Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016
Ran by [removed] (administrator) on ALEX-NEWPC (22-04-2016 02:02:59)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\SysWOW64\ASGT.exe
() C:\Program Files (x86)\ASUS\WLAN Card Utilities\ASWLCCSVC.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe
(Ryan Conrad) C:\Program Files\Droid Explorer\DroidExplorer.Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(M-Audio) C:\Program Files (x86)\M-Audio\M-Track\AudioDevMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Users\Alex\AppData\Local\Android\sdk\platform-tools\adb.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Visicom Media Inc.) C:\Program Files (x86)\ManyCam\ManyCam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe
(Flux Software LLC) C:\Users\Alex\AppData\Local\FluxSoftware\Flux\flux.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Naga\RazerNagaSysTray.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(ASUSTeK COMPUTER INC.) C:\Program Files (x86)\ASUS\WLAN Card Utilities\Center.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(NVIDIA Corporation) C:\Users\Alex\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\WizMouse\WizMouse.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Cm108Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Control Center] => C:\Program Files (x86)\ASUS\WLAN Card Utilities\CenterAgent.exe [544256 2009-05-21] ()
HKLM-x32\...\Run: [Razer Naga Driver] => C:\Program Files (x86)\Razer\Naga\RazerNagaSysTray.exe [953744 2011-02-17] (Razer USA Ltd)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [M-Audio Panel Launcher] => C:\Program Files (x86)\M-Audio\M-Track\MAPanel.exe [1190096 2013-04-24] (M-Audio)
HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [11753792 2015-05-22] (Corsair Components, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8718176 2014-06-18] (Binary Fortress Software)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [ManyCam] => C:\Program Files (x86)\ManyCam\ManyCam.exe [8473600 2014-12-20] (Visicom Media Inc.)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [HP Photosmart 5510 series (NET)] => C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [f.lux] => C:\Users\Alex\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\...\Run: [Steam] => F:\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2756856 2014-10-24] (ASUS)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [153208 2016-02-09] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-01-18] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-01-18] (IvoSoft)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk [2013-12-27]
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dual Smart Solution.lnk [2014-11-09]
ShortcutTarget: Dual Smart Solution.lnk -> C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2014-12-09]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 [removed]
Tcpip\..\Interfaces\{3718CC39-05AE-421C-8648-707878F25A1A}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{3718CC39-05AE-421C-8648-707878F25A1A}: [DhcpNameServer] 192.168.1.254 [removed]

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2697174061-1234941919-3697644810-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-01-18] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-07] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-07] (Oracle Corporation)
BHO: ExplorerWatcher Class -> {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} -> C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23] (EJIE Technology)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-01-18] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-07] (Oracle Corporation)
BHO-x32: IEExtension.VDownloaderBHO -> {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-20] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-07] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-01-18] (IvoSoft)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-01-18] (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\skay6px9.default
FF DefaultSearchEngine.US: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll [2015-01-30] ()
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-07] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll [2015-01-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-04] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2697174061-1234941919-3697644810-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-19] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2697174061-1234941919-3697644810-1000: vitzo.com/VDownloader -> C:\Program Files\VDownloader\Addons\npVDownloader.dll [No File]
FF Extension: GoSavee - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\skay6px9.default\Extensions\[removed] [2014-10-16] [not signed]
FF Extension: YOoutubeAddBlockee - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\skay6px9.default\Extensions\[removed] [2014-10-16] [not signed]
FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files\VDownloader\Addons\FireFox => not found
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-01-03] [not signed]

Chrome: 
=======
CHR HomePage: Default -> hxxp://websearch.allsearches.info/?pid=2130&r=2014/10/06&hid=588575603434042575&lg=EN&cc=CA&unqvl=64
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26]
CHR Extension: (YouTweak for YouTube™ - Subscription Manager) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgpigllcihcpkbokdnmpkjobnebflgh [2016-01-03]
CHR Extension: (uBlock Origin) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-04-16]
CHR Extension: (Adblock for Youtube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-03-10]
CHR Extension: (Empty New Tab Page) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjamkmjmigaoobjbekmfgabipmfilij [2016-04-21]
CHR Extension: (Goodbye Backspace!) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhpbnjegaecdghghnmjccjpeojbbof [2015-09-15]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-04-16]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-20]
CHR Extension: (Eye Dropper) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2015-04-06]
CHR Extension: (GoSavee) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjfkbllaaglbghemggjdghcmlbkkpfl [2014-10-06]
CHR Extension: (no most visited) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipbodnfjeoebegmlpdfccmmpenaagdaa [2015-03-28]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2016-03-20]
CHR Extension: (Black carbon + silver metal) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lodhggoaglindpoejnjldimdlikkphph [2015-06-20]
CHR Extension: (SmoothScroll) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbokbjkabcmbfdlbddjidfmibcpneigj [2016-04-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-16]
CHR Extension: (No Smooth Scrolling) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\oikddacoldignalphkgeppnpalkmkgbo [2015-10-11]
CHR Extension: (Enhanced Steam) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2016-04-16]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-20]
CHR Extension: (Brushed) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2015-06-20]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-20]
CHR Extension: (Adblock for Youtube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-06-20]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-06-20]
CHR Extension: (Eye Dropper) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2015-06-20]
CHR Extension: (GoSavee) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\igjfkbllaaglbghemggjdghcmlbkkpfl [2015-06-20]
CHR Extension: (no most visited) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ipbodnfjeoebegmlpdfccmmpenaagdaa [2015-06-20]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2015-06-20]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-20]
CHR Extension: (SmoothScroll) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nbokbjkabcmbfdlbddjidfmibcpneigj [2015-06-20]
CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-20]
CHR Extension: (Enhanced Steam) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2015-06-20]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy
CHR Extension: (Google Slides) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-20]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-20]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-20]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-20]
CHR Extension: (Google Search) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-20]
CHR Extension: (Google Sheets) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-20]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-20]
CHR Extension: (Google Wallet) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-20]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2015-06-20]
CHR Extension: (Gmail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Profile 1 - Copy\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-20]
CHR HKLM\...\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx <not found>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 ASWLCCSvc; C:\Program Files (x86)\ASUS\WLAN Card Utilities\ASWLCCSVC.exe [172032 2009-05-21] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-04-18] () [File not signed]
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
S3 celavimushost; F:\CSGO Client Beta\CelavimusClientHelper.exe [123608 2015-07-01] (altPUG LLC)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\50.0.2661.22\remoting_host.exe [69016 2016-03-08] (Google Inc.)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [5179760 2014-06-18] (Binary Fortress Software)
R2 DroidExplorerService; C:\Program Files\Droid Explorer\DroidExplorer.Service.exe [255488 2015-03-09] (Ryan Conrad) [File not signed]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [243984 2016-03-13] (EasyAntiCheat Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-16] (NVIDIA Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MTrackAudioDevMon; C:\Program Files (x86)\M-Audio\M-Track\AudioDevMon.exe [546816 2013-04-24] (M-Audio) [File not signed]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5267776 2014-01-22] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-16] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2016-01-29] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-06-15] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
S3 wampapache64; F:\WAMP\bin\apache\apache2.4.9\bin\httpd.exe [24576 2014-05-01] (Apache Software Foundation) [File not signed]
S3 wampmysqld64; F:\WAMP\bin\mysql\mysql5.6.17\bin\mysqld.exe [12942848 2014-05-01] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
S4 70e6ca8c; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll",ENT

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 busenum; C:\Windows\System32\DRIVERS\SteelBus64.sys [140800 2013-10-30] (SteelSeries Corporation) [File not signed]
R3 CorsairVBusDriver; C:\Windows\System32\DRIVERS\CorsairVBusDriver.sys [47840 2015-05-18] (Corsair)
R3 CorsairVHidDriver; C:\Windows\System32\DRIVERS\CorsairVHidDriver.sys [21728 2015-05-18] (Corsair)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LGDDCDevice; C:\Windows\SysWOW64\LGI2CDriver.sys [16384 2012-10-17] (LG Soft India) [File not signed]
S3 LGII2CDevice; C:\Windows\SysWOW64\LGPII2CDriver.sys [10752 2012-12-27] (LG Soft India) [File not signed]
S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
S3 MTRACK; C:\Windows\System32\DRIVERS\MAudioMTrack.sys [471040 2013-04-24] (M-Audio) [File not signed]
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-17] (NVIDIA Corporation)
S3 OCUSBVID; C:\Windows\System32\DRIVERS\OCUSBVID.sys [62072 2015-05-13] (Oculus VR, LLC)
R3 PCASp50; C:\Windows\System32\Drivers\PCASp50.sys [45752 2009-10-28] (Printing Communications Assoc., Inc. (PCAUSA))
R3 PCASp50; C:\Windows\SysWOW64\Drivers\PCASp50.sys [45752 2009-10-28] (Printing Communications Assoc., Inc. (PCAUSA))
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2014-08-29] (The OpenVPN Project)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1047144 2011-09-20] (Realtek Semiconductor Corporation                           )
S3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [126464 2010-12-16] (Razer USA Ltd)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-04-20] ()
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz138; \??\C:\Users\Alex\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X]
S0 febyo; System32\drivers\qbuqpho.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-22 01:55 - 2016-04-22 01:58 - 00000000 ____D C:\Program Files (x86)\Free Window Registry Repair
2016-04-22 01:55 - 2016-04-22 01:55 - 00805841 _____ C:\Users\Alex\Downloads\RegpairSetup.exe
2016-04-22 01:55 - 2016-04-22 01:55 - 00001035 _____ C:\Users\Alex\Desktop\Free Window Registry Repair.lnk
2016-04-22 01:55 - 2016-04-22 01:55 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2016-04-22 01:55 - 2016-04-22 01:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2016-04-22 01:49 - 2016-04-22 01:50 - 00061054 _____ C:\Users\Alex\Desktop\MTB.txt
2016-04-22 01:49 - 2016-04-22 01:49 - 00891392 _____ (Farbar) C:\Users\Alex\Desktop\MiniToolBox.exe
2016-04-22 01:43 - 2016-04-22 01:53 - 00000400 __RSH C:\ProgramData\ntuser.pol
2016-04-22 01:43 - 2013-07-02 17:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2016-04-22 01:41 - 2016-04-22 01:41 - 01378217 _____ C:\Users\Alex\Downloads\comintrep_2103.zip
2016-04-22 01:41 - 2016-04-22 01:41 - 00000000 ____D C:\Users\Alex\Desktop\comintrep_2103
2016-04-22 01:37 - 2016-04-22 01:38 - 05660069 _____ (Swearware) C:\Users\Alex\Downloads\ComboFix (1).exe
2016-04-22 01:35 - 2016-04-22 01:35 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-04-22 01:19 - 2016-04-22 01:35 - 00000000 ____D C:\ComboFix
2016-04-22 01:19 - 2016-04-22 01:33 - 00000000 ____D C:\Windows\erdnt
2016-04-22 01:19 - 2016-04-22 01:29 - 00000000 ____D C:\Qoobox
2016-04-22 01:19 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe
2016-04-22 01:19 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe
2016-04-22 01:19 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-04-22 01:19 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-04-22 01:19 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-04-22 01:19 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe
2016-04-22 01:19 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe
2016-04-22 01:19 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe
2016-04-22 01:18 - 2016-04-22 01:18 - 05660069 ____R (Swearware) C:\Users\Alex\Desktop\ComboFix.exe
2016-04-22 01:18 - 2016-04-22 01:18 - 05660069 _____ (Swearware) C:\Users\Alex\Downloads\ComboFix.exe
2016-04-22 01:15 - 2016-04-22 01:15 - 00121638 _____ C:\Users\Alex\Downloads\MicrosoftEasyFix20140.mini.diagcab
2016-04-22 01:11 - 2016-04-22 01:11 - 00061984 _____ C:\Users\Alex\Desktop\cc_20160422_011140.reg
2016-04-22 01:10 - 2016-04-22 01:11 - 212729024 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup.exe
2016-04-22 01:10 - 2016-04-22 01:11 - 212729024 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup.exe
2016-04-22 01:08 - 2016-04-22 01:08 - 05066104 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online_cnet2.exe
2016-04-22 01:08 - 2016-04-22 01:08 - 05066104 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup_online_cnet2.exe
2016-04-22 01:08 - 2016-04-22 01:08 - 05066104 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup_online_cnet2 (2).exe
2016-04-22 01:08 - 2016-04-22 01:08 - 05066104 _____ (AVAST Software) C:\Users\Alex\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe
2016-04-22 01:08 - 2016-04-22 01:08 - 00000000 ____D C:\ProgramData\AVAST Software
2016-04-22 01:01 - 2016-04-22 01:01 - 586330656 _____ C:\Users\Alex\Desktop\backup.reg
2016-04-22 00:50 - 2016-04-22 01:34 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts.bak
2016-04-22 00:50 - 2016-04-22 00:50 - 00991232 _____ C:\Users\Alex\Downloads\MicrosoftFixit50267.msi
2016-04-22 00:45 - 2016-04-22 00:45 - 00000000 __SHD C:\Users\Alex\AppData\LocalLow\EmieUserList
2016-04-22 00:45 - 2016-04-22 00:45 - 00000000 __SHD C:\Users\Alex\AppData\LocalLow\EmieSiteList
2016-04-22 00:45 - 2016-04-22 00:45 - 00000000 __SHD C:\Users\Alex\AppData\LocalLow\EmieBrowserModeList
2016-04-21 18:44 - 2016-04-21 18:44 - 01424328 _____ (Microsoft Corporation) C:\Users\Alex\Downloads\NDP461-KB3102438-Web.exe
2016-04-21 18:43 - 2016-04-21 18:43 - 11840839 _____ C:\Users\Alex\Downloads\Windows6.1-KB2670838-x64.msu
2016-04-21 18:37 - 2016-04-21 18:37 - 00000593 _____ C:\Users\Alex\Desktop\nativelog.txt
