Jump to content

Cannot remove "PUP.Optional.HelperBar.A

Daaboul
 Share

Recommended Posts

Daaboul

Daaboul

Posted
Posted

Hey, I can't seem to remove this file from my PC using Malwarebytes. I have PUP ticked in both of the settings "treat detection's etc", (just in case you guys wanted to know) 

 

 

Farbar Result Scan Text file: 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Mohammed (administrator) on MOHAMMED-PC on 08-07-2014 23:01:21
Running from C:\Users\Mohammed\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\regedit.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\mspaint.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [shadowPlay] => C:\Windows\system32\nvspcap64.dll [1279480 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5179408 2014-06-17] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-2219034269-1770336449-2076580393-1000\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-06-30] (Valve Corporation)
HKU\S-1-5-21-2219034269-1770336449-2076580393-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
 
==================== Internet (Whitelisted) ====================
 
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
 
Chrome: 
=======
CHR HomePage: hxxp://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR&co=GB&userid=7f4228f9-f73d-f0e7-fb25-bbc968dbbbde&searchtype=hp&fr=linkury-tb&installDate={installDate}&type=hp2000
CHR StartupUrls: "hxxp://mysearch.avg.com?cid={EBAC45CF-7302-4DBB-8891-F3624F05093C}&mid=8d125dc1d0e747d2b37b4162723d986c-fa531696216ba9b384a826c31981c173e4a9f0aa〈=en&ds=AVG&coid=avgtbavg&pr=fr&d=2014-05-20 17:44:05&v=3.0.0.2&pid=wtu&sg=&sap=hp"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.2.464\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java Platform SE 7 U55) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-21]
CHR Extension: (Fast Proxy) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkjcdfmmpdfjohenejbkaaafkoeknjnh [2014-06-22]
CHR Extension: (YouTube) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-18]
CHR Extension: (Google Search) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-18]
CHR Extension: (AdBlock) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-18]
CHR Extension: (Google Wallet) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-18]
CHR Extension: (Gmail) - C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-18]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
 
==================== Services (Whitelisted) =================
 
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [262320 2014-07-08] (Adobe Systems Incorporated) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3241488 2014-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-06-17] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-05-22] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2014-06-09] (BioWare)
R3 ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-14] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
 
