Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-08-2016 01 Ran by [removed] (administrator) on 420BOOTYWIZARD (22-08-2016 00:28:35) Running from E:\Downloads [removed] Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe (SUPERAntiSpyware.com) E:\Program Files\SUPERAntiSpyware\SASCore64.exe (DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe (Binary Fortress Software) E:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser_crashreporter.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe () C:\Program Files\AVAST Software\Avast\AvastNM.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe () C:\Program Files\AVAST Software\Avast\AvastNM.exe (Avast Software) C:\Program Files\AVAST Software\SZBrowser\1.51.2220.53\SZBrowser_autoupdate.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Apple Inc.) E:\Program Files\iTunes\iTunesHelper.exe (Highresolution Enterprises) E:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (SUPERAntiSpyware) E:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Curse, Inc) C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Curse.exe (ShareX Team) E:\Program Files\ShareX\ShareX.exe (Curse) C:\Users\Colin\AppData\Local\Apps\2.0\EXTXBN1Q.O6V\R8NZ943V.8JY\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe (Curse, Inc.) C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Electron\CurseUI.exe (Curse, Inc.) C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Electron\CurseUI.exe (Curse, Inc.) C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Electron\CurseUI.exe (Curse, Inc.) C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Electron\CurseUI.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [iTunesHelper] => E:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM\...\Run: [XMouseButtonControl] => E:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1127408 2015-10-18] (Highresolution Enterprises) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.) HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6626696 2016-07-18] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3941528 2016-05-20] (Logitech, Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9103976 2016-08-21] (AVAST Software) HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\Run: [TSMApplication] => E:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe [1623040 2016-05-31] () HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\Run: [horoscopes] => "C:\Program Files (x86)\excited\horoscopes.exe" HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\Run: [wrongs] => "C:\Program Files (x86)\excited\commiserated.exe" HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\Run: [SUPERAntiSpyware] => E:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-07-19] (SUPERAntiSpyware) HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\RunOnce: [Uninstall C:\Users\Colin\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Colin\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2068355812-426577500-2880406620-1000\...\MountPoints2: {a4e4bab7-a4f9-11e5-9bde-e03f49ea14d1} - "D:\setup.exe" ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-21] (AVAST Software) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.40.dll [2016-08-16] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2016-08-21] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS) Startup: C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2016-08-21] ShortcutTarget: Curse.lnk -> C:\Users\Colin\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc) Startup: C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2015-08-24] () Startup: C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2016-08-21] ShortcutTarget: ShareX.lnk -> E:\Program Files\ShareX\ShareX.exe (ShareX Team) GroupPolicyScripts: Restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{4e1d8bd4-53f4-4a7b-b016-8df03b7435c7}: [NameServer] 188.120.239.115,8.8.8.8 Tcpip\..\Interfaces\{4e1d8bd4-53f4-4a7b-b016-8df03b7435c7}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2068355812-426577500-2880406620-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2068355812-426577500-2880406620-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE13&ocid=UE13DHP BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-07-31] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> E:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-07-07] (Oracle Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-31] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> E:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-07] (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-07-31] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-13] (Oracle Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-07-31] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-13] (Oracle Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-31] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-31] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-31] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-31] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Colin\AppData\Roaming\Mozilla\Firefox\Profiles\2gst280a.default FF DefaultSearchEngine: Yahoo! FF SelectedSearchEngine: Yahoo! FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/yhp-ff FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] () FF Plugin: @java.com/DTPlugin,version=11.91.2 -> E:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-07] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> E:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-07] (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-13] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-13] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-07-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-08-21] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-08-21] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> E:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Extension: EZSearch - C:\Users\Colin\AppData\Roaming\Mozilla\Firefox\Profiles\2gst280a.default\Extensions\[removed] [2016-08-21] [not signed] FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-21] FF HKLM\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-21] FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF StartMenuInternet: FIREFOX.EXE - E:\Program Files (x86)\Mozilla Firefox\firefox.exe Chrome: ======= CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3311767&octid=EB_ORIGINAL_CTID&ISID=&SearchSource=55&CUI=&UM=5&UP=SP41617203-A78B-417C-AF96-72EFBA08D708&SSPV= CHR StartupUrls: Default -> "hxxp://www.google.com" CHR Plugin: (Shockwave Flash) - E:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - E:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\ppGoogleNaClPluginChrome.dll => No File CHR Plugin: (Chrome PDF Viewer) - E:\Program Files (x86)\Google\Chrome\Application\44.0.2403.157\pdf.dll => No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => No File CHR Profile: C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Sad Panda) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bohapeiooecafommnlaiccilacgmkaoc [2015-08-24] CHR Extension: (Adblock Plus) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-29] CHR Extension: (Google Search) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (AdBlock) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-07-28] CHR Extension: (Chrome Web Store Payments) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Universe) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oecmlnmneeeeiccpcohlffnipjhngmdk [2015-08-24] CHR Extension: (Tumblr Savior) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefddkjnflmjbclpnnoegglmmdfkidip [2016-07-24] CHR Extension: (Gmail) - C:\Users\Colin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-23] StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome334.exe StartMenuInternet: Google Chrome.JTG4WJIPWY4IMF7RBWKVBKT32M - E:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 !SASCORE; E:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2015-12-03] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-21] (AVAST Software) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2854640 2016-07-31] (Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-10-01] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-10-01] (Dropbox, Inc.) R2 DisplayFusionService; E:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4507176 2015-07-24] (Binary Fortress Software) R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249328 2015-06-24] (DTS, Inc) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.) S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-06-30] (Microsoft Corporation) S3 Disc Soft Lite Bus Service; "E:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe" [X] S2 WinRateSvc; C:\Program Files (x86)\winrate\WinRateSync.exe [X] S2 WinRateSvc2; C:\Program Files (x86)\winrate\WinRateSync_.exe [X] S2 YQAGaQsv; C:\Program Files (x86)\WebShield\WebShield.exe [X] ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-12-03] () S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-21] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-21] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-08-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-08-21] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-21] (AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [110096 2016-04-26] (Advanced Micro Devices) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-12-16] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-06-09] (Disc Soft Ltd) S3 ladfGSS; C:\Windows\system32\drivers\ladfGSS.sys [45208 2016-04-15] (Logitech Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [85160 2016-04-18] (Logitech Inc.) S3 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [140672 2016-08-21] (Malwarebytes) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) R1 SASDIFSV; E:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; E:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [40568 2016-06-14] (SteelSeries ApS) R3 sshid; C:\Windows\System32\drivers\sshid.sys [51400 2016-06-14] (SteelSeries ApS) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 idsvc; no ImagePath S1 lfcrmzcp; \??\C:\WINDOWS\system32\drivers\lfcrmzcp.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-08-22 00:28 - 2016-08-22 00:28 - 00000000 ____D C:\FRST 2016-08-22 00:12 - 2016-08-22 00:24 - 00000540 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 9c84432f-d624-4ceb-9ca7-05cbdcdadd1a.job 2016-08-22 00:12 - 2016-08-22 00:24 - 00000540 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 21d6f1b4-e54a-43cf-ba6b-4cc62d4d6c2e.job 2016-08-22 00:12 - 2016-08-22 00:12 - 00003778 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 9c84432f-d624-4ceb-9ca7-05cbdcdadd1a 2016-08-22 00:12 - 2016-08-22 00:12 - 00003696 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 21d6f1b4-e54a-43cf-ba6b-4cc62d4d6c2e 2016-08-22 00:12 - 2016-08-22 00:12 - 00000906 _____ C:\Users\Colin\Desktop\SUPERAntiSpyware Free Edition.lnk 2016-08-22 00:12 - 2016-08-22 00:12 - 00000000 ____D C:\Users\Colin\AppData\Roaming\SUPERAntiSpyware.com 2016-08-22 00:12 - 2016-08-22 00:12 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware 2016-08-22 00:11 - 2016-08-22 00:11 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com 2016-08-21 23:59 - 2016-08-21 23:59 - 22851472 _____ (Malwarebytes ) C:\Users\Colin\Desktop\mbam-setup-2.2.1.1043.exe 2016-08-21 23:47 - 2016-08-21 23:48 - 01243638 _____ C:\Users\Colin\Desktop\Rkill.txt 2016-08-21 23:38 - 2016-08-21 23:42 - 00000000 ____D C:\Program Files (x86)\hagemann 2016-08-21 21:37 - 2016-08-22 00:27 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-21 21:37 - 2016-08-22 00:12 - 00000000 ____D C:\Program Files (x86)\Google 2016-08-21 21:37 - 2016-08-21 21:42 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-21 21:37 - 2016-08-21 21:37 - 00003984 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-08-21 21:37 - 2016-08-21 21:37 - 00003752 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-08-21 20:49 - 2016-08-21 20:49 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2016-08-21 20:49 - 2016-08-21 20:49 - 00004018 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1471837767 2016-08-21 20:49 - 2016-08-21 20:49 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2016-08-21 20:49 - 2016-08-21 20:49 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2016-08-21 20:48 - 2016-08-21 20:48 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00391496 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2016-08-21 20:48 - 2016-08-21 20:48 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00163416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00108816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2016-08-21 20:48 - 2016-08-21 20:48 - 00004004 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2016-08-21 20:48 - 2016-08-21 20:48 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2016-08-21 20:48 - 2016-08-21 20:48 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2016-08-21 20:48 - 2016-08-21 20:48 - 00000000 ____D C:\Users\Colin\AppData\Roaming\AVAST Software 2016-08-21 20:48 - 2016-08-21 20:47 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2016-08-21 20:47 - 2016-08-21 20:49 - 00000000 ____D C:\ProgramData\AVAST Software 2016-08-21 20:47 - 2016-08-21 20:49 - 00000000 ____D C:\Program Files\AVAST Software 2016-08-21 20:47 - 2016-08-21 20:47 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2016-08-21 19:30 - 2016-08-22 00:27 - 00429738 _____ C:\WINDOWS\ntbtlog.txt 2016-08-21 19:13 - 2016-08-21 23:39 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-08-21 19:12 - 2016-08-21 23:52 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-08-21 19:12 - 2016-08-21 20:11 - 00001165 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-08-21 19:12 - 2016-08-21 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-08-21 19:12 - 2016-08-21 19:12 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-08-21 19:12 - 2016-08-21 19:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-08-21 19:12 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-08-21 19:12 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-08-21 19:02 - 2016-08-22 00:26 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-08-21 18:57 - 2016-08-21 22:13 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Geunfy 2016-08-21 18:57 - 2016-08-21 19:18 - 00000000 ____D C:\Users\Colin\AppData\LocalLow\Company 2016-08-21 18:57 - 2016-08-21 18:57 - 00000000 ____D C:\WINDOWS\system32\woc 2016-08-21 18:57 - 2016-08-21 18:57 - 00000000 ____D C:\Users\Colin\AppData\Local\Tempfolder 2016-08-21 18:57 - 2016-08-21 18:57 - 00000000 ____D C:\uninst 2016-08-21 18:53 - 2016-08-21 18:53 - 00000001 _____ C:\Users\Colin\AppData\Local\setupsuccessful.txt 2016-08-21 18:52 - 2016-08-21 19:03 - 00000000 ____D C:\Users\Colin\AppData\Roaming\GameLauncher 2016-08-21 18:52 - 2016-08-21 18:52 - 00003888 _____ C:\WINDOWS\System32\Tasks\a6725995567259955 2016-08-21 18:52 - 2016-08-21 18:51 - 00001188 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2016-08-21 18:51 - 2016-08-21 22:13 - 00000000 ____D C:\a 2016-08-21 18:51 - 2016-08-21 18:53 - 00000000 _____ C:\Users\Colin\AppData\Local\stxtname.txt 2016-08-21 18:51 - 2016-08-21 18:51 - 00000055 _____ C:\WINDOWS\key.ini 2016-08-21 18:51 - 2016-08-21 18:51 - 00000000 _____ C:\Users\Colin\AppData\Local\run.txt 2016-08-19 14:30 - 2016-08-19 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-08-18 22:40 - 2016-08-18 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Simulationcraft(x64) 2016-08-12 18:09 - 2016-08-12 18:10 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Gyazo 2016-08-12 18:06 - 2016-08-13 12:40 - 00000000 ____D C:\Program Files (x86)\Gyazo 2016-08-12 18:06 - 2016-08-12 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo 2016-08-09 17:26 - 2016-08-03 04:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-08-09 17:26 - 2016-08-03 04:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-09 17:26 - 2016-08-03 04:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-08-09 17:26 - 2016-08-03 03:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-08-09 17:26 - 2016-08-03 03:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-08-09 17:26 - 2016-08-03 03:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2016-08-09 17:26 - 2016-08-03 03:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-08-09 17:26 - 2016-08-03 03:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-08-09 17:26 - 2016-08-03 03:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-08-09 17:26 - 2016-08-03 03:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-08-09 17:26 - 2016-08-03 03:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-08-09 17:26 - 2016-08-03 03:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-08-09 