Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-06-2015 01
Ran by [removed] (administrator) on MISTER-SPOO on 22-06-2015 23:11:04
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe
() C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSUpdateChecker.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(© 2015 Microsoft Corporation) C:\Users\James\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Spotify Ltd) C:\Users\James\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-25] (Realtek Semiconductor Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2013-12-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\ASUSWSLoader.exe [63296 2013-08-16] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590656 2015-05-15] (Razer Inc.)
HKLM-x32\...\Run: [Kraken71ChromaHelper] => C:\Program Files (x86)\Razer\Razer_Kraken71Chroma_Driver\Drivers\SysAudio\Kraken71ChromaHelper.exe [1600320 2015-02-02] (Razer Inc)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2892992 2015-06-19] (Valve Corporation)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785792 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\...\Run: [BingSvc] => C:\Users\James\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\...\Run: [Spotify Web Helper] => C:\Users\James\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-17] (Spotify Ltd)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\...\Run: [Spotify] => C:\Users\James\AppData\Roaming\Spotify\Spotify.exe [7415864 2015-06-17] (Spotify Ltd)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2892992 2015-06-19] (Valve Corporation)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785792 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BingSvc] => C:\Users\James\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\James\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-17] (Spotify Ltd)
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify] => C:\Users\James\AppData\Roaming\Spotify\Spotify.exe [7415864 2015-06-17] (Spotify Ltd)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-179559099-3881319558-2611235183-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=SK2A&ocid=SK2ADHP&osmkt=en-us
HKU\S-1-5-21-179559099-3881319558-2611235183-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=SK2A&ocid=SK2ADHP&osmkt=en-us
HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\S-1-5-21-179559099-3881319558-2611235183-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-179559099-3881319558-2611235183-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-179559099-3881319558-2611235183-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-22] (Oracle Corporation)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-22] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-07] (Oracle Corporation)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-07] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] [removed] [removed]

FireFox:
========
FF ProfilePath: C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\jcwa8lan.default-1430101760336
FF DefaultSearchEngine.US: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-06-12] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-12] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-05-07] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-07] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed] [2015-06-21] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed] [2015-06-21] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-27] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\jcwa8lan.default-1430101760336\user.js [2015-04-24]
FF Extension: MEGA - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\jcwa8lan.default-1430101760336\Extensions\[removed] [2015-06-18]
FF Extension: Adblock Plus - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\jcwa8lan.default-1430101760336\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-05-27]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-06-02]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed]
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed] [2015-06-21]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed]
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\[removed] [2015-06-21]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-19] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2013-08-28] ()
S4 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe [71680 2013-08-16] (ASUS Cloud Corporation) [File not signed]
R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe [193400 2014-12-23] (Kaspersky Lab ZAO)
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-05-07] (Realtek Semiconductor Corporation) [File not signed]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [59392 2013-09-26] () [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-28] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S2 Device Handle Service; C:\Windows\SysWOW64\AsHookDevice.exe [207160 2013-08-08] ()
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-17] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-06-18] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-06-17] ()
S4 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-04] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [56008 2015-05-18] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [151240 2014-11-28] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [247496 2014-10-22] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [824008 2015-05-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30920 2014-10-10] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [31432 2014-10-30] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [69320 2014-11-20] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [77000 2014-11-22] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [181960 2014-11-10] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-22] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2944216 2013-08-20] (Realtek Semiconductor Corporation                           )
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [39592 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-04] (Razer, Inc.)
R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)
R4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
S4 NVHDA; \SystemRoot\system32\drivers\nvhda64v.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-22 23:11 - 2015-06-22 23:11 - 00026700 _____ C:\Users\James\Desktop\FRST.txt
2015-06-22 23:10 - 2015-06-22 23:11 - 00000000 ____D C:\FRST
2015-06-22 23:09 - 2015-06-22 23:09 - 02109952 _____ (Farbar) C:\Users\James\Desktop\FRST64.exe
2015-06-22 22:53 - 2015-06-22 22:53 - 02031992 _____ (Microsoft Corporation) C:\Users\James\Downloads\MGADiag.exe
2015-06-22 22:53 - 2015-06-22 22:53 - 00468480 _____ () C:\Users\James\Desktop\CKScanner.exe
2015-06-22 22:53 - 2015-06-22 22:53 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2015-06-22 19:46 - 2015-06-22 19:23 - 00065843 _____ C:\Users\James\Documents\servers.dat_tmp
2015-06-22 16:01 - 2015-06-22 19:36 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\7A37260C.sys
2015-06-21 23:00 - 2015-06-21 23:01 - 00000652 _____ C:\Users\James\Downloads\Restore_Default_Dialog_Box_Fonts.reg
2015-06-21 12:26 - 2015-06-21 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2015-06-21 12:25 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2015-06-21 12:24 - 2015-06-21 12:24 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2015-06-21 12:24 - 2015-05-18 22:16 - 00824008 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2015-06-21 12:24 - 2014-11-28 18:19 - 00151240 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2015-06-21 12:24 - 2014-10-22 21:13 - 00247496 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klhk.sys
2015-06-21 12:21 - 2015-06-21 12:22 - 262362382 _____ C:\Users\James\Downloads\Windows8DefaultFonts.zip
2015-06-21 12:20 - 2015-06-21 12:21 - 195151168 _____ (Kaspersky Lab) C:\Users\James\Downloads\kav15.0.2.361en_7201.exe
2015-06-20 21:24 - 2015-06-20 21:25 - 00000000 ____D C:\Program Files\Virtual Audio Cable
2015-06-20 21:24 - 2015-06-20 21:24 - 00110368 _____ (Eugene V. Muzychenko) C:\WINDOWS\system32\Drivers\vrtaucbl.sys
2015-06-20 21:24 - 2015-06-20 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Audio Cable
2015-06-20 21:23 - 2015-06-20 21:23 - 00549492 _____ C:\Users\James\Downloads\vac414.zip
2015-06-20 20:58 - 2015-06-20 20:58 - 00019369 _____ C:\Users\James\Downloads\tf2_secondary.zip
2015-06-20 20:49 - 2015-06-20 20:49 - 00001397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-06-20 20:49 - 2015-06-20 20:49 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-06-20 20:49 - 2015-06-20 20:49 - 00000000 ____D C:\WINDOWS\en
2015-06-20 20:48 - 2015-06-20 20:48 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-06-20 20:48 - 2015-06-20 20:48 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-06-20 20:48 - 2015-06-20 20:48 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-06-20 20:45 - 2015-06-20 20:53 - 00000000 ____D C:\Users\James\AppData\Local\Windows Live
2015-06-20 20:27 - 2015-06-20 20:27 - 00000040 ____H C:\1F0ADE15BF25
2015-06-20 11:49 - 2015-06-20 11:49 - 00000919 _____ C:\Users\James\Downloads\Documents - Shortcut.lnk
2015-06-19 23:42 - 2015-06-19 23:42 - 198683885 _____ C:\Users\James\Downloads\Mortal Kombat.rar
2015-06-18 23:43 - 2015-06-18 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extreme Picture Finder 3
2015-06-18 23:43 - 2015-06-18 23:43 - 00000000 ____D C:\Program Files (x86)\Extreme Picture Finder 3
2015-06-18 22:28 - 2015-06-19 15:53 - 00000000 ____D C:\Users\James\Downloads\Extreme Picture Finder
2015-06-18 22:27 - 2015-06-18 23:43 - 00000000 ____D C:\ProgramData\Extreme Picture Finder
2015-06-18 22:19 - 2015-06-18 22:19 - 03774495 _____ (Extreme Internet Software ) C:\Users\James\Downloads\PictureFinderSetup.exe
2015-06-18 17:17 - 2015-03-16 18:28 - 00000000 ____D C:\Users\James\Documents\httrack
2015-06-18 17:17 - 2000-12-13 21:09 - 00000385 _____ C:\Users\James\Documents\file_id.diz
2015-06-18 17:16 - 2015-06-18 17:17 - 04622054 _____ C:\Users\James\Downloads\httrack-noinst-3.48.21.zip
2015-06-18 17:16 - 2015-06-18 17:16 - 04496352 _____ (HTTrack ) C:\Users\James\Downloads\httrack_x64-3.48.21.exe
2015-06-18 00:57 - 2015-06-18 00:57 - 00076152 _____ C:\WINDOWS\system32\PnkBstrA.exe
2015-06-18 00:35 - 2015-06-18 00:35 - 00000000 ____D C:\Users\James\AppData\Local\PunkBuster
2015-06-18 00:11 - 2015-06-18 00:14 - 00000000 ____D C:\Users\James\Documents\Battlefield 4
2015-06-18 00:11 - 2015-06-18 00:11 - 00000000 ____D C:\Users\James\AppData\Local\ESN
2015-06-18 00:10 - 2015-06-18 00:10 - 01640768 _____ C:\Users\James\Downloads\battlelog-web-plugins_2.7.1_162.exe