==================== Drivers (Whitelisted) ====================
 
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-07-08] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-08] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [231112 2013-01-03] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [301256 2013-01-03] (VIA Technologies, Inc.)
S3 ALSysIO; \??\C:\Users\Mohammed\AppData\Local\Temp\ALSysIO64.sys [X]
S3 GPU-Z; \??\C:\Users\Mohammed\AppData\Local\Temp\GPU-Z.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-07-08 22:57 - 2014-07-08 23:01 - 00017916 _____ () C:\Users\Mohammed\Downloads\FRST.txt
2014-07-08 22:55 - 2014-07-08 22:55 - 02084352 _____ (Farbar) C:\Users\Mohammed\Downloads\FRST64.exe
2014-07-08 20:54 - 2014-07-08 23:00 - 00000000 ____D () C:\Users\Mohammed\Citrix
2014-07-08 20:54 - 2014-07-08 20:54 - 00000081 _____ () C:\CTX.DAT
2014-07-08 20:30 - 2014-07-08 20:30 - 00001373 _____ () C:\Users\Mohammed\Documents\1.txt
2014-07-08 20:18 - 2014-07-08 20:18 - 00000832 _____ () C:\Users\Mohammed\Desktop\JRT.txt
2014-07-08 20:14 - 2014-07-08 20:14 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 20:13 - 2014-07-08 20:13 - 00000306 _____ () C:\Windows\PFRO.log
2014-07-08 20:13 - 2014-07-08 20:13 - 00000168 _____ () C:\Windows\setupact.log
2014-07-08 20:13 - 2014-07-08 20:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-08 20:11 - 2014-07-08 20:11 - 01016261 _____ (Thisisu) C:\Users\Mohammed\Downloads\JRT.exe
2014-07-08 20:10 - 2014-07-08 20:10 - 01346519 _____ () C:\Users\Mohammed\Downloads\AdwCleaner.exe
2014-07-08 20:09 - 2014-07-08 20:09 - 00003694 _____ () C:\Users\Mohammed\Documents\cc_20140708_200948.reg
2014-07-08 19:51 - 2014-07-08 23:01 - 00000000 ____D () C:\FRST
2014-07-08 19:41 - 2014-07-08 20:11 - 00000000 ____D () C:\AdwCleaner
2014-07-08 19:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-08 11:54 - 2012-11-21 03:52 - 08388608 _____ () C:\Users\Mohammed\Documents\Z77XUD3H.19e
2014-07-08 11:51 - 2014-01-06 06:44 - 08388608 _____ () C:\Users\Mohammed\Documents\Z77XUD3H.20e
2014-07-07 20:49 - 2014-06-13 01:19 - 00609056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-07-07 20:46 - 2014-06-13 03:59 - 01890264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434043.dll
2014-07-07 20:46 - 2014-06-13 03:59 - 01542088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434043.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 13911928 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 13824408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 11272544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 11211224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 04248520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 03989464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00946120 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00909256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00902616 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00869336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00391456 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-07-07 20:46 - 2014-06-13 03:48 - 00348120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 31512352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 24198616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 17553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 12860888 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-07-07 20:46 - 2014-06-13 03:47 - 00502048 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-07-07 20:46 - 2014-06-13 03:47 - 00417568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 22994392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-07-07 20:46 - 2014-06-13 03:46 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-07-07 20:04 - 2014-07-07 20:04 - 00005276 _____ () C:\Users\Mohammed\Documents\cc_20140707_200434.reg
2014-07-05 15:03 - 2014-07-05 15:03 - 00002805 _____ () C:\Users\Public\Desktop\Intel Processor Diagnostic Tool 64bit.lnk
2014-07-05 15:03 - 2014-07-05 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2014-07-05 15:03 - 2014-07-05 15:03 - 00000000 ____D () C:\Program Files\Intel Corporation
2014-07-05 14:19 - 2014-03-07 00:53 - 02925760 _____ (Sysinternals - www.sysinternals.com) C:\Users\Mohammed\Documents\procexp.exe
2014-07-05 14:19 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\Mohammed\Documents\procexp.chm
2014-07-05 14:18 - 2014-07-05 14:18 - 01243655 _____ () C:\Users\Mohammed\Documents\ProcessExplorer.zip
2014-07-04 21:06 - 2014-07-04 21:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xhcdrv_01011.Wdf
2014-07-04 21:06 - 2014-07-04 21:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ViaHub3_01011.Wdf
2014-07-04 21:06 - 2013-01-17 20:11 - 00086064 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\vusbstor.sys
2014-07-04 21:05 - 2013-01-03 02:31 - 00301256 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\xhcdrv.sys
2014-07-04 21:05 - 2012-08-17 03:57 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2014-07-04 20:15 - 2014-07-04 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-07-04 20:15 - 2014-07-04 20:15 - 00000000 ____D () C:\Program Files (x86)\Seagate
2014-07-03 15:03 - 2014-07-03 15:03 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\FalloutNV
2014-07-01 22:19 - 2014-07-01 22:19 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Blizzard
2014-07-01 20:09 - 2014-07-01 22:19 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-01 20:09 - 2014-07-01 20:09 - 00001187 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-07-01 20:09 - 2014-07-01 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-07-01 20:07 - 2014-07-08 17:21 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Battle.net
2014-07-01 20:07 - 2014-07-01 22:19 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\Battle.net
2014-07-01 20:07 - 2014-07-01 20:07 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Blizzard Entertainment
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-01 20:05 - 2014-07-01 20:05 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-30 21:38 - 2014-07-01 00:10 - 00000000 ____D () C:\Users\Mohammed\Documents\The Witcher
2014-06-30 21:38 - 2014-07-01 00:10 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\The Witcher
2014-06-30 21:38 - 2014-06-30 21:38 - 00000031 _____ () C:\Windows\progress
2014-06-30 21:36 - 2014-06-30 21:36 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-06-27 20:54 - 2014-06-27 20:54 - 00021910 _____ () C:\Users\Mohammed\Documents\cc_20140627_205426.reg
2014-06-27 20:39 - 2014-06-27 20:39 - 00000000 ____D () C:\Program Files(x86)
2014-06-25 22:34 - 2014-06-26 03:03 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\vlc
2014-06-25 22:33 - 2014-06-25 22:33 - 00000000 ____D () C:\Program Files (x86)\vlc-2.1.3
2014-06-25 14:28 - 2014-06-25 14:28 - 00001298 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-06-25 14:20 - 2014-06-25 14:23 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-06-23 17:12 - 2014-06-23 17:12 - 00000890 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-06-23 17:10 - 2014-06-23 17:11 - 00000000 ____D () C:\Program Files (x86)\CPU Thermometer
2014-06-22 00:10 - 2014-06-22 00:09 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1403392251149
2014-06-22 00:09 - 2014-06-22 00:09 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1403392251149
2014-06-22 00:08 - 2014-06-22 00:09 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-21 04:31 - 2014-07-08 19:11 - 00007620 _____ () C:\Users\Mohammed\AppData\Local\Resmon.ResmonCfg
2014-06-20 23:49 - 2014-06-30 14:29 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\NCSOFT