17:26 - 2016-08-03 03:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-08-09 17:26 - 2016-08-03 03:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-08-09 17:26 - 2016-08-03 03:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-09 17:26 - 2016-08-03 03:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-09 17:26 - 2016-08-03 03:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-08-09 17:26 - 2016-08-03 03:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-08-09 17:26 - 2016-08-03 03:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-08-09 17:26 - 2016-08-03 03:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-08-09 17:26 - 2016-08-03 03:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-09 17:26 - 2016-08-03 03:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-09 17:26 - 2016-08-03 03:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-09 17:26 - 2016-08-03 03:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-09 17:26 - 2016-08-03 03:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-09 17:26 - 2016-08-03 03:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-08-09 17:26 - 2016-08-03 02:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-08-09 17:26 - 2016-08-03 02:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-08-09 17:26 - 2016-08-03 02:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-09 17:26 - 2016-08-03 02:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-08-09 17:26 - 2016-08-03 02:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-08-09 17:26 - 2016-08-03 02:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2016-08-09 17:26 - 2016-08-03 02:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-08-09 17:26 - 2016-08-03 02:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-08-09 17:26 - 2016-08-03 02:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-08-09 17:26 - 2016-08-03 02:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-08-09 17:26 - 2016-08-03 02:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2016-08-09 17:26 - 2016-08-03 02:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-08-09 17:26 - 2016-08-03 02:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-08-09 17:26 - 2016-08-03 02:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-09 17:26 - 2016-08-03 02:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-08-09 17:26 - 2016-08-03 02:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-08-09 17:26 - 2016-08-03 02:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-08-09 17:26 - 2016-08-03 02:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-08-09 17:26 - 2016-08-03 02:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-08-09 17:26 - 2016-08-03 02:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-08-09 17:26 - 2016-08-03 02:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-08-09 17:26 - 2016-08-03 02:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-09 17:26 - 2016-08-03 02:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2016-08-09 17:26 - 2016-08-03 02:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-08-09 17:26 - 2016-08-03 02:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-08-09 17:26 - 2016-08-03 02:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-08-09 17:26 - 2016-08-03 02:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-08-09 17:26 - 2016-08-03 02:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-08-09 17:26 - 2016-08-03 02:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2016-08-09 17:26 - 2016-08-03 02:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-09 17:26 - 2016-08-03 02:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-08-09 17:26 - 2016-08-03 02:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-08-09 17:26 - 2016-08-03 02:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-08-09 17:26 - 2016-08-03 02:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-08-09 17:26 - 2016-08-03 02:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-08-09 17:26 - 2016-08-03 02:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-09 17:26 - 2016-08-03 02:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-08-09 17:26 - 2016-08-03 02:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-08-09 17:26 - 2016-08-03 02:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-08-09 17:26 - 2016-08-03 02:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-08-09 17:26 - 2016-08-03 02:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-08-09 17:26 - 2016-08-03 02:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-08-09 17:26 - 2016-08-03 02:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-09 17:26 - 2016-08-03 02:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-08-09 17:26 - 2016-08-03 02:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-08-09 17:26 - 2016-08-03 02:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-08-09 17:26 - 2016-08-03 02:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-08-09 17:26 - 2016-08-03 02:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-09 17:26 - 2016-08-03 02:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-08-09 17:26 - 2016-08-03 02:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2016-08-09 17:26 - 2016-08-03 02:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-09 17:26 - 2016-08-03 02:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-08-09 17:26 - 2016-08-03 02:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-09 17:26 - 2016-08-03 02:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-09 17:26 - 2016-08-03 02:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-08-09 17:26 - 2016-08-03 02:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-08-09 17:26 - 2016-08-03 02:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-08-09 17:26 - 2016-08-03 02:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-08-09 17:26 - 2016-08-03 02:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-08-09 17:26 - 2016-08-03 02:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-08-09 17:26 - 2016-08-02 22:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2016-08-09 17:26 - 2016-08-02 22:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-08-09 17:26 - 2016-08-02 22:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-08-09 17:26 - 2016-08-02 22:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-08-09 17:26 - 2016-08-02 22:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-09 17:26 - 2016-08-02 22:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-08-09 17:26 - 2016-08-02 22:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-08-09 17:26 - 2016-08-02 22:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-09 17:26 - 2016-08-02 22:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-08-09 17:26 - 2016-08-02 22:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-08-09 17:26 - 2016-08-02 21:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-08-09 17:26 - 2016-08-02 21:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-08-09 17:26 - 2016-08-02 21:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-08-09 17:26 - 2016-08-02 21:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-08-09 17:26 - 2016-08-02 21:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2016-08-09 17:26 - 2016-08-02 21:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-08-09 17:26 - 2016-08-02 21:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-08-09 17:26 - 2016-08-02 21:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-09 17:26 - 2016-08-02 21:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-08-09 17:26 - 2016-08-02 21:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-08-09 17:26 - 2016-08-02 21:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-08-09 17:26 - 2016-08-02 21:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2016-08-09 17:26 - 2016-08-02 21:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-08-09 17:26 - 2016-08-02 21:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-08-09 17:26 - 2016-08-02 21:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-09 17:26 - 2016-08-02 21:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-08-09 17:26 - 2016-08-02 21:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-08-09 17:26 - 2016-08-02 21:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-08-09 17:26 - 2016-08-02 21:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-08-09 17:26 - 2016-08-02 21:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-09 17:26 - 2016-08-02 21:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-08-09 17:26 - 2016-08-02 21:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-08-09 17:26 - 2016-08-02 21:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-08-09 17:26 - 2016-08-02 21:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-08-09 17:26 - 2016-08-02 21:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-08-09 17:26 - 2016-08-02 21:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-08-09 17:26 - 2016-08-02 21:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-08-09 17:26 - 2016-08-02 21:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-09 17:26 - 2016-08-02 21:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-08-09 17:26 - 2016-08-02 21:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-08-09 17:26 - 2016-08-02 21:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-09 17:26 - 2016-08-02 21:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-08-09 17:26 - 2016-08-02 21:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-08-06 23:54 - 2016-08-06 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX 2016-08-06 22:58 - 2016-08-06 22:58 - 00000000 ____D C:\Users\Colin\AppData\LocalLow\uTorrent 2016-08-05 14:43 - 2016-08-05 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-08-05 14:42 - 2016-08-22 00:25 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2016-08-05 14:41 - 2016-08-05 14:41 - 00000000 ____D C:\Users\Colin\AppData\Roaming\ATI 2016-08-05 14:41 - 2016-08-05 14:41 - 00000000 ____D C:\Users\Colin\AppData\Local\ATI 2016-08-05 14:41 - 2016-08-05 14:41 - 00000000 ____D C:\ProgramData\ATI 2016-07-30 03:42 - 2016-07-30 03:42 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux 2016-07-30 03:42 - 2016-07-30 03:42 - 00000000 ____D C:\Users\Colin\AppData\Local\FluxSoftware 2016-07-25 13:55 - 2016-07-25 13:55 - 08653128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 07044704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00474992 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00151456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00135288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00119744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00119744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00102040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2016-07-25 13:55 - 2016-07-25 13:55 - 00102040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2016-07-25 13:54 - 2016-07-25 13:54 - 00155616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 26632720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00874520 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00279056 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00267288 _____ C:\WINDOWS\system32\GameManager64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00261656 _____ C:\WINDOWS\system32\clinfo.exe 2016-07-25 13:53 - 2016-07-25 13:53 - 00260112 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00225808 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00151056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00128528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00126488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00121872 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00110104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2016-07-25 13:53 - 2016-07-25 13:53 - 00012816 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 15720464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00513040 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-07-25 13:52 - 2016-07-25 13:52 - 00451088 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00278544 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-07-25 13:52 - 2016-07-25 13:52 - 00222736 _____ C:\WINDOWS\system32\atieah64.exe 2016-07-25 13:52 - 2016-07-25 13:52 - 00200720 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2016-07-25 13:52 - 2016-07-25 13:52 - 00194064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00167952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00115216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00102416 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00099856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00099856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00071184 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00060944 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2016-07-25 13:52 - 2016-07-25 13:52 - 00059920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2016-07-25 13:51 - 2016-07-25 13:51 - 48806416 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 14311440 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 08827920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 07084560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 02369040 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 02279440 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 02138640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 01828880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 01318416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 00985104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 00985104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 00394256 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-07-25 13:51 - 2016-07-25 13:51 - 00064528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 00057872 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2016-07-25 13:51 - 2016-07-25 13:51 - 00052240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2016-07-25 13:50 - 2016-07-25 13:50 - 38257680 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2016-07-25 13:50 - 2016-07-25 13:50 - 27480592 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2016-07-25 13:50 - 2016-07-25 13:50 - 21632528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2016-07-25 13:50 - 2016-07-25 13:50 - 00059408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2016-07-25 13:50 - 2016-07-25 13:50 - 00047120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 08619024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 06947344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00742928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00618512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00313760 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys 2016-07-25 13:49 - 2016-07-25 13:49 - 00213520 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00193040 _____ C:\WINDOWS\system32\amdhdl64.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00173072 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00104984 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00095760 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00075280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll 2016-07-25 13:49 - 2016-07-25 13:49 - 00058896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll 2016-07-25 13:45 - 2016-07-25 13:45 - 32548376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2016-07-25 13:45 - 2016-07-25 13:45 - 00341520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2016-07-25 13:45 - 2016-07-25 13:45 - 00283664 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-07-25 13:45 - 2016-07-25 13:45 - 00240664 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2016-07-25 13:45 - 2016-07-25 13:45 - 00100880 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2016-07-25 04:40 - 2016-07-25 04:40 - 00149008 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin 2016-07-25 04:40 - 2016-07-25 04:40 - 00117808 _____ C:\WINDOWS\system32\kapp_ci.sbin 2016-07-25 04:40 - 2016-07-25 04:40 - 00112336 _____ C:\WINDOWS\system32\kapp_si.sbin 2016-07-25 04:39 - 2016-07-25 04:39 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap 2016-07-25 04:39 - 2016-07-25 04:39 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap 2016-07-25 04:39 - 2016-07-25 04:39 - 00368672 _____ C:\WINDOWS\system32\ativvaxy_el_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00322996 _____ C:\WINDOWS\system32\ativvaxy_vi.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00322736 _____ C:\WINDOWS\system32\ativvaxy_vi_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00270912 _____ C:\WINDOWS\system32\ativvaxy_stn_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00266816 _____ C:\WINDOWS\system32\ativvaxy_cz_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00260980 _____ C:\WINDOWS\system32\ativvaxy_FJ.