2016-04-21 18:30 - 2016-04-21 18:30 - 00000515 _____ C:\Users\Public\Desktop\Steam.lnk
2016-04-21 18:30 - 2016-04-21 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-04-21 18:19 - 2016-04-22 02:02 - 00035463 _____ C:\Users\Alex\Desktop\FRST.txt
2016-04-21 18:17 - 2016-04-22 02:02 - 00000000 ____D C:\FRST
2016-04-21 18:17 - 2016-04-21 18:17 - 02375680 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-04-21 18:17 - 2016-04-21 18:17 - 02375680 _____ (Farbar) C:\Users\Alex\Desktop\FRST64.exe
2016-04-21 18:09 - 2016-04-21 18:09 - 01380712 _____ C:\Users\Alex\Downloads\SteamSetup.exe
2016-04-21 16:06 - 2014-05-29 15:56 - 00940760 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-04-21 16:06 - 2014-05-29 15:56 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-04-20 04:52 - 2016-04-20 04:52 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043 (4).exe
2016-04-20 04:47 - 2016-04-20 04:47 - 00002630 _____ C:\Users\Alex\Desktop\FSS.txt
2016-04-20 04:35 - 2016-04-20 04:35 - 19764296 _____ C:\Users\Alex\Downloads\RogueKiller.exe
2016-04-20 04:35 - 2016-04-20 04:35 - 00899584 _____ (Farbar) C:\Users\Alex\Downloads\FSS.exe
2016-04-20 04:34 - 2016-04-20 04:34 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043 (3).exe
2016-04-20 04:33 - 2016-04-20 04:34 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043 (2).exe
2016-04-20 04:32 - 2016-04-20 04:32 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Alex\Downloads\mbam-clean-2.1.1.1001.exe
2016-04-20 04:28 - 2016-04-20 04:28 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043 (1).exe
2016-04-20 04:28 - 2016-04-20 04:28 - 03683904 _____ C:\Users\Alex\Downloads\AdwCleaner (1).exe
2016-04-20 04:28 - 2016-04-20 04:28 - 01309184 _____ C:\Users\Alex\Downloads\zoek.exe
2016-04-20 04:28 - 2016-04-20 04:28 - 00000000 ____D C:\zoek_backup
2016-04-20 04:24 - 2016-04-20 04:24 - 03683904 _____ C:\Users\Alex\Downloads\AdwCleaner.exe
2016-04-20 04:24 - 2016-04-20 04:24 - 00000000 ____D C:\AdwCleaner
2016-04-20 04:23 - 2016-04-20 04:23 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-20 04:19 - 2016-04-20 04:19 - 14758443 _____ (Deluge Team) C:\Users\Alex\Downloads\deluge-1.3.12-1-win32-py2.6-setup.exe
2016-04-20 04:15 - 2016-04-20 04:15 - 00002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-20 03:59 - 2016-04-22 01:15 - 00000000 ____D C:\Users\Alex\AppData\Local\ElevatedDiagnostics
2016-04-20 03:37 - 2016-04-22 00:57 - 01139972 _____ C:\Windows\ntbtlog.txt
2016-04-20 03:35 - 2016-04-20 03:35 - 05223128 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-20 03:34 - 2016-04-20 03:34 - 00000000 ____D C:\Windows\system32\faau
2016-04-20 03:23 - 2016-04-20 03:49 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Tueasjey
2016-04-20 03:23 - 2016-04-20 03:23 - 00003332 _____ C:\Windows\System32\Tasks\Redywo
2016-04-20 03:23 - 2016-04-20 03:23 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Company
2016-04-20 03:23 - 2016-04-20 03:23 - 00000000 ____D C:\Users\Alex\AppData\Local\Tempfolder
2016-04-20 03:23 - 2016-04-20 03:23 - 00000000 ____D C:\uninst
2016-04-20 03:21 - 2016-04-20 03:21 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-04-20 03:19 - 2016-04-20 03:19 - 00597304 _____ C:\Users\Alex\Downloads\flux-setup.exe
2016-04-20 03:19 - 2016-04-20 03:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2016-04-20 03:19 - 2016-04-20 03:19 - 00000000 ____D C:\Users\Alex\AppData\Local\FluxSoftware
2016-04-20 03:18 - 2016-04-20 03:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-04-20 03:17 - 2016-04-20 03:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-20 03:17 - 2016-04-20 03:17 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-20 03:15 - 2016-04-20 03:15 - 00000000 ___RD C:\MSOCache
2016-04-20 03:14 - 2016-04-20 03:15 - 742877184 _____ C:\Users\Alex\Downloads\X18-55138.ISO
2016-04-20 03:06 - 2016-04-20 03:07 - 55807440 _____ C:\Users\Alex\Downloads\MS-Word-2013-ISO-and-Activator.zip
2016-04-20 03:04 - 2016-04-20 03:48 - 00000000 ____D C:\Users\Alex\Desktop\Activator
2016-04-20 03:04 - 2016-04-20 03:04 - 00024257 _____ C:\Windows\unins001.dat
