MisterMan Posted August 10, 2015 ID:982562 Share Posted August 10, 2015 I ran a malwarebytes Threat Scan and it found 1 malicious process and 1 malicious file. I told malwarebytes to remove the threat, and it said that it did, but after restarting, and even before restarting, the aforementioned malicious process, "server.exe" would start right back up again and would still appear in the processes tab of the task manager. I did another Threat Scan today, but this time I saved the results, which are pasted below. This is the first virus that I have gotten in the few years that I've owned this computer, so this is kind of embarrassing and I would greatly appreciate any help that you could give me in removing this Trojan.Thank you for your time, and for doing all this for free! :') Malwarebytes Threat Scan Results Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 8/10/2015Scan Time: 4:13 PMLogfile:Administrator: YesVersion: 2.1.8.1057Malware Database: v2015.08.10.06Rootkit Database: v2015.08.06.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: NathanScan Type: Threat ScanResult: CompletedObjects Scanned: 377706Time Elapsed: 15 min, 58 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: WarnPUM: EnabledProcesses: 1Trojan.Agent, C:\Users\Nathan\AppData\Local\Temp\server.exe, 4484, Delete-on-Reboot, [2ffff01765261620b6541c9ecf34e31d]Modules: 0(No malicious items detected)Registry Keys: 0(No malicious items detected)Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 0(No malicious items detected)Files: 1Trojan.Agent, C:\Users\Nathan\AppData\Local\Temp\server.exe, Delete-on-Reboot, [2ffff01765261620b6541c9ecf34e31d],Physical Sectors: 0(No malicious items detected)(end) FRST.txt Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015Ran by Nathan (administrator) on OMAR (10-08-2015 16:33:05)Running from C:\Users\Nathan\DesktopLoaded Profiles: Nathan (Available Profiles: Nathan)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Realtek) C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtlService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtWLan.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe(Spotify Ltd) C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe() C:\Users\Nathan\AppData\Local\Temp\server.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-23] (NVIDIA Corporation)HKLM\...\Run: [XboxStat] => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrunHKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)HKLM-x32\...\Run: [] => [X]HKLM-x32\...\Run: [Logitech G35] => C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech©)HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039240 2013-05-16] (Adobe Systems Incorporated)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.)HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-06-18] (Malwarebytes Corporation)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [F.lux] => C:\Users\Nathan\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-15] (Flux Software LLC)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [spotify Web Helper] => C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-12] (Spotify Ltd)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exeHKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exeHKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [Google Update] => C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-04-10] (Google Inc.)Startup: C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-05-26]ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No FileGroupPolicy: Group Policy on Chrome detected <======= ATTENTION==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehpBHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-04-02] (Microsoft Corporation)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{181A65FB-965B-499A-8041-334D5A428496}: [DhcpNameServer] 10.1.1.2Tcpip\..\Interfaces\{1F58DB92-70FD-4978-9C55-3B95110BB13D}: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{B507B2D6-AC68-4FCD-BDDC-3DD34B87BF2F}: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{CB54AC8E-BCEC-47D0-9F45-6377B385C6F4}: [DhcpNameServer] 8.8.8.8FireFox:========FF ProfilePath: C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.defaultFF DefaultSearchEngine: GoogleFF DefaultSearchEngine.US: GoogleFF Homepage: google.comFF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-02] (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll [2013-12-05] (Adobe Systems, Inc.)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-04-02] (Microsoft Corporation)FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-22] (NVIDIA Corporation)FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-22] (NVIDIA Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Nathan\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @talk.google.com/O1DPlugin -> C:\Users\Nathan\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Nathan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Nathan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Nathan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-11] (Unity Technologies ApS)FF user.js: detected! => C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\user.js [2014-03-21]FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)FF Plugin ProgramFiles/Appdata: C:\Users\Nathan\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)FF Plugin ProgramFiles/Appdata: C:\Users\Nathan\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)FF SearchPlugin: C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\searchplugins\tomodachi-life-wiki-en.xml [2015-05-11]FF Extension: Adblock Plus - C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-06]FF Extension: Greasemonkey - C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23]FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-08-07]Chrome:=======CHR Profile: C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-14]CHR Extension: (YouTube) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-14]CHR Extension: (Google Search) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-14]CHR Extension: (LoungeDestroyer) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-04-30]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-10]CHR Extension: (Google Wallet) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-14]CHR Extension: (Gmail) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-14]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 AsusSE; C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtlService.exe [36864 2012-03-20] (Realtek) [File not signed]R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-23] (NVIDIA Corporation)U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-03] (Hi-Rez Studios) [File not signed]S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]R3 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-23] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-23] (NVIDIA Corporation)S3 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe [26048 2014-08-12] ()R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-26] (Disc Soft Ltd)R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-11-22] (http://libusb-win32.sourceforge.net)R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-10] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-23] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-02] (NVIDIA Corporation)R3 SaiK2026; C:\Windows\System32\DRIVERS\SaiK2026.sys [180584 2012-12-04] (Saitek)U0 smbxj; C:\Windows\System32\drivers\wwlq.sys [79064 2015-08-10] (Malwarebytes Corporation)R3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2014-08-12] (The OpenVPN Project)S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]S3 GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-08-10 16:33 - 2015-08-10 16:33 - 00019706 _____ C:\Users\Nathan\Desktop\FRST.txt2015-08-10 16:30 - 2015-08-10 16:30 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\wwlq.sys2015-08-10 16:10 - 2015-08-10 16:10 - 00000529 _____ C:\Users\Nathan\Desktop\help.txt2015-08-10 15:09 - 2015-08-10 16:33 - 00000000 ____D C:\FRST2015-08-10 15:09 - 2015-08-10 15:09 - 02171392 _____ (Farbar) C:\Users\Nathan\Desktop\FRST64.exe2015-08-09 21:34 - 2015-08-09 21:41 - 00000000 ____D C:\Users\Nathan\Documents\Dolphin Emulator2015-08-09 21:33 - 2015-08-09 21:33 - 05077281 _____ C:\Users\Nathan\Downloads\dolphin-master-4.0-7161-x64.7z2015-08-09 