2014-06-20 23:49 - 2014-06-30 14:29 - 00000000 ____D () C:\Program Files (x86)\NCSOFT
2014-06-20 23:49 - 2014-06-20 23:49 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\NCSOFT
2014-06-17 16:21 - 2014-06-17 16:21 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-06-17 16:07 - 2014-06-17 16:07 - 00328984 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00269080 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00242968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00190744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00123672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00031512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2014-06-15 16:15 - 2014-06-15 16:15 - 00000000 ____D () C:\Users\Mohammed\Documents\Eidos
2014-06-14 17:22 - 2014-06-14 17:24 - 00000000 ____D () C:\Users\Mohammed\Documents\BFH.Beta
2014-06-14 17:22 - 2014-06-14 17:22 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\ESN
2014-06-14 17:22 - 2014-06-14 17:22 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-06-14 17:18 - 2014-06-14 17:18 - 00001139 _____ () C:\Users\Public\Desktop\Battlefield Hardline Beta.lnk
2014-06-14 17:18 - 2014-06-14 17:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline Beta
2014-06-14 17:17 - 2014-06-14 17:18 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-14 17:17 - 2014-06-14 17:17 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-14 17:17 - 2014-06-14 17:17 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-13 23:40 - 2014-06-13 23:40 - 00000000 ____D () C:\Users\Mohammed\Documents\NBGI
2014-06-13 23:40 - 2014-06-13 23:40 - 00000000 ____D () C:\Users\Mohammed\Documents\Games for Windows - LIVE Demos
2014-06-13 23:32 - 2014-06-13 23:32 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\NBGI
2014-06-13 18:35 - 2014-06-13 18:35 - 00000939 _____ () C:\Users\Mohammed\Desktop\Open Broadcaster Software.lnk
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\OBS
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Program Files\OBS
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-06-12 20:02 - 2014-06-12 20:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-06-11 19:17 - 2014-06-11 19:17 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\StepMania 5
2014-06-11 19:17 - 2014-06-11 19:17 - 00000000 ____D () C:\Games
2014-06-10 18:39 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-10 18:39 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-10 18:39 - 2014-05-30 10:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-10 18:39 - 2014-05-30 10:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-10 18:39 - 2014-05-30 10:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-10 18:39 - 2014-05-30 10:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-10 18:39 - 2014-05-30 10:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-10 18:39 - 2014-05-30 10:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-10 18:39 - 2014-05-30 10:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-10 18:39 - 2014-05-30 09:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-10 18:39 - 2014-05-30 09:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-10 18:39 - 2014-05-30 09:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-10 18:39 - 2014-05-30 09:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-10 18:39 - 2014-05-30 09:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-10 18:39 - 2014-05-30 09:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-10 18:39 - 2014-05-30 09:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-10 18:39 - 2014-05-30 09:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-10 18:39 - 2014-05-30 09:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-10 18:39 - 2014-05-30 09:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-10 18:39 - 2014-05-30 09:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-10 18:39 - 2014-05-30 09:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-10 18:39 - 2014-05-30 09:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-10 18:39 - 2014-05-30 09:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-10 18:39 - 2014-05-30 09:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-10 18:39 - 2014-05-30 08:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-10 18:39 - 2014-05-30 08:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-10 18:39 - 2014-05-30 08:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-10 18:39 - 2014-05-30 08:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-10 18:39 - 2014-05-30 08:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-10 18:38 - 2014-05-30 11:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-10 18:38 - 2014-05-30 10:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-10 18:38 - 2014-05-30 10:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-10 18:38 - 2014-05-30 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-10 18:38 - 2014-05-30 10:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-10 18:38 - 2014-05-30 10:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-10 18:38 - 2014-05-30 10:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-10 18:38 - 2014-05-30 10:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-10 18:38 - 2014-05-30 10:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-10 18:38 - 2014-05-30 09:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-10 18:38 - 2014-05-30 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-10 18:38 - 2014-05-30 09:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-10 18:38 - 2014-05-30 09:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-10 18:38 - 2014-05-30 09:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-10 18:38 - 2014-05-30 09:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-10 18:38 - 2014-05-30 09:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-10 18:38 - 2014-05-30 08:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-10 18:38 - 2014-05-30 08:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-10 18:38 - 2014-05-30 08:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-10 18:38 - 2014-05-30 08:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-10 18:38 - 2014-05-30 08:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-10 18:38 - 2014-05-30 08:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-10 18:38 - 2014-05-30 08:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-10 18:37 - 2014-06-08 10:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-10 18:37 - 2014-06-08 10:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-10 18:37 - 2014-05-08 10:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-10 18:37 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-10 18:37 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-10 18:37 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-10 18:37 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-10 18:37 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-10 18:37 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-10 18:37 - 2014-03-26 15:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-10 18:37 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-10 18:37 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-10 18:37 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-10 18:37 - 2014-03-26 15:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-10 18:37 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-10 18:37 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-10 13:26 - 2014-06-10 13:26 - 00000000 ____D () C:\ProgramData\BioWare
2014-06-10 13:22 - 2014-06-10 13:22 - 00007902 _____ () C:\Users\Mohammed\Documents\DAO Ultimate Addins Updater.log
2014-06-10 13:22 - 2014-06-10 13:22 - 00000000 ____D () C:\Users\Mohammed\Documents\BioWare
 
