Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016
Ran by [removed] (administrator) on SNUG (23-04-2016 19:32:31)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Scarlet.Crush Productions) C:\Users\Caleb\Desktop\ScpServer\bin\ScpService.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(HP) C:\Windows\System32\HPSIsvc.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(FireStarter) C:\Program Files (x86)\PrtScr\PrtScr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Caleb\AppData\Local\Google\Update\GoogleUpdate.exe
(BitTorrent Inc.) C:\Users\Caleb\AppData\Roaming\uTorrent\uTorrent.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dropbox, Inc.) C:\Users\Caleb\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(BitTorrent Inc.) C:\Users\Caleb\AppData\Roaming\uTorrent\updates\3.4.6_42094\utorrentie.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe
(BitTorrent Inc.) C:\Users\Caleb\AppData\Roaming\uTorrent\updates\3.4.6_42094\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-13] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-22] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [55264 2016-03-10] (Malwarebytes)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-01] (Valve Corporation)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [PrtScr by FireStarter] => C:\Program Files (x86)\PrtScr\PrtScr.exe [1700864 2009-05-16] (FireStarter)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [GoogleChromeAutoLaunch_36965A81DD909523F7BF6769949A7463] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [Google Update] => C:\Users\Caleb\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [3931192 2016-04-05] (GOG.com)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [Dropbox Update] => C:\Users\Caleb\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [IPsoft] => regsvr32.exe C:\Users\Caleb\AppData\Local\IPsoft\pgpsutng.dll <===== ATTENTION
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [Otics] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Caleb\AppData\Local\Igsoft\bnhrolbx.dll
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\Run: [uTorrent] => C:\Users\Caleb\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-21] (BitTorrent Inc.)
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\MountPoints2: F - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\MountPoints2: {a69b36b8-a185-11e5-afba-1c6f659022ab} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\MountPoints2: {aaa4ec9d-32bb-11e2-b65c-00190e0d4a13} - Z:\Setup.exe
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\...\MountPoints2: {b96bccec-3e71-11e5-87b6-1c6f659022ab} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-17] (Microsoft Corporation)
HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 1
IFEO\RegWorks.exe: [Debugger] svchost.exe
IFEO\RSITx64.exe: [Debugger] svchost.exe
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Caleb\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-09] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2012-11-20]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Caleb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-04-15]
ShortcutTarget: Dropbox.lnk -> C:\Users\Caleb\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Caleb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk [2012-11-20]