2015-06-17 16:04 - 2015-06-21 12:15 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2015-06-17 16:03 - 2015-06-18 00:57 - 00226680 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-06-17 16:03 - 2015-06-18 00:48 - 00214392 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-06-17 16:03 - 2015-06-17 16:03 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-06-17 00:41 - 2015-06-17 00:43 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-06-17 00:37 - 2015-06-18 00:11 - 00000000 ____D C:\Users\James\AppData\Local\Origin
2015-06-17 00:37 - 2015-06-17 14:59 - 00000000 ____D C:\Users\James\AppData\Roaming\Origin
2015-06-17 00:35 - 2015-06-18 01:30 - 00000000 ____D C:\ProgramData\Origin
2015-06-17 00:35 - 2015-06-18 00:11 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-06-17 00:35 - 2015-06-17 00:37 - 00000000 ____D C:\Program Files (x86)\Origin
2015-06-17 00:34 - 2015-06-17 00:34 - 17116168 _____ (Electronic Arts, Inc.) C:\Users\James\Downloads\OriginThinSetup.exe
2015-06-16 17:49 - 2015-06-16 17:49 - 00000000 ____D C:\Users\James\AppData\Local\Two Tribes
2015-06-16 01:13 - 2015-04-22 17:52 - 04506104 _____ C:\Users\James\Documents\faithful32pack.zip
2015-06-16 01:13 - 2015-04-22 17:48 - 07291524 _____ C:\Users\James\Documents\faithful64pack-v1.4.0.zip
2015-06-16 00:31 - 2015-06-16 00:32 - 00000000 ____D C:\Users\James\Documents\PINK GUY (FULL ALBUM)
2015-06-14 14:05 - 2015-06-14 14:05 - 00006271 _____ C:\Users\James\Documents\story.txt
2015-06-14 01:09 - 2015-06-14 01:11 - 114023876 _____ C:\Users\James\Downloads\PINK GUY (FULL ALBUM).zip
2015-06-13 14:01 - 2015-06-13 14:01 - 00000000 ____D C:\Users\James\AppData\Roaming\Morphopolis
2015-06-12 15:33 - 2015-06-12 15:34 - 00000000 ____D C:\Users\James\AppData\Roaming\New Version Available
2015-06-12 15:33 - 2015-06-12 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Screencast
2015-06-12 15:33 - 2015-06-12 15:33 - 00000000 ____D C:\Program Files (x86)\Free Screencast
2015-06-12 15:32 - 2015-06-12 15:32 - 04372040 _____ (FreeScreencast Co., Ltd. ) C:\Users\James\Downloads\FreeScreencast [1].exe
2015-06-12 15:30 - 2015-06-12 15:30 - 00680552 _____ (Internet application ) C:\Users\James\Downloads\FreeScreencast.exe
2015-06-11 23:49 - 2015-06-21 12:24 - 00000000 ____D C:\Users\Owner
2015-06-11 23:49 - 2015-06-11 23:49 - 00000040 ____H C:\FB89F57C6E56
2015-06-11 23:49 - 2015-06-11 23:49 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Adobe
2015-06-11 23:47 - 2015-06-06 08:20 - 00000000 ____D C:\Users\James\Documents\After Effect CS6 by Traylix
2015-06-11 23:09 - 2015-06-11 23:16 - 243752355 _____ C:\Users\James\Downloads\After Effect CS6 by Traylix.7z
2015-06-11 21:48 - 2015-06-13 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2015-06-11 21:48 - 2015-06-13 18:40 - 00000000 ____D C:\Program Files (x86)\Mirillis
2015-06-11 21:48 - 2015-06-11 21:51 - 00004664 _____ C:\WINDOWS\windefendam.log
2015-06-11 21:48 - 2015-06-11 21:51 - 00000020 _____ C:\WINDOWS\capsys184523.log
2015-06-11 21:48 - 2015-06-11 21:48 - 00000000 ____D C:\Users\James\AppData\Roaming\Mirillis
2015-06-11 21:48 - 2015-06-11 21:48 - 00000000 ____D C:\Users\James\AppData\Local\Mirillis
2015-06-11 21:48 - 2015-06-11 21:48 - 00000000 ____D C:\ProgramData\Mirillis
2015-06-11 21:45 - 2015-06-11 21:46 - 18894768 _____ (Mirillis Ltd.) C:\Users\James\Downloads\action_1_25_3_setup.exe
2015-06-11 21:42 - 2015-06-11 21:42 - 00000000 ____D C:\Users\James\Documents\Camtasia Studio
2015-06-11 21:42 - 2015-06-11 21:42 - 00000000 ____D C:\Users\James\AppData\Roaming\TechSmith
2015-06-11 21:42 - 2015-06-11 21:42 - 00000000 ____D C:\Users\James\AppData\Local\TechSmith
2015-06-11 21:41 - 2015-06-11 21:41 - 00000000 ____D C:\ProgramData\TechSmith
2015-06-11 21:41 - 2015-06-11 21:41 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-06-11 21:41 - 2015-06-11 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-06-11 21:41 - 2015-06-11 21:41 - 00000000 ____D C:\Program Files (x86)\TechSmith
2015-06-11 21:41 - 2015-06-11 21:41 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-06-11 20:54 - 2015-06-13 22:53 - 00000000 ____D C:\Users\James\AppData\Roaming\OBS
2015-06-11 20:53 - 2015-06-11 20:53 - 07072745 _____ C:\Users\James\Downloads\OBS_0_651b_Installer.exe
2015-06-11 20:53 - 2015-06-11 20:53 - 00000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-06-11 20:53 - 2015-06-11 20:53 - 00000000 ____D C:\Program Files\OBS
2015-06-11 20:53 - 2015-06-11 20:53 - 00000000 ____D C:\Program Files (x86)\OBS
2015-06-11 15:07 - 2015-06-11 15:11 - 00000000 ____D C:\Users\James\Downloads\Hatred [RePack]
2015-06-11 14:22 - 2015-06-11 14:22 - 00000000 ____D C:\Users\James\AppData\Roaming\TeamViewer
2015-06-11 14:21 - 2015-06-11 14:21 - 08009728 _____ (TeamViewer GmbH) C:\Users\James\Downloads\TeamViewer_Setup_en.exe
2015-06-10 21:37 - 2015-06-10 21:38 - 28360755 _____ C:\Users\James\Downloads\starter.zip
2015-06-10 14:38 - 2015-06-11 14:34 - 00000000 ____D C:\Users\James\AppData\Local\LogMeIn Hamachi
2015-06-10 14:38 - 2015-06-10 14:38 - 00000000 ____D C:\Users\James\AppData\Local\LogMeIn