==================== One Month Modified Files and Folders =======
 
2014-07-08 23:01 - 2014-07-08 22:57 - 00017916 _____ () C:\Users\Mohammed\Downloads\FRST.txt
2014-07-08 23:01 - 2014-07-08 19:51 - 00000000 ____D () C:\FRST
2014-07-08 23:00 - 2014-07-08 20:54 - 00000000 ____D () C:\Users\Mohammed\Citrix
2014-07-08 23:00 - 2014-05-18 21:43 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 22:59 - 2014-05-19 22:04 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\Skype
2014-07-08 22:55 - 2014-07-08 22:55 - 02084352 _____ (Farbar) C:\Users\Mohammed\Downloads\FRST64.exe
2014-07-08 22:49 - 2014-05-20 17:08 - 01348106 _____ () C:\Windows\WindowsUpdate.log
2014-07-08 22:45 - 2014-05-19 01:21 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-08 21:45 - 2014-05-19 01:21 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:45 - 2014-05-19 01:21 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 21:45 - 2014-05-19 01:21 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:27 - 2014-05-18 23:05 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\TS3Client
2014-07-08 21:08 - 2014-06-03 20:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-08 20:54 - 2014-07-08 20:54 - 00000081 _____ () C:\CTX.DAT
2014-07-08 20:54 - 2014-05-18 21:36 - 00000000 ____D () C:\Users\Mohammed
2014-07-08 20:54 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-07-08 20:42 - 2014-05-19 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-08 20:30 - 2014-07-08 20:30 - 00001373 _____ () C:\Users\Mohammed\Documents\1.txt
2014-07-08 20:20 - 2009-07-14 05:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-08 20:20 - 2009-07-14 05:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-08 20:18 - 2014-07-08 20:18 - 00000832 _____ () C:\Users\Mohammed\Desktop\JRT.txt
2014-07-08 20:14 - 2014-07-08 20:14 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 20:14 - 2014-05-19 02:07 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-07-08 20:14 - 2014-05-19 02:06 - 00025640 _____ (Windows ® Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-07-08 20:13 - 2014-07-08 20:13 - 00000306 _____ () C:\Windows\PFRO.log
2014-07-08 20:13 - 2014-07-08 20:13 - 00000168 _____ () C:\Windows\setupact.log
2014-07-08 20:13 - 2014-07-08 20:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-08 20:13 - 2014-05-18 23:06 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-08 20:13 - 2014-05-18 22:25 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-08 20:13 - 2014-05-18 21:43 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 20:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-08 20:11 - 2014-07-08 20:11 - 01016261 _____ (Thisisu) C:\Users\Mohammed\Downloads\JRT.exe
2014-07-08 20:11 - 2014-07-08 19:41 - 00000000 ____D () C:\AdwCleaner
2014-07-08 20:10 - 2014-07-08 20:10 - 01346519 _____ () C:\Users\Mohammed\Downloads\AdwCleaner.exe
2014-07-08 20:09 - 2014-07-08 20:09 - 00003694 _____ () C:\Users\Mohammed\Documents\cc_20140708_200948.reg
2014-07-08 19:46 - 2014-05-18 23:32 - 00000000 ____D () C:\ProgramData\MFAData
2014-07-08 19:11 - 2014-06-21 04:31 - 00007620 _____ () C:\Users\Mohammed\AppData\Local\Resmon.ResmonCfg
2014-07-08 17:21 - 2014-07-01 20:07 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Battle.net
2014-07-07 20:49 - 2014-05-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-07 20:49 - 2014-05-18 22:25 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:47 - 2014-05-18 22:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-07 20:04 - 2014-07-07 20:04 - 00005276 _____ () C:\Users\Mohammed\Documents\cc_20140707_200434.reg
2014-07-06 13:43 - 2014-05-20 17:40 - 00025640 _____ (Windows ® Server 2003 DDK provider) C:\Windows\etdrv.sys
2014-07-05 15:08 - 2014-05-22 16:42 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-05 15:03 - 2014-07-05 15:03 - 00002805 _____ () C:\Users\Public\Desktop\Intel Processor Diagnostic Tool 64bit.lnk
2014-07-05 15:03 - 2014-07-05 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2014-07-05 15:03 - 2014-07-05 15:03 - 00000000 ____D () C:\Program Files\Intel Corporation
2014-07-05 14:57 - 2014-05-20 17:44 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-07-05 14:18 - 2014-07-05 14:18 - 01243655 _____ () C:\Users\Mohammed\Documents\ProcessExplorer.zip
2014-07-04 21:08 - 2014-05-18 21:48 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-07-04 21:06 - 2014-07-04 21:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xhcdrv_01011.Wdf
2014-07-04 21:06 - 2014-07-04 21:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ViaHub3_01011.Wdf
2014-07-04 20:19 - 2014-07-04 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
2014-07-04 20:15 - 2014-07-04 20:15 - 00000000 ____D () C:\Program Files (x86)\Seagate
2014-07-04 20:15 - 2014-05-22 17:14 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-03 15:03 - 2014-07-03 15:03 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\FalloutNV
2014-07-03 15:03 - 2014-05-19 01:49 - 00000000 ____D () C:\Users\Mohammed\Documents\My Games
2014-07-03 15:01 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-07-03 13:56 - 2014-05-18 23:35 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-07-03 13:56 - 2014-05-18 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-07-01 22:19 - 2014-07-01 22:19 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Blizzard
2014-07-01 22:19 - 2014-07-01 20:09 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-01 22:19 - 2014-07-01 20:07 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\Battle.net
2014-07-01 20:09 - 2014-07-01 20:09 - 00001187 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-07-01 20:09 - 2014-07-01 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-07-01 20:07 - 2014-07-01 20:07 - 00001150 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\Blizzard Entertainment
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-07-01 20:07 - 2014-07-01 20:07 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-01 20:05 - 2014-07-01 20:05 - 00000000 ____D () C:\ProgramData\Battle.net
2014-07-01 00:10 - 2014-06-30 21:38 - 00000000 ____D () C:\Users\Mohammed\Documents\The Witcher
2014-07-01 00:10 - 2014-06-30 21:38 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\The Witcher
2014-06-30 21:38 - 2014-06-30 21:38 - 00000031 _____ () C:\Windows\progress
2014-06-30 21:36 - 2014-06-30 21:36 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-06-30 14:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2014-06-30 14:29 - 2014-06-20 23:49 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\NCSOFT
2014-06-30 14:29 - 2014-06-20 23:49 - 00000000 ____D () C:\Program Files (x86)\NCSOFT
2014-06-30 14:25 - 2014-05-18 21:49 - 00000000 ____D () C:\Program Files\Intel
2014-06-27 20:54 - 2014-06-27 20:54 - 00021910 _____ () C:\Users\Mohammed\Documents\cc_20140627_205426.reg
2014-06-27 20:53 - 2014-06-05 01:51 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-27 20:53 - 2014-05-19 02:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-27 20:53 - 2014-05-19 02:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-27 20:39 - 2014-06-27 20:39 - 00000000 ____D () C:\Program Files(x86)
2014-06-27 03:20 - 2014-05-18 23:06 - 00000577 _____ () C:\Users\Mohammed\Desktop\YR2 Results.txt
2014-06-26 03:03 - 2014-06-25 22:34 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\vlc
2014-06-25 22:33 - 2014-06-25 22:33 - 00000000 ____D () C:\Program Files (x86)\vlc-2.1.3
2014-06-25 14:28 - 2014-06-25 14:28 - 00001298 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-06-25 14:28 - 2014-06-25 14:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-06-25 14:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-25 14:23 - 2014-06-25 14:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-06-25 01:55 - 2014-05-18 21:43 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 01:55 - 2014-05-18 21:43 - 00003646 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 19:45 - 2014-06-06 22:31 - 00000000 ____D () C:\Users\Mohammed\Documents\survarium
2014-06-23 17:12 - 2014-06-23 17:12 - 00000890 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2014-06-23 17:12 - 2014-05-22 16:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-06-23 17:12 - 2014-05-22 16:51 - 00000000 ____D () C:\Program Files\CPUID
2014-06-23 17:11 - 2014-06-23 17:10 - 00000000 ____D () C:\Program Files (x86)\CPU Thermometer
2014-06-22 00:09 - 2014-06-22 00:10 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1403392251149
2014-06-22 00:09 - 2014-06-22 00:09 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1403392251149
2014-06-22 00:09 - 2014-06-22 00:08 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-06-21 23:21 - 2014-05-22 19:09 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\DayZ
2014-06-20 23:49 - 2014-06-20 23:49 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\NCSOFT
2014-06-20 15:45 - 2009-07-14 06:13 - 00784326 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-18 15:08 - 2014-06-01 21:14 - 00000000 ____D () C:\ProgramData\Origin
2014-06-18 15:08 - 2014-06-01 21:14 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-17 16:21 - 2014-06-17 16:21 - 00235800 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2014-06-17 16:07 - 2014-06-17 16:07 - 00328984 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00269080 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00242968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00190744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00153368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00123672 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2014-06-17 16:06 - 2014-06-17 16:06 - 00031512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2014-06-15 16:15 - 2014-06-15 16:15 - 00000000 ____D () C:\Users\Mohammed\Documents\Eidos
2014-06-14 17:24 - 2014-06-14 17:22 - 00000000 ____D () C:\Users\Mohammed\Documents\BFH.Beta
2014-06-14 17:22 - 2014-06-14 17:22 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\ESN
2014-06-14 17:22 - 2014-06-14 17:22 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-06-14 17:22 - 2014-06-01 21:14 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-06-14 17:18 - 2014-06-14 17:18 - 00001139 _____ () C:\Users\Public\Desktop\Battlefield Hardline Beta.lnk
2014-06-14 17:18 - 2014-06-14 17:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline Beta
2014-06-14 17:18 - 2014-06-14 17:17 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-14 17:17 - 2014-06-14 17:17 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-14 17:17 - 2014-06-14 17:17 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-06-14 13:43 - 2014-06-01 21:17 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-06-13 23:40 - 2014-06-13 23:40 - 00000000 ____D () C:\Users\Mohammed\Documents\NBGI
2014-06-13 23:40 - 2014-06-13 23:40 - 00000000 ____D () C:\Users\Mohammed\Documents\Games for Windows - LIVE Demos
2014-06-13 23:32 - 2014-06-13 23:32 - 00000000 ____D () C:\Users\Mohammed\AppData\Local\NBGI
2014-06-13 18:35 - 2014-06-13 18:35 - 00000939 _____ () C:\Users\Mohammed\Desktop\Open Broadcaster Software.lnk
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\OBS
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Program Files\OBS
2014-06-13 18:35 - 2014-06-13 18:35 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-06-13 03:59 - 2014-07-07 20:46 - 01890264 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434043.dll
2014-06-13 03:59 - 2014-07-07 20:46 - 01542088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434043.dll
2014-06-13 03:59 - 2014-05-20 17:31 - 00026353 _____ () C:\Windows\system32\nvinfo.pb
2014-06-13 03:48 - 2014-07-07 20:46 - 13911928 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 13824408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 11272544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 11211224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 04248520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 03989464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00946120 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00909256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00902616 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00869336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00391456 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-06-13 03:48 - 2014-07-07 20:46 - 00348120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-06-13 03:48 - 2014-05-20 17:32 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-06-13 03:48 - 2014-05-20 17:32 - 00062920 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 31512352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 24198616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 17553032 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 12860888 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-06-13 03:47 - 2014-07-07 20:46 - 00502048 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-06-13 03:47 - 2014-07-07 20:46 - 00417568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-06-13 03:47 - 2014-05-20 17:31 - 18625768 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-06-13 03:47 - 2014-05-20 17:31 - 14497528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 22994392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-06-13 03:46 - 2014-07-07 20:46 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-06-13 03:46 - 2014-05-20 17:31 - 02814120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-06-13 03:46 - 2014-05-20 17:31 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-06-13 03:45 - 2014-05-20 17:31 - 03196304 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-06-13 03:11 - 2014-05-20 17:32 - 06783960 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-06-13 03:11 - 2014-05-20 17:32 - 03523360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-06-13 03:11 - 2014-05-20 17:32 - 00933208 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-06-13 03:11 - 2014-05-20 17:32 - 00387528 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-06-13 03:11 - 2014-05-20 17:32 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-06-13 01:19 - 2014-07-07 20:49 - 00609056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-06-12 20:02 - 2014-06-12 20:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-06-11 22:55 - 2014-05-18 21:43 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-11 19:17 - 2014-06-11 19:17 - 00000000 ____D () C:\Users\Mohammed\AppData\Roaming\StepMania 5
2014-06-11 19:17 - 2014-06-11 19:17 - 00000000 ____D () C:\Games
2014-06-10 21:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-06-10 18:41 - 2014-05-18 22:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-10 18:40 - 2014-05-18 22:28 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-10 18:39 - 2014-05-18 23:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-10 13:26 - 2014-06-10 13:26 - 00000000 ____D () C:\ProgramData\BioWare
2014-06-10 13:22 - 2014-06-10 13:22 - 00007902 _____ () C:\Users\Mohammed\Documents\DAO Ultimate Addins Updater.log
2014-06-10 13:22 - 2014-06-10 13:22 - 00000000 ____D () C:\Users\Mohammed\Documents\BioWare
2014-06-08 10:13 - 2014-06-10 18:37 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:08 - 2014-06-10 18:37 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
 