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{06D22E6D-BCAB-4CAD-AD30-0CB04F5FD5E5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4D590E97-20B5-47F1-9C67-D55ED7BAF3B8}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-531710900-1525272955-1805011950-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://iat.ninemsn.com.au/tickler/default.aspx?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-22] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-19] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-17] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-19] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-17] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Caleb\AppData\Roaming\Mozilla\Firefox\Profiles\h0k31hwp.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-08] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll [2013-06-26] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-09-17] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-10-16] (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2016-04-09] (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2016-04-09] (Wacom)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Caleb\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: @talk.google.com/O1DPlugin -> C:\Users\Caleb\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Caleb\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Caleb\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Caleb\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-18] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-09-25] ()
FF Plugin HKU\S-1-5-21-531710900-1525272955-1805011950-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Users\Caleb\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Caleb\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Extension: StartNow Toolbar - C:\Users\Caleb\AppData\Roaming\Mozilla\Firefox\Profiles\h0k31hwp.default\extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F} [2012-12-16] [not signed]
FF Extension: IE Microsoft Shell Folder AutoComplete List - C:\Users\Caleb\AppData\Roaming\Mozilla\Firefox\Profiles\h0k31hwp.default\Extensions\{9D840298-4F2F-A7C7-C33A-75204F30ACD4} [2015-12-05] [not signed]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\pdf.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Profile: C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-03-01]
CHR Extension: (YouTube) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]
CHR Extension: (uBlock Origin) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-04-18]
CHR Extension: (Google Search) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Search by Image (by Google)) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2014-03-04]
CHR Extension: (Stop Tony Meow) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\dilmdkcidhplbhnpehjmiahegnkpilnf [2014-02-28]
CHR Extension: (Dropbox for Gmail) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2015-12-05]
CHR Extension: (The Trumpweb) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjkehfaokpmcbigmbgdhmjblecgfkedg [2015-08-11]
CHR Extension: (XKit) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd [2014-10-18]
CHR Extension: (Google Docs Offline) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-02]
CHR Extension: (Mibbit webchat) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbadbkkklnhamjjeagmknajgmbgcmnpi [2013-07-23]
CHR Extension: (Knok 
 Family Travel) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\iehdddmijbgofffjjmhkodckmnombhmf [2014-03-16]
CHR Extension: (Dropbox) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-07-17]
CHR Extension: (SJW to Skeleton) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\kckodmjikeoncekpplppkkcjolofmacc [2015-04-05]
CHR Extension: (Skype) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-04-23]
CHR Extension: (Fieldrunners) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkpikhjbfbffdblahfidklcohlaeabak [2015-01-19]
CHR Extension: (Kiwi IRC) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\malkpgopfalejggcogglkiemcknbiphe [2013-05-14]
CHR Extension: (HUMAN 3.0) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\meefjekipolcgabfgaclcpdkbghhmoah [2015-04-09]
CHR Extension: (Google Mail Checker) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2012-11-20]
CHR Extension: (Uncanny Cookie Clicker) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmmdenlpgbgmeofmdkhimecmkcgabgno [2016-04-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Enhanced Steam) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2016-04-13]
CHR Extension: (Gmail) - C:\Users\Caleb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-03] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63968 2015-08-10] (CyberGhost S.R.L)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2014-10-19] (BioWare)
R2 Ds3Service; C:\Users\Caleb\Desktop\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [File not signed]
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [227896 2016-04-05] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6133816 2016-04-14] (GOG.com)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72280 2010-09-07] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3398544 2014-11-12] (INCA Internet Co., Ltd.)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [430080 2011-05-09] (PowerUp Software, LLC) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-14] (Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-08-19] (BlueStack Systems)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-11] (Broadcom Corporation)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-02] (Logitech Inc.)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-23] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-04-23] ()
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-23 19:32 - 2016-04-23 19:33 - 00034394 _____ C:\Users\Caleb\Downloads\FRST.txt
2016-04-23 19:32 - 2016-04-23 19:32 - 02375680 _____ (Farbar) C:\Users\Caleb\Downloads\FRST64.exe
2016-04-23 19:32 - 2016-04-23 19:32 - 00000000 ____D C:\FRST
2016-04-23 19:00 - 2016-04-23 19:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-04-23 18:59 - 2016-04-23 19:26 - 00000000 ____D C:\Users\Caleb\Desktop\mbar
2016-04-23 18:59 - 2016-04-23 18:59 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\5778629A.sys
2016-04-23 18:58 - 2016-04-23 18:59 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Caleb\Downloads\mbar-1.09.3.1001.exe
2016-04-23 18:29 - 2016-04-23 18:29 - 05660058 _____ (Swearware) C:\Users\Caleb\Desktop\ComboFix.exe
2016-04-23 18:05 - 2016-04-23 18:21 - 00000000 ____D C:\Users\Caleb\Downloads\PurinOhuroV2
2016-04-23 17:37 - 2016-04-23 18:17 - 121838919 _____ C:\Users\Caleb\Downloads\G144351-Eng.rar
2016-04-23 17:36 - 2016-04-23 17:40 - 00232646 _____ C:\TDSSKiller.3.1.0.9_23.04.2016_17.36.27_log.txt
2016-04-23 17:25 - 2016-04-23 17:26 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Caleb\Downloads\tdsskiller.exe
2016-04-23 17:17 - 2016-04-23 17:19 - 51895596 _____ C:\Users\Caleb\Downloads\RE174661_trial.zip
2016-04-23 16:51 - 2016-04-23 17:35 - 00000000 ____D C:\ProgramData\RogueKiller
2016-04-23 16:51 - 2016-04-23 16:51 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-04-23 16:44 - 2016-04-23 16:44 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-04-23 16:38 - 2016-04-23 16:39 - 19764296 _____ C:\Users\Caleb\Downloads\RogueKiller.exe
2016-04-23 16:32 - 2016-04-23 16:32 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\bwqpic.sys
2016-04-23 11:34 - 2016-04-23 11:34 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-21 17:28 - 2016-04-23 17:14 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft AppLocale
2016-04-21 17:27 - 2016-04-21 17:27 - 01391104 _____ C:\Users\Caleb\Downloads\apploc.msi
2016-04-21 17:25 - 2016-04-21 17:26 - 36797892 _____ C:\Users\Caleb\Downloads\vx_rtp102e.zip
2016-04-21 17:23 - 2016-04-21 17:23 - 00000000 ____D C:\Users\Caleb\Downloads\FSA 1B Tower 1.01