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00260720 _____ C:\WINDOWS\system32\ativvaxy_FJ_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00234292 _____ C:\WINDOWS\system32\ativvaxy_cik.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00234032 _____ C:\WINDOWS\system32\ativvaxy_cik_nd.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00177280 _____ C:\WINDOWS\system32\ativce03.dat 2016-07-25 04:39 - 2016-07-25 04:39 - 00100816 _____ C:\WINDOWS\system32\ativce02.dat 2016-07-25 04:38 - 2016-07-25 04:38 - 00731440 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb 2016-07-25 04:38 - 2016-07-25 04:38 - 00731440 _____ C:\WINDOWS\system32\atiapfxx.blb 2016-07-25 04:37 - 2016-07-25 04:37 - 00890373 _____ C:\WINDOWS\system32\amdicdxx.dat 2016-07-25 04:37 - 2016-07-25 04:37 - 00175584 _____ C:\WINDOWS\system32\amde31a.dat 2016-07-25 04:37 - 2016-07-25 04:37 - 00166624 _____ C:\WINDOWS\system32\amde34b.dat 2016-07-25 04:37 - 2016-07-25 04:37 - 00166624 _____ C:\WINDOWS\system32\amde34a.dat 2016-07-25 04:37 - 2016-07-25 04:37 - 00016827 _____ C:\WINDOWS\system32\AMDKernelEvents.man 2016-07-23 19:24 - 2016-07-23 19:24 - 00000000 ____D C:\Users\Colin\AppData\Local\My Games ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-08-22 00:28 - 2015-12-16 09:03 - 00000000 ____D C:\Users\Colin\AppData\Local\Deployment 2016-08-22 00:28 - 2015-08-24 00:38 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Curse Client 2016-08-22 00:27 - 2015-12-16 08:59 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-22 00:27 - 2015-10-29 23:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-08-22 00:27 - 2015-10-01 00:25 - 00000932 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-08-22 00:24 - 2015-08-24 00:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-08-21 23:48 - 2015-12-16 08:55 - 01009756 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-21 23:48 - 2015-10-30 00:21 - 00000000 ____D C:\WINDOWS\INF 2016-08-21 23:42 - 2015-08-24 01:14 - 00000000 ____D C:\Users\Colin\AppData\Local\Apps\2.0 2016-08-21 23:38 - 2015-10-01 00:25 - 00000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-08-21 23:38 - 2015-08-25 00:41 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-08-21 22:14 - 2015-08-24 14:14 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Skype 2016-08-21 22:13 - 2015-09-17 15:01 - 00000000 ____D C:\Users\Colin\AppData\Local\osu! 2016-08-21 21:13 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-08-21 20:50 - 2016-01-07 16:13 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-08-21 20:50 - 2015-08-24 14:14 - 00000000 ____D C:\ProgramData\Skype 2016-08-21 20:28 - 2015-10-30 00:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-08-21 20:27 - 2015-12-12 14:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-08-21 20:11 - 2016-07-18 11:24 - 00000985 _____ C:\Users\Public\Desktop\World of Warcraft Beta.lnk 2016-08-21 20:11 - 2016-04-16 12:21 - 00001268 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings.lnk 2016-08-21 20:11 - 2016-02-15 23:55 - 00000818 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JMARS Uninstaller.lnk 2016-08-21 20:11 - 2016-02-15 23:55 - 00000764 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jmars_win_64.lnk 2016-08-21 20:11 - 2016-01-04 22:26 - 00000760 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2016-08-21 20:11 - 2016-01-04 18:55 - 00002684 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2016-08-21 20:11 - 2015-12-28 11:17 - 00000654 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G4E.lnk 2016-08-21 20:11 - 2015-12-22 23:47 - 00002082 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape.lnk 2016-08-21 20:11 - 2015-12-16 08:58 - 00001507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002522 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002480 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2016-08-21 20:11 - 2015-12-12 14:11 - 00002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2016-08-21 20:11 - 2015-12-01 22:05 - 00001219 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CNext.lnk 2016-08-21 20:11 - 2015-10-30 00:19 - 00002425 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk 2016-08-21 20:11 - 2015-10-30 00:19 - 00002289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk 2016-08-21 20:11 - 2015-10-30 00:19 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Devices Flow.lnk 2016-08-21 20:11 - 2015-10-30 00:18 - 00001666 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk 2016-08-21 20:11 - 2015-10-30 00:18 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk 2016-08-21 20:11 - 2015-10-30 00:17 - 00002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk 2016-08-21 20:11 - 2015-09-17 15:01 - 00001061 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk 2016-08-21 20:11 - 2015-08-26 22:18 - 00002405 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-21 20:11 - 2015-08-24 14:31 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-08-21 20:11 - 2015-08-24 04:02 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-08-21 20:11 - 2015-08-24 01:33 - 00000769 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk 2016-08-21 20:11 - 2015-08-24 00:38 - 00001044 _____ C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk 2016-08-21 20:09 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-08-21 19:29 - 2016-01-13 16:00 - 00000000 ____D C:\WINDOWS\Minidump 2016-08-21 19:29 - 2015-12-11 21:27 - 00000000 ____D C:\Users\Colin\AppData\Roaming\DAEMON Tools Lite 2016-08-21 19:29 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\ModemLogs 2016-08-21 19:05 - 2009-07-13 20:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-08-21 19:04 - 2015-08-24 01:33 - 00000000 ____D C:\Users\Colin\AppData\Local\MalwareProtectionLive 2016-08-21 18:57 - 2015-12-16 08:56 - 00000000 ____D C:\Users\Colin 2016-08-21 18:49 - 2015-08-24 14:23 - 00000000 ____D C:\Users\Colin\AppData\Local\Battle.net 2016-08-21 18:48 - 2015-12-11 15:08 - 00000900 ____R C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk 2016-08-21 18:48 - 2015-08-26 23:37 - 00001242 ____R C:\Users\Colin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\сhrоmе.lnk 2016-08-21 17:00 - 2015-08-24 14:24 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2016-08-21 14:40 - 2015-08-24 02:12 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Mumble 2016-08-21 13:03 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-20 20:49 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\rescache 2016-08-20 15:23 - 2015-10-30 00:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-08-19 14:30 - 2015-10-01 00:25 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-08-18 22:41 - 2015-10-22 14:56 - 00000000 ____D C:\Users\Colin\AppData\Roaming\SimulationCraft 2016-08-18 15:03 - 2015-08-26 22:18 - 00000000 ___RD C:\Users\Colin\OneDrive 2016-08-18 00:32 - 2015-08-24 04:11 - 00000000 ____D C:\Users\Colin\AppData\Roaming\vlc 2016-08-13 02:43 - 2016-01-04 22:26 - 00000000 ____D C:\Users\Colin\AppData\Roaming\Audacity 2016-08-13 01:43 - 2015-12-28 19:37 - 00000000 ____D C:\Users\Colin\AppData\Local\UNDERTALE 2016-08-12 22:55 - 2016-06-23 17:31 - 00000000 ____D C:\Users\Colin\AppData\Roaming\steelseries-engine-3-client 2016-08-12 14:27 - 2015-08-26 22:16 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-08-12 03:14 - 2015-10-30 02:07 - 00000000 ____D C:\Program Files\Windows Journal 2016-08-12 03:14 - 2015-10-30 00:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-12 03:14 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-11 14:07 - 2015-10-30 00:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-08-11 14:07 - 2015-10-30 00:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-11 14:07 - 2015-08-28 03:34 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-11 14:02 - 2015-08-28 03:34 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-05 14:42 - 2016-07-05 12:44 - 00000000 ____D C:\Program Files\AMD 2016-08-05 14:34 - 2016-07-05 12:43 - 00000000 ____D C:\AMD 2016-08-05 01:58 - 2015-08-24 00:19 - 00000000 ____D C:\Users\Colin\AppData\Local\DisplayFusion 2016-07-27 12:25 - 2010-11-20 20:27 - 00504488 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2016-07-25 13:56 - 2016-04-05 00:45 - 07234256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2016-07-25 13:56 - 2016-04-05 00:45 - 00180432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2016-07-25 13:56 - 2016-04-05 00:45 - 00149352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2016-07-25 13:56 - 2016-04-05 00:44 - 10284832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2016-07-25 13:56 - 2016-04-05 00:27 - 09310736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2016-07-25 13:56 - 2016-04-05 00:27 - 08864056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2016-07-25 13:55 - 2016-04-05 00:44 - 00160792 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2016-07-25 13:55 - 2016-04-05 00:44 - 00133808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2016-07-25 13:55 - 2016-04-05 00:43 - 09108624 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2016-07-25 13:55 - 2016-04-05 00:43 - 01272432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2016-07-25 13:55 - 2016-04-05 00:27 - 10967952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2016-07-25 13:55 - 2016-04-05 00:27 - 01546848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2016-07-25 13:54 - 2016-04-05 00:43 - 00134776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2016-07-25 13:53 - 2016-04-05 00:41 - 00012824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2016-07-25 13:53 - 2016-04-05 00:26 - 00232472 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2016-07-25 13:52 - 2016-04-05 00:39 - 00509464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2016-07-25 13:52 - 2016-04-05 00:38 - 26717720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys ==================== Files in the root of some directories ======= 2016-02-22 17:04 - 2016-02-22 17:04 - 0000017 _____ () C:\Users\Colin\AppData\Local\resmon.resmoncfg 2016-08-21 18:51 - 2016-08-21 18:51 - 0000000 _____ () C:\Users\Colin\AppData\Local\run.txt 2016-08-21 18:53 - 2016-08-21 18:53 - 0000001 _____ () C:\Users\Colin\AppData\Local\setupsuccessful.txt 2016-08-21 18:51 - 2016-08-21 18:53 - 0000000 _____ () C:\Users\Colin\AppData\Local\stxtname.txt 2015-12-16 08:55 - 2015-12-16 08:55 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Files to move or delete: ==================== C:\Users\Colin\JMARS_windows-x64_3_4_0.exe C:\Users\Colin\JMARS_windows-x64_3_4_2.exe C:\Users\Colin\JMARS_windows-x64_3_5_2.exe C:\Users\Colin\JMARS_windows-x64_3_5_3.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll [2016-04-12 14:43] - [2016-04-12 14:43] - 0686976 ____A (Microsoft Corporation) 412DBAFE32B64230A06DDD1D4FE6F7DF C:\WINDOWS\SysWOW64\dnsapi.dll [2016-04-12 14:43] - [2016-04-12 14:43] - 0535080 ____A () D41D8CD98F00B204E9800998ECF8427E C:\WINDOWS\SysWOW64\dnsapi.dll => no Company Name <===== ATTENTION C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-08-20 20:37 ==================== End of FRST.txt ============================