Thejoekir Posted August 8, 2014 ID:864155 Share Posted August 8, 2014 I have been going through your FAQ of steps to work around the issue and unfortunately nothing has seemed to work yet. I have run Farbar and the FRST.txt and Addition.txt are as follows: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-08-2014Ran by Joe (administrator) on LEGIT9000 on 08-08-2014 10:50:28Running from C:\Users\Joe\DesktopPlatform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: Normal The only official download link for FRST:Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated.See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe(AMD) C:\Windows\System32\atiesrxx.exe(AMD) C:\Windows\System32\atieclxx.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe() C:\Windows\SysWOW64\PnkBstrA.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(ASUS) C:\Program Files (x86)\ASUS\PCE-AC56 WLAN Card Utilities\WlanMgr.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)HKLM\...\Run: [saiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)HKLM\...\Run: [LogMeIn GUI] => "J:\LogMeIn\x64\LogMeInSystray.exe"HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573208 2014-04-22] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2014-04-15] (Realtek Semiconductor)HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM-x32\...\Run: [switchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)HKLM-x32\...\Run: [PowerDVD13Agent] => C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe [513048 2013-05-03] (CyberLink Corp.)HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-16] (Kaspersky Lab ZAO)HKLM-x32\...\Run: [] => [X]HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-15] (Valve Corporation)HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-10-26] ()HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [F.lux] => C:\Users\Joe\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-15] (Flux Software LLC)HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [Amazon Cloud Player] => C:\Users\Joe\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3145536 2013-12-12] ()HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [GoogleChromeAutoLaunch_D08BC2BD8F1B6BE4ACC60C8748C6E102] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-07-30] (Raptr, Inc)HKU\S-1-5-21-98954884-1599973715-716298788-1000\...\Run: [spybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)Startup: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnkShortcutTarget: Dropbox.lnk -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers: KAVOverlayIcon -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll (Kaspersky Lab ZAO)ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: KAVOverlayIcon -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll (Kaspersky Lab ZAO) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2989BE4A05AACD01HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-USStartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exeSearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0F1275BD-27E8-49EB-B6D2-B2AC8B287E52} URL = http://www.mysearchresults.com/search?&c=4002&t=10&q={searchTerms}BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12 FireFox:========FF ProfilePath: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\stpbkxay.defaultFF DefaultSearchEngine: MysearchdialFF SearchEngineOrder.1: MysearchdialFF SelectedSearchEngine: MysearchdialFF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin: @microsoft.com/GENUINE -> disabled No FileFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @microsoft.com/GENUINE -> disabled No FileFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Joe\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()FF user.js: detected! => C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\stpbkxay.default\user.jsFF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ruFF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.comFF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2013-07-22]FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.comFF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2013-07-22]FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.comFF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2013-07-22]FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.comFF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2013-07-22]FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.comFF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2013-07-22] Chrome: =======CHR HomePage: CHR StartupUrls: "hxxp://www.google.com/"CHR Extension: (Chrome Refresh) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aifhnlnghddfdaccgbbpbhjfkmncekmn [2014-03-19]CHR Extension: (Google Docs) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-08]CHR Extension: (Google Drive) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-08]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-27]CHR Extension: (YouTube) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-08]CHR Extension: (Honey) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2014-03-19]CHR Extension: (Adblock Plus) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-19]CHR Extension: (Google Search) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-08]CHR Extension: (Screen Capture (by Google)) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpngackimfmofbokmjmljamhdncknpmg [2014-03-19]CHR Extension: (Tampermonkey) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-03-19]CHR Extension: (Gmail Offline) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-03-19]CHR Extension: (Hola Better Internet) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-03-19]CHR Extension: (Content Blocker) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-06-08]CHR Extension: (Reddit Enhancement Suite) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-03-19]CHR Extension: (Kaspersky Protection) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-06-12]CHR Extension: (Ghostery) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-03-19]CHR Extension: (Google Wallet) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]CHR Extension: (Gmail) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-08]CHR Extension: (Anti-Banner) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-06-08]CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2012-12-28]CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2012-12-28]CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2012-12-28]CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2012-12-28]CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh [2012-12-28]CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2012-12-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-27] ()R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-16] (Kaspersky Lab ZAO)S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-11-25] () [File not signed]R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-05-03] (CyberLink)R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-05-03] (CyberLink)R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240576 2013-10-06] (DTS, Inc)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-01-28] ()S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]R2 WMPNetworkSvc; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe [1525248 2010-11-20] (Microsoft Corporation)S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe /launchService [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-27] ()R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-13] (Intel Corporation)R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-02] (Kaspersky Lab ZAO)U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-06-10] (Kaspersky Lab ZAO)R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-06-10] (Kaspersky Lab ZAO)R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-04-02] (Kaspersky Lab ZAO)R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-16] (Kaspersky Lab ZAO)R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-16] (Kaspersky Lab ZAO)R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-25] (Kaspersky Lab ZAO)R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-25] (Kaspersky Lab ZAO)S3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE2500w764.sys [1254464 2011-03-29] (Broadcom Corporation)S4 LMIRfsClientNP; No ImagePathR3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)R3 PcaSp60; C:\Windows\SysWOW64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2014-05-19] (Razer Inc)R3 SaiK1708; C:\Windows\System32\DRIVERS\SaiK1708.sys [180544 2012-09-20] (Saitek)R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)R3 SaiU1708; C:\Windows\System32\DRIVERS\SaiU1708.sys [47168 2012-09-20] (Saitek)R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-05-03] (CyberLink Corp.)S2 AODDriver4.3; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]U3 catchme; \??\C:\ComboFix\catchme.sys [X]S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]S2 LMIInfo; \??\J:\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-08 10:50 - 2014-08-08 10:50 - 00028359 _____ () C:\Users\Joe\Desktop\FRST.txt2014-08-08 10:50 - 2014-08-08 10:50 - 00000000 ____D () C:\FRST2014-08-08 10:49 - 2014-08-08 10:49 - 02094080 _____ (Farbar) C:\Users\Joe\Downloads\FRST64.exe2014-08-08 10:49 - 2014-08-08 10:49 - 02094080 _____ (Farbar) C:\Users\Joe\Desktop\FRST64.exe2014-08-08 10:37 - 2014-08-08 10:37 - 00034724 _____ () C:\ComboFix.txt2014-08-08 10:27 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe2014-08-08 10:27 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe2014-08-08 10:27 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe2014-08-08 10:27 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe2014-08-08 10:27 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe2014-08-08 10:27 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe2014-08-08 10:27 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe2014-08-08 10:27 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe2014-08-08 10:26 - 2014-08-08 10:37 - 00000000 ____D () C:\Qoobox2014-08-08 10:25 - 2014-08-08 10:36 - 00000000 ____D () C:\Windows\erdnt2014-08-08 10:24 - 2014-08-08 10:24 - 05568206 ____R (Swearware) C:\Users\Joe\Desktop\ComboFix.exe2014-08-08 00:08 - 2014-08-08 00:08 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\ttales2014-08-03 17:57 - 2009-06-10 16:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140803-175707.backup2014-08-03 16:56 - 2014-08-08 10:22 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2014-08-03 16:56 - 2014-08-03 16:56 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-08-03 16:56 - 2014-08-03 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-08-03 16:56 - 2014-08-03 16:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-08-03 