2016-04-21 17:10 - 2016-04-21 17:20 - 91008627 _____ C:\Users\Caleb\Downloads\FSA 1B Tower 1.01.exe
2016-04-21 11:59 - 2016-04-21 12:03 - 105630325 ____R C:\Users\Caleb\Downloads\(同人ゲーム) [160227][RJ172028][FoxEye] BLUE GUARDIAN： Margaret Ver.2.55 (files) ※自炊.rar
2016-04-21 11:58 - 2016-04-21 11:58 - 00016625 _____ C:\Users\Caleb\Downloads\[BBS.2DJGAME.NET]RJ172028-255.torrent
2016-04-21 11:54 - 2016-04-21 12:31 - 111679298 _____ C:\Users\Caleb\Downloads\Teto.[ver.1.2].rar
2016-04-18 01:03 - 2016-04-18 01:03 - 24369297 _____ C:\Users\Caleb\Downloads\usr_498c26668aca2.flv
2016-04-15 19:23 - 2016-04-17 01:20 - 00197473 _____ C:\Users\Caleb\AppData\Roaming\401-1.htm
2016-04-15 19:23 - 2016-04-15 19:23 - 00001621 _____ C:\Users\Caleb\AppData\Roaming\MatriarchyRigThievery
2016-04-15 10:49 - 2016-04-15 10:49 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-04-14 08:33 - 2016-04-14 08:33 - 00050249 _____ C:\Users\Caleb\AppData\Roaming\GIF 128 Dithered.irs
2016-04-14 08:33 - 2016-04-14 08:33 - 00001693 _____ C:\Users\Caleb\AppData\Roaming\LopWiltPlethysmograph
2016-04-09 22:03 - 2016-04-09 22:03 - 00121013 _____ C:\Users\Caleb\AppData\Roaming\footnote.properties.xml
2016-04-09 22:03 - 2016-04-09 22:03 - 00001542 _____ C:\Users\Caleb\AppData\Roaming\FunctionaryBoomletCongressman
2016-04-09 08:41 - 2015-10-13 15:45 - 00000000 ____D C:\Users\Caleb\Downloads\151013-1G-RE120635
2016-04-08 12:50 - 2016-04-08 12:50 - 05934784 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-04-07 17:41 - 2016-04-07 18:31 - 270924673 _____ C:\Users\Caleb\Downloads\151013-1G-RE120635.part2.rar
2016-04-07 17:39 - 2016-04-07 19:57 - 420478979 _____ C:\Users\Caleb\Downloads\151013-1G-RE120635.part1.rar
2016-04-07 16:05 - 2016-04-07 16:05 - 00000000 ____D C:\Users\Caleb\AppData\LocalLow\AMPLITUDE Studios
2016-04-05 12:15 - 2015-06-07 09:13 - 00961192 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00062304 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:13 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00883712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00064352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-04-05 12:15 - 2015-06-07 09:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-04-05 06:18 - 2016-04-05 06:18 - 00050293 _____ C:\Users\Caleb\AppData\Roaming\GB-V
2016-04-05 06:18 - 2016-04-05 06:18 - 00001527 _____ C:\Users\Caleb\AppData\Roaming\PutQuadratHymnSpaGrisaille
2016-04-05 04:05 - 2016-04-05 04:05 - 661616307 _____ C:\Windows\MEMORY.DMP
2016-04-05 04:05 - 2016-04-05 04:05 - 00000000 ____D C:\Windows\Minidump
2016-04-02 19:32 - 2016-04-02 21:20 - 1098538870 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_Overlord.exe
2016-04-02 19:32 - 2016-04-02 21:08 - 922454032 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_Arrival.exe
2016-04-02 19:32 - 2016-04-02 19:45 - 95562536 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_AltAppearance2.exe
2016-04-02 19:32 - 2016-04-02 19:36 - 23692064 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_BloodDragon.exe
2016-04-02 19:32 - 2016-04-02 19:35 - 16300000 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_Collectors.exe
2016-04-02 19:15 - 2016-04-02 19:30 - 224850432 _____ (BioWare) C:\Users\Caleb\Downloads\ME2_Genesis.exe
2016-04-02 13:49 - 2016-04-02 13:51 - 00000000 ____D C:\Program Files\Big Pharma
2016-04-02 13:49 - 2016-04-02 13:49 - 00000631 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Big Pharma.lnk
2016-04-02 13:47 - 2016-04-02 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Factorio
2016-04-02 13:46 - 2016-04-02 14:41 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\Factorio
2016-04-02 13:46 - 2016-04-02 13:47 - 00000000 ____D C:\Program Files\Factorio
2016-04-02 12:46 - 2016-04-02 13:22 - 252254693 _____ C:\Users\Caleb\Downloads\IGG-BigPharma.v1.04.00.MULTI4.rar
2016-04-02 12:46 - 2016-04-02 12:46 - 00000000 ____D C:\Users\Caleb\Downloads\Factorio 0.12.29
2016-04-02 10:22 - 2016-04-02 10:22 - 00000000 ____D C:\Users\Caleb\AppData\Local\Rocket Bear Games
2016-04-02 09:28 - 2016-04-02 09:30 - 00000000 ____D C:\Users\Caleb\Downloads\Infested.Planet.Incl.Tricksters.Arsenal.DLC-GOG

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-23 19:28 - 2012-11-20 12:47 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\uTorrent
2016-04-23 19:19 - 2015-06-18 09:08 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-531710900-1525272955-1805011950-1000UA.job
2016-04-23 19:03 - 2012-11-20 12:15 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-23 18:59 - 2014-08-09 15:28 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-23 18:52 - 2012-11-20 12:24 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-04-23 18:50 - 2013-10-30 13:15 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-23 17:03 - 2012-11-20 12:15 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-23 16:50 - 2009-07-14 14:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-23 16:50 - 2009-07-14 14:45 - 00017168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-23 16:43 - 2009-07-14 13:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-04-23 16:32 - 2012-11-20 12:47 - 00000000 ____D C:\Program Files (x86)\Steam
2016-04-23 16:32 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\schemas
2016-04-23 16:12 - 2014-08-09 15:28 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-23 12:17 - 2009-07-14 15:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-23 12:17 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\inf
2016-04-23 12:16 - 2012-11-20 13:14 - 00000000 ___RD C:\Users\Caleb\Dropbox
2016-04-23 12:15 - 2016-02-08 09:45 - 00000000 ____D C:\Users\Caleb\AppData\LocalLow\uTorrent
2016-04-23 12:11 - 2015-12-05 19:11 - 00000000 ____D C:\Users\Caleb\AppData\Local\IPsoft
2016-04-23 12:11 - 2015-12-05 19:10 - 00000000 ____D C:\Users\Caleb\AppData\Local\Igsoft
2016-04-23 12:11 - 2015-10-05 11:32 - 00000306 _____ C:\Windows\Tasks\GAOJV.job
2016-04-23 12:11 - 2013-11-07 09:20 - 00119296 _____ C:\Windows\SysWOW64\zlib.dll
2016-04-23 12:11 - 2009-07-14 15:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-23 12:11 - 2009-07-14 13:20 - 00000000 ____D C:\Windows\SchCache
2016-04-23 11:34 - 2014-08-09 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-23 11:34 - 2014-08-09 15:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-22 21:19 - 2015-06-18 09:08 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-531710900-1525272955-1805011950-1000Core.job
2016-04-21 18:10 - 2012-11-22 05:18 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\vlc
2016-04-16 09:58 - 2014-10-07 14:39 - 00069120 _____ C:\Users\Caleb\AppData\Roaming\System.dll
2016-04-15 10:51 - 2015-06-18 09:08 - 00000000 ____D C:\Users\Caleb\AppData\Local\Dropbox
2016-04-15 10:51 - 2012-11-20 13:12 - 00000000 ____D C:\Users\Caleb\AppData\Roaming\Dropbox
2016-04-09 09:22 - 2014-11-17 22:36 - 00355840 _____ (Alexander Roshal) C:\Users\Caleb\Downloads\UnRAR.exe
2016-04-09 09:21 - 2015-09-10 17:17 - 00662927 _____ C:\Users\Caleb\Downloads\Australian Standards for Physiotherapy.html
2016-04-09 09:21 - 2014-11-17 22:36 - 00645632 _____ (Igor Pavlov) C:\Users\Caleb\Downloads\7za.exe
2016-04-09 09:21 - 2013-01-06 11:06 - 00157226 _____ C:\Users\Caleb\Downloads\ank.htm
2016-04-09 09:20 - 2016-02-13 17:55 - 00106496 _____ (Dell Inc.) C:\Users\Caleb\AppData\Roaming\typescript.dll
2016-04-08 12:50 - 2013-10-30 13:15 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-08 12:50 - 2013-10-30 13:15 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-08 12:50 - 2013-08-03 20:23 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-08 03:39 - 2012-11-20 12:17 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-05 12:14 - 2013-10-26 13:39 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-02 19:10 - 2014-10-31 14:35 - 00000000 ____D C:\Users\Caleb\Documents\BioWare
2016-04-02 13:56 - 2012-11-20 14:34 - 00000000 ____D C:\Users\Caleb\Documents\My Games
2016-04-02 10:22 - 2013-10-12 00:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-04-02 10:22 - 2013-10-12 00:16 - 00000000 ____D C:\GOG Games
2016-04-02 10:22 - 2009-07-14 15:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-04-02 09:23 - 2016-01-19 14:46 - 00000000 ____D C:\Users\Caleb\Downloads\Invisible.Inc.Contingency.Plan-SKIDROW

==================== Files in the root of some directories =======

2014-11-17 18:12 - 2014-11-17 18:12 - 2975440 _____ (SEGA                                                        ) C:\Program Files (x86)\PSO2_SETUP.exe
2014-05-08 14:05 - 2014-05-08 14:05 - 0000524 _____ () C:\Users\Caleb\AppData\Roaming\159 dk orange bl 4.ADO
2016-04-15 19:23 - 2016-04-17 01:20 - 0197473 _____ () C:\Users\Caleb\AppData\Roaming\401-1.htm
2016-01-14 07:48 - 2016-01-14 07:48 - 0000524 _____ () C:\Users\Caleb\AppData\Roaming\424 bl 1.ADO
2015-02-08 08:50 - 2015-02-08 08:50 - 0000132 _____ () C:\Users\Caleb\AppData\Roaming\Adobe BMP Format CS5 Prefs
2016-01-19 12:52 - 2016-01-19 12:52 - 0000132 _____ () C:\Users\Caleb\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-02-03 01:19 - 2016-02-03 01:19 - 0053636 _____ () C:\Users\Caleb\AppData\Roaming\app_updater_smartbutton_disabled.png
2013-10-02 12:54 - 2013-10-02 12:54 - 0001116 _____ () C:\Users\Caleb\AppData\Roaming\Campo_Grande
2016-02-03 01:19 - 2016-02-03 01:19 - 0001476 _____ () C:\Users\Caleb\AppData\Roaming\CausaNardoo
2015-05-20 11:28 - 2015-05-20 11:28 - 0004821 _____ () C:\Users\Caleb\AppData\Roaming\communications-category.png
2015-05-20 11:28 - 2015-05-20 11:28 - 0001193 _____ () C:\Users\Caleb\AppData\Roaming\diagnostics_pass.png
2015-05-20 11:28 - 2015-05-20 11:28 - 0002550 _____ () C:\Users\Caleb\AppData\Roaming\download_1.ico
2014-05-08 15:44 - 2014-05-08 15:44 - 0001783 _____ () C:\Users\Caleb\AppData\Roaming\f30.png
2013-10-02 12:56 - 2013-10-02 12:56 - 0001242 _____ () C:\Users\Caleb\AppData\Roaming\footer.table.height.xml
2016-04-09 22:03 - 2016-04-09 22:03 - 0121013 _____ () C:\Users\Caleb\AppData\Roaming\footnote.properties.xml
2013-10-02 12:54 - 2013-10-02 12:54 - 0000065 _____ () C:\Users\Caleb\AppData\Roaming\Funafuti
2016-04-09 22:03 - 2016-04-09 22:03 - 0001542 _____ () C:\Users\Caleb\AppData\Roaming\FunctionaryBoomletCongressman
2016-04-05 06:18 - 2016-04-05 06:18 - 0050293 _____ () C:\Users\Caleb\AppData\Roaming\GB-V
2016-04-14 08:33 - 2016-04-14 08:33 - 0050249 _____ () C:\Users\Caleb\AppData\Roaming\GIF 128 Dithered.irs
2014-05-08 14:05 - 2014-05-08 14:05 - 0000518 _____ () C:\Users\Caleb\AppData\Roaming\goURL_lr_photoshop_it.csv
2016-02-14 03:39 - 2016-02-14 03:39 - 0002135 _____ () C:\Users\Caleb\AppData\Roaming\HexachloropheneSlave
2015-05-20 11:28 - 2015-05-20 11:28 - 0000375 _____ () C:\Users\Caleb\AppData\Roaming\koala.exe.config
2015-05-20 11:28 - 2015-05-20 11:28 - 0004637 _____ () C:\Users\Caleb\AppData\Roaming\log.png
2016-04-14 08:33 - 2016-04-14 08:33 - 0001693 _____ () C:\Users\Caleb\AppData\Roaming\LopWiltPlethysmograph
2013-10-02 12:54 - 2013-10-02 12:54 - 0001560 _____ () C:\Users\Caleb\AppData\Roaming\Los_Angeles
2014-05-08 14:05 - 2014-05-08 14:05 - 0000768 _____ () C:\Users\Caleb\AppData\Roaming\Mac OS.act
2013-10-02 12:56 - 2013-10-02 12:56 - 0002374 _____ () C:\Users\Caleb\AppData\Roaming\man.hyphenate.xml
2016-04-15 19:23 - 2016-04-15 19:23 - 0001621 _____ () C:\Users\Caleb\AppData\Roaming\MatriarchyRigThievery
2015-05-20 11:28 - 2015-05-20 11:28 - 0001583 _____ () C:\Users\Caleb\AppData\Roaming\media-computer.png
2013-10-02 12:56 - 2013-10-02 12:56 - 0000896 _____ () C:\Users\Caleb\AppData\Roaming\nominal.image.depth.xml
2013-10-02 12:56 - 2013-10-02 12:56 - 0000791 _____ () C:\Users\Caleb\AppData\Roaming\ObjectViewer.vbp
2016-04-05 06:18 - 2016-04-05 06:18 - 0001527 _____ () C:\Users\Caleb\AppData\Roaming\PutQuadratHymnSpaGrisaille
2015-05-20 11:28 - 2015-05-20 11:28 - 0003100 _____ () C:\Users\Caleb\AppData\Roaming\refresh_4.png
2014-10-07 14:39 - 2016-04-16 09:58 - 0069120 _____ () C:\Users\Caleb\AppData\Roaming\System.dll
2015-05-20 11:14 - 2015-05-20 11:14 - 0000149 _____ () C:\Users\Caleb\AppData\Roaming\tweakRepairWinsock_es.p5p
2016-02-13 17:55 - 2016-04-09 09:20 - 0106496 _____ (Dell Inc.) C:\Users\Caleb\AppData\Roaming\typescript.dll
2016-02-14 03:39 - 2016-02-14 03:39 - 0049949 _____ () C:\Users\Caleb\AppData\Roaming\Vaduz
2015-03-22 20:12 - 2015-03-22 20:12 - 0000000 ___SH () C:\Users\Caleb\AppData\Local\LumaEmu
2015-04-15 20:17 - 2015-04-15 20:17 - 0010373 _____ () C:\Users\Caleb\AppData\Local\recently-used.xbel
2014-12-03 14:28 - 2014-12-03 14:31 - 0000000 _____ () C:\Users\Caleb\AppData\Local\{D5C0641D-5163-4071-A0C3-87377AD7611A}
2015-12-12 12:13 - 2015-12-16 16:52 - 0000000 ____H () C:\ProgramData\@system.temp
2015-12-12 12:10 - 2015-12-16 14:29 - 0000640 ____H () C:\ProgramData\@system3.att

Some files in TEMP:
====================
C:\Users\Caleb\AppData\Local\Temp\3E68.exe
C:\Users\Caleb\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\Caleb\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Caleb\AppData\Local\Temp\AutoRun.exe
C:\Users\Caleb\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Caleb\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\Caleb\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Caleb\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Caleb\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnidowh.dll
C:\Users\Caleb\AppData\Local\Temp\DSETUP.dll
C:\Users\Caleb\AppData\Local\Temp\dsetup32.dll
C:\Users\Caleb\AppData\Local\Temp\DXSETUP.exe
C:\Users\Caleb\AppData\Local\Temp\eauninstall.exe
C:\Users\Caleb\AppData\Local\Temp\GUR33A1.exe
C:\Users\Caleb\AppData\Local\Temp\GUR92B8.exe
C:\Users\Caleb\AppData\Local\Temp\GURA782.exe
C:\Users\Caleb\AppData\Local\Temp\GURBCB6.exe
C:\Users\Caleb\AppData\Local\Temp\Gw2.exe
C:\Users\Caleb\AppData\Local\Temp\install.dll
C:\Users\Caleb\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Caleb\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Caleb\AppData\Local\Temp\KILLW16.EXE
C:\Users\Caleb\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Caleb\AppData\Local\Temp\ose00000.exe
C:\Users\Caleb\AppData\Local\Temp\raptrpatch.exe
C:\Users\Caleb\AppData\Local\Temp\raptr_stub.exe
C:\Users\Caleb\AppData\Local\Temp\Risweb32.exe
C:\Users\Caleb\AppData\Local\Temp\SC4_uninst.exe
C:\Users\Caleb\AppData\Local\Temp\SimCity 4 Deluxe_uninst.exe
C:\Users\Caleb\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Caleb\AppData\Local\Temp\SRLDetectionLibrary2969322138661887554.dll
C:\Users\Caleb\AppData\Local\Temp\tmp711.exe
C:\Users\Caleb\AppData\Local\Temp\tmp7435.exe
C:\Users\Caleb\AppData\Local\Temp\ubi6F4D.tmp.exe
C:\Users\Caleb\AppData\Local\Temp\Uninstall.exe
C:\Users\Caleb\AppData\Local\Temp\Uninstaller-12956.exe
C:\Users\Caleb\AppData\Local\Temp\Uninstaller-6736.exe
C:\Users\Caleb\AppData\Local\Temp\utt811E.tmp.exe
C:\Users\Caleb\AppData\Local\Temp\utt9113.tmp.exe
C:\Users\Caleb\AppData\Local\Temp\uttE393.tmp.exe
C:\Users\Caleb\AppData\Local\Temp\__pythonRunner.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-23 13:30

==================== End of FRST.txt ============================