2015-06-10 14:38 - 2015-06-10 14:38 - 00000000 ____D C:\ProgramData\LogMeIn
2015-06-10 14:37 - 2015-06-10 14:37 - 08552448 _____ C:\Users\James\Downloads\hamachi.msi
2015-06-10 13:29 - 2015-06-10 13:29 - 00000000 ____D C:\Users\James\AppData\Local\Criterion Games
2015-06-10 00:57 - 2015-06-10 00:57 - 00000000 ____D C:\Users\James\AppData\Local\Risk_of_Rain
2015-06-09 20:22 - 2015-06-09 20:23 - 00000000 ____D C:\Users\James\AppData\Local\Skyrim
2015-06-09 15:20 - 2015-05-25 08:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-09 15:20 - 2015-05-25 08:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-09 15:20 - 2015-05-22 08:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-09 15:20 - 2015-05-21 08:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-09 15:20 - 2015-04-16 17:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-09 15:20 - 2015-04-08 17:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-09 15:20 - 2015-04-08 17:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-09 15:20 - 2015-04-01 17:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-09 15:20 - 2015-04-01 17:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-09 15:20 - 2015-03-19 22:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-09 15:20 - 2015-03-19 22:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-09 15:20 - 2015-03-19 21:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-09 15:20 - 2015-03-19 21:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-09 15:20 - 2015-03-01 20:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-09 15:20 - 2015-03-01 20:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-09 15:18 - 2015-05-27 09:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-09 15:18 - 2015-05-27 09:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-09 15:18 - 2015-05-22 22:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-09 15:18 - 2015-05-22 22:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-09 15:18 - 2015-05-22 22:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-09 15:18 - 2015-05-22 22:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-09 15:18 - 2015-05-22 22:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-09 15:18 - 2015-05-22 21:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-09 15:18 - 2015-05-22 21:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-09 15:18 - 2015-05-22 21:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-09 15:18 - 2015-05-22 21:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-09 15:18 - 2015-05-22 21:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-09 15:18 - 2015-05-22 21:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-09 15:18 - 2015-05-22 21:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-09 15:18 - 2015-05-22 21:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-09 15:18 - 2015-05-22 21:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-09 15:18 - 2015-05-22 21:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-09 15:18 - 2015-05-22 21:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-09 15:18 - 2015-05-22 21:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-09 15:18 - 2015-05-22 21:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-09 15:18 - 2015-05-22 14:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-09 15:18 - 2015-05-22 14:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-09 15:18 - 2015-05-22 14:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-09 15:18 - 2015-05-22 13:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-09 15:18 - 2015-05-22 13:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-09 15:18 - 2015-05-22 13:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-09 15:18 - 2015-05-22 13:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-09 15:18 - 2015-05-22 13:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-09 15:18 - 2015-05-22 13:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-09 15:18 - 2015-05-22 13:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-09 15:18 - 2015-05-22 13:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-09 15:18 - 2015-05-22 13:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-09 15:18 - 2015-05-22 13:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-09 15:18 - 2015-05-22 13:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-09 15:18 - 2015-05-22 13:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-09 15:18 - 2015-05-22 12:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-09 15:18 - 2015-05-22 12:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-09 15:18 - 2015-05-22 12:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-09 15:18 - 2015-05-22 12:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-09 15:18 - 2015-05-22 12:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-09 15:18 - 2015-04-24 21:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-09 15:18 - 2015-04-24 21:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-09 15:18 - 2015-04-16 01:17 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-09 15:18 - 2015-04-13 17:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-09 15:18 - 2015-04-13 17:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-09 15:18 - 2015-04-09 19:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-09 15:18 - 2015-04-09 19:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-09 15:18 - 2015-03-31 23:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-09 15:18 - 2015-03-31 23:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-09 15:18 - 2015-03-31 23:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-09 15:18 - 2015-03-31 23:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-09 15:18 - 2015-03-31 22:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-09 15:18 - 2015-03-31 22:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-09 15:18 - 2015-03-31 22:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-09 15:18 - 2015-03-31 21:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-09 15:18 - 2015-03-31 21:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-09 15:18 - 2015-03-31 21:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-09 15:18 - 2015-03-31 21:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-09 15:18 - 2015-03-31 21:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-09 15:18 - 2015-03-31 21:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-09 15:17 - 2015-05-21 11:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-09 00:45 - 2015-06-18 15:10 - 00000132 _____ C:\Users\James\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-06-09 00:34 - 2015-06-09 00:37 - 00003584 _____ C:\Users\James\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-09 00:33 - 2015-06-09 00:37 - 00000000 ____D C:\Users\James\Documents\ezvid
2015-06-09 00:33 - 2015-06-09 00:33 - 00000000 ____D C:\Users\James\AppData\Local\ezvid,_inc
2015-06-09 00:31 - 2015-06-09 00:31 - 01002096 _____ (Ezvid, inc. ) C:\Users\James\Downloads\ezvid1.002b03.exe
2015-06-07 18:59 - 2015-06-08 16:39 - 00000000 ____D C:\Users\James\Documents\RIFT
2015-06-07 18:59 - 2015-06-07 20:13 - 00000000 ____D C:\Users\James\AppData\Roaming\RIFT
2015-06-07 13:09 - 2015-06-07 13:09 - 05009736 _____ (Adobe Systems Inc.) C:\Users\James\Downloads\Shockwave_Installer_Slim(1).exe
2015-06-07 13:09 - 2015-06-07 13:09 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2015-06-07 13:08 - 2015-06-22 22:38 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-06-07 13:08 - 2015-06-12 11:39 - 00003718 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-06-07 12:54 - 2015-06-07 12:54 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-06-07 12:54 - 2015-06-07 12:54 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-07 12:53 - 2015-06-07 12:53 - 00561248 _____ (Oracle Corporation) C:\Users\James\Downloads\jxpiinstall.exe
2015-06-07 12:35 - 2015-06-07 12:35 - 00000000 ____D C:\Users\James\AppData\Local\RzStats
2015-06-06 16:05 - 2015-02-13 02:17 - 10512896 _____ C:\Users\James\Documents\HuniePop.exe
2015-06-06 16:04 - 2015-02-13 02:17 - 00000000 ____D C:\Users\James\Documents\HuniePop_Data
2015-06-06 16:03 - 2015-06-06 16:04 - 299163364 _____ C:\Users\James\Downloads\HuniePop.7z
2015-06-06 15:56 - 2015-06-06 18:29 - 1373787692 _____ C:\Users\James\Downloads\Hatred_v4.exe
2015-06-04 22:48 - 2015-06-04 22:49 - 07680078 _____ C:\Users\James\Downloads\Metro_5.1.zip
2015-06-02 17:16 - 2015-06-02 20:40 - 00018248 _____ C:\Users\James\Documents\clickerHeroSave.txt
2015-06-02 17:15 - 2015-06-02 17:15 - 00000000 ____D C:\Users\James\AppData\Roaming\com.playsaurus.heroclicker
2015-06-02 13:40 - 2015-06-06 10:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-01 19:57 - 2015-06-01 19:57 - 00000000 ____D C:\Users\James\AppData\Local\Downloaded Installations
2015-06-01 19:57 - 2015-06-01 19:57 - 00000000 ____D C:\Program Files (x86)\AMD
2015-06-01 19:56 - 2015-06-01 19:56 - 00000000 ____D C:\WINDOWS\SysWOW64\AGEIA
2015-06-01 19:56 - 2015-06-01 19:56 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2015-06-01 19:56 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2015-06-01 19:56 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2015-06-01 19:56 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2015-06-01 13:51 - 2015-06-01 13:51 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2015-05-31 22:46 - 2015-05-27 22:52 - 00571024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-05-31 22:42 - 2015-05-28 02:04 - 42719888 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 37741712 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 30480528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 22946960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 16185352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 14495448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 13304280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 11830512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 10995528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-05-31 22:42 - 2015-05-28 02:04 - 02932368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 02599056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 01898312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435306.