20:58 - 2015-08-09 20:58 - 00000000 ____D C:\Users\Nathan\Downloads\super_smash_bros._melee_(v1.02)2015-08-09 20:24 - 2015-08-09 20:52 - 1196858789 _____ C:\Users\Nathan\Downloads\super_smash_bros._melee_(v1.02).zip2015-08-09 03:28 - 2015-08-09 03:28 - 00000000 ____D C:\Windows\System32\Tasks\Update2015-08-07 03:28 - 2015-08-08 12:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox2015-08-06 12:07 - 2015-07-22 17:46 - 00572232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe2015-08-06 12:05 - 2015-07-22 21:06 - 42730128 _____ C:\Windows\system32\nvcompiler.dll2015-08-06 12:05 - 2015-07-22 21:06 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll2015-08-06 12:05 - 2015-07-22 21:06 - 30487880 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 22950544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2015-08-06 12:05 - 2015-07-22 21:06 - 17615408 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 16151688 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2015-08-06 12:05 - 2015-07-22 21:06 - 15892200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 14503880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2015-08-06 12:05 - 2015-07-22 21:06 - 13268712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2015-08-06 12:05 - 2015-07-22 21:06 - 11836680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2015-08-06 12:05 - 2015-07-22 21:06 - 11055248 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2015-08-06 12:05 - 2015-07-22 21:06 - 02933576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2015-08-06 12:05 - 2015-07-22 21:06 - 02600592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435362.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435362.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01101856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01061008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01053000 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00983368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00976528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00940104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00503592 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2015-07-29 18:44 - 2015-07-25 11:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe2015-07-29 18:44 - 2015-07-25 11:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll2015-07-29 18:44 - 2015-07-25 11:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll2015-07-29 18:44 - 2015-07-25 11:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll2015-07-29 18:44 - 2015-07-25 10:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll2015-07-22 10:19 - 2015-07-22 10:19 - 00000000 ____D C:\Users\Nathan\AppData\Local\CEF2015-07-20 13:24 - 2015-07-14 20:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll2015-07-20 13:24 - 2015-07-14 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll2015-07-20 13:24 - 2015-07-14 18:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll2015-07-20 13:24 - 2015-07-14 18:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll2015-07-20 03:22 - 2015-07-20 03:22 - 00000000 ____D C:\Users\Nathan\Documents\Darkest2015-07-20 01:47 - 2015-07-20 01:47 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Shooter2015-07-20 00:30 - 2015-07-20 01:22 - 00000000 ____D C:\Users\Nathan\Documents\Euro Truck Simulator 22015-07-15 22:06 - 2015-06-17 02:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll2015-07-15 22:06 - 2015-06-17 02:10 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2015-07-15 22:06 - 2015-06-17 02:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll2015-07-15 22:06 - 2015-06-17 02:10 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2015-07-15 22:06 - 2015-06-17 02:10 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2015-07-15 21:49 - 2015-07-02 21:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2015-07-15 21:49 - 2015-07-02 21:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2015-07-15 21:38 - 2015-07-15 21:38 - 00001001 _____ C:\Users\Nathan\Desktop\DisplayProfile.exe - Shortcut.lnk2015-07-15 21:37 - 2015-07-15 21:38 - 00000000 ____D C:\DisplayProfile2015-07-15 21:37 - 2015-07-15 21:37 - 00000000 ____D C:\Users\Nathan\Downloads\DisplayProfile2015-07-15 21:31 - 2015-07-15 21:31 - 00208519 _____ C:\Users\Nathan\Downloads\DisplayProfile.zip2015-07-15 21:15 - 2015-07-15 21:15 - 00010520 _____ C:\Users\Nathan\Downloads\ASUS VG248QE Nvidia.icm2015-07-15 21:08 - 2015-07-22 21:06 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2015-07-15 21:08 - 2015-07-22 21:06 - 12876336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2015-07-15 21:08 - 2015-07-22 21:06 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2015-07-14 16:56 - 2015-07-09 10:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-07-14 16:56 - 2015-07-09 10:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-07-14 16:56 - 2015-07-09 10:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-07-14 16:56 - 2015-07-09 10:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-07-14 16:56 - 2015-07-09 10:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-07-14 16:56 - 2015-06-26 19:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-07-14 16:56 - 2015-06-26 19:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-07-14 16:56 - 2015-06-26 18:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll2015-07-14 16:56 - 2015-06-26 18:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-07-14 16:56 - 2015-06-25 01:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-07-14 16:56 - 2015-06-17 10:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2015-07-14 16:56 - 2015-06-17 10:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2015-07-14 16:56 - 2015-06-01 17:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll2015-07-14 16:56 - 2015-06-01 16:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll2015-07-14 16:55 - 2015-07-04 11:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll2015-07-14 16:55 - 2015-07-04 10:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll2015-07-14 16:55 - 2015-07-02 14:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-07-14 16:55 - 2015-07-02 14:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-07-14 16:55 - 2015-07-02 13:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-07-14 16:55 - 2015-07-02 13:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-07-14 16:55 - 2015-07-02 13:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-07-14 16:55 - 2015-07-02 13:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-07-14 16:55 - 2015-07-02 13:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-07-14 16:55 - 2015-07-02 13:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-07-14 16:55 - 2015-07-02 13:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-07-14 16:55 - 2015-07-02 12:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-07-14 16:55 - 2015-07-02 12:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-07-14 16:55 - 2015-07-02 11:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-07-14 16:55 - 2015-07-01 13:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-07-14 16:55 - 2015-07-01 13:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-07-14 16:55 - 2015-07-01 13:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-07-14 16:55 - 2015-07-01 13:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-07-14 16:55 - 2015-07-01 13:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll2015-07-14 16:55 - 2015-07-01 13:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-07-14 16:55 - 2015-07-01 13:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-07-14 16:55 - 2015-07-01 13:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-07-14 16:55 - 2015-07-01 13:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-07-14 16:55 - 2015-07-01 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-07-14 16:55 - 2015-07-01 13:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-07-14 16:55 - 2015-07-01 13:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-07-14 16:55 - 2015-07-01 13:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-07-14 16:55 - 2015-07-01 13:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-07-14 16:55 - 2015-07-01 12:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys2015-07-14 16:55 - 2015-07-01 12:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys2015-07-14 16:55 - 2015-07-01 12:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys2015-07-14 16:55 - 2015-06-25 11:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-07-14 16:55 - 2015-06-25 10:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-07-14 16:55 - 2015-06-20 13:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll2015-07-14 16:55 - 2015-06-20 12:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-07-14 16:55 - 2015-06-20 12:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-07-14 16:55 - 2015-06-20 12:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-07-14 16:55 - 2015-06-20 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll2015-07-14 16:55 - 2015-06-20 12:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll2015-07-14 16:55 - 2015-06-20 12:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-07-14 16:55 - 2015-06-20 12:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-07-14 16:55 - 2015-06-20 12:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-07-14 16:55 - 2015-06-20 12:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-07-14 16:55 - 2015-06-20 12:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe2015-07-14 16:55 - 2015-06-20 12:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-07-14 16:55 - 2015-06-20 12:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-07-14 16:55 - 2015-06-20 12:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll2015-07-14 16:55 - 2015-06-20 12:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-07-14 16:55 - 2015-06-20 12:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-07-14 16:55 - 2015-06-20 12:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-07-14 16:55 - 2015-06-20 11:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-07-14 16:55 - 2015-06-20 11:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-07-14 16:55 - 2015-06-20 11:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-07-14 16:55 - 2015-06-20 11:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-07-14 16:55 - 2015-06-20 11:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-07-14 16:55 - 2015-06-20 11:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-07-14 16:55 - 2015-06-19 11:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-07-14 16:55 - 2015-06-19 11:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-07-14 16:55 - 2015-06-19 11:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-07-14 16:55 - 2015-06-19 11:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll2015-07-14 16:55 - 2015-06-19 11:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll2015-07-14 16:55 - 2015-06-19 11:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-07-14 16:55 - 2015-06-19 11:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-07-14 16:55 - 2015-06-19 11:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-07-14 16:55 - 2015-06-19 11:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-07-14 16:55 - 2015-06-19 11:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-07-14 16:55 - 2015-06-19 10:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll2015-07-14 16:55 - 2015-06-19 10:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-07-14 16:55 - 2015-06-19 10:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-07-14 16:55 - 2015-06-19 10:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-07-14 16:55 - 2015-06-19 10:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-07-14 16:55 - 2015-06-19 10:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-07-14 16:55 - 2015-06-19 10:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-07-14 16:55 - 2015-06-19 10:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-07-14 16:55 - 2015-06-19 10:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-07-14 16:55 - 2015-04-27 12:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-07-14 16:55 - 2015-04-27 12:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-07-14 16:55 - 2015-04-27 12:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-07-14 16:55 - 2015-04-27 12:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-07-14 16:55 - 2015-04-27 12:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-07-14 16:54 - 2015-06-15 14:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe2015-07-14 16:54 - 2015-06-15 14:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll2015-07-14 16:54 - 2015-06-15 14:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll2015-07-14 16:54 - 2015-06-15 14:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll2015-07-14 16:54 - 2015-06-15 14:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll2015-07-14 16:54 - 2015-06-15 14:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe2015-07-14 16:54 - 2015-06-15 14:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll2015-07-14 16:54 - 2015-06-15 14:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll2015-07-14 16:54 - 2015-06-15 14:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll2015-07-14 16:54 - 2015-06-15 14:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe2015-07-14 16:54 - 2015-06-15 14:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll2015-07-14 16:54 - 2015-06-15 14:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll2015-07-12 02:22 - 2015-07-12 02:22 - 00000000 ____D C:\Frog2ARG2015-07-11 00:53 - 2015-07-11 00:53 - 01441981 _____ C:\Users\Nathan\Desktop\1422919514546.webm==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-08-10 16:20 - 2009-07-13 21:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-08-10 16:20 - 2009-07-13 21:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-08-10 16:16 - 2013-08-04 16:35 - 01724722 _____ C:\Windows\WindowsUpdate.log2015-08-10 16:15 - 2014-06-08 21:31 - 00000000 ____D C:\Users\Nathan\AppData\Local\LogMeIn Hamachi2015-08-10 16:13 - 2014-07-07 18:28 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-08-10 16:12 - 2013-08-05 00:02 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-08-10 16:12 - 2009-07-13 21:51 - 00305840 _____ C:\Windows\setupact.log2015-08-10 16:11 - 2013-09-08 14:01 - 00000000 ____D C:\ProgramData\NVIDIA2015-08-10 16:11 - 2010-11-20 20:47 - 00540126 _____ C:\Windows\PFRO.log2015-08-10 16:11 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-08-10 16:09 - 2013-08-05 00:02 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-08-10 16:00 - 2015-04-10 00:43 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000UA.job2015-08-10 15:50 - 2015-01-21 15:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job2015-08-10 15:12 - 2014-05-14 17:14 - 00000000 ____D C:\Stnerrot2015-08-10 14:57 - 2013-08-05 17:40 - 00000000 ____D C:\Program Files (x86)\Steam2015-08-10 13:00 - 2015-04-10 00:43 - 00000860 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000Core.job2015-08-10 03:09 - 2013-08-05 17:26 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Skype2015-08-09 21:34 - 2014-09-07 22:33 - 00000000 ____D C:\Emulators2015-08-09 03:46 - 2014-07-07 18:28 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-08-09 03:46 - 2014-07-07 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-08-09 03:46 - 2014-07-07 18:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-08-09 03:30 - 2015-04-06 23:32 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\TS3Client2015-08-09 03:27 - 2015-04-06 23:32 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client2015-08-08 12:58 - 2015-01-17 13:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service2015-08-07 03:10 - 2014-09-07 00:15 - 00000000 ____D C:\Users\Nathan\Desktop\CoCaCola adverts for project2015-08-06 12:07 - 2013-09-08 14:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation2015-08-06 12:07 - 2013-08-04 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2015-08-04 20:08 - 2014-12-28 17:37 - 00000000 ____D C:\Users\Nathan\AppData\Local\nuclearthrone2015-08-01 15:56 - 2014-11-27 13:12 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\vlc2015-07-30 01:39 - 2014-05-06 17:34 - 00000000 ___SD C:\Windows\system32\CompatTel2015-07-29 18:36 - 2015-04-07 02:03 - 00000000 ___SD C:\Windows\system32\GWX2015-07-23 21:21 - 2014-06-06 23:17 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2015-07-23 21:21 - 2014-06-06 23:17 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2015-07-23 21:21 - 2013-11-01 17:12 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2015-07-23 21:21 - 2013-11-01 17:12 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2015-07-22 21:06 - 2015-02-15 14:35 - 00112968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll2015-07-22 21:06 - 2015-02-15 14:35 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll2015-07-22 21:06 - 2015-02-15 14:29 - 03407144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2015-07-22 21:06 - 2015-02-15 14:29 - 00030966 _____ C:\Windows\system32\nvinfo.pb2015-07-22 18:31 - 2015-02-15 14:35 - 06873744 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2015-07-22 18:31 - 2015-02-15 14:35 - 03493008 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2015-07-22 18:31 - 2015-02-15 14:35 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2015-07-22 18:31 - 2015-02-15 14:35 - 00937616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2015-07-22 18:31 - 2015-02-15 14:35 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2015-07-22 18:31 - 2015-02-15 14:35 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2015-07-21 12:15 - 2015-04-02 04:19 - 00000000 ____D C:\Program Files\Microsoft Office 152015-07-21 03:17 - 2009-07-13 21:45 - 05009720 _____ C:\Windows\system32\FNTCACHE.DAT2015-07-20 07:16 - 2015-02-15 14:35 - 05121613 _____ C:\Windows\system32\nvcoproc.bin2015-07-20 03:21 - 2014-03-02 00:25 - 00000000 ____D C:\ProgramData\Package Cache2015-07-17 03:00 - 2015-04-07 02:03 - 00000000 ___SD C:\Windows\SysWOW64\GWX2015-07-16 01:29 - 2013-08-15 20:58 - 00000000 ____D C:\Users\Nathan\Documents\my games2015-07-15 22:08 - 2013-09-08 14:00 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation2015-07-15 22:07 - 2013-08-04 18:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation2015-07-15 22:06 - 2015-03-05 22:38 - 00000000 ____D C:\ProgramData\boost_interprocess2015-07-15 13:04 - 2013-08-05 00:02 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-07-15 13:04 - 2013-08-05 00:02 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-07-15 12:57 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache2015-07-15 12:55 - 2015-04-10 00:43 - 00003884 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000UA2015-07-15 12:55 - 2015-04-10 00:43 - 00003488 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000Core2015-07-15 03:28 - 2015-04-15 14:30 - 00000000 ____D C:\Windows\system32\appraiser2015-07-15 03:28 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\PolicyDefinitions2015-07-15 03:08 - 2013-08-09 03:03 - 00000000 ____D C:\Windows\system32\MRT2015-07-14 22:05 - 2014-09-17 15:21 - 00000000 ___RD C:\Program Files (x86)\Skype2015-07-14 22:05 - 2013-08-05 17:26 - 00000000 ____D C:\ProgramData\Skype2015-07-14 17:50 - 2015-01-21 15:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater2015-07-14 17:50 - 2013-08-05 00:55 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2015-07-14 17:50 - 2013-08-05 00:55 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2015-07-14 17:22 - 2014-08-19 13:50 - 00000000 ____D C:\Users\Nathan\AppData\Local\Adobe2015-07-14 17:14 - 2013-09-18 23:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk2015-07-14 17:13 - 2014-12-25 23:15 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-07-12 02:34 - 2014-01-18 01:11 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Audacity==================== Files in the root of some directories =======2014-03-05 13:31 - 2014-03-01 20:03 - 0012005 _____ () C:\Users\Nathan\AppData\Roaming\alsoft.ini2014-05-26 20:21 - 2014-05-26 20:22 - 0000871 _____ () C:\Users\Nathan\AppData\Roaming\LiveSupport.exe_log.txt2014-05-26 20:21 - 2014-05-26 20:26 - 0000092 _____ () C:\Users\Nathan\AppData\Roaming\regsvr32.exe_log.txt2013-08-13 00:20 - 2013-08-13 00:20 - 0003584 _____ () C:\Users\Nathan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2014-05-16 23:37 - 2014-05-16 23:38 - 0003072 _____ () C:\Users\Nathan\AppData\Local\file__0.localstorage2015-06-16 04:46 - 2015-06-16 04:46 - 0002899 _____ () C:\Users\Nathan\AppData\Local\recently-used.xbel2013-11-15 00:30 - 2013-11-15 00:30 - 0007605 _____ () C:\Users\Nathan\AppData\Local\Resmon.ResmonCfg2013-08-04 18:39 - 2013-08-04 18:39 - 0000003 _____ () C:\Users\Nathan\AppData\Local\user_data.ini2014-02-16 15:26 - 2014-02-16 15:26 - 0000041 ___SH () C:\ProgramData\.zreglib2013-08-22 18:54 - 2013-08-22 18:54 - 0000057 _____ () C:\ProgramData\Ament.ini2013-08-31 17:07 - 2013-08-31 17:07 - 0000008 __RSH () C:\ProgramData\B9027D1AFB.sys2014-03-30 20:34 - 2014-03-30 20:34 - 0000000 ____H () C:\ProgramData\DP45977C.lfl2013-08-31 17:07 - 2015-07-06 17:12 - 0005642 ___SH () C:\ProgramData\KGyGaAvL.sys2014-05-11 20:25 - 2014-05-11 20:25 - 0000108 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bcSome files in TEMP:====================C:\Users\Nathan\AppData\Local\Temp\27fff54a706caf16275619fa9b79269c.dllC:\Users\Nathan\AppData\Local\Temp\AdobeApplicationManager.exeC:\Users\Nathan\AppData\Local\Temp\binkw32.dllC:\Users\Nathan\AppData\Local\Temp\ChangeIcon.exeC:\Users\Nathan\AppData\Local\Temp\d2l_Install.exeC:\Users\Nathan\AppData\Local\Temp\GL_15E0.EXEC:\Users\Nathan\AppData\Local\Temp\GL_1E68.EXEC:\Users\Nathan\AppData\Local\Temp\GL_2F79.EXEC:\Users\Nathan\AppData\Local\Temp\GL_30FF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_3AAF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_3AED.EXEC:\Users\Nathan\AppData\Local\Temp\GL_4318.EXEC:\Users\Nathan\AppData\Local\Temp\GL_44DC.EXEC:\Users\Nathan\AppData\Local\Temp\GL_5678.EXEC:\Users\Nathan\AppData\Local\Temp\GL_59C2.EXEC:\Users\Nathan\AppData\Local\Temp\GL_5CCF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_7271.EXEC:\Users\Nathan\AppData\Local\Temp\GL_7934.EXEC:\Users\Nathan\AppData\Local\Temp\GL_8D22.EXEC:\Users\Nathan\AppData\Local\Temp\GL_901E.EXEC:\Users\Nathan\AppData\Local\Temp\GL_9D76.EXEC:\Users\Nathan\AppData\Local\Temp\GL_A6AA.EXEC:\Users\Nathan\AppData\Local\Temp\GL_BA68.EXEC:\Users\Nathan\AppData\Local\Temp\GL_D29A.EXEC:\Users\Nathan\AppData\Local\Temp\GL_DBDD.EXEC:\Users\Nathan\AppData\Local\Temp\GL_DC1B.EXEC:\Users\Nathan\AppData\Local\Temp\GL_E3B9.EXEC:\Users\Nathan\AppData\Local\Temp\GL_EF7C.EXEC:\Users\Nathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exeC:\Users\Nathan\AppData\Local\Temp\HiRezLauncherControls.dllC:\Users\Nathan\AppData\Local\Temp\installer_x64.exeC:\Users\Nathan\AppData\Local\Temp\installer_x86.exeC:\Users\Nathan\AppData\Local\Temp\jansi-64-1.8.dllC:\Users\Nathan\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-8u31-windows-au.exeC:\Users\Nathan\AppData\Local\Temp\nn1pprxo.dllC:\Users\Nathan\AppData\Local\Temp\nv3DVStreaming.dllC:\Users\Nathan\AppData\Local\Temp\nvSCPAPI.dllC:\Users\Nathan\AppData\Local\Temp\nvStereoApiI.dllC:\Users\Nathan\AppData\Local\Temp\nvStInst.exeC:\Users\Nathan\AppData\Local\Temp\OptimizerPro.exeC:\Users\Nathan\AppData\Local\Temp\optprosetup.exeC:\Users\Nathan\AppData\Local\Temp\random.exeC:\Users\Nathan\AppData\Local\Temp\server.exeC:\Users\Nathan\AppData\Local\Temp\setup.exeC:\Users\Nathan\AppData\Local\Temp\Shockwave_Installer_FF.exeC:\Users\Nathan\AppData\Local\Temp\SkypeSetup.exeC:\Users\Nathan\AppData\Local\Temp\Uninstall.exeC:\Users\Nathan\AppData\Local\Temp\vlc-2.2.1-win32.exeC:\Users\Nathan\AppData\Local\Temp\xmlUpdater.exe==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\system32\winlogon.exe => File is digitally signedC:\Windows\system32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\system32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\system32\services.exe => File is digitally signedC:\Windows\system32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\system32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\system32\rpcss.dll => File is digitally signedC:\Windows\system32\dnsapi.dll => File is digitally signedC:\Windows\SysWOW64\dnsapi.dll => File is digitally signedC:\Windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-08-02 18:33==================== End of log ============================ Link to post Share on other sites More sharing options...
MisterMan Posted August 10, 2015 Author ID:982564 Share Posted August 10, 2015 (Sorry, it wouldn't all fit in one post) Addition.txt Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015Ran by Nathan (administrator) on OMAR (10-08-2015 16:33:05)Running from C:\Users\Nathan\DesktopLoaded Profiles: Nathan (Available Profiles: Nathan)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Realtek) C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtlService.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtWLan.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe(Spotify Ltd) C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe() C:\Users\Nathan\AppData\Local\Temp\server.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe==================== Registry (Whitelisted) ==================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-23] (NVIDIA Corporation)HKLM\...\Run: [XboxStat] => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrunHKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)HKLM-x32\...\Run: [] => [X]HKLM-x32\...\Run: [Logitech G35] => C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech©)HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039240 2013-05-16] (Adobe Systems Incorporated)HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-08-01] (Apple Inc.)HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-06-18] (Malwarebytes Corporation)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [F.lux] => C:\Users\Nathan\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-15] (Flux Software LLC)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [spotify Web Helper] => C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-12] (Spotify Ltd)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exeHKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exeHKU\S-1-5-21-2947215651-2504359188-1809289494-1000\...\Run: [Google Update] => C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-04-10] (Google Inc.)Startup: C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2015-05-26]ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No FileGroupPolicy: Group Policy on Chrome detected <======= ATTENTION==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)HKU\S-1-5-21-2947215651-2504359188-1809289494-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehpBHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-04-02] (Microsoft Corporation)Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)Tcpip\Parameters: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{181A65FB-965B-499A-8041-334D5A428496}: [DhcpNameServer] 10.1.1.2Tcpip\..\Interfaces\{1F58DB92-70FD-4978-9C55-3B95110BB13D}: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{B507B2D6-AC68-4FCD-BDDC-3DD34B87BF2F}: [DhcpNameServer] 192.168.1.254Tcpip\..\Interfaces\{CB54AC8E-BCEC-47D0-9F45-6377B385C6F4}: [DhcpNameServer] 8.8.8.8FireFox:========FF ProfilePath: C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.defaultFF DefaultSearchEngine: GoogleFF DefaultSearchEngine.US: GoogleFF Homepage: google.comFF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-02] (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll [2013-12-05] (Adobe Systems, Inc.)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-04-02] (Microsoft Corporation)FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-22] (NVIDIA Corporation)FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-22] (NVIDIA Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Nathan\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @talk.google.com/O1DPlugin -> C:\Users\Nathan\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Nathan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Nathan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)FF Plugin HKU\S-1-5-21-2947215651-2504359188-1809289494-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Nathan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-11] (Unity Technologies ApS)FF user.js: detected! => C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\user.js [2014-03-21]FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)FF Plugin ProgramFiles/Appdata: C:\Users\Nathan\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)FF Plugin ProgramFiles/Appdata: C:\Users\Nathan\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)FF SearchPlugin: C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\searchplugins\tomodachi-life-wiki-en.xml [2015-05-11]FF Extension: Adblock Plus - C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-06]FF Extension: Greasemonkey - C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\6yaruhb2.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23]FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-08-07]Chrome:=======CHR Profile: C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-14]CHR Extension: (YouTube) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-14]CHR Extension: (Google Search) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-14]CHR Extension: (LoungeDestroyer) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-04-30]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-10]CHR Extension: (Google Wallet) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-14]CHR Extension: (Gmail) - C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-14]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R2 AsusSE; C:\Program Files (x86)\ASUS\PCE-N15 WLAN Card Utilities\RtlService.exe [36864 2012-03-20] (Realtek) [File not signed]R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-23] (NVIDIA Corporation)U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-02-03] (Hi-Rez Studios) [File not signed]S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]R3 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-23] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-23] (NVIDIA Corporation)S3 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe [26048 2014-08-12] ()R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-26] (Disc Soft Ltd)R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-11-22] (http://libusb-win32.sourceforge.net)R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-10] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-23] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-02] (NVIDIA Corporation)R3 SaiK2026; C:\Windows\System32\DRIVERS\SaiK2026.sys [180584 2012-12-04] (Saitek)U0 smbxj; C:\Windows\System32\drivers\wwlq.sys [79064 2015-08-10] (Malwarebytes Corporation)R3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2014-08-12] (The OpenVPN Project)S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]S3 GPCIDrv; \??\C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-08-10 16:33 - 2015-08-10 16:33 - 00019706 _____ C:\Users\Nathan\Desktop\FRST.txt2015-08-10 16:30 - 2015-08-10 16:30 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\wwlq.sys2015-08-10 16:10 - 2015-08-10 16:10 - 00000529 _____ C:\Users\Nathan\Desktop\help.txt2015-08-10 15:09 - 2015-08-10 16:33 - 00000000 ____D C:\FRST2015-08-10 15:09 - 2015-08-10 15:09 - 02171392 _____ (Farbar) C:\Users\Nathan\Desktop\FRST64.exe2015-08-09 21:34 - 2015-08-09 21:41 - 00000000 ____D C:\Users\Nathan\Documents\Dolphin Emulator2015-08-09 21:33 - 2015-08-09 21:33 - 05077281 _____ C:\Users\Nathan\Downloads\dolphin-master-4.0-7161-x64.7z2015-08-09 20:58 - 2015-08-09 20:58 - 00000000 ____D C:\Users\Nathan\Downloads\super_smash_bros._melee_(v1.02)2015-08-09 20:24 - 2015-08-09 20:52 - 1196858789 _____ C:\Users\Nathan\Downloads\super_smash_bros._melee_(v1.02).zip2015-08-09 03:28 - 2015-08-09 03:28 - 00000000 ____D C:\Windows\System32\Tasks\Update2015-08-07 03:28 - 2015-08-08 12:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox2015-08-06 12:07 - 2015-07-22 17:46 - 00572232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe2015-08-06 12:05 - 2015-07-22 21:06 - 42730128 _____ C:\Windows\system32\nvcompiler.dll2015-08-06 12:05 - 2015-07-22 21:06 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll2015-08-06 12:05 - 2015-07-22 21:06 - 30487880 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 22950544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll2015-08-06 12:05 - 2015-07-22 21:06 - 17615408 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 16151688 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll2015-08-06 12:05 - 2015-07-22 21:06 - 15892200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 14503880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll2015-08-06 12:05 - 2015-07-22 21:06 - 13268712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll2015-08-06 12:05 - 2015-07-22 21:06 - 11836680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll2015-08-06 12:05 - 2015-07-22 21:06 - 11055248 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys2015-08-06 12:05 - 2015-07-22 21:06 - 02933576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll2015-08-06 12:05 - 2015-07-22 21:06 - 02600592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435362.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435362.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01101856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01061008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 01053000 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00983368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00976528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00940104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00503592 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll2015-08-06 12:05 - 2015-07-22 21:06 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll2015-07-29 18:44 - 2015-07-25 11:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe2015-07-29 18:44 - 2015-07-25 11:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll2015-07-29 18:44 - 2015-07-25 11:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll2015-07-29 18:44 - 2015-07-25 11:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll2015-07-29 18:44 - 2015-07-25 11:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll2015-07-29 18:44 - 2015-07-25 10:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll2015-07-22 10:19 - 2015-07-22 10:19 - 00000000 ____D C:\Users\Nathan\AppData\Local\CEF2015-07-20 13:24 - 2015-07-14 20:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll2015-07-20 13:24 - 2015-07-14 20:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll2015-07-20 13:24 - 2015-07-14 19:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll2015-07-20 13:24 - 2015-07-14 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll2015-07-20 13:24 - 2015-07-14 18:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll2015-07-20 13:24 - 2015-07-14 18:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll2015-07-20 03:22 - 2015-07-20 03:22 - 00000000 ____D C:\Users\Nathan\Documents\Darkest2015-07-20 01:47 - 2015-07-20 01:47 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Shooter2015-07-20 00:30 - 2015-07-20 01:22 - 00000000 ____D C:\Users\Nathan\Documents\Euro Truck Simulator 22015-07-15 22:06 - 2015-06-17 02:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll2015-07-15 22:06 - 2015-06-17 02:10 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll2015-07-15 22:06 - 2015-06-17 02:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll2015-07-15 22:06 - 2015-06-17 02:10 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys2015-07-15 22:06 - 2015-06-17 02:10 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll2015-07-15 21:49 - 2015-07-02 21:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll2015-07-15 21:49 - 2015-07-02 21:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys2015-07-15 21:38 - 2015-07-15 21:38 - 00001001 _____ C:\Users\Nathan\Desktop\DisplayProfile.exe - Shortcut.lnk2015-07-15 21:37 - 2015-07-15 21:38 - 00000000 ____D C:\DisplayProfile2015-07-15 21:37 - 2015-07-15 21:37 - 00000000 ____D C:\Users\Nathan\Downloads\DisplayProfile2015-07-15 21:31 - 2015-07-15 21:31 - 00208519 _____ C:\Users\Nathan\Downloads\DisplayProfile.zip2015-07-15 21:15 - 2015-07-15 21:15 - 00010520 _____ C:\Users\Nathan\Downloads\ASUS VG248QE Nvidia.icm2015-07-15 21:08 - 2015-07-22 21:06 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll2015-07-15 21:08 - 2015-07-22 21:06 - 12876336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll2015-07-15 21:08 - 2015-07-22 21:06 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll2015-07-14 16:56 - 2015-07-09 10:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-07-14 16:56 - 2015-07-09 10:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-07-14 16:56 - 2015-07-09 10:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-07-14 16:56 - 2015-07-09 10:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-07-14 16:56 - 2015-07-09 10:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-07-14 16:56 - 2015-07-09 10:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-07-14 16:56 - 2015-07-09 10:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-07-14 16:56 - 2015-06-26 19:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-07-14 16:56 - 2015-06-26 19:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-07-14 16:56 - 2015-06-26 18:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll2015-07-14 16:56 - 2015-06-26 18:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-07-14 16:56 - 2015-06-25 01:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-07-14 16:56 - 2015-06-17 10:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll2015-07-14 16:56 - 2015-06-17 10:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll2015-07-14 16:56 - 2015-06-01 17:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll2015-07-14 16:56 - 2015-06-01 16:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll2015-07-14 16:55 - 2015-07-04 11:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll2015-07-14 16:55 - 2015-07-04 10:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll2015-07-14 16:55 - 2015-07-02 14:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-07-14 16:55 - 2015-07-02 14:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-07-14 16:55 - 2015-07-02 13:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-07-14 16:55 - 2015-07-02 13:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-07-14 16:55 - 2015-07-02 13:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-07-14 16:55 - 2015-07-02 13:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-07-14 16:55 - 2015-07-02 13:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-07-14 16:55 - 2015-07-02 13:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-07-14 16:55 - 2015-07-02 13:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-07-14 16:55 - 2015-07-02 12:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-07-14 16:55 - 2015-07-02 12:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-07-14 16:55 - 2015-07-02 11:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-07-14 16:55 - 2015-07-01 13:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-07-14 16:55 - 2015-07-01 13:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-07-14 16:55 - 2015-07-01 13:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-07-14 16:55 - 2015-07-01 13:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-07-14 16:55 - 2015-07-01 13:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-07-14 16:55 - 2015-07-01 13:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll2015-07-14 16:55 - 2015-07-01 13:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-07-14 16:55 - 2015-07-01 13:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-07-14 16:55 - 2015-07-01 13:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-07-14 16:55 - 2015-07-01 13:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-07-14 16:55 - 2015-07-01 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-07-14 16:55 - 2015-07-01 13:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-07-14 16:55 - 2015-07-01 13:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-07-14 16:55 - 2015-07-01 13:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-07-14 16:55 - 2015-07-01 13:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-07-14 16:55 - 2015-07-01 13:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-07-14 16:55 - 2015-07-01 13:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-07-14 16:55 - 2015-07-01 12:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys2015-07-14 16:55 - 2015-07-01 12:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys2015-07-14 16:55 - 2015-07-01 12:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys2015-07-14 16:55 - 2015-06-25 11:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-07-14 16:55 - 2015-06-25 10:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-07-14 16:55 - 2015-06-20 13:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll2015-07-14 16:55 - 2015-06-20 12:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-07-14 16:55 - 2015-06-20 12:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-07-14 16:55 - 2015-06-20 12:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-07-14 16:55 - 2015-06-20 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll2015-07-14 16:55 - 2015-06-20 12:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll2015-07-14 16:55 - 2015-06-20 12:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-07-14 16:55 - 2015-06-20 12:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-07-14 16:55 - 2015-06-20 12:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-07-14 16:55 - 2015-06-20 12:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-07-14 16:55 - 2015-06-20 12:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe2015-07-14 16:55 - 2015-06-20 12:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-07-14 16:55 - 2015-06-20 12:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-07-14 16:55 - 2015-06-20 12:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll2015-07-14 16:55 - 2015-06-20 12:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-07-14 16:55 - 2015-06-20 12:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-07-14 16:55 - 2015-06-20 12:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-07-14 16:55 - 2015-06-20 11:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-07-14 16:55 - 2015-06-20 11:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-07-14 16:55 - 2015-06-20 11:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-07-14 16:55 - 2015-06-20 11:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-07-14 16:55 - 2015-06-20 11:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-07-14 16:55 - 2015-06-20 11:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-07-14 16:55 - 2015-06-19 11:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-07-14 16:55 - 2015-06-19 11:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-07-14 16:55 - 2015-06-19 11:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-07-14 16:55 - 2015-06-19 11:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll2015-07-14 16:55 - 2015-06-19 11:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll2015-07-14 16:55 - 2015-06-19 11:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-07-14 16:55 - 2015-06-19 11:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-07-14 16:55 - 2015-06-19 11:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-07-14 16:55 - 2015-06-19 11:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-07-14 16:55 - 2015-06-19 11:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-07-14 16:55 - 2015-06-19 10:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll2015-07-14 16:55 - 2015-06-19 10:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-07-14 16:55 - 2015-06-19 10:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-07-14 16:55 - 2015-06-19 10:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-07-14 16:55 - 2015-06-19 10:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-07-14 16:55 - 2015-06-19 10:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-07-14 16:55 - 2015-06-19 10:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-07-14 16:55 - 2015-06-19 10:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-07-14 16:55 - 2015-06-19 10:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-07-14 16:55 - 2015-04-27 12:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll2015-07-14 16:55 - 2015-04-27 12:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll2015-07-14 16:55 - 2015-04-27 12:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll2015-07-14 16:55 - 2015-04-27 12:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll2015-07-14 16:55 - 2015-04-27 12:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll2015-07-14 16:55 - 2015-04-27 12:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll2015-07-14 16:54 - 2015-06-15 14:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe2015-07-14 16:54 - 2015-06-15 14:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll2015-07-14 16:54 - 2015-06-15 14:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll2015-07-14 16:54 - 2015-06-15 14:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll2015-07-14 16:54 - 2015-06-15 14:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll2015-07-14 16:54 - 2015-06-15 14:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe2015-07-14 16:54 - 2015-06-15 14:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll2015-07-14 16:54 - 2015-06-15 14:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll2015-07-14 16:54 - 2015-06-15 14:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll2015-07-14 16:54 - 2015-06-15 14:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe2015-07-14 16:54 - 2015-06-15 14:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll2015-07-14 16:54 - 2015-06-15 14:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll2015-07-12 02:22 - 2015-07-12 02:22 - 00000000 ____D C:\Frog2ARG2015-07-11 00:53 - 2015-07-11 00:53 - 01441981 _____ C:\Users\Nathan\Desktop\1422919514546.webm==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-08-10 16:20 - 2009-07-13 21:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-08-10 16:20 - 2009-07-13 21:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-08-10 16:16 - 2013-08-04 16:35 - 01724722 _____ C:\Windows\WindowsUpdate.log2015-08-10 16:15 - 2014-06-08 21:31 - 00000000 ____D C:\Users\Nathan\AppData\Local\LogMeIn Hamachi2015-08-10 16:13 - 2014-07-07 18:28 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-08-10 16:12 - 2013-08-05 00:02 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-08-10 16:12 - 2009-07-13 21:51 - 00305840 _____ C:\Windows\setupact.log2015-08-10 16:11 - 2013-09-08 14:01 - 00000000 ____D C:\ProgramData\NVIDIA2015-08-10 16:11 - 2010-11-20 20:47 - 00540126 _____ C:\Windows\PFRO.log2015-08-10 16:11 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-08-10 16:09 - 2013-08-05 00:02 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-08-10 16:00 - 2015-04-10 00:43 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000UA.job2015-08-10 15:50 - 2015-01-21 15:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job2015-08-10 15:12 - 2014-05-14 17:14 - 00000000 ____D C:\Stnerrot2015-08-10 14:57 - 2013-08-05 17:40 - 00000000 ____D C:\Program Files (x86)\Steam2015-08-10 13:00 - 2015-04-10 00:43 - 00000860 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000Core.job2015-08-10 03:09 - 2013-08-05 17:26 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Skype2015-08-09 21:34 - 2014-09-07 22:33 - 00000000 ____D C:\Emulators2015-08-09 03:46 - 2014-07-07 18:28 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-08-09 03:46 - 2014-07-07 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-08-09 03:46 - 2014-07-07 18:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-08-09 03:30 - 2015-04-06 23:32 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\TS3Client2015-08-09 03:27 - 2015-04-06 23:32 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client2015-08-08 12:58 - 2015-01-17 13:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service2015-08-07 03:10 - 2014-09-07 00:15 - 00000000 ____D C:\Users\Nathan\Desktop\CoCaCola adverts for project2015-08-06 12:07 - 2013-09-08 14:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation2015-08-06 12:07 - 2013-08-04 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation2015-08-04 20:08 - 2014-12-28 17:37 - 00000000 ____D C:\Users\Nathan\AppData\Local\nuclearthrone2015-08-01 15:56 - 2014-11-27 13:12 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\vlc2015-07-30 01:39 - 2014-05-06 17:34 - 00000000 ___SD C:\Windows\system32\CompatTel2015-07-29 18:36 - 2015-04-07 02:03 - 00000000 ___SD C:\Windows\system32\GWX2015-07-23 21:21 - 2014-06-06 23:17 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll2015-07-23 21:21 - 2014-06-06 23:17 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll2015-07-23 21:21 - 2013-11-01 17:12 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll2015-07-23 21:21 - 2013-11-01 17:12 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll2015-07-22 21:06 - 2015-02-15 14:35 - 00112968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll2015-07-22 21:06 - 2015-02-15 14:35 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll2015-07-22 21:06 - 2015-02-15 14:29 - 03407144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll2015-07-22 21:06 - 2015-02-15 14:29 - 00030966 _____ C:\Windows\system32\nvinfo.pb2015-07-22 18:31 - 2015-02-15 14:35 - 06873744 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll2015-07-22 18:31 - 2015-02-15 14:35 - 03493008 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll2015-07-22 18:31 - 2015-02-15 14:35 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll2015-07-22 18:31 - 2015-02-15 14:35 - 00937616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe2015-07-22 18:31 - 2015-02-15 14:35 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll2015-07-22 18:31 - 2015-02-15 14:35 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll2015-07-21 12:15 - 2015-04-02 04:19 - 00000000 ____D C:\Program Files\Microsoft Office 152015-07-21 03:17 - 2009-07-13 21:45 - 05009720 _____ C:\Windows\system32\FNTCACHE.DAT2015-07-20 07:16 - 2015-02-15 14:35 - 05121613 _____ C:\Windows\system32\nvcoproc.bin2015-07-20 03:21 - 2014-03-02 00:25 - 00000000 ____D C:\ProgramData\Package Cache2015-07-17 03:00 - 2015-04-07 02:03 - 00000000 ___SD C:\Windows\SysWOW64\GWX2015-07-16 01:29 - 2013-08-15 20:58 - 00000000 ____D C:\Users\Nathan\Documents\my games2015-07-15 22:08 - 2013-09-08 14:00 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation2015-07-15 22:07 - 2013-08-04 18:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation2015-07-15 22:06 - 2015-03-05 22:38 - 00000000 ____D C:\ProgramData\boost_interprocess2015-07-15 13:04 - 2013-08-05 00:02 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-07-15 13:04 - 2013-08-05 00:02 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-07-15 12:57 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache2015-07-15 12:55 - 2015-04-10 00:43 - 00003884 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000UA2015-07-15 12:55 - 2015-04-10 00:43 - 00003488 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2947215651-2504359188-1809289494-1000Core2015-07-15 03:28 - 2015-04-15 14:30 - 00000000 ____D C:\Windows\system32\appraiser2015-07-15 03:28 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\PolicyDefinitions2015-07-15 03:08 - 2013-08-09 03:03 - 00000000 ____D C:\Windows\system32\MRT2015-07-14 22:05 - 2014-09-17 15:21 - 00000000 ___RD C:\Program Files (x86)\Skype2015-07-14 22:05 - 2013-08-05 17:26 - 00000000 ____D C:\ProgramData\Skype2015-07-14 17:50 - 2015-01-21 15:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater2015-07-14 17:50 - 2013-08-05 00:55 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2015-07-14 17:50 - 2013-08-05 00:55 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2015-07-14 17:22 - 2014-08-19 13:50 - 00000000 ____D C:\Users\Nathan\AppData\Local\Adobe2015-07-14 17:14 - 2013-09-18 23:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk2015-07-14 17:13 - 2014-12-25 23:15 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-07-12 02:34 - 2014-01-18 01:11 - 00000000 ____D C:\Users\Nathan\AppData\Roaming\Audacity==================== Files in the root of some directories =======2014-03-05 13:31 - 2014-03-01 20:03 - 0012005 _____ () C:\Users\Nathan\AppData\Roaming\alsoft.ini2014-05-26 20:21 - 2014-05-26 20:22 - 0000871 _____ () C:\Users\Nathan\AppData\Roaming\LiveSupport.exe_log.txt2014-05-26 20:21 - 2014-05-26 20:26 - 0000092 _____ () C:\Users\Nathan\AppData\Roaming\regsvr32.exe_log.txt2013-08-13 00:20 - 2013-08-13 00:20 - 0003584 _____ () C:\Users\Nathan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2014-05-16 23:37 - 2014-05-16 23:38 - 0003072 _____ () C:\Users\Nathan\AppData\Local\file__0.localstorage2015-06-16 04:46 - 2015-06-16 04:46 - 0002899 _____ () C:\Users\Nathan\AppData\Local\recently-used.xbel2013-11-15 00:30 - 2013-11-15 00:30 - 0007605 _____ () C:\Users\Nathan\AppData\Local\Resmon.ResmonCfg2013-08-04 18:39 - 2013-08-04 18:39 - 0000003 _____ () C:\Users\Nathan\AppData\Local\user_data.ini2014-02-16 15:26 - 2014-02-16 15:26 - 0000041 ___SH () C:\ProgramData\.zreglib2013-08-22 18:54 - 2013-08-22 18:54 - 0000057 _____ () C:\ProgramData\Ament.ini2013-08-31 17:07 - 2013-08-31 17:07 - 0000008 __RSH () C:\ProgramData\B9027D1AFB.sys2014-03-30 20:34 - 2014-03-30 20:34 - 0000000 ____H () C:\ProgramData\DP45977C.lfl2013-08-31 17:07 - 2015-07-06 17:12 - 0005642 ___SH () C:\ProgramData\KGyGaAvL.sys2014-05-11 20:25 - 2014-05-11 20:25 - 0000108 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bcSome files in TEMP:====================C:\Users\Nathan\AppData\Local\Temp\27fff54a706caf16275619fa9b79269c.dllC:\Users\Nathan\AppData\Local\Temp\AdobeApplicationManager.exeC:\Users\Nathan\AppData\Local\Temp\binkw32.dllC:\Users\Nathan\AppData\Local\Temp\ChangeIcon.exeC:\Users\Nathan\AppData\Local\Temp\d2l_Install.exeC:\Users\Nathan\AppData\Local\Temp\GL_15E0.EXEC:\Users\Nathan\AppData\Local\Temp\GL_1E68.EXEC:\Users\Nathan\AppData\Local\Temp\GL_2F79.EXEC:\Users\Nathan\AppData\Local\Temp\GL_30FF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_3AAF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_3AED.EXEC:\Users\Nathan\AppData\Local\Temp\GL_4318.EXEC:\Users\Nathan\AppData\Local\Temp\GL_44DC.EXEC:\Users\Nathan\AppData\Local\Temp\GL_5678.EXEC:\Users\Nathan\AppData\Local\Temp\GL_59C2.EXEC:\Users\Nathan\AppData\Local\Temp\GL_5CCF.EXEC:\Users\Nathan\AppData\Local\Temp\GL_7271.EXEC:\Users\Nathan\AppData\Local\Temp\GL_7934.EXEC:\Users\Nathan\AppData\Local\Temp\GL_8D22.EXEC:\Users\Nathan\AppData\Local\Temp\GL_901E.EXEC:\Users\Nathan\AppData\Local\Temp\GL_9D76.EXEC:\Users\Nathan\AppData\Local\Temp\GL_A6AA.EXEC:\Users\Nathan\AppData\Local\Temp\GL_BA68.EXEC:\Users\Nathan\AppData\Local\Temp\GL_D29A.EXEC:\Users\Nathan\AppData\Local\Temp\GL_DBDD.EXEC:\Users\Nathan\AppData\Local\Temp\GL_DC1B.EXEC:\Users\Nathan\AppData\Local\Temp\GL_E3B9.EXEC:\Users\Nathan\AppData\Local\Temp\GL_EF7C.EXEC:\Users\Nathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exeC:\Users\Nathan\AppData\Local\Temp\HiRezLauncherControls.dllC:\Users\Nathan\AppData\Local\Temp\installer_x64.exeC:\Users\Nathan\AppData\Local\Temp\installer_x86.exeC:\Users\Nathan\AppData\Local\Temp\jansi-64-1.8.dllC:\Users\Nathan\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exeC:\Users\Nathan\AppData\Local\Temp\jre-8u31-windows-au.exeC:\Users\Nathan\AppData\Local\Temp\nn1pprxo.dllC:\Users\Nathan\AppData\Local\Temp\nv3DVStreaming.dllC:\Users\Nathan\AppData\Local\Temp\nvSCPAPI.dllC:\Users\Nathan\AppData\Local\Temp\nvStereoApiI.dllC:\Users\Nathan\AppData\Local\Temp\nvStInst.exeC:\Users\Nathan\AppData\Local\Temp\OptimizerPro.exeC:\Users\Nathan\AppData\Local\Temp\optprosetup.exeC:\Users\Nathan\AppData\Local\Temp\random.exeC:\Users\Nathan\AppData\Local\Temp\server.exeC:\Users\Nathan\AppData\Local\Temp\setup.exeC:\Users\Nathan\AppData\Local\Temp\Shockwave_Installer_FF.exeC:\Users\Nathan\AppData\Local\Temp\SkypeSetup.exeC:\Users\Nathan\AppData\Local\Temp\Uninstall.exeC:\Users\Nathan\AppData\Local\Temp\vlc-2.2.1-win32.exeC:\Users\Nathan\AppData\Local\Temp\xmlUpdater.exe==================== Bamital & volsnap Check =================(There is no automatic fix for files that do not pass verification.)C:\Windows\system32\winlogon.exe => File is digitally signedC:\Windows\system32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\system32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\system32\services.exe => File is digitally signedC:\Windows\system32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\system32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\system32\rpcss.dll => File is digitally signedC:\Windows\system32\dnsapi.dll => File is digitally signedC:\Windows\SysWOW64\dnsapi.dll => File is digitally signedC:\Windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-08-02 18:33==================== End of log ============================ Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted August 11, 2015 ID:982605 Share Posted August 11, 2015 Hello, They call me TwinHeadedEagle around here, and I'll try to help your with your issue. Before we start please read and note the following:We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.I volunteer to help you, so please, do not ask for help for your company/business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.Right-click on icon and select Run as Administrator to start the tool. (XP users click run after receipt of Windows Security Warning - Open File).Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please upload them into your next reply. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 6, 2015 Root Admin ID:987389 Share Posted September 6, 2015 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts