

2014-05-13 11:21 - 2014-05-13 11:21 - 00000222 _____ () C:\Users\John\Desktop\DYNASTY WARRIORS 8 Xtreme Legends Complete Edition.url

==================== One Month Modified Files and Folders =======

2014-06-12 15:50 - 2014-06-12 15:49 - 00030026 _____ () C:\Users\John\Downloads\FRST.txt

2014-06-12 15:50 - 2012-08-08 15:04 - 00000000 ____D () C:\Users\John\AppData\Local\Temp

2014-06-12 15:49 - 2014-06-12 15:49 - 02081792 _____ (Farbar) C:\Users\John\Downloads\FRST64.exe

2014-06-12 15:49 - 2014-06-12 15:49 - 00000000 ____D () C:\FRST

2014-06-12 15:49 - 2012-09-04 19:24 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2349498154-4169554833-2041502127-1001UA.job

2014-06-12 15:47 - 2014-06-12 15:47 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-06-12 15:47 - 2014-04-12 13:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-06-12 15:47 - 2014-04-12 13:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-06-12 15:46 - 2014-06-12 15:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\John\Downloads\mbam-setup-consumer-2.0.2.1012.exe

2014-06-12 15:46 - 2012-10-13 12:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-06-12 15:46 - 2012-08-08 15:51 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype

2014-06-12 15:41 - 2012-07-03 16:55 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-06-12 15:40 - 2012-08-08 15:07 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-06-12 15:40 - 2009-07-13 21:45 - 00050640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-06-12 15:40 - 2009-07-13 21:45 - 00050640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-06-12 15:40 - 2009-07-13 20:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-06-12 15:39 - 2012-07-03 16:56 - 00219100 _____ () C:\Windows\system32\fastboot.set

2014-06-12 15:39 - 2012-07-03 16:55 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-06-12 15:39 - 2012-07-03 16:07 - 01876201 _____ () C:\Windows\WindowsUpdate.log

2014-06-12 15:33 - 2014-01-26 11:27 - 00017455 _____ () C:\Windows\setupact.log

2014-06-12 15:33 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-06-12 15:28 - 2014-06-12 15:27 - 00002444 _____ () C:\Users\John\Desktop\Rkill.txt

2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\John\Desktop\rkill

2014-06-12 15:27 - 2014-06-12 15:26 - 01940216 _____ (Bleeping Computer, LLC) C:\Users\John\Downloads\rkill.exe

2014-06-12 15:12 - 2012-08-08 15:57 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-06-12 14:05 - 2013-02-24 00:00 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2349498154-4169554833-2041502127-1001UA.job

2014-06-11 23:05 - 2013-02-24 00:00 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2349498154-4169554833-2041502127-1001Core.job

2014-06-11 20:49 - 2012-09-04 19:24 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2349498154-4169554833-2041502127-1001Core.job

2014-06-11 20:45 - 2012-08-08 22:07 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-06-11 19:07 - 2012-07-03 16:55 - 00002194 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-06-11 17:51 - 2012-08-19 20:42 - 00000426 _____ () C:\Windows\BRWMARK.INI

2014-06-11 02:22 - 2012-10-21 16:50 - 00000000 ____D () C:\Users\John\AppData\Roaming\uTorrent

2014-06-10 19:24 - 2014-06-10 19:25 - 00093048 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe

2014-06-10 15:33 - 2012-08-15 17:57 - 00000000 ____D () C:\Users\John\School

2014-06-10 15:29 - 2014-06-10 15:29 - 02896539 _____ () C:\Users\John\Documents\secret 2.wma

2014-06-10 02:09 - 2014-06-10 02:08 - 164661561 _____ () C:\Users\John\Downloads\TRANSISTOR_BREACHED.zip

2014-06-10 01:57 - 2014-06-10 01:55 - 00000000 ____D () C:\Users\John\Downloads\[OST] Transistor OST 2014 Digital Edition (320 CBR MP3)

2014-06-10 01:53 - 2014-06-10 01:53 - 00021799 _____ () C:\Users\John\Downloads\[kickass.to]ost.transistor.ost.2014.digital.edition.320.cbr.mp3.torrent

2014-06-09 23:08 - 2014-06-09 23:06 - 00000000 ____D () C:\Users\John\Documents\Dawngate

2014-06-09 23:02 - 2014-06-09 23:02 - 00002185 _____ () C:\Users\Public\Desktop\Dawngate.lnk

2014-06-09 23:02 - 2014-06-09 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dawngate

2014-06-09 23:02 - 2009-07-13 22:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-06-09 23:00 - 2014-06-09 23:00 - 09269248 _____ () C:\Users\John\Downloads\Dawngate_en_us (2).msi

2014-06-09 22:59 - 2014-06-09 22:58 - 09269248 _____ () C:\Users\John\Downloads\Dawngate_en_us (1).msi

2014-06-06 17:57 - 2012-08-09 00:41 - 00000000 ___HD () C:\Windows\msdownld.tmp

2014-06-04 20:37 - 2013-11-26 01:01 - 00000000 ____D () C:\Users\John\AppData\Local\Battle.net

2014-06-03 17:28 - 2012-07-03 16:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-06-03 13:55 - 2014-06-03 13:55 - 00000219 _____ () C:\Users\John\Desktop\Alien Swarm.url

2014-06-03 13:55 - 2012-08-08 22:12 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-06-03 02:27 - 2014-06-03 02:27 - 44199212 _____ () C:\Users\John\Downloads\Pentakill-SmiteandIgnite.zip

2014-06-02 13:17 - 2013-10-27 23:15 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-05-31 13:57 - 2014-05-31 13:57 - 00000000 ____D () C:\Users\John\AppData\Roaming\roi

2014-05-31 13:51 - 2014-05-31 13:51 - 00000222 _____ () C:\Users\John\Desktop\Rise of Incarnates.url

2014-05-30 14:38 - 2013-11-26 01:05 - 00000000 ____D () C:\Program Files (x86)\Hearthstone

2014-05-30 14:37 - 2013-11-26 01:01 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2014-05-29 19:41 - 2014-05-29 19:41 - 00000000 ____D () C:\Users\John\Documents\Steam Cloud

2014-05-29 19:39 - 2014-05-29 19:39 - 00000000 ____D () C:\Users\John\Documents\RPGVXAce

2014-05-29 19:37 - 2014-05-29 19:35 - 535408072 _____ () C:\Users\John\Downloads\RPGMaker_FreeGamesBundle1.zip

2014-05-29 19:36 - 2014-05-29 19:36 - 00000222 _____ () C:\Users\John\Desktop\RPG Maker VX Ace.url

2014-05-29 16:07 - 2014-06-03 17:29 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2014-05-29 16:07 - 2014-06-03 17:29 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2014-05-29 16:07 - 2013-11-21 23:02 - 01279480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-05-29 16:07 - 2013-11-21 23:02 - 01122312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-05-28 22:02 - 2012-08-21 23:21 - 00000000 ____D () C:\Users\John\Documents\Outlook Files

2014-05-28 13:41 - 2014-05-21 00:14 - 00000000 ____D () C:\Users\John\Documents\Macro Scheduler 12

2014-05-26 22:50 - 2013-12-03 18:57 - 00000000 ____D () C:\Users\John\AppData\Local\NVIDIA Corporation

2014-05-26 22:50 - 2012-07-03 16:14 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-26 22:49 - 2012-07-03 16:14 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-26 10:12 - 2014-02-28 16:57 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-05-26 10:12 - 2012-08-08 15:47 - 00000000 ____D () C:\ProgramData\Skype

2014-05-23 18:12 - 2014-05-23 18:12 - 00001919 _____ () C:\Users\John\Desktop\Supraball.lnk

2014-05-23 18:12 - 2014-05-23 18:12 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supraball

2014-05-23 18:12 - 2013-12-02 18:47 - 00000000 ____D () C:\ProgramData\Package Cache

2014-05-23 18:09 - 2014-05-23 18:08 - 00000000 ____D () C:\Program Files (x86)\Supraball

2014-05-23 18:07 - 2014-05-23 18:07 - 00000000 ____D () C:\Program Files\Common Files\INCA Shared

2014-05-23 18:07 - 2014-05-23 18:04 - 255486794 _____ () C:\Users\John\Downloads\supraball_0.2.5.exe

2014-05-23 16:39 - 2012-09-26 12:31 - 00001239 _____ () C:\Users\John\Desktop\Rumble Fighter.lnk

2014-05-23 16:37 - 2014-05-23 16:37 - 00000000 ____D () C:\Program Files (x86)\GamesCampus

2014-05-23 16:21 - 2014-05-23 16:15 - 1600956497 _____ (Nimonix Inc.) C:\Users\John\Downloads\RFR_SETUP_NA_20140518.EXE

2014-05-23 06:18 - 2014-04-30 21:20 - 00000000 ____D () C:\Users\John\AppData\Local\Windows Live

2014-05-21 17:16 - 2009-07-13 22:13 - 00800382 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-21 16:02 - 2014-05-21 16:02 - 00000000 ____D () C:\Users\John\AppData\Local\{3AC31F14-B96F-472A-AE90-4CB395EF76A8}

2014-05-20 23:51 - 2013-11-16 23:37 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft

2014-05-20 23:49 - 2012-08-09 14:50 - 00000000 ____D () C:\Program Files (x86)\StarCraft II

2014-05-19 20:45 - 2014-05-19 20:45 - 00417829 _____ () C:\Users\John\Downloads\Honors History Final Review 10th grade.pages.zip

2014-05-19 17:10 - 2012-07-03 16:52 - 00000000 ____D () C:\ProgramData\Temp

2014-05-19 16:00 - 2014-05-19 16:00 - 00001163 _____ () C:\Users\John\Desktop\Stellar Phoenix Photo Recovery.lnk

2014-05-19 16:00 - 2014-05-19 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Photo Recovery

2014-05-19 16:00 - 2014-05-19 16:00 - 00000000 ____D () C:\Program Files (x86)\Stellar Phoenix Photo Recovery

2014-05-19 16:00 - 2014-05-19 15:59 - 10612576 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\John\Downloads\stellarphoenixphotorecovery.exe