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 01557832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435306.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 01099808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 01050440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00982856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00974480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00939080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00878816 _____ C:\WINDOWS\system32\nvmcumd.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00503408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00408208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00407112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00364176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-05-31 22:42 - 2015-05-28 02:04 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-05-31 22:39 - 2015-05-31 22:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-31 22:39 - 2015-05-31 22:39 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-31 22:39 - 2015-05-31 22:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-05-31 22:38 - 2015-05-31 22:38 - 13095136 _____ (Microsoft Corporation) C:\Users\James\Downloads\Silverlight_x64.exe
2015-05-31 22:32 - 2015-05-31 22:33 - 00000050 _____ C:\Users\James\Documents\HOW TO WIN THE INTERNET 2069 EDITION.txt
2015-05-31 22:29 - 2015-05-31 22:31 - 292211848 _____ (NVIDIA Corporation) C:\Users\James\Downloads\353.06-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-05-31 20:39 - 2015-05-31 20:39 - 00000000 ____D C:\Users\James\AppData\Local\GWX
2015-05-31 20:34 - 2015-06-07 13:11 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-05-31 20:34 - 2015-04-03 08:21 - 00048784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-05-31 20:34 - 2015-04-03 08:21 - 00038032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-05-30 21:56 - 2015-05-30 21:56 - 00000000 ____D C:\Users\James\Documents\EA Games
2015-05-30 19:41 - 2015-05-30 19:42 - 00000136 _____ C:\Users\James\Documents\bunnyhop.ahk
2015-05-30 19:36 - 2015-05-30 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
2015-05-30 19:36 - 2015-05-30 19:36 - 00000000 ____D C:\Program Files\AutoHotkey
2015-05-30 19:35 - 2015-05-30 19:35 - 02798411 _____ C:\Users\James\Downloads\AutoHotkey112202_Install(2).exe
2015-05-30 19:34 - 2015-05-30 19:34 - 02798411 _____ C:\Users\James\Downloads\AutoHotkey112202_Install(1).exe
2015-05-30 19:33 - 2015-05-30 19:33 - 02798411 _____ C:\Users\James\Downloads\AutoHotkey112202_Install.exe
2015-05-30 04:44 - 2015-05-30 04:44 - 00370288 _____ C:\WINDOWS\Minidump\053015-19406-01.dmp
2015-05-28 18:17 - 2015-05-28 18:19 - 00000011 _____ C:\Users\James\Documents\netflix.txt
2015-05-28 14:16 - 2015-05-28 17:38 - 00000076 _____ C:\Users\James\Documents\minecraft acc.txt
2015-05-28 13:15 - 2015-05-28 13:15 - 00000000 ____D C:\Users\James\Documents\DyingLight
2015-05-27 16:25 - 2015-06-15 01:01 - 00000000 ____D C:\Users\James\Documents\My Games
2015-05-27 15:30 - 2015-05-27 15:30 - 00007597 _____ C:\Users\James\AppData\Local\Resmon.ResmonCfg
2015-05-27 01:40 - 2015-06-22 19:37 - 00000000 ____D C:\Users\James\AppData\Local\CrashDumps
2015-05-26 18:23 - 2015-05-27 01:28 - 00000000 ____D C:\Fraps
2015-05-26 18:23 - 2015-05-26 18:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\James\Downloads\setup.exe
2015-05-26 18:23 - 2015-05-26 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-05-26 18:13 - 2015-05-26 18:38 - 00000080 _____ C:\Users\James\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-05-26 18:13 - 2015-05-26 18:13 - 00000000 ____D C:\Users\James\Documents\Rockstar Games
2015-05-26 18:13 - 2015-05-26 18:13 - 00000000 ____D C:\Users\James\AppData\Local\Rockstar Games
2015-05-26 18:12 - 2015-06-09 00:41 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-05-26 18:11 - 2015-06-09 00:41 - 00000000 ____D C:\Program Files\Rockstar Games
2015-05-26 17:34 - 2015-05-26 17:34 - 00008340 _____ C:\Users\James\Downloads\Chairs-1.4.jar
2015-05-26 15:49 - 2015-05-26 15:49 - 00000000 ____D C:\Users\James\Documents\DragonsNest
2015-05-26 15:43 - 2015-05-29 13:03 - 00000000 ____D C:\Users\James\AppData\Roaming\FileZilla
2015-05-26 15:43 - 2015-05-26 15:44 - 06471520 _____ (Tim Kosse) C:\Users\James\Downloads\FileZilla_3.11.0.1_win64-setup.exe
2015-05-26 15:43 - 2015-05-26 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-05-26 15:43 - 2015-05-26 15:43 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2015-05-26 15:34 - 2015-05-26 15:50 - 00000000 ____D C:\Users\James\AppData\Roaming\Notepad++
2015-05-26 15:34 - 2015-05-26 15:34 - 00000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-05-26 15:34 - 2015-05-26 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-05-26 15:34 - 2015-05-26 15:34 - 00000000 ____D C:\Program Files (x86)\Notepad++
2015-05-26 15:33 - 2015-05-26 15:33 - 06944290 _____ C:\Users\James\Downloads\npp.6.7.8.2.Installer.exe
2015-05-26 02:54 - 2015-06-09 20:15 - 00000245 _____ C:\Users\James\Documents\reddraggon acc 1.txt
2015-05-23 21:35 - 2015-05-23 21:35 - 00000000 ____D C:\Users\James\Documents\File Connor Sent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-22 23:10 - 2015-04-22 06:08 - 00000000 ____D C:\Users\James\AppData\Roaming\Skype
2015-06-22 23:00 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-22 22:49 - 2015-04-22 06:35 - 00000000 ____D C:\Users\James\AppData\Roaming\.minecraft
2015-06-22 22:28 - 2014-01-08 15:49 - 01851075 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-22 22:12 - 2015-04-22 05:44 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-22 21:57 - 2015-04-22 05:59 - 00317222 _____ C:\Users\James\AppData\Local\BTServer.log
2015-06-22 21:57 - 2013-08-22 09:46 - 00072615 _____ C:\WINDOWS\setupact.log
2015-06-22 21:22 - 2015-04-23 18:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-06-22 21:13 - 2015-04-23 18:36 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-06-22 19:38 - 2015-04-22 06:04 - 00000000 __RDO C:\Users\James\SkyDrive
2015-06-22 17:40 - 2015-04-22 06:27 - 00003938 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6BB34B15-C1C0-4ECE-848B-9568B468DCC4}
2015-06-22 11:59 - 2015-04-22 06:06 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-179559099-3881319558-2611235183-1002
2015-06-22 11:18 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-21 12:25 - 2013-08-22 10:36 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-06-21 12:25 - 2013-08-22 08:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-06-21 12:15 - 2015-04-22 06:16 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-21 12:15 - 2013-12-13 01:49 - 00000025 ___SH C:\WINDOWS\SysWOW64\ReadTag.ini
2015-06-21 12:15 - 2013-12-13 01:19 - 00016448 _____ C:\WINDOWS\PFRO.log
2015-06-21 12:15 - 2013-08-22 09:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-21 12:15 - 2013-08-22 09:44 - 00422800 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-21 12:14 - 2013-08-22 08:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-06-21 01:24 - 2015-04-22 05:59 - 00000000 ____D C:\Users\James\AppData\Roaming\Adobe
2015-06-21 01:23 - 2015-05-01 23:01 - 00000000 ____D C:\Users\James\AppData\Local\Adobe
2015-06-20 20:48 - 2013-08-22 10:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-20 20:47 - 2013-12-13 02:16 - 00302136 _____ C:\WINDOWS\DirectX.log
2015-06-20 20:24 - 2015-04-26 17:29 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-06-20 20:13 - 2015-04-23 19:27 - 00000000 ____D C:\Users\James\AppData\Roaming\Audacity
2015-06-18 23:42 - 2015-05-10 20:23 - 00000000 ____D C:\Users\James\AppData\Roaming\BitTorrent
2015-06-18 22:28 - 2015-04-22 05:59 - 00000000 ____D C:\Users\James\AppData\Local\VirtualStore
2015-06-18 18:06 - 2015-05-11 18:56 - 00000000 ____D C:\Users\James\AppData\Roaming\vlc
2015-06-17 23:22 - 2015-04-22 16:42 - 00000000 ____D C:\Users\James\AppData\Local\Spotify
2015-06-17 23:12 - 2015-04-22 16:41 - 00000000 ____D C:\Users\James\AppData\Roaming\Spotify
2015-06-16 20:32 - 2015-04-26 16:22 - 00000183 _____ C:\Users\James\Downloads\eula.txt
2015-06-16 13:03 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-06-16 11:53 - 2015-04-22 06:07 - 00000000 ____D C:\ProgramData\Skype
2015-06-13 18:36 - 2015-04-22 06:17 - 00005347 _____ C:\WINDOWS\system32\lvcoinst.log
2015-06-12 11:51 - 2015-04-22 06:15 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-11 22:11 - 2015-04-22 06:31 - 00000000 ____D C:\Users\James\AppData\Local\NVIDIA Corporation
2015-06-11 21:42 - 2015-04-22 05:59 - 00000000 ____D C:\Users\James
2015-06-10 15:27 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-10 11:51 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-10 11:47 - 2015-04-27 16:48 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-10 11:47 - 2015-04-27 16:48 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-10 11:47 - 2013-08-22 10:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-09 16:42 - 2013-08-22 10:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-09 15:45 - 2015-04-24 18:26 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-09 15:42 - 2015-04-24 18:26 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-07 12:55 - 2015-04-22 06:02 - 00000000 ____D C:\ProgramData\Oracle
2015-06-06 13:07 - 2013-12-13 01:29 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-06 10:38 - 2015-04-22 05:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-03 16:04 - 2015-04-22 06:31 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-06-03 16:04 - 2015-04-22 06:31 - 01571696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-06-03 16:04 - 2015-04-22 06:31 - 01320304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-06-03 16:04 - 2015-04-22 06:31 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-06-03 11:18 - 2013-08-22 10:38 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-03 11:18 - 2013-08-22 10:38 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-01 19:56 - 2015-04-22 06:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-05-30 21:56 - 2015-04-22 06:36 - 00000000 ____D C:\Users\James\AppData\Roaming\NVIDIA
2015-05-30 19:36 - 2013-08-22 14:11 - 00000000 ____D C:\WINDOWS\ShellNew
2015-05-30 04:44 - 2015-04-30 17:21 - 00000000 ____D C:\WINDOWS\Minidump
2015-05-30 04:44 - 2015-04-30 17:20 - 668033546 _____ C:\WINDOWS\MEMORY.DMP
2015-05-28 18:58 - 2014-01-08 15:49 - 00000000 ____D C:\ProgramData\Package Cache
2015-05-28 02:04 - 2015-02-20 02:18 - 17486856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 15864064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 14987528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 12852152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 03379680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 02986392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-05-28 02:04 - 2015-02-20 02:18 - 00030966 _____ C:\WINDOWS\system32\nvinfo.pb
2015-05-27 23:15 - 2015-04-22 06:16 - 06872904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-05-27 23:15 - 2015-04-22 06:16 - 03491984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-05-27 23:15 - 2015-04-22 06:16 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-05-27 23:15 - 2015-04-22 06:16 - 00937288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-05-27 23:15 - 2015-04-22 06:16 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-05-27 23:15 - 2015-04-22 06:16 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-05-27 19:58 - 2015-04-22 06:08 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-05-27 05:48 - 2015-04-22 06:16 - 04408727 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-05-26 21:02 - 2015-04-27 16:15 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2015-05-26 21:02 - 2015-04-27 16:15 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2015-05-26 21:02 - 2015-04-27 16:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2015-05-26 21:02 - 2015-04-27 16:12 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2015-05-26 21:02 - 2013-08-22 06:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-05-26 21:02 - 2013-08-22 06:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2015-05-26 21:02 - 2013-08-22 06:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2015-05-26 21:02 - 2013-08-22 06:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2015-05-26 21:02 - 2013-08-22 06:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2015-05-26 21:02 - 2013-08-21 22:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2015-05-26 21:02 - 2013-08-21 22:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2015-05-26 21:02 - 2013-08-21 22:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2015-05-26 21:02 - 2013-08-21 22:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2015-05-26 21:02 - 2013-08-21 22:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll

==================== Files in the root of some directories =======

2015-06-09 00:45 - 2015-06-18 15:10 - 0000132 _____ () C:\Users\James\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-04-22 05:59 - 2015-06-22 21:57 - 0317222 _____ () C:\Users\James\AppData\Local\BTServer.log
2015-06-09 00:34 - 2015-06-09 00:37 - 0003584 _____ () C:\Users\James\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-27 15:30 - 2015-05-27 15:30 - 0007597 _____ () C:\Users\James\AppData\Local\Resmon.ResmonCfg
2013-12-13 01:27 - 2013-12-13 01:27 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\James\AppData\Local\Temp\0Kraken71ChromaDevProps.dll
C:\Users\James\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\James\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\James\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\James\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\James\AppData\Local\Temp\nvStInst.exe
C:\Users\James\AppData\Local\Temp\obexpf.dll
C:\Users\James\AppData\Local\Temp\sonarinst.exe
C:\Users\James\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-15 13:23

==================== End of log ============================