2016-04-20 03:04 - 2016-04-20 03:04 - 00000000 ____D C:\Users\Alex\AppData\Local\MSfree Inc
2016-04-20 03:04 - 2016-04-20 03:03 - 01243391 _____ C:\Windows\unins001.exe
2016-04-17 23:59 - 2016-04-18 00:00 - 00000000 ___RH C:\Users\Alex\random.dat
2016-04-17 20:28 - 2016-04-17 20:28 - 06159064 _____ C:\Users\Alex\Desktop\osbot 2.4.52.jar
2016-04-17 20:28 - 2016-04-17 20:28 - 00000000 ____D C:\Users\Alex\Desktop\old_osbot_jars
2016-04-17 19:08 - 2016-04-17 19:09 - 87628649 _____ C:\Users\Alex\Downloads\The-Apprentices-Dominion_01-03.pdf
2016-04-17 19:06 - 2016-04-17 19:07 - 30121540 _____ C:\Users\Alex\Downloads\Maya-and-June_01.pdf
2016-04-17 18:08 - 2016-04-17 18:08 - 00000218 _____ C:\Users\Alex\AppData\Local\recently-used.xbel
2016-04-17 03:08 - 2016-04-17 03:08 - 00021489 _____ C:\Users\Alex\Downloads\se7en-1995-1080p.torrent
2016-04-15 20:06 - 2016-04-15 20:06 - 00066478 _____ C:\Users\Alex\Desktop\SKMBT_C22416041515570 (Signed).pdf
2016-04-15 16:38 - 2016-04-15 16:38 - 00054771 _____ C:\Users\Alex\Downloads\SKMBT_C22416041515570.pdf
2016-04-14 19:53 - 2016-04-14 19:53 - 00000000 ____D C:\Users\Alex\AppData\Roaming\de_stroyed
2016-04-14 19:43 - 2016-04-14 19:43 - 00160137 _____ C:\Users\Alex\Downloads\de_stroyer_mpgh.net.zip
2016-04-13 13:56 - 2014-09-17 17:32 - 00070635 _____ C:\Users\Alex\Desktop\Reference Letter.pdf
2016-04-13 13:54 - 2016-04-13 13:54 - 00006755 _____ C:\Users\Alex\Desktop\References.pdf
2016-04-11 21:30 - 2016-04-11 21:30 - 00007632 _____ C:\Users\Alex\Downloads\runescape_small.zip
2016-04-11 21:03 - 2016-04-11 21:03 - 22529849 _____ C:\Users\Alex\Downloads\Green-Goddess-Inn_04.pdf
2016-04-11 21:03 - 2016-04-11 21:03 - 17251460 _____ C:\Users\Alex\Downloads\Green-Goddess-Inn_03.pdf
2016-04-11 21:00 - 2016-04-11 21:00 - 25314623 _____ C:\Users\Alex\Downloads\Green-Goddess-Inn_1-2.pdf
2016-04-11 20:55 - 2016-04-11 20:55 - 48979328 _____ C:\Users\Alex\Downloads\DownInMexico_1-3.pdf
2016-04-11 20:52 - 2016-04-11 20:52 - 20305474 _____ C:\Users\Alex\Downloads\Giantess-Kiki_01.pdf
2016-04-11 20:46 - 2016-04-11 20:46 - 37317665 _____ C:\Users\Alex\Downloads\Darlsborough-University_04.pdf
2016-04-11 20:46 - 2016-04-11 20:46 - 18498065 _____ C:\Users\Alex\Downloads\Darlsborough-University_03 (1).pdf
2016-04-11 20:46 - 2016-04-11 20:46 - 14738898 _____ C:\Users\Alex\Downloads\Darlsborough-University_02 (1).pdf
2016-04-09 13:55 - 2016-04-09 13:55 - 00026514 _____ C:\Users\Alex\Downloads\6C0F14D1E0DF88FAC63CE6B049E0FDEFE507E4F0.torrent
2016-04-09 00:17 - 2016-04-09 00:18 - 30304854 _____ C:\Users\Alex\Downloads\Dont-Eat-Me_02.pdf
2016-04-09 00:12 - 2016-04-09 00:12 - 14748597 _____ C:\Users\Alex\Downloads\DontEatMe01.pdf
2016-04-09 00:11 - 2016-04-09 00:12 - 21708268 _____ C:\Users\Alex\Downloads\PocketCharm-1.pdf
2016-04-09 00:02 - 2016-04-09 00:02 - 28799854 _____ C:\Users\Alex\Downloads\Size-Swingers_01.pdf
2016-04-07 22:57 - 2016-04-07 22:57 - 18671681 _____ C:\Users\Alex\Downloads\Honey-Trap_01.pdf
2016-04-07 22:50 - 2016-04-07 22:51 - 66967254 _____ C:\Users\Alex\Downloads\Bitter-Dreams_01-02.pdf
2016-04-07 22:49 - 2016-04-07 22:49 - 31057019 _____ C:\Users\Alex\Downloads\The-Next-Dimension_02.pdf
2016-04-07 22:48 - 2016-04-07 22:48 - 32072545 _____ C:\Users\Alex\Downloads\The-Outgrowing_05.pdf
2016-04-06 19:37 - 2016-04-06 19:37 - 00000000 ____H C:\Users\Alex\Documents\Default.rdp
2016-04-06 19:36 - 2016-04-06 19:36 - 08830152 _____ (Famatech Corp. ) C:\Users\Alex\Downloads\pscan24.exe
2016-04-06 19:36 - 2016-04-06 19:36 - 00000000 ____D C:\Users\Alex\AppData\Local\Advanced Port Scanner 2
2016-04-06 19:29 - 2016-04-06 19:29 - 26426084 _____ (Insecure.org) C:\Users\Alex\Downloads\nmap-7.12-setup.exe
2016-04-03 22:28 - 2016-04-03 22:28 - 31348061 _____ C:\Users\Alex\Downloads\Amazon-Hotel_04.pdf
2016-04-03 22:28 - 2016-04-03 22:28 - 27200519 _____ C:\Users\Alex\Downloads\AMAZON-HOTEL-3.pdf
2016-04-03 22:28 - 2016-04-03 22:28 - 15952679 _____ C:\Users\Alex\Downloads\Amazon-Hotel-1.pdf
2016-04-03 22:28 - 2016-04-03 22:28 - 15190847 _____ C:\Users\Alex\Downloads\AMAZON-HOTEL-2.pdf
2016-04-03 22:25 - 2016-04-03 22:25 - 28525695 _____ C:\Users\Alex\Downloads\Scanner-1.pdf
2016-04-03 22:23 - 2016-04-03 22:23 - 30324482 _____ C:\Users\Alex\Downloads\Mandy-I-Shrunk-Myself_01.pdf
2016-04-03 22:20 - 2016-04-03 22:20 - 30859207 _____ C:\Users\Alex\Downloads\Back-to-Earth_01.pdf
2016-04-03 04:52 - 2016-04-03 04:52 - 37036065 _____ C:\Users\Alex\Downloads\Lofty-Leather_01.pdf
2016-04-03 04:50 - 2016-04-03 04:50 - 36622511 _____ C:\Users\Alex\Downloads\The-Next-Dimension_01.pdf
2016-04-03 04:48 - 2016-04-03 04:48 - 11964773 _____ C:\Users\Alex\Downloads\My-Glasses_01.pdf
2016-04-03 04:44 - 2016-04-03 04:44 - 18498065 _____ C:\Users\Alex\Downloads\Darlsborough-University_03.pdf
2016-04-03 04:40 - 2016-04-03 04:40 - 14738898 _____ C:\Users\Alex\Downloads\Darlsborough-University_02.pdf
2016-04-03 04:37 - 2016-04-03 04:37 - 17861701 _____ C:\Users\Alex\Downloads\Darlsborough-University_01.pdf
2016-04-03 04:35 - 2016-04-03 04:35 - 18537253 _____ C:\Users\Alex\Downloads\Macrostania.pdf
2016-04-03 04:26 - 2016-04-03 04:27 - 70848750 _____ C:\Users\Alex\Downloads\A-Secretarys-Tale_01-03.pdf
2016-04-03 04:26 - 2016-04-03 04:26 - 53457646 _____ C:\Users\Alex\Downloads\Growing-Science_01-04.pdf
2016-04-03 04:19 - 2016-04-03 04:20 - 40761547 _____ C:\Users\Alex\Downloads\Spoils-of-War_01.pdf
2016-04-03 04:19 - 2016-04-03 04:19 - 39334324 _____ C:\Users\Alex\Downloads\Spoils-of-War_01.zip
2016-04-02 17:53 - 2016-04-02 17:54 - 106254994 _____ C:\Users\Alex\Downloads\A-Weekend-Alone_01-07.pdf
2016-04-02 17:40 - 2016-04-02 17:40 - 00011308 _____ C:\Users\Alex\Downloads\BFFB19EAB360A991B9C45381F89E98D1081B1310.torrent
2016-04-02 04:44 - 2016-04-02 04:44 - 00013472 _____ C:\Users\Alex\Downloads\Giantess+Fan+-+Sub+Human+Resources+1-2+%2B+My+GlassesReport.torrent
2016-04-02 00:18 - 2016-04-02 00:18 - 00003092 _____ C:\Windows\System32\Tasks\{4C03DDAB-BC5E-40A9-A1D0-C49F3A21B37D}
2016-04-02 00:13 - 2016-04-02 00:13 - 01270466 _____ C:\Users\Alex\Downloads\ProcessExplorer.zip
2016-04-01 21:25 - 2016-04-01 21:25 - 00880432 _____ C:\Users\Alex\Downloads\OSBuddy (2).exe
2016-04-01 21:25 - 2016-04-01 21:25 - 00880432 _____ C:\Users\Alex\Desktop\OSBuddy.exe
2016-03-30 19:39 - 2016-03-30 19:40 - 123835025 _____ C:\Users\Alex\Downloads\Notorious B.I.G. Acapellas.zip
2016-03-30 18:21 - 2016-03-30 18:21 - 00023811 _____ C:\Users\Alex\Downloads\Alexander Clarke - CV.pdf
2016-03-28 15:10 - 2016-03-28 15:10 - 00149556 _____ C:\Users\Alex\Desktop\A00887548 - Transcript.pdf
2016-03-28 15:00 - 2016-03-28 15:00 - 00097017 _____ C:\Users\Alex\Desktop\A00887548 - Self-Assessment.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-22 02:00 - 2014-01-02 21:01 - 00000000 ____D C:\Users\Alex\AppData\Local\Adobe
2016-04-22 02:00 - 2013-12-27 16:55 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2016-04-22 01:59 - 2014-12-13 03:20 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-22 01:59 - 2014-08-21 18:15 - 00003308 _____ C:\Windows\System32\Tasks\WizMouse
2016-04-22 01:59 - 2014-03-26 18:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\ClassicShell
2016-04-22 01:59 - 2013-12-27 14:43 - 00000000 ____D C:\ProgramData\NVIDIA
2016-04-22 01:59 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-22 01:58 - 2009-07-13 21:45 - 00038352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-22 01:58 - 2009-07-13 21:45 - 00038352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-22 01:51 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF
2016-04-22 01:49 - 2009-07-13 22:13 - 00006470 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-22 01:48 - 2013-12-27 15:02 - 00000000 ____D C:\Program Files (x86)\Steam
2016-04-22 01:42 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\inf
2016-04-22 01:34 - 2009-07-13 19:34 - 00000215 _____ C:\Windows\system.ini
2016-04-22 01:23 - 2014-06-02 16:06 - 00000000 ____D C:\ProgramData\Temp
2016-04-22 01:19 - 2013-12-27 14:43 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-04-22 01:08 - 2014-12-13 03:20 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-21 21:04 - 2014-02-08 02:58 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-04-21 20:12 - 2014-01-02 21:01 - 00000000 ____D C:\ProgramData\Adobe
2016-04-21 18:58 - 2014-01-16 20:33 - 00007600 _____ C:\Users\Alex\AppData\Local\resmon.resmoncfg
2016-04-21 16:06 - 2013-12-26 22:46 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-04-20 05:20 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache
2016-04-20 04:47 - 2014-10-04 16:31 - 00000000 ____D C:\ProgramData\RogueKiller
2016-04-20 04:36 - 2014-10-04 16:31 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-04-20 04:23 - 2014-06-19 05:28 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps
2016-04-20 04:15 - 2013-12-27 14:48 - 00000000 ____D C:\Program Files (x86)\Google
2016-04-20 03:49 - 2014-12-20 20:45 - 00000000 ____D C:\Users\Alex\AppData\Local\ManyCam
2016-04-20 03:35 - 2015-03-06 21:26 - 00000000 ____D C:\Windows\en
2016-04-20 03:26 - 2014-10-04 23:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Winamp
2016-04-20 03:20 - 2016-03-21 16:52 - 00159448 _____ C:\Users\Alex\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-20 03:18 - 2014-01-26 14:32 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-20 03:17 - 2009-07-13 20:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-20 03:15 - 2014-03-10 21:26 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc
2016-04-20 03:11 - 2014-01-26 14:25 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-04-20 01:07 - 2015-12-16 22:22 - 00000043 _____ C:\Users\Alex\jagex_cl_oldschool_LIVE.dat
2016-04-19 13:59 - 2016-02-11 20:21 - 00000024 _____ C:\Users\Alex\7A1920D61156ABC05A60135AEFE8BC67.dat
2016-04-18 00:00 - 2013-12-26 22:01 - 00000000 ____D C:\Users\Alex
2016-04-17 03:09 - 2014-11-10 22:54 - 00000000 ____D C:\Users\Alex\AppData\Roaming\deluge
2016-04-14 19:45 - 2014-12-10 21:29 - 00000000 ____D C:\Users\Alex\Documents\CS GO
2016-04-07 01:57 - 2013-12-27 16:25 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Audacity
2016-04-06 19:29 - 2014-11-08 16:19 - 00000000 ____D C:\Program Files (x86)\Nmap
2016-04-06 10:18 - 2010-11-20 20:27 - 00453280 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-04 22:09 - 2014-05-06 00:14 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-04-04 22:09 - 2013-12-27 16:55 - 00000000 ____D C:\ProgramData\Skype
2016-04-01 23:54 - 2014-09-20 12:45 - 00000023 _____ C:\Users\Alex\jagexappletviewer.preferences
2016-04-01 22:37 - 2014-09-20 12:46 - 00000043 _____ C:\Users\Alex\jagex_cl_runescape_LIVE.dat
2016-03-27 16:10 - 2013-12-27 15:43 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Notepad++
2016-03-23 21:05 - 2015-09-12 17:59 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-03-23 20:49 - 2015-11-30 20:40 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2016-03-23 20:49 - 2015-09-12 17:59 - 00000000 ____D C:\Users\Alex\AppData\Local\Dropbox

==================== Files in the root of some directories =======

2014-04-17 18:00 - 2015-11-23 08:56 - 0000132 _____ () C:\Users\Alex\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-05-31 07:14 - 2014-05-31 07:21 - 0000132 _____ () C:\Users\Alex\AppData\Roaming\Adobe Targa Format CS6 Prefs
2014-10-04 15:49 - 2014-10-04 15:49 - 2150400 _____ (STROY BZ (9177)) C:\Users\Alex\AppData\Roaming\DownloadSetup_720qG.exe
2015-06-17 04:14 - 2015-06-17 04:22 - 0000600 _____ () C:\Users\Alex\AppData\Roaming\winscp.rnd
2014-10-31 23:35 - 2014-10-31 23:35 - 0003584 _____ () C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-05 22:56 - 2016-01-20 20:05 - 0000600 _____ () C:\Users\Alex\AppData\Local\PUTTY.RND
2016-04-17 18:08 - 2016-04-17 18:08 - 0000218 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2014-01-16 20:33 - 2016-04-21 18:58 - 0007600 _____ () C:\Users\Alex\AppData\Local\resmon.resmoncfg
2016-03-20 20:27 - 2016-03-20 20:27 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-03-08 15:20 - 2015-03-08 15:20 - 0005013 _____ () C:\ProgramData\wmzddnmb.cix

Files to move or delete:
====================
C:\Users\Alex\5D054E23FC426DDE47263D3A0774935B.dat
C:\Users\Alex\6E93341424C63B1E284AFA83959E1F3C.dat
C:\Users\Alex\7A1920D61156ABC05A60135AEFE8BC67.dat
C:\Users\Alex\D70DA6EDBAEC731A1347E8A1149C4A20.dat


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-18 05:10

==================== End of FRST.txt ============================