Some content of TEMP:
====================
C:\Users\Mohammed\AppData\Local\Temp\nvStInst.exe
C:\Users\Mohammed\AppData\Local\Temp\procexp64.exe
C:\Users\Mohammed\AppData\Local\Temp\Quarantine.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-07-08 21:58
 
==================== End Of Log ============================
 
Addition File:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-07-2014 01
Ran by Mohammed at 2014-07-08 23:01:41
Running from C:\Users\Mohammed\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
 
==================== Installed Programs ======================
 
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.28 - GIGABYTE)
140 (HKLM-x32\...\Steam App 242820) (Version:  - Carlsen Games)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.2.8.1 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.2.8.1 - ASUSTek COMPUTER INC.) Hidden
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Atheros Communications Inc.)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4716 - AVG Technologies)
AVG 2014 (Version: 14.0.3986 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4716 - AVG Technologies) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield™ Hardline Beta (HKLM-x32\...\{599276A7-F45D-40B1-A0B6-CF132A1CAD49}) (Version: 1.0.0.5 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Capsized (HKLM-x32\...\Steam App 95300) (Version:  - Alientrap Games Inc)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dragon Age: Origins - Ultimate Edition (HKLM-x32\...\Steam App 47810) (Version:  - BioWare)
Easy Tune 6 B12.1121.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.1121.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
Geeks3D.com FurMark 1.9.2 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version:  - Geeks3D.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Intel Processor Diagnostic Tool 64bit (HKLM\...\{B1E50355-2437-40B0-A016-67B7490FC93E}) (Version: 2.10.0.0 - Intel Corporation)
Intel® Chipset Device Software (Version: 10.0.20 - Intel Corporation) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel® Corporation) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Legend of Grimrock (HKLM-x32\...\Steam App 207170) (Version:  - Almost Human Games)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1020 - Marvell)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.43 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.43 - NVIDIA Corporation)
NVIDIA Control Panel 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
ON_OFF Charge B12.1025.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
The Sims 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)
The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version:  - CD Projekt RED)
Thomas Was Alone (HKLM-x32\...\Steam App 220780) (Version:  - Mike Bithell)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
 
==================== Restore Points  =========================
 
03-07-2014 14:02:36 Installed DirectX
04-07-2014 19:15:44 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
04-07-2014 20:06:02 Configured Platform
05-07-2014 14:03:47 Installed Intel Processor Diagnostic Tool 64bit.
07-07-2014 19:47:13 Device Driver Package Install: NVIDIA Display adapters
07-07-2014 19:48:57 Device Driver Package Install: NVIDIA Universal Serial Bus controllers
08-07-2014 14:52:26 Removed League of Legends
 
==================== Hosts content: ==========================
 
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {133DD81F-AC12-4BA9-8535-E4CFDAAC05F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-18] (Google Inc.)
Task: {7114EAAA-18A5-4995-B964-4A6E1392A529} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-18] (Google Inc.)
Task: {7FC5C00F-1CD9-4807-9075-A5CC6F458F8F} - System32\Tasks\Microsoft\Windows\PLA\System\{C86C90DA-9072-4E7A-B2B5-951A55A96ED6}_System Diagnostics => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "system\System Diagnostics" "$(Arg0)"
Task: {A4D0A57E-A1AF-4024-A660-F534957C27C6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {F073B807-F4BC-43A1-BE32-CA1335BDB06C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-05-20 17:32 - 2014-06-13 03:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-14 17:17 - 2014-06-14 17:17 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-18 21:50 - 2012-08-09 11:55 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2014-05-18 21:50 - 2012-08-09 11:55 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-05-21 19:59 - 2014-05-31 02:27 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-05-18 23:07 - 2014-05-31 02:27 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-21 19:59 - 2014-05-31 02:27 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-05-18 23:07 - 2014-05-31 02:27 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-05-18 23:07 - 2014-06-26 23:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-21 19:59 - 2014-06-30 22:47 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-21 19:59 - 2014-04-29 01:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-05-18 23:07 - 2014-06-30 22:46 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-05-18 23:07 - 2014-05-02 00:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-05-18 23:07 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-05-18 23:07 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-05-18 23:07 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-05-18 21:49 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-06-11 22:55 - 2014-06-05 14:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll
2014-05-18 23:13 - 2014-05-18 23:13 - 00018856 _____ () C:\Program Files (x86)\Java\jre7\bin\jp2native.dll
2014-02-28 14:33 - 2014-02-28 14:33 - 00148480 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\quazip.dll
2014-02-27 14:46 - 2014-02-27 14:46 - 00864768 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 14:45 - 2014-02-27 14:45 - 00677376 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-02-28 14:41 - 2014-02-28 14:41 - 00092104 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-02-28 14:41 - 2014-02-28 14:41 - 00105416 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-02-27 14:46 - 2014-02-27 14:46 - 00025600 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 14:46 - 2014-02-27 14:46 - 00242688 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-02-28 14:42 - 2014-02-28 14:42 - 00477128 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-02-28 14:42 - 2014-02-28 14:42 - 00483784 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 14:46 - 2014-02-27 14:46 - 00123904 _____ () C:\Program Files (x86)\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
 
==================== Safe Mode (whitelisted) ===================
 
 
==================== EXE Association (whitelisted) =============
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
MSCONFIG\Services: ASGT => 2
MSCONFIG\Services: vToolbarUpdater3.0.0 => 2
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
 
System errors:
=============
 
Microsoft Office Sessions:
=========================
 
==================== Memory info =========================== 
 
Percentage of memory in use: 36%
Total physical RAM: 8152.05 MB
Available physical RAM: 5166.98 MB
Total Pagefile: 16302.27 MB
Available Pagefile: 12762.71 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:931.41 GB) (Free:783.29 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 5A7D28A9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================
 

 

Link to post
Share on other sites
Daaboul

Daaboul

Posted
  • Author
Posted

Also the malwareBytes Log:

 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 09/07/2014
Scan Time: 14:48:18
Logfile: mwb.txt
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.07.09.04
Rootkit Database: v2014.07.07.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Mohammed
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 275143
Time Elapsed: 5 min, 43 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 1
PUP.Optional.HelperBar.A, C:\Users\Mohammed\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (   "homepage": "http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR&co=GB&userid=7f4228f9-f73d-f0e7-fb25-bbc968dbbbde&searchtype=hp&fr=linkury-tb&installDate={installDate}&type=hp2000",), Replaced,[6f4705971962e551b66acafefa0a6e92]
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Welcome to the forum.

General P2P/Piracy Warning:

 

1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

2. If you have illegal/cracked software (MS Office, Adobe Products), cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Failure to remove such software will result in your topic being closed and no further assistance being provided.

 

<====><====><====><====><====><====><====><====>

 

Please run a Quick Scan with Malwarebytes (if possible)

For Malwarebytes ver: 1.75

Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.

For Malwarebytes 2.0, please run a Threat Scan

Click on Settings > Detection and Protection > Non-Malware Protection > PUP (Potentially Unwanted Program) detections > Make sure it's set to Treat detections as malware

Same for PUM (Potentially Unwanted Modifications)

Quarantine all that's found

Post the log

Then......

Please download Farbar Recovery Scan Tool (FRST) and save it to a folder.

(use correct version for your system.....Which system am I using?)

FRST <----for 32 bit systems

FRST64 <----for 64 bit systems

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button. (make sure the Addition box is checked)
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
If the logs are large, you can attach them:

To attach a log:

Bottom right corner of this page.

reply1.jpg

New window that comes up.

replyer1.jpg

Last................

Please download and run RogueKiller 32 bit to your desktop.

RogueKiller<---use this one for 64 bit systems

Which system am I using?

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

(please don't put logs in code or quotes and use the default font)

 

Note:

Please read all of my instructions completely including these.

Make sure system restore is turned on and running. Create a new restore point

Make sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly

Removing malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive

<+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>The removal of malware isn't instantaneous, please be patient.

<+>When we are done, I'll give to instructions on how to cleanup all the tools and logs

<+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.

------->Your topic will be closed if you haven't replied within 3 days!<--------

If I don't respond within 24 hours, please send me a PM

Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Make sure you have created a restore point and.....

bwebb7v.jpgDownload Delfix from Here and save it to your desktop.

  • Place a check mark in front of .......
  • Create registry backup <---only!
  • Uncheck the rest!
  • Click the Run button.

    Close the tool out when it's done....we'll use it later.

    -----------------------------------------------

    Please download AdwCleaner from HERE or HERE to your desktop.

    • Double click on AdwCleaner.exe to run the tool.

      Vista/Windows 7/8 users right-click and select Run As Administrator

    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
    • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
    • Look over the log especially under Files/Folders for any program you want to save.
    • If there's a program you may want to save, just uncheck it from AdwCleaner.
    • If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)
    • If you're ready to clean it all up.....click the Clean button.
    • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
    • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
    • To restore an item that has been deleted:
    • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.
    --------------------------------------------------

    You have to set these Chromes Home Page and Startup manually:

    CHR HomePage: hxxp://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR&co=GB&userid=7f4228f9-f73d-f0e7-fb25-bbc968dbbbde&searchtype=hp&fr=linkury-tb&installDate={installDate}&type=hp2000

    https://support.google.com/chrome/answer/95314?hl=en <---use this guide

    CHR StartupUrls: "hxxp://mysearch.avg.com?cid={EBAC45CF-7302-4DBB-8891-F3624F05093C}&mid=8d125dc1d0e747d2b37b4162723d986c-fa531696216ba9b384a826c31981c173e4a9f0aa〈=en&ds=AVG&coid=avgtbavg&pr=fr&d=2014-05-20 17:44:05&v=3.0.0.2&pid=wtu&sg=&sap=hp"

    https://support.google.com/chrome/answer/95421?hl=en <---use this guide

    -----------------------

    Then............

    Then in Chrome go to Settings > Under Sign In, go to Google Dashboard > Click on Settings > Click on Stop and Clear left bottom of the page.

    That should clear out the setting.

    Re-scan with Malwarebytes and it should find it one last time, after that it should be gone

    Let me know....MrC

Link to post
Share on other sites
Daaboul

Daaboul

Posted
  • Author
Posted

Make sure you have created a restore point and.....

bwebb7v.jpgDownload Delfix from Here and save it to your desktop.

  • Place a check mark in front of .......
  • Create registry backup <---only!
  • Uncheck the rest!
  • Click the Run button.

    Close the tool out when it's done....we'll use it later.

    -----------------------------------------------

    Please download AdwCleaner from HERE or HERE to your desktop.

    • Double click on AdwCleaner.exe to run the tool.

      Vista/Windows 7/8 users right-click and select Run As Administrator

    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
    • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
    • Look over the log especially under Files/Folders for any program you want to save.
    • If there's a program you may want to save, just uncheck it from AdwCleaner.
    • If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)
    • If you're ready to clean it all up.....click the Clean button.
    • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
    • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
    • To restore an item that has been deleted:
    • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.
    --------------------------------------------------

    You have to set these Chromes Home Page and Startup manually:

    https://support.google.com/chrome/answer/95314?hl=en <---use this guide

    https://support.google.com/chrome/answer/95421?hl=en <---use this guide

    -----------------------

    Then............

    Then in Chrome go to Settings > Under Sign In, go to Google Dashboard > Click on Settings > Click on Stop and Clear left bottom of the page.

    That should clear out the setting.

    Re-scan with Malwarebytes and it should find it one last time, after that it should be gone

    Let me know....MrC

 

 

Hey again,

 

here is the log you asked for.

 

Thank you very much, Malwarebytes has not detected anything finally! :)

AdwCleanerS2.txt

Malwarebytes2 Log.txt

Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Good......

Lets check your computers security before you go and we have a little cleanup to do also:

Download Security Check by screen317 from HERE or HERE.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • If you get Unsupported operating system. Aborting now, just reboot and try again.
  • A Notepad document should open automatically called checkup.txt.
  • Please Post the contents of that document.
  • Do Not Attach It!!!
MrC
Link to post
Share on other sites
Daaboul

Daaboul

Posted
  • Author
Posted

Good......

Lets check your computers security before you go and we have a little cleanup to do also:

Download Security Check by screen317 from HERE or HERE.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • If you get Unsupported operating system. Aborting now, just reboot and try again.
  • A Notepad document should open automatically called checkup.txt.
  • Please Post the contents of that document.
  • Do Not Attach It!!!
MrC

 

Unfortunately, the website seems like it is down. Is it for you??

Link to post
Share on other sites
Daaboul

Daaboul

Posted
  • Author
Posted

Not for me, it's attached, MrC

 Results of screen317's Security Check version 0.99.85  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
AVG AntiVirus Free Edition 2014   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 55  
 Java version out of Date! 
 Adobe Flash Player 14.0.0.145  
 Adobe Reader XI  
 Google Chrome 35.0.1916.114  
 Google Chrome 35.0.1916.153  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbam.exe  
 AVG avgwdsvc.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 0% 
````````````````````End of Log`````````````````````` 
Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Good............

A little clean up to do....

Please Uninstall ComboFix: (if you used it)

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

ComboFix /uninstall

Make sure there's a space between Combofix and /

cf2.jpg

Then hit enter. (it may look like CF is re-installing but it's not)

This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point

(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall or download and run the uninstaller)

---------------------------------

bwebb7v.jpgDownload Delfix from here and save it to your desktop. (you may already have this)

  • Ensure Remove disinfection tools is checked.
  • Click the Run button.
  • Reboot
Any other programs or logs that are still remaining, you can manually delete. (right click.....Delete)

IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall.

Note:

If you used FRST and can't delete the quarantine folder:

Download the fixlist.txt to the same folder as FRST.exe.

Run FRST.exe and click Fix only once and wait

That will delete the quarantine folder created by FRST.

The rest you can manually delete.

-------------------------------

Any questions...please post back.

If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.