16:56 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2014-08-03 16:56 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2014-08-03 14:19 - 2014-08-03 14:19 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012 (2).exe2014-08-03 12:29 - 2014-08-03 12:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012 (1).exe2014-08-03 12:28 - 2014-08-03 17:03 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy2014-08-03 12:28 - 2014-08-03 14:18 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy2014-08-03 12:28 - 2014-08-03 12:28 - 00001254 _____ () C:\Users\Joe\Desktop\Spybot - Search & Destroy.lnk2014-08-03 12:28 - 2014-08-03 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy2014-08-03 12:26 - 2014-08-03 12:27 - 16409960 _____ (Safer Networking Limited ) C:\Users\Joe\Downloads\spybotsd162.exe2014-07-29 13:59 - 2014-07-29 13:59 - 00006109 _____ () C:\Users\Joe\Documents\CoolStuffInc.com Order CSI-1232614.htm2014-07-29 13:59 - 2014-07-29 13:59 - 00000000 ____D () C:\Users\Joe\Documents\CoolStuffInc.com Order CSI-1232614_files2014-07-29 13:17 - 2014-07-02 12:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe2014-07-29 13:15 - 2014-07-02 15:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2014-07-29 13:15 - 2014-07-02 15:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2014-07-29 13:15 - 2014-07-02 15:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll2014-07-29 13:15 - 2014-07-02 15:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2014-07-29 13:15 - 2014-07-02 15:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll2014-07-29 13:15 - 2014-07-02 15:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2014-07-29 13:15 - 2014-07-02 15:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2014-07-29 13:15 - 2014-07-02 15:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2014-07-29 13:15 - 2014-07-02 15:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2014-07-29 13:15 - 2014-07-02 15:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2014-07-29 13:15 - 2014-07-02 15:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2014-07-29 13:15 - 2014-07-02 15:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll2014-07-29 13:15 - 2014-07-02 15:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00502232 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00418760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00391640 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00348120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2014-07-29 13:15 - 2014-07-02 15:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2014-07-28 21:24 - 2014-07-28 21:24 - 00000000 ____D () C:\ProgramData\EA Core2014-07-28 21:23 - 2014-07-28 21:23 - 00000000 ____D () C:\Users\Joe\Documents\Electronic Arts2014-07-28 21:01 - 2014-07-28 21:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE2014-07-27 19:16 - 2014-07-27 19:16 - 00000000 ____D () C:\Users\Joe\AppData\Local\Blizzard2014-07-27 19:14 - 2014-07-27 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone2014-07-27 19:13 - 2014-07-27 19:16 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2014-07-27 19:13 - 2014-07-27 19:14 - 00001191 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk2014-07-27 19:13 - 2014-07-27 19:13 - 00000000 ____D () C:\Users\Joe\AppData\Local\Blizzard Entertainment2014-07-27 19:12 - 2014-07-27 23:21 - 00000000 ____D () C:\Users\Joe\AppData\Local\Battle.net2014-07-27 19:12 - 2014-07-27 19:14 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Battle.net2014-07-27 19:12 - 2014-07-27 19:12 - 00001154 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk2014-07-27 19:12 - 2014-07-27 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net2014-07-27 19:12 - 2014-07-27 19:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-07-27 19:10 - 2014-07-27 19:10 - 03099552 _____ (Blizzard Entertainment) C:\Users\Joe\Downloads\Hearthstone-Setup-enUS.exe2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\ProgramData\Apple Computer2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\Program Files (x86)\QuickTime2014-07-23 20:38 - 2014-07-23 20:38 - 00391774 _____ () C:\Users\Joe\Downloads\DSfix22-19-2-2.zip2014-07-23 11:47 - 2014-08-08 10:47 - 00002418 _____ () C:\Users\Joe\Desktop\Rkill.txt2014-07-23 11:46 - 2014-07-23 11:46 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Joe\Downloads\rkill.com2014-07-23 11:37 - 2014-07-23 11:41 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys2014-07-23 11:28 - 2014-07-23 11:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012.exe2014-07-23 07:12 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll2014-07-23 07:12 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe2014-07-23 07:12 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe2014-07-23 07:12 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe2014-07-23 07:11 - 2014-07-23 07:12 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log2014-07-21 22:25 - 2014-07-02 15:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2014-07-21 22:25 - 2014-05-19 21:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll2014-07-21 22:25 - 2014-05-19 21:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll2014-07-20 16:27 - 2014-07-20 16:27 - 00060572 _____ () C:\Windows\SysWOW64\CCCInstall_201407201627250797.log2014-07-20 15:32 - 2014-07-20 15:32 - 00000000 ____D () C:\Users\Joe\Documents\Larian Studios2014-07-20 10:42 - 2014-07-28 15:21 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\NVIDIA2014-07-20 06:40 - 2014-07-20 06:39 - 00096560 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll2014-07-20 06:40 - 2014-07-20 06:39 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll2014-07-20 06:39 - 2014-07-20 06:39 - 09082576 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS2014-07-20 06:39 - 2014-07-20 06:39 - 04393472 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll2014-07-20 06:39 - 2014-07-20 06:39 - 03660800 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll2014-07-20 06:39 - 2014-07-20 06:39 - 00022736 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bcmvwl64.sys2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files\Intel2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files\Broadcom2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files (x86)\Cisco2014-07-20 06:38 - 2014-07-20 06:38 - 00000000 ____D () C:\Program Files (x86)\Intel2014-07-20 06:38 - 2014-07-20 06:38 - 00000000 ____D () C:\Intel2014-07-20 06:38 - 2014-03-12 00:02 - 00001904 ____N () C:\Windows\system32\SetupBD.din2014-07-20 06:38 - 2014-02-21 00:56 - 00791024 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys2014-07-20 06:38 - 2014-02-21 00:56 - 00370672 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys2014-07-20 06:38 - 2014-02-21 00:56 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys2014-07-20 06:37 - 2014-03-13 22:34 - 00003114 _____ () C:\Windows\system32\e1d62x64.din2014-07-20 06:37 - 2014-03-13 22:23 - 00487704 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys2014-07-20 06:37 - 2014-03-12 00:16 - 00403256 ____R (Intel Corporation) C:\Windows\system32\PROUnstl.exe2014-07-20 06:37 - 2013-12-05 17:12 - 00091936 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll2014-07-20 06:37 - 2013-11-21 15:57 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll2014-07-20 06:37 - 2009-05-25 21:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll2014-07-20 06:36 - 2014-07-20 06:36 - 00016896 _____ (ASUS) C:\Windows\AsTaskSched.dll2014-07-20 06:36 - 2014-07-20 06:36 - 00000000 ____H () C:\ProgramData\DP45977C.lfl2014-07-20 06:36 - 2013-10-01 21:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys2014-07-20 06:36 - 2013-10-01 21:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe2014-07-20 06:36 - 2013-10-01 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll2014-07-20 06:36 - 2013-10-01 20:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll2014-07-20 06:36 - 2013-10-01 20:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll2014-07-20 06:36 - 2013-10-01 20:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll2014-07-20 06:36 - 2013-10-01 20:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll2014-07-20 06:36 - 2013-10-01 19:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll2014-07-20 06:36 - 2013-10-01 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll2014-07-20 06:36 - 2013-10-01 19:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll2014-07-20 06:36 - 2013-10-01 19:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe2014-07-20 06:36 - 2013-10-01 19:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe2014-07-20 06:36 - 2013-10-01 18:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll2014-07-20 06:36 - 2013-10-01 18:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe2014-07-20 06:36 - 2013-10-01 18:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll2014-07-20 06:36 - 2013-10-01 17:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe2014-07-20 06:35 - 2014-07-20 06:35 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM2014-07-20 06:35 - 2014-07-20 06:35 - 00000000 ____D () C:\Program Files\Realtek2014-07-20 06:35 - 2014-04-14 04:52 - 00003008 ____R () C:\Windows\system32\Drivers\DTSU2P.DAT2014-07-20 06:35 - 2013-06-24 23:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll2014-07-20 06:35 - 2013-06-24 23:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll2014-07-20 06:35 - 2013-06-24 23:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll2014-07-20 06:34 - 2014-04-24 06:46 - 03944536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys2014-07-20 06:34 - 2014-04-24 05:45 - 58487808 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat2014-07-20 06:34 - 2014-04-24 01:29 - 01011919 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT2014-07-20 06:34 - 2014-04-17 01:46 - 02833112 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll2014-07-20 06:34 - 2014-04-17 01:46 - 02797784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll2014-07-20 06:34 - 2014-04-17 01:28 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll2014-07-20 06:34 - 2014-04-14 02:04 - 00948440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll2014-07-20 06:34 - 2014-04-11 03:29 - 02111792 _____ () C:\Windows\system32\SStudio.dll2014-07-20 06:34 - 2014-04-09 23:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll2014-07-20 06:34 - 2014-03-28 05:03 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll2014-07-20 06:34 - 2014-03-06 03:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl2014-07-20 06:34 - 2014-03-04 16:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll2014-07-20 06:34 - 2014-03-04 16:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll2014-07-20 06:34 - 2014-03-04 16:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll2014-07-20 06:34 - 2014-03-04 16:11 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll2014-07-20 06:34 - 2014-02-27 07:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll2014-07-20 06:34 - 2014-02-05 22:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat2014-07-20 06:34 - 2014-01-27 22:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll2014-07-20 06:34 - 2013-10-10 22:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll2014-07-20 06:34 - 2013-08-20 04:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll2014-07-20 06:34 - 2012-08-23 09:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll2014-07-20 06:34 - 2012-08-23 09:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys2014-07-20 06:34 - 2012-08-23 09:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys2014-07-20 06:34 - 2012-08-23 06:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll2014-07-20 06:34 - 2012-08-23 05:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll2014-07-20 06:34 - 2012-01-29 22:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll2014-07-20 06:34 - 2012-01-09 21:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll2014-07-20 06:34 - 2011-12-20 02:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll2014-07-20 06:34 - 2011-11-22 03:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll2014-07-20 06:34 - 2011-09-02 01:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll2014-07-20 06:34 - 2011-09-02 01:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll2014-07-20 06:34 - 2011-09-02 01:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll2014-07-20 06:34 - 2011-03-16 23:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll2014-07-20 06:34 - 2011-03-07 04:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll2014-07-20 06:34 - 2010-11-07 18:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll2014-07-20 06:34 - 2010-11-03 05:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll2014-07-20 06:34 - 2010-07-22 03:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll2014-07-20 06:34 - 2009-11-23 20:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll2014-07-20 06:34 - 2009-11-23 20:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll2014-07-20 06:34 - 2009-11-23 20:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll2014-07-20 06:34 - 2009-11-23 20:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll2014-07-20 06:33 - 2014-04-17 04:42 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll2014-07-20 06:33 - 2014-04-17 04:42 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll2014-07-20 06:33 - 2014-04-17 04:42 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll2014-07-20 06:33 - 2014-04-09 23:20 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll2014-07-20 06:33 - 2014-04-09 23:20 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll2014-07-20 06:33 - 2014-04-09 23:19 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll2014-07-20 06:33 - 2014-04-09 23:19 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll2014-07-20 06:33 - 2014-04-09 23:19 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll2014-07-20 06:33 - 2014-04-09 23:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll2014-07-20 06:33 - 2014-04-09 23:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll2014-07-20 06:33 - 2014-04-09 23:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll2014-07-20 06:33 - 2014-04-09 03:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll2014-07-20 06:33 - 2014-04-09 03:38 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll2014-07-20 06:33 - 2014-03-21 01:17 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll2014-07-20 06:33 - 2014-03-19 06:19 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll2014-07-20 06:33 - 2014-01-31 04:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll2014-07-20 06:33 - 2013-09-24 21:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll2014-07-20 06:33 - 2013-09-24 20:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll2014-07-20 06:33 - 2013-08-14 02:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll2014-07-20 06:33 - 2013-08-14 02:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll2014-07-20 06:33 - 2013-04-03 01:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll2014-07-20 06:33 - 2012-08-31 06:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll2014-07-20 06:33 - 2012-08-31 06:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll2014-07-20 06:33 - 2012-08-31 06:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll2014-07-20 06:33 - 2012-08-31 06:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll2014-07-20 06:33 - 2012-08-31 06:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll2014-07-20 06:33 - 2012-05-04 06:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll2014-07-20 06:33 - 2012-05-04 04:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll2014-07-20 06:33 - 2011-08-23 04:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll2014-07-20 06:33 - 2010-09-26 20:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll2014-07-20 06:32 - 2014-07-20 06:36 - 00000000 ___HD () C:\Program Files (x86)\Temp2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ASMBSW_01_11_00.Wdf2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____D () C:\Program Files\ASUS2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____D () C:\Program Files (x86)\Realtek2014-07-20 06:32 - 2014-04-07 03:03 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll2014-07-20 06:32 - 2014-04-07 03:03 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll2014-07-20 06:32 - 2014-04-07 03:03 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll2014-07-20 06:32 - 2014-04-07 03:03 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll2014-07-20 06:32 - 2014-02-26 02:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll2014-07-20 06:32 - 2014-02-18 04:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll2014-07-20 06:32 - 2014-01-27 22:16 - 00028672 _____ (ASUSTek Computer Inc.) C:\Windows\SysWOW64\AsIO.dll2014-07-20 06:32 - 2014-01-27 22:16 - 00015232 _____ () C:\Windows\SysWOW64\Drivers\AsIO.sys2014-07-20 06:32 - 2013-10-15 14:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll2014-07-20 06:32 - 2013-10-10 23:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll2014-07-20 06:32 - 2013-10-06 11:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll2014-07-20 06:32 - 2013-10-06 11:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll2014-07-20 06:32 - 2013-10-06 11:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll2014-07-20 06:32 - 2013-06-20 22:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll2014-07-20 06:32 - 2012-08-16 21:57 - 02356592 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01011.dll2014-07-20 06:32 - 2012-03-07 22:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll2014-07-20 06:32 - 2011-05-30 20:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll2014-07-20 06:30 - 2014-07-20 06:30 - 00048419 _____ () C:\Windows\Ascd_tmp.ini2014-07-20 06:30 - 2014-07-20 06:30 - 00001769 _____ () C:\Windows\Language_trs.ini2014-07-20 06:30 - 2014-07-20 06:30 - 00000096 _____ () C:\Windows\As_Utilities.log2014-07-20 06:25 - 2014-07-20 06:25 - 00003536 _____ () C:\Windows\System32\Tasks\PCEAC56WLANMGR2014-07-20 06:25 - 2010-09-07 14:27 - 00038912 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\Windows\system32\Drivers\PcaSp60.sys2014-07-20 06:24 - 2014-07-20 06:32 - 00000000 ____D () C:\Program Files (x86)\ASUS2014-07-20 06:24 - 2014-07-20 06:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility2014-07-20 06:24 - 2010-09-07 14:27 - 00038912 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\Windows\SysWOW64\Drivers\PcaSp60.sys2014-07-19 18:27 - 2014-07-25 08:50 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2014-07-19 18:27 - 2014-07-25 08:50 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2014-07-19 18:27 - 2014-03-31 11:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2014-07-19 18:27 - 2014-03-31 11:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2014-07-19 18:05 - 2014-07-29 12:19 - 00000000 ____D () C:\Users\Joe\AppData\Local\NVIDIA Corporation2014-07-19 18:04 - 2014-07-25 08:50 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2014-07-19 18:04 - 2014-07-25 08:50 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2014-07-19 18:04 - 2014-07-19 18:05 - 00000000 ____D () C:\Users\Joe\AppData\Local\NVIDIA2014-07-19 18:03 - 2014-07-29 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2014-07-19 18:03 - 2014-07-19 18:03 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies2014-07-19 18:02 - 2014-07-19 18:27 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation2014-07-19 18:02 - 2014-07-02 13:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2014-07-19 18:02 - 2014-07-02 13:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2014-07-19 18:02 - 2014-07-02 13:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2014-07-19 18:02 - 2014-07-02 13:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2014-07-19 18:02 - 2014-07-02 13:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2014-07-19 18:02 - 2014-07-02 05:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin2014-07-19 18:02 - 2014-02-08 12:42 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2014-07-19 18:01 - 2014-07-02 15:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2014-07-19 18:01 - 2014-07-02 15:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2014-07-19 18:01 - 2014-07-02 15:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2014-07-19 18:01 - 2014-07-02 15:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2014-07-19 18:01 - 2014-07-02 15:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2014-07-19 18:01 - 2014-07-02 15:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2014-07-19 18:01 - 2014-03-31 11:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll2014-07-19 18:01 - 2014-02-08 13:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll2014-07-19 18:01 - 2014-02-08 13:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll2014-07-19 18:01 - 2013-11-28 08:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2014-07-19 18:01 - 2013-11-28 08:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2014-07-19 18:01 - 2013-11-22 03:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2014-07-19 18:00 - 2014-07-29 13:16 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2014-07-19 18:00 - 2014-07-19 18:00 - 00000000 ____D () C:\NVIDIA2014-07-19 17:58 - 2014-05-08 04:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll2014-07-19 17:58 - 2014-05-08 04:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll2014-07-19 17:58 - 2014-01-08 21:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll2014-07-19 17:58 - 2014-01-03 17:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-08 10:50 - 2014-08-08 10:50 - 00028359 _____ () C:\Users\Joe\Desktop\FRST.txt2014-08-08 10:50 - 2014-08-08 10:50 - 00000000 ____D () C:\FRST2014-08-08 10:49 - 2014-08-08 10:49 - 02094080 _____ (Farbar) C:\Users\Joe\Downloads\FRST64.exe2014-08-08 10:49 - 2014-08-08 10:49 - 02094080 _____ (Farbar) C:\Users\Joe\Desktop\FRST64.exe2014-08-08 10:47 - 2014-07-23 11:47 - 00002418 _____ () C:\Users\Joe\Desktop\Rkill.txt2014-08-08 10:41 - 2012-10-14 07:14 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2014-08-08 10:39 - 2012-10-26 16:30 - 00000000 ____D () C:\Users\Joe\AppData\Local\PMB Files2014-08-08 10:37 - 2014-08-08 10:37 - 00034724 _____ () C:\ComboFix.txt2014-08-08 10:37 - 2014-08-08 10:26 - 00000000 ____D () C:\Qoobox2014-08-08 10:37 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Default2014-08-08 10:36 - 2014-08-08 10:25 - 00000000 ____D () C:\Windows\erdnt2014-08-08 10:35 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini2014-08-08 10:32 - 2012-10-19 12:45 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job2014-08-08 10:24 - 2014-08-08 10:24 - 05568206 ____R (Swearware) C:\Users\Joe\Desktop\ComboFix.exe2014-08-08 10:22 - 2014-08-03 16:56 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2014-08-08 10:21 - 2012-10-17 00:49 - 00000000 ____D () C:\ProgramData\Kaspersky Lab2014-08-08 10:14 - 2009-07-13 23:45 - 00020496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02014-08-08 10:14 - 2009-07-13 23:45 - 00020496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02014-08-08 10:10 - 2012-10-14 01:19 - 01625376 _____ () C:\Windows\WindowsUpdate.log2014-08-08 10:09 - 2014-05-27 18:03 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Raptr2014-08-08 10:07 - 2014-06-27 09:34 - 00000000 ____D () C:\Users\Joe\AppData\Local\Adobe2014-08-08 10:07 - 2012-12-02 23:57 - 00000000 ___RD () C:\Users\Joe\Dropbox2014-08-08 10:07 - 2012-12-02 23:54 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Dropbox2014-08-08 10:06 - 2012-10-14 07:17 - 00000000 ____D () C:\Program Files (x86)\Steam2014-08-08 10:05 - 2014-05-27 17:28 - 00000000 ____D () C:\ProgramData\NVIDIA2014-08-08 10:05 - 2012-10-14 07:14 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2014-08-08 10:05 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT2014-08-08 10:05 - 2009-07-13 23:51 - 00076199 _____ () C:\Windows\setupact.log2014-08-08 00:08 - 2014-08-08 00:08 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\ttales2014-08-03 17:03 - 2014-08-03 12:28 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy2014-08-03 16:56 - 2014-08-03 16:56 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-08-03 16:56 - 2014-08-03 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-08-03 16:56 - 2014-08-03 16:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-08-03 14:35 - 2014-05-27 18:03 - 00000000 ____D () C:\Program Files (x86)\Raptr2014-08-03 14:19 - 2014-08-03 14:19 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012 (2).exe2014-08-03 14:18 - 2014-08-03 12:28 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy2014-08-03 12:29 - 2014-08-03 12:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012 (1).exe2014-08-03 12:28 - 2014-08-03 12:28 - 00001254 _____ () C:\Users\Joe\Desktop\Spybot - Search & Destroy.lnk2014-08-03 12:28 - 2014-08-03 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy2014-08-03 12:27 - 2014-08-03 12:26 - 16409960 _____ (Safer Networking Limited ) C:\Users\Joe\Downloads\spybotsd162.exe2014-07-29 13:59 - 2014-07-29 13:59 - 00006109 _____ () C:\Users\Joe\Documents\CoolStuffInc.com Order CSI-1232614.htm2014-07-29 13:59 - 2014-07-29 13:59 - 00000000 ____D () C:\Users\Joe\Documents\CoolStuffInc.com Order CSI-1232614_files2014-07-29 13:17 - 2014-07-19 18:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2014-07-29 13:17 - 2014-01-01 03:24 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation2014-07-29 13:16 - 2014-07-19 18:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation2014-07-29 12:19 - 2014-07-19 18:05 - 00000000 ____D () C:\Users\Joe\AppData\Local\NVIDIA Corporation2014-07-29 11:58 - 2013-08-04 09:43 - 00000000 ____D () C:\Users\Joe\Desktop\Games2014-07-28 21:24 - 2014-07-28 21:24 - 00000000 ____D () C:\ProgramData\EA Core2014-07-28 21:23 - 2014-07-28 21:23 - 00000000 ____D () C:\Users\Joe\Documents\Electronic Arts2014-07-28 21:01 - 2014-07-28 21:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft WSE2014-07-28 21:01 - 2009-07-14 00:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games2014-07-28 20:38 - 2012-10-26 17:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information2014-07-28 15:21 - 2014-07-20 10:42 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\NVIDIA2014-07-27 23:21 - 2014-07-27 19:12 - 00000000 ____D () C:\Users\Joe\AppData\Local\Battle.net2014-07-27 19:16 - 2014-07-27 19:16 - 00000000 ____D () C:\Users\Joe\AppData\Local\Blizzard2014-07-27 19:16 - 2014-07-27 19:13 - 00000000 ____D () C:\Program Files (x86)\Hearthstone2014-07-27 19:14 - 2014-07-27 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone2014-07-27 19:14 - 2014-07-27 19:13 - 00001191 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk2014-07-27 19:14 - 2014-07-27 19:12 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Battle.net2014-07-27 19:13 - 2014-07-27 19:13 - 00000000 ____D () C:\Users\Joe\AppData\Local\Blizzard Entertainment2014-07-27 19:12 - 2014-07-27 19:12 - 00001154 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk2014-07-27 19:12 - 2014-07-27 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net2014-07-27 19:12 - 2014-07-27 19:12 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-07-27 19:10 - 2014-07-27 19:10 - 03099552 _____ (Blizzard Entertainment) C:\Users\Joe\Downloads\Hearthstone-Setup-enUS.exe2014-07-26 04:35 - 2012-10-23 15:31 - 00000000 ____D () C:\Program Files\PeerBlock2014-07-26 03:28 - 2012-10-23 15:35 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\uTorrent2014-07-26 03:06 - 2012-11-04 12:25 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\vlc2014-07-25 15:47 - 2014-04-03 23:04 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\.minecraft2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\ProgramData\Apple Computer2014-07-25 11:06 - 2014-07-25 11:06 - 00000000 ____D () C:\Program Files (x86)\QuickTime2014-07-25 08:50 - 2014-07-19 18:27 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2014-07-25 08:50 - 2014-07-19 18:27 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2014-07-25 08:50 - 2014-07-19 18:04 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2014-07-25 08:50 - 2014-07-19 18:04 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2014-07-24 16:36 - 2009-07-14 00:08 - 00032636 _____ () C:\Windows\Tasks\SCHEDLGU.TXT2014-07-24 07:54 - 2012-12-02 23:56 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox2014-07-24 07:49 - 2013-03-14 01:06 - 00000000 ____D () C:\Program Files\Microsoft Silverlight2014-07-24 07:49 - 2013-03-14 01:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight2014-07-24 02:04 - 2013-03-14 01:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight2014-07-23 20:38 - 2014-07-23 20:38 - 00391774 _____ () C:\Users\Joe\Downloads\DSfix22-19-2-2.zip2014-07-23 19:42 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache2014-07-23 11:46 - 2014-07-23 11:46 - 01942776 _____ (Bleeping Computer, LLC) C:\Users\Joe\Downloads\rkill.com2014-07-23 11:41 - 2014-07-23 11:37 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys2014-07-23 11:29 - 2014-07-23 11:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Joe\Downloads\mbam-setup-2.0.2.1012.exe2014-07-23 07:12 - 2014-07-23 07:11 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log2014-07-23 07:12 - 2013-12-07 19:39 - 00000000 ____D () C:\ProgramData\Oracle2014-07-23 07:12 - 2013-07-19 22:30 - 00000000 ____D () C:\Program Files (x86)\Java2014-07-23 07:10 - 2013-11-18 17:41 - 00000000 ____D () C:\ProgramData\LogMeIn2014-07-23 06:54 - 2014-01-28 17:09 - 00000625 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk2014-07-23 06:54 - 2014-01-28 17:09 - 00000613 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk2014-07-23 00:18 - 2013-12-03 18:09 - 00373182 _____ () C:\Windows\DPINST.LOG2014-07-23 00:00 - 2013-02-17 01:34 - 00000258 __RSH () C:\Users\Joe\ntuser.pol2014-07-23 00:00 - 2012-10-13 23:36 - 00000000 ____D () C:\Users\Joe2014-07-21 22:15 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Public\Libraries2014-07-20 16:27 - 2014-07-20 16:27 - 00060572 _____ () C:\Windows\SysWOW64\CCCInstall_201407201627250797.log2014-07-20 15:32 - 2014-07-20 15:32 - 00000000 ____D () C:\Users\Joe\Documents\Larian Studios2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\zh-HK2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\tr-TR2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\th-TH2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\sl-SI2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\sk-SK2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\ro-RO2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\lv-LV2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\lt-LT2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\hr-HR2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\he-IL2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\et-EE2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\bg-BG2014-07-20 06:40 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\ar-SA2014-07-20 06:39 - 2014-07-20 06:40 - 00096560 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll2014-07-20 06:39 - 2014-07-20 06:40 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll2014-07-20 06:39 - 2014-07-20 06:39 - 09082576 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS2014-07-20 06:39 - 2014-07-20 06:39 - 04393472 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll2014-07-20 06:39 - 2014-07-20 06:39 - 03660800 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll2014-07-20 06:39 - 2014-07-20 06:39 - 00022736 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bcmvwl64.sys2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files\Intel2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files\Broadcom2014-07-20 06:39 - 2014-07-20 06:39 - 00000000 ____D () C:\Program Files (x86)\Cisco2014-07-20 06:38 - 2014-07-20 06:38 - 00000000 ____D () C:\Program Files (x86)\Intel2014-07-20 06:38 - 2014-07-20 06:38 - 00000000 ____D () C:\Intel2014-07-20 06:38 - 2013-04-22 20:50 - 00000000 ____D () C:\ProgramData\Package Cache2014-07-20 06:36 - 2014-07-20 06:36 - 00016896 _____ (ASUS) C:\Windows\AsTaskSched.dll2014-07-20 06:36 - 2014-07-20 06:36 - 00000000 ____H () C:\ProgramData\DP45977C.lfl2014-07-20 06:36 - 2014-07-20 06:32 - 00000000 ___HD () C:\Program Files (x86)\Temp2014-07-20 06:35 - 2014-07-20 06:35 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM2014-07-20 06:35 - 2014-07-20 06:35 - 00000000 ____D () C:\Program Files\Realtek2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ASMBSW_01_11_00.Wdf2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____D () C:\Program Files\ASUS2014-07-20 06:32 - 2014-07-20 06:32 - 00000000 ____D () C:\Program Files (x86)\Realtek2014-07-20 06:32 - 2014-07-20 06:24 - 00000000 ____D () C:\Program Files (x86)\ASUS2014-07-20 06:30 - 2014-07-20 06:30 - 00048419 _____ () C:\Windows\Ascd_tmp.ini2014-07-20 06:30 - 2014-07-20 06:30 - 00001769 _____ () C:\Windows\Language_trs.ini2014-07-20 06:30 - 2014-07-20 06:30 - 00000096 _____ () C:\Windows\As_Utilities.log2014-07-20 06:25 - 2014-07-20 06:25 - 00003536 _____ () C:\Windows\System32\Tasks\PCEAC56WLANMGR2014-07-20 06:24 - 2014-07-20 06:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility2014-07-20 01:29 - 2010-11-20 22:47 - 00293114 _____ () C:\Windows\PFRO.log2014-07-19 19:49 - 2013-08-03 20:22 - 00000000 ____D () C:\Users\Joe\AppData\Roaming\Skype2014-07-19 18:50 - 2013-08-04 09:44 - 00000000 ___RD () C:\Users\Joe\Desktop\Applications2014-07-19 18:27 - 2014-07-19 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation2014-07-19 18:15 - 2009-07-14 00:13 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI2014-07-19 18:05 - 2014-07-19 18:04 - 00000000 ____D () C:\Users\Joe\AppData\Local\NVIDIA2014-07-19 18:03 - 2014-07-19 18:03 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies2014-07-19 18:02 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\Help2014-07-19 18:00 - 2014-07-19 18:00 - 00000000 ____D () C:\NVIDIA2014-07-19 17:52 - 2009-07-13 22:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2014-07-19 17:43 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions2014-07-18 23:00 - 2013-11-18 17:42 - 00107368 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll2014-07-18 23:00 - 2013-11-18 17:42 - 00092488 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll2014-07-18 23:00 - 2013-11-18 17:42 - 00035656 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll2014-07-11 03:02 - 2014-07-23 07:12 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll2014-07-11 02:56 - 2014-07-23 07:12 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe2014-07-11 02:56 - 2014-07-23 07:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe2014-07-11 02:55 - 2014-07-23 07:12 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe2014-07-10 12:38 - 2013-08-04 09:45 - 00000000 ___RD () C:\Users\Joe\Desktop\Other2014-07-10 00:33 - 2012-10-19 12:45 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater2014-07-10 00:32 - 2012-10-19 12:45 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2014-07-10 00:32 - 2012-10-19 12:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2014-07-09 22:43 - 2009-07-13 23:45 - 04941584 _____ () C:\Windows\system32\FNTCACHE.DAT2014-07-09 22:41 - 2014-05-05 21:56 - 00000000 ___SD () C:\Windows\system32\CompatTel2014-07-09 22:41 - 2011-04-12 03:28 - 00000000 ____D () C:\Program Files\Windows Journal2014-07-09 22:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism2014-07-09 22:41 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\Dism ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-07 11:21 ==================== End Of Log ============================ Link to post Share on other sites More sharing options...
Thejoekir Posted August 8, 2014 Author ID:864156 Share Posted August 8, 2014 Sorry, post was too long. The addition.txt is as follows: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-08-2014Ran by Joe at 2014-08-08 10:50:52Running from C:\Users\Joe\DesktopBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky PURE 3.0 (Disabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}AS: Kaspersky PURE 3.0 (Disabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Kaspersky PURE 3.0 (Disabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) (HKLM\...\UDK-24ac9f18-e147-4a93-aa54-302e6f058354) (Version: - RuneStormµTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.1.28086 - BitTorrent Inc.)3089 -- Futuristic Action RPG (HKLM-x32\...\Steam App 263360) (Version: - Phr00t's Software)3DMark (HKLM-x32\...\{F1A6C690-C12C-4E7A-B4BD-958678215418}) (Version: 1.1 - Futuremark)7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)Adobe Creative Suite 6 Production Premium (HKLM-x32\...\{045D4EDF-8DC1-43D7-BAFC-7AAEF99C7168}) (Version: 6 - Adobe Systems Incorporated)Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios)Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment)Alan Wake's American Nightmare (HKLM-x32\...\Steam App 202750) (Version: - Remedy Entertainment)Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.2.0.399 - Amazon Services LLC)AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) HiddenAMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) HiddenAMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) HiddenAMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) HiddenAMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) HiddenAntichamber (HKLM-x32\...\Steam App 219890) (Version: - )Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)ARMA 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)ASUS PCE-AC56 WLAN Card Utilities/Driver (HKLM-x32\...\{FD792656-6D10-4876-AB24-A845232B7527}) (Version: 2.0.7.4 - ASUS)Awesomenauts (HKLM-x32\...\Steam App 204300) (Version: - Ronimo Games)Banished (HKLM-x32\...\Steam App 242920) (Version: - Shining Rock Software LLC)Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth)Battlepaths V1.45 (HKLM-x32\...\Battlepaths_is1) (Version: - Key17 Games)BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )Beast Boxing Turbo version 1.1.1 (HKLM-x32\...\{38852F55-B1C0-44E4-BF83-4B26824FE25F}_is1) (Version: 1.1.1 - Goodhustle Studios, Inc.)BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)BIT.TRIP RUNNER (HKLM-x32\...\Steam App 63710) (Version: - Gaijin Games)bl (x32 Version: 1.0.0 - Your Company Name) HiddenBorderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)Breath of Death VII (HKLM-x32\...\Steam App 107300) (Version: - )Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.32.223.1 - Broadcom Corporation)Car Mechanic Simulator 2014 (HKLM-x32\...\Steam App 270850) (Version: - PlayWay S.A.)Castle Crashers (HKLM-x32\...\Steam App 204360) (Version: - The Behemoth)Castle Story (HKLM-x32\...\Steam App 227860) (Version: - Sauropod Studio)Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) HiddenCave Story+ (HKLM-x32\...\Steam App 200900) (Version: - Nicalis)CBR Reader (HKLM-x32\...\{EDAAC216-AC73-4152-9654-E12FE5A69F5D}_is1) (Version: - cbrreader.com)Celtx (2.9.7) (HKLM-x32\...\Celtx (2.9.7)) (Version: 2.9.7 (en-US) - Greyfirst)Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - )Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) HiddenCisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) HiddenCisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) HiddenColour Bind (HKLM-x32\...\Steam App 208710) (Version: - )Company of Heroes (HKLM-x32\...\Steam App 4560) (Version: - Relic)Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox)Cthulhu Saves the World (HKLM-x32\...\Steam App 107310) (Version: - )CyberLink PowerDVD 13 (HKLM-x32\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.2902.57 - CyberLink Corp.)CyberLink PowerDVD 13 (x32 Version: 13.0.2902.57 - CyberLink Corp.) HiddenDark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - )DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version: - FromSoftware, Inc)DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)DayZ Commander (HKLM-x32\...\{1BBA980F-6722-46D8-87A1-F7AB2DB62D8B}) (Version: 0.9.96 - Dotjosh Studios)Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)Deadpool (HKLM-x32\...\Steam App 224060) (Version: - High Moon Studios)Diehard Dungeon v1.3 (HKLM-x32\...\Diehard Dungeon_is1) (Version: - Tricktale)Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)Divinity: Original Sin (HKLM-x32\...\Steam App 230230) (Version: - Larian Studios)DLC Quest (HKLM-x32\...\Steam App 230050) (Version: - )Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - )DOOM II: Hell on Earth (HKLM-x32\...\Steam App 2300) (Version: - id Software)Dota 2 (HKLM-x32\...\Steam App 570) (Version: - )Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)Dungeon of the Endless (HKLM-x32\...\Steam App 249050) (Version: - AMPLITUDE Studios)Endless Space (HKLM-x32\...\Steam App 208140) (Version: - AMPLITUDE Studios)f.lux (HKCU\...\Flux) (Version: - )Fable - The Lost Chapters (HKLM-x32\...\Steam App 204030) (Version: - Lionhead Studios)Fallout (HKLM-x32\...\Steam App 38400) (Version: - Black Isle Studios)Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version: - Bethesda Softworks)Fallout Mod Manager 0.13.21 (HKLM-x32\...\Generic Mod Manager_is1) (Version: - Q, Timeslip)Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Bethesda Softworks)Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft)Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version: - )Final DOOM (HKLM-x32\...\Steam App 2290) (Version: - id Software)Firefall (HKLM-x32\...\{CFEF8DB5-B45E-4b05-90BE-D02AA6F45354}) (Version: - Red 5 Studios)Football Manager 2013 (HKLM-x32\...\Steam App 207890) (Version: - Sports Interactive)Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )Free to Play (HKLM-x32\...\Steam App 245550) (Version: - Valve)FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - )Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)Game Dev Tycoon version 1.3.2 (HKLM-x32\...\{5BBB8682-1335-410F-A79F-8E5611A54BD0}_is1) (Version: 1.3.2 - Greenheart Games Pty. Ltd.)Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)Gnomoria (HKLM-x32\...\Steam App 224500) (Version: - )Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)Godus (HKLM-x32\...\Steam App 232810) (Version: - )Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) HiddenGrand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar)Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\Steam App 12220) (Version: - Rockstar)Guacamelee! Gold Edition (HKLM-x32\...\Steam App 214770) (Version: - DrinkBox Studios)Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)Half-Life (HKLM-x32\...\Steam App 70) (Version: - Valve)Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version: - Valve)Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve)Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)Hammerwatch (HKLM-x32\...\Steam App 239070) (Version: - )Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - )How to Survive (HKLM-x32\...\Steam App 250400) (Version: - )Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)Intel® Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)Intel® Network Connections 19.1.51.0 (Version: 19.1.51.0 - Intel) HiddenIntel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.650 - Oracle)Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) HiddenJC2-MP version 0.0.12 (HKLM-x32\...\{7F12FECB-1D75-42D7-9074-D6FEA6D91E65}_is1) (Version: 0.0.12 - )Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)Kaspersky Internet Security 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)Kaspersky PURE 3.0 (HKLM-x32\...\InstallWIX_{D0702EE9-9DE4-419A-9C6C-4730B1C985BA}) (Version: 13.0.2.558 - Kaspersky Lab)Kaspersky PURE 3.0 (x32 Version: 13.0.2.558 - Kaspersky Lab) HiddenKnights of Pen and Paper (HKLM-x32\...\Steam App 231740) (Version: - Behold Studios)L.A. Noire (HKLM-x32\...\Steam App 110800) (Version: - Rockstar)League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)Little Inferno (HKLM-x32\...\Steam App 221260) (Version: - Tomorrow Corporation)Little Kingdom (HKLM-x32\...\Little Kingdom_is1) (Version: - Andreil Game)Loadout (HKLM-x32\...\Steam App 208090) (Version: - Edge of Reality)LUFTRAUSERS (HKLM-x32\...\Steam App 233150) (Version: - Vlambeer)Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)Mark of the Ninja (HKLM-x32\...\Steam App 214560) (Version: - Klei Entertainment)Master Levels for DOOM II (HKLM-x32\...\Steam App 9160) (Version: - id Software)Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - THQ)Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) HiddenMicrosoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) HiddenMicrosoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) HiddenMicrosoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) HiddenMonaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - Tale Worlds)Mozilla Firefox 28.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 en-US)) (Version: 28.0 - Mozilla)Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)My Game Long Name (HKLM\...\UDK-3307087b-5a9c-407c-84d3-b28ef160ccf8) (Version: - Epic Games, Inc.)Natural Selection 2 (HKLM-x32\...\Steam App 4920) (Version: - Unknown Worlds Entertainment)Next Car Game (HKLM-x32\...\Steam App 228380) (Version: - )Next Car Game Technology Sneak Peek 2.0 (HKLM-x32\...\Next Car Game Technology Sneak Peek) (Version: - Bugbear Entertainment)Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.45.3 - Black Tree Gaming)Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)Nuclear Throne (HKLM-x32\...\Steam App 242680) (Version: - )NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) HiddenNVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) HiddenNVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) HiddenNVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) HiddenNVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) HiddenNVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) HiddenNVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) HiddenOffspring Fling! (HKLM-x32\...\Steam App 211360) (Version: - )OpenAL (HKLM-x32\...\OpenAL) (Version: - )OpenOffice 4.0.0 (HKLM-x32\...\{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}) (Version: 4.00.9702 - Apache Software Foundation)Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - )Organ Trail: Director's Cut (HKLM-x32\...\Steam App 233740) (Version: - )Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)Papers, Please (HKLM-x32\...\Steam App 239030) (Version: - 3909)Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games)PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) HiddenPeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)Penny Arcade's On the Rain-Slick Precipice of Darkness 3 (HKLM-x32\...\Steam App 213030) (Version: - )ph (x32 Version: 1.0.0 - Your Company Name) HiddenPlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment)Poker Night 2 (HKLM-x32\...\Steam App 234710) (Version: - Telltale Games)Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - Indie Stone Studios)PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)Raptr (HKLM-x32\...\Raptr) (Version: - )Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.15.20888 - Razer Inc.)Realm of the Mad God (HKLM-x32\...\Steam App 200210) (Version: - Wild Shadow Studios)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7233 - Realtek Semiconductor Corp.)Richard & Alice version 1.0 (HKLM-x32\...\{532063B8-58AA-4261-AC9E-55B6717DCC02}_is1) (Version: 1.0 - Denby Raze)Risen (HKLM-x32\...\Steam App 40300) (Version: - Piranha – Bytes )Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.1 - Rockstar Games)Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)Saints Row IV Inauguration Station (HKLM-x32\...\Steam App 242590) (Version: - )Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)Scribblenauts Unlimited (HKLM-x32\...\Steam App 218680) (Version: - 5th Cell Media)Shadow Warrior (HKLM-x32\...\Steam App 233130) (Version: - Flying Wild Hog)Shadowrun Returns (HKLM-x32\...\Steam App 234650) (Version: - Harebrained Schemes)SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) HiddenShovel Knight (HKLM-x32\...\Steam App 250760) (Version: - Yacht Club Games)Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)SimCity 4 Deluxe (HKLM-x32\...\Steam App 24780) (Version: - Maxis)SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version: - Square Enix)Smart Technology Programming Software 7.0.27.13 (HKLM\...\{BD90BC1C-115D-47E1-B85C-07AE182C3AB8}) (Version: 7.0.27.13 - Mad Catz)Sony Player Plug-in for Windows Media Player (HKLM-x32\...\{AA1B9602-3120-4A28-913B-AAA59A2CEEEB}) (Version: 2.1.02.08060 - Sony Corporation)South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version: - Yager)Spelunky (HKLM-x32\...\Steam App 239350) (Version: - )Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)Starbound (HKLM-x32\...\Steam App 211820) (Version: - )State of Decay (HKLM-x32\...\Steam App 241540) (Version: - )Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - Team Meat)Switch Sound File Converter (HKLM-x32\...\Switch) (Version: - NCH Software)Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)The Banner Saga (HKLM-x32\...\Steam App 237990) (Version: - Stoic)The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - )The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)The Elder Scrolls IV: Oblivion (HKLM-x32\...\Steam App 22330) (Version: - Bethesda Game Studios)The Elder Scrolls Online Beta (HKLM-x32\...\The Elder Scrolls Online Beta_is1) (Version: 0.3.4 - )The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)The LEGO® Movie - Videogame (HKLM-x32\...\Steam App 267530) (Version: - TT Fusion)The Novelist (HKLM-x32\...\Steam App 245150) (Version: - )The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe)The Swapper (HKLM-x32\...\Steam App 231160) (Version: - Olli Harjola, Otto Hantula, Tom Jubert, Carlo Castellano)The Ultimate DOOM (HKLM-x32\...\Steam App 2280) (Version: - id Software)The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version: - CD Projekt RED)The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - )Thief (HKLM-x32\...\Steam App 239160) (Version: - Eidos-Montréal)Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.0.3 - Electronic Arts)Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - )Trine (HKLM-x32\...\Steam App 35700) (Version: - Frozenbyte)Trine 2 (HKLM-x32\...\Steam App 35720) (Version: - Frozenbyte)Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - )TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)TurboTax 2013 WinPerFedFormset (x32 Version: 013.000.1835 - Intuit Inc.) HiddenTurboTax 2013 WinPerReleaseEngine (x32 Version: 013.000.0477 - Intuit Inc.) HiddenTurboTax 2013 WinPerTaxSupport (x32 Version: 013.000.0164 - Intuit Inc.) HiddenTurboTax 2013 wlaiper (x32 Version: 013.000.1185 - Intuit Inc.) HiddenTurboTax 2013 wrapper (x32 Version: 013.000.0135 - Intuit Inc.) HiddenUnity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)Viscera Cleanup Detail: Santas RampageViscera Cleanup Detail: Santa's Rampage (HKLM-x32\...\Steam App 265210) (Version: - RuneStorm)Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version: - RuneStorm)VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)VVVVVV (HKLM-x32\...\Steam App 70300) (Version: - Terry Cavanagh)Watch_Dogs (HKLM-x32\...\Steam App 243470) (Version: - Ubisoft)Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D9}) (Version: 17.0.10381 - WinZip Computing, S.L. )XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-98954884-1599973715-716298788-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Joe\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 06-08-2014 02:16:48 Windows Update08-08-2014 15:27:12 ComboFix created restore point ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2014-08-08 10:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {6E79DEFC-5478-40F3-9FEE-FFA859564BA6} - System32\Tasks\AdobeAAMUpdater-1.0-LEGIT9000-Joe => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)Task: {7BCCE811-4947-4BA2-8284-134953A6A0DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-14] (Google Inc.)Task: {97F4167B-519A-4F87-8438-4C25B39ABAD7} - System32\Tasks\PCEAC56WLANMGR => C:\Program Files (x86)\ASUS\PCE-AC56 WLAN Card Utilities\WlanMgr.exe [2013-12-17] (ASUS)Task: {9BF2F1DF-12C0-41B9-B523-0B9A6EEE027E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)Task: {A9BB444D-F254-4966-8C18-B5DD1CCF8CA2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-10] (Adobe Systems Incorporated)Task: {CF6275EB-2D62-4264-B7BB-5645C0719D92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-14] (Google Inc.)Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-07-19 18:02 - 2014-07-02 13:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll2014-07-20 06:32 - 2014-01-27 22:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe2013-01-28 16:28 - 2013-01-28 16:28 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe2014-07-20 06:32 - 2014-08-08 10:05 - 00032768 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll2014-07-20 06:32 - 2014-01-27 22:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll2012-12-20 18:19 - 2012-12-20 18:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll2012-12-20 18:19 - 2012-12-20 18:19 - 01310728 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kpcengine.2.2.dll2014-05-22 08:32 - 2014-07-11 19:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll2014-04-26 13:52 - 2014-07-11 19:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll2014-05-22 08:32 - 2014-07-11 19:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll2014-01-07 21:45 - 2014-07-11 19:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll2013-07-27 00:15 - 2014-06-26 17:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll2014-05-22 08:32 - 2014-07-15 21:28 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll2014-05-22 08:32 - 2014-04-28 19:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll2013-07-27 00:15 - 2014-07-15 21:28 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL2013-07-27 00:15 - 2014-05-01 18:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll2014-07-18 23:45 - 2014-07-15 04:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll2014-07-18 23:45 - 2014-07-15 04:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll2013-06-29 21:47 - 2011-08-23 21:39 - 00081920 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\koan\_ctypes.pyd2013-06-29 21:47 - 2011-08-23 21:39 - 00053248 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\Koan\_socket.pyd2013-06-29 21:47 - 2011-08-23 21:39 - 00655360 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Common\Koan\_ssl.pyd2013-06-29 21:47 - 2013-05-03 00:29 - 00043272 _____ () C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DHProcedure\DHProcedure.dll2014-07-18 23:45 - 2014-07-15 04:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll2014-07-18 23:45 - 2014-07-15 04:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll2014-07-18 23:45 - 2014-07-15 04:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll2010-11-22 17:56 - 2010-11-22 17:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd2014-05-13 18:26 - 2014-05-13 18:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd2014-05-13 18:26 - 2014-05-13 18:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd2014-05-13 18:26 - 2014-05-13 18:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd2014-05-13 18:26 - 2014-05-13 18:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd2010-11-22 17:57 - 2010-11-22 17:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll2010-11-22 17:56 - 2010-11-22 17:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd2010-11-22 17:57 - 2010-11-22 17:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd2010-11-22 17:57 - 2010-11-22 17:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd2011-02-15 13:17 - 2011-02-15 13:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll2010-11-22 17:57 - 2010-11-22 17:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd2014-05-13 18:26 - 2014-05-13 18:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll2010-11-22 17:57 - 2010-11-22 17:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd2010-11-22 17:57 - 2010-11-22 17:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd2010-11-22 17:56 - 2010-11-22 17:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd2013-11-20 19:05 - 2013-11-20 19:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll2010-11-22 17:57 - 2010-11-22 17:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd2014-06-17 19:56 - 2014-06-17 19:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd2011-02-15 13:17 - 2011-02-15 13:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll2010-11-22 18:06 - 2010-11-22 18:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll2013-05-09 18:52 - 2013-05-09 18:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll2013-05-09 18:52 - 2013-05-09 18:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll2013-05-09 18:52 - 2013-05-09 18:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll2013-05-03 13:57 - 2013-05-03 13:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll2013-05-03 13:56 - 2013-05-03 13:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll2013-05-03 13:56 - 2013-05-03 13:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll2013-05-03 13:57 - 2013-05-03 13:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll2013-05-03 13:56 - 2013-05-03 13:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll2013-05-03 13:57 - 2013-05-03 13:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll2013-05-03 13:57 - 2013-05-03 13:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll2013-05-03 13:57 - 2013-05-03 13:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll2013-05-03 13:57 - 2013-05-03 13:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: SM Bus ControllerDescription: SM Bus ControllerClass Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28)Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Programmable Root EnumeratorDescription: Programming SupportClass Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}Manufacturer: Mad CatzService: SaiNtBusProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver Name: AODDriver4.3Description: AODDriver4.3Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}Manufacturer: Service: AODDriver4.3Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.Devices stay in this state if they have been prepared for removal.After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: PCI Simple Communications ControllerDescription: PCI Simple Communications ControllerClass Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28)Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: LogMeIn Kernel Information ProviderDescription: LogMeIn Kernel Information ProviderClass Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}Manufacturer: Service: LMIInfoProblem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.Devices stay in this state if they have been prepared for removal.After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors:==================Error: (08/08/2014 10:47:33 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x39a8Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:44:30 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x31ecFaulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:43:37 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x3020Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:42:53 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1ab0Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:39:19 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x343cFaulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:22:26 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x20fcFaulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:21:42 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0xde0Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:21:02 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1848Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:19:56 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x209cFaulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 Error: (08/08/2014 10:19:17 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1eException code: 0x40000015Fault offset: 0x0008d6fdFaulting process id: 0x1ef4Faulting application start time: 0xmbam.exe0Faulting application path: mbam.exe1Faulting module path: mbam.exe2Report Id: mbam.exe3 System errors:=============Error: (08/08/2014 10:51:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:51:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Error: (08/08/2014 10:50:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )Description: The BCM42RLY service failed to start due to the following error: %%2 Microsoft Office Sessions:=========================Error: (08/08/2014 10:47:33 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd39a801cfb32010917c9bC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll4f452abf-1f13-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:44:30 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd31ec01cfb31fa46f3d46C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlle229e1c4-1f12-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:43:37 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd302001cfb31f84c0e1b5C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllc27607de-1f12-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:42:53 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd1ab001cfb31f6a234a41C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dlla85e9250-1f12-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:39:19 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd343c01cfb31eea1e1d40C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll28d044be-1f12-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:22:26 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd20fc01cfb31c8f8cf070C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllcd5577d1-1f0f-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:21:42 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdde001cfb31c75560b8cC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllb3201994-1f0f-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:21:02 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd184801cfb31c5d6ca1baC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll9b2dd601-1f0f-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:19:56 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd209c01cfb31c35f07aa9C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll73af64f6-1f0f-11e4-9d9d-10c37b6b86ac Error: (08/08/2014 10:19:17 AM) (Source: Application Error) (EventID: 1000) (User: )Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd1ef401cfb31c1e708292C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll5c38e2e3-1f0f-11e4-9d9d-10c37b6b86ac CodeIntegrity Errors:=================================== Date: 2014-08-08 10:47:23.264 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-08 10:35:14.466 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-08-08 10:35:14.433 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-08-08 10:14:29.028 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-08 10:05:55.685 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-07 23:33:19.574 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-07 22:19:00.668 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-07 22:10:34.966 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-07 19:48:15.449 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. Date: 2014-08-07 19:41:50.409 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 28%Total physical RAM: 16384 MBAvailable physical RAM: 11687.17 MBTotal Pagefile: 32766.18 MBAvailable Pagefile: 27822.48 MBTotal Virtual: 8192 MBAvailable Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:1397.17 GB) (Free:359.23 GB) NTFSDrive d: (Sims3) (CDROM) (Total:5.54 GB) (Free:0 GB) UDFDrive j: (Doctor) (Fixed) (Total:1863.01 GB) (Free:979.33 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: C9F814C6)Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ========================================================Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 3F8C795C)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 2: (Not Active) - (Size=1397 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Link to post Share on other sites More sharing options...
MrCharlie Posted August 8, 2014 ID:864290 Share Posted August 8, 2014 Welcome to the forum. (Do what you can) General P2P/Piracy Warning: 1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here. 2. If you have illegal/cracked software (MS Office, Adobe Products), cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy. Failure to remove such software will result in your topic being closed and no further assistance being provided. Please run a Quick Scan with Malwarebytes For Malwarebytes ver: 1.75 Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal. Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report. Make sure that everything is checked, and click Remove Selected. For Malwarebytes 2.0, please run a Threat Scan Click on Settings > Detection and Protection > Non-Malware Protection > PUP (Potentially Unwanted Program) detections > Make sure it's set to Treat detections as malware Same for PUM (Potentially Unwanted Modifications) Quarantine all that's found Then....... Please download and run RogueKiller 32 bit to your desktop. RogueKiller<---use this one for 64 bit systems Which system am I using? Quit all running programs. For Windows XP, double-click to start. For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run. Wait for the Prescan to finish Click Scan to scan the system. When the scan completes > Don't Fix anything! > Click on the Report Button and post the Report back here. Don't run any other options, they're not all bad!!!!!!! RogueKiller logs will also be located here: %programdata%/RogueKiller/Logs <-------W7 C:\Documents and Settings\All Users\Application Data\RogueKiller\Logs <-------XP (please don't put logs in code or quotes and use the default font) MrC Note: Please read all of my instructions completely including these. Make sure system restore is turned on and running. Create a new restore point Make sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly Removing malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive <+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you. <+>The removal of malware isn't instantaneous, please be patient. <+>When we are done, I'll give to instructions on how to cleanup all the tools and logs <+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that. ------->Your topic will be closed if you haven't replied within 3 days!<-------- If I don't respond within 24 hours, please send me a PM Link to post Share on other sites More sharing options...
Thejoekir Posted August 8, 2014 Author ID:864293 Share Posted August 8, 2014 P2P programs have been uninstalled. I am unable to accomplish the first step as something is blocking my copy of Malwarebytes from running. Should I proceed with the RogueKiller steps? Link to post Share on other sites More sharing options...
Thejoekir Posted August 8, 2014 Author ID:864296 Share Posted August 8, 2014 I went ahead and ran the RogueKiller scan and attached the report here.RKreport_SCN_08082014_160506.log Link to post Share on other sites More sharing options...
MrCharlie Posted August 8, 2014 ID:864303 Share Posted August 8, 2014 Make sure you have created a restore point and.....Download Delfix from Here and save it to your desktop.Place a check mark in front of .......Create registry backup <---only!Uncheck the rest!Click the Run button.Close the tool out when it's done....we'll use it later.--------------------------------AV: Kaspersky PURE 3.0 (Disabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}AS: Kaspersky PURE 3.0 (Disabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Kaspersky PURE 3.0 (Disabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} Please permanetly disable Defender, you have Kaspersky running.Having two anti-virus programs running on a system only causes poor performance, conflicts and spotty protection.How to Disable DefenderDangers of running 2 anti-virus programs--------------------------------------Please uninstall these:Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)------------------------------------Download the attached fixlist.txt to the same folder as FRST.exe/FRST64.exe.Run FRST.exe/FRST64.exe and click Fix only once and waitThe tool will create a log (Fixlog.txt) in the folder, please post it to your reply.--------------------------------------Please download AdwCleaner from HERE or HERE to your desktop.Double click on AdwCleaner.exe to run the tool.Vista/Windows 7/8 users right-click and select Run As AdministratorClick on the Scan button.AdwCleaner will begin...be patient as the scan may take some time to complete.When it's done you'll see: Pending: Please uncheck elements you don't want removed.Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.Look over the log especially under Files/Folders for any program you want to save.If there's a program you may want to save, just uncheck it from AdwCleaner.If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)If you're ready to clean it all up.....click the Clean button.After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.Copy and paste the contents of that logfile in your next reply.A copy of that logfile will also be saved in the C:\AdwCleaner folder.Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\QuarantineTo restore an item that has been deleted:Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.Next.................. Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.------------------------------------------I see you ran ComboFix, please post the log it created.MrC Link to post Share on other sites More sharing options...
Thejoekir Posted August 8, 2014 Author ID:864306 Share Posted August 8, 2014 Defender, Java51, and Spybot have all been removed/deactivated. Attached are the logs requested. Please let me know if I missed any step.AdwCleanerS0.txtcf log.txtFixlog.txtJRT.txt Link to post Share on other sites More sharing options...
MrCharlie Posted August 8, 2014 ID:864327 Share Posted August 8, 2014 Clean out temp files: Download TFC from here and save it to your desktop. http://oldtimer.geekstogo.com/TFC.exe http://www.bleepingcomputer.com/download/tfc/dl/92/ Close any open programs and Internet browsers. Double click TFC.exe to run it on XP (for Vista and Windows 7 right click and choose "Run as administrator") and once it opens click on the Start button on the lower left of the program to allow it to begin cleaning. Please be patient as clearing out temp files may take a while. Once it completes you may be prompted to restart your computer, please do so. Once it's finished you may delete TFC.exe from your desktop or save it for later use for the cleaning of temporary files. --------------------------- Lets do a clean re-install now: https://forums.malwarebytes.org/index.php?/topic/146017-mbam-clean-removal-process-2x/ <---clean re-install If you need to retrieve your id and key...download, unzip and run MB64.bat. Notepad will open with the results and your id and key will be towards the bottom of the log. MB64.zip Let me know...MrC Link to post Share on other sites More sharing options...
Thejoekir Posted August 9, 2014 Author ID:864351 Share Posted August 9, 2014 Awesome, that did it! MWB successfully installed, scanned, and found 0 malicious objects. Thanks for all your help! Link to post Share on other sites More sharing options...
MrCharlie Posted August 9, 2014 ID:864353 Share Posted August 9, 2014 Great..... Lets check your computers security before you go and we have a little cleanup to do also: Download Security Check by screen317 from HERE or HERE.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.If you get Unsupported operating system. Aborting now, just reboot and try again.A Notepad document should open automatically called checkup.txt.Please Post the contents of that document.Do Not Attach It!!!MrC Link to post Share on other sites More sharing options...
Thejoekir Posted August 9, 2014 Author ID:864357 Share Posted August 9, 2014 The following is the log from Security Check: Results of screen317's Security Check version 0.99.86 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Disabled! Kaspersky PURE 3.0 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 65 Adobe Flash Player 14.0.0.145 Adobe Reader XI Mozilla Firefox (28.0) Google Chrome 35.0.1916.153 Google Chrome 36.0.1985.125 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe Kaspersky Lab Kaspersky PURE 3.0 avp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 0% ````````````````````End of Log`````````````````````` Link to post Share on other sites More sharing options...
MrCharlie Posted August 9, 2014 ID:864362 Share Posted August 9, 2014 Just update your Java, it should be Update 67Java 7 Update 65 <--------Go to control panel > Java > Update Tab > Update NowUncheck the box to install the Ask toolbar!!!, McAfee Security Scan Plus or any other free "stuff".If there's no update tab in Java, uninstall it and Download and install the latest version from HereUncheck the box to install the Ask toolbar!!!, McAfee Security Scan Plus or any other free "stuff".-----------------------------------------------------------A little clean up to do....Please Uninstall ComboFix: (if you used it)Press the Windows logo key + R to bring up the "run box"Copy and paste next command in the field:ComboFix /uninstallMake sure there's a space between Combofix and /Then hit enter. (it may look like CF is re-installing but it's not)This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall or download and run the uninstaller)---------------------------------Download Delfix from here and save it to your desktop. (you may already have this)Ensure Remove disinfection tools is checked.Click the Run button.RebootAny other programs or logs that are still remaining, you can manually delete. (right click.....Delete)IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall.Note:If you used FRST and can't delete the quarantine folder:Download the fixlist.txt to the same folder as FRST.exe.Run FRST.exe and click Fix only once and waitThat will delete the quarantine folder created by FRST.The rest you can manually delete.-------------------------------Any questions...please post back.If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.Take a look at My Preventive Maintenance to avoid being infected again.Good Luck and Thanks for using the forum, MrC Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 15, 2014 Root Admin ID:866999 Share Posted August 15, 2014 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts