Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-10-2016
Ran by [removed] (administrator) on SELVERWOLF (27-10-2016 17:43:01)
Running from E:\My Downloads\Browser Downloads
[removed]
Platform: Windows 10 Pro Version 1511 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\Lighting Control\AsLedService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.28\AsusFanControlService.exe
() C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ThreatTrack Security Inc.) C:\Program Files (x86)\VIPRE\SBPIMSvc.exe
(Electronic Arts) E:\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\Precision XOC\PrecisionXServer.exe
(SAVITECH) C:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe
(Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe
(ThreatTrack Security Inc.) C:\Program Files (x86)\VIPRE\SBAMTray.exe
(ThreatTrack Security Inc.) C:\Program Files (x86)\VIPRE\SBAMSvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ThreatTrack Security Inc.) C:\Program Files (x86)\VIPRE\x64\AVCProxy.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\Precision XOC\PXSW10_x64.exe
(ThreatTrack Security Inc.) C:\Program Files (x86)\VIPRE\VipreEdgeProtection.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8712960 2015-10-08] (Realtek Semiconductor)
HKLM\...\Run: [SVLoadSense] => c:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe [1762000 2015-09-21] (SAVITECH)
HKLM\...\Run: [SS2UILauncher] => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [347616 2015-11-13] ()
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-29] (Logitech Inc.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1842624 2016-09-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [14885552 2016-03-23] (Corsair Components, Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1156824 2016-09-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SBAMTray] => C:\Program Files (x86)\VIPRE\SBAMTray.exe [3020816 2016-08-09] (ThreatTrack Security Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\...\RunOnce: [Uninstall C:\Users\Ra'ed AL-Huraid\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ra'ed AL-Huraid\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\...\RunOnce: [Uninstall C:\Users\Ra'ed AL-Huraid\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ra'ed AL-Huraid\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\...\MountPoints2: {5c658da1-6d64-11e6-8b26-806e6f6e6963} - "D:\setup.exe" 
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\...\MountPoints2: {a8569746-5ada-11e6-8add-c8ff2802614a} - "F:\Setup.exe" 
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} =>  No File
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] [removed] 8.8.8.8
Tcpip\..\Interfaces\{08f9ad62-9d4a-41eb-8f7d-344b89cf2de6}: [DhcpNameServer] [removed] 8.8.8.8
Tcpip\..\Interfaces\{97cdf796-ef6d-4b09-9a75-3a180576acad}: [DhcpNameServer] [removed] 8.8.8.8
ManualProxies: 

Internet Explorer:
==================
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP
HKU\S-1-5-21-2796851931-2952016419-931386412-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?pc=UE03&ocid=UE03DHP
BHO: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll [2016-08-09] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-27] (Oracle Corporation)
BHO-x32: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\VSGN.dll [2016-08-09] ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-27] (Oracle Corporation)
Toolbar: HKLM - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll [2016-08-09] ()
Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\VSGN.dll [2016-08-09] ()
Toolbar: HKU\S-1-5-21-2796851931-2952016419-931386412-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\x64\VSGNx64.dll [2016-08-09] ()
Handler-x32: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\VSGN.dll [2016-08-09] ()

FireFox:
========
FF ProfilePath: C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514 [2016-10-27]
FF NewTab: Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514 -> chrome://fvd.speeddial/content/fvd_about_blank.html
FF Homepage: Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514 -> chrome://fvd.speeddial/content/fvd_about_blank.html
FF Extension: (Diagnostics for Adblock Plus) - C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514\Extensions\[removed] [2016-08-21]
FF Extension: (Adblock Plus Pop-up Addon) - C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514\Extensions\[removed] [2016-08-21]
FF Extension: (Element Hiding Helper for Adblock Plus) - C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514\Extensions\[removed] [2016-10-27]
FF Extension: (Speed Dial [FVD] - New Tab Page, Sync...) - C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514\Extensions\[removed] [2016-10-15]
FF Extension: (Adblock Plus) - C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Mozilla\Firefox\Profiles\9l4wee9w.default-1475838030514\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-26]
FF HKU\S-1-5-21-2796851931-2952016419-931386412-1001\...\SeaMonkey\Extensions: [[removed]] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2016-10-27] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-27] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-27] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Default [2016-10-14]
CHR Profile: C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-10-14]
CHR Profile: C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2 [2016-10-25]
CHR Extension: (Google Slides) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-07]
CHR Extension: (Google Docs) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-07]
CHR Extension: (Google Drive) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-07]
CHR Extension: (YouTube) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-07]
CHR Extension: (Adblock Plus) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-08]
CHR Extension: (Google Sheets) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-07]
CHR Extension: (Google Docs Offline) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-07]
CHR Extension: (Gmail) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-07]
CHR Extension: (Chrome Media Router) - C:\Users\Ra'ed AL-Huraid\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-07]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2015-06-05] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [File not signed]
R2 ASUS LED Control Service; C:\Program Files (x86)\ASUS\Lighting Control\AsLedService.exe [296376 2015-11-20] (ASUSTek Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.28\AsusFanControlService.exe [398648 2015-08-20] (ASUSTeK Computer Inc.)
R2 AsusGameFirstService; C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe [346424 2015-04-10] (ASUSTeK)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [315472 2015-09-23] (Windows (R) Win 7 DDK provider)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1457160 2016-10-12] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [227104 2016-08-07] (EasyAntiCheat Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-08-11] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-29] (Logitech Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [455616 2016-09-30] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-22] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-09-30] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origin\OriginClientService.exe [2142728 2016-10-25] (Electronic Arts)
R2 Origin Web Helper Service; E:\Origin\OriginWebHelperService.exe [2209296 2016-10-25] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-09-17] ()
S3 PrintNotify; C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll [3318272 2016-07-16] (Microsoft Corporation) [File not signed]
R2 SBAMSvc; C:\Program Files (x86)\VIPRE\SBAMSvc.exe [6515672 2016-08-09] (ThreatTrack Security Inc.)
R2 SBPIMSvc; C:\Program Files (x86)\VIPRE\SBPIMSvc.exe [373776 2016-08-09] (ThreatTrack Security Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7534864 2016-08-25] (TeamViewer GmbH)
R3 VipreEdgeProtection; C:\Program Files (x86)\VIPRE\VipreEdgeProtection.exe [2861584 2016-08-04] (ThreatTrack Security Inc.)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2016-09-07] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364456 2016-09-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-09-07] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-21] (Intel(R) Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AndroidAFD; C:\Windows\SysWow64\drivers\AndroidAFDx64.sys [22192 2015-10-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-09-09] ()
R2 AsRamDisk; C:\Windows\system32\DRIVERS\asramdisk.sys [111416 2014-05-07] (Asus)
R0 asstahci64; C:\Windows\System32\drivers\asstahci64.sys [88936 2015-06-17] (Asmedia Technology)
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1603264 2016-07-28] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [285240 2016-07-28] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [850464 2016-07-28] (BitDefender)
S3 AWEAlloc; C:\Windows\system32\DRIVERS\awealloc.sys [21304 2014-02-17] (Olof Lagerkvist)
R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [47840 2016-01-20] (Corsair)
R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21728 2016-01-20] (Corsair)
S3 dtproscsibus; C:\Windows\System32\drivers\dtproscsibus.sys [30352 2016-08-05] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [559080 2016-04-19] (Intel Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [58952 2016-08-03] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [50776 2016-08-03] (ThreatTrack Security)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-09-21] (Intel Corporation)
R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2015-05-14] (ASUSTeK Computer Inc.)
S3 ladfGSS; C:\Windows\system32\drivers\ladfGSS.sys [45208 2016-04-15] (Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)
R1 NFC_Driver; C:\Windows\System32\drivers\NFC_Driver.sys [48336 2015-04-10] (Titan ARC Corp.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-09-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-09-17] (NVIDIA Corporation)
R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2356184 2015-09-22] (Qualcomm Atheros, Inc.)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [129144 2016-08-03] (ThreatTrack Security Inc.)
R3 sbhips; C:\Windows\System32\drivers\sbhips.sys [82064 2016-08-03] (ThreatTrack Security)
R1 sbwfw; C:\Windows\system32\DRIVERS\sbwfw.sys [363896 2016-08-03] (ThreatTrack Security)
R3 sbwtis; C:\Windows\system32\DRIVERS\sbwtis.sys [113976 2016-08-03] (ThreatTrack Security)
R1 SvThLSNS; c:\Program Files (x86)\SAVITECH\SVLoadSense\x64\SvThLSNS.sys [15184 2015-09-21] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R2 WebExaminer; C:\Windows\system32\Drivers\WebExaminer64.sys [54328 2016-08-04] (ThreatTrack Security Inc.)
R3 WinRing0_1_2_0; C:\Program Files (x86)\EVGA\Precision XOC\WinRing0\WinRing0x64.sys [14536 2015-10-20] (OpenLibSys.org)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2016-10-07] (Zemana Ltd.)
S3 cpuz135; \??\C:\Users\RA'EDA~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]
S0 FNETHYRAMAS; System32\drivers\FNETHYRAMAS.SYS [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 NAVENG; \??\C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\SDSDefs\20161013.032\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Security\NortonData\22.8.0.50\Definitions\SDSDefs\20161013.032\EX64.SYS [X]
U0 Partizan; system32\drivers\Partizan.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 17:43 - 2016-10-27 17:43 - 00000000 ____D C:\FRST
2016-10-27 17:39 - 2016-10-27 17:40 - 00274868 _____ C:\TDSSKiller.3.1.0.11_27.10.2016_17.39.38_log.txt
2016-10-27 17:35 - 2016-10-27 17:35 - 00000000 ___HD C:\OneDriveTemp
2016-10-27 17:34 - 2016-10-27 17:36 - 00835156 _____ C:\TDSSKiller.3.1.0.11_27.10.2016_17.34.17_log.txt
2016-10-27 17:32 - 2016-10-27 17:33 - 00005578 _____ C:\TDSSKiller.3.1.0.11_27.10.2016_17.32.33_log.txt
2016-10-27 17:24 - 2016-10-27 17:34 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-27 17:24 - 2016-10-27 17:24 - 00003806 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-27 17:22 - 2016-10-27 17:22 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-10-27 17:22 - 2016-10-27 17:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-27 17:22 - 2016-10-27 17:22 - 00000000 ____D C:\Program Files (x86)\Java
2016-10-27 16:41 - 2016-10-27 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EVGA
2016-10-25 20:05 - 2016-10-25 20:05 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-10-25 20:05 - 2016-10-22 10:25 - 00215608 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-10-25 20:05 - 2016-10-22 10:25 - 00203320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 01762752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-10-25 20:05 - 2016-10-22 09:04 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-10-25 20:05 - 2016-10-22 08:33 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-10-25 20:05 - 2016-10-22 08:22 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-10-25 20:05 - 2016-10-21 10:17 - 07500035 _____ C:\Windows\system32\nvcoproc.bin
2016-10-25 20:05 - 2016-09-09 21:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-10-25 20:05 - 2016-09-09 21:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-10-25 20:05 - 2016-09-09 21:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-10-25 20:05 - 2016-09-09 21:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-10-25 20:04 - 2016-10-23 10:53 - 14145592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-10-25 20:04 - 2016-10-22 11:41 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-10-25 20:04 - 2016-10-22 11:41 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-10-25 20:04 - 2016-10-22 11:41 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 40125496 _____ C:\Windows\system32\nvcompiler.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 35224120 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 34707392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 28199992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 24352776 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 20704504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 17569488 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 14507816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 10910184 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 10782256 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 10332336 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 09119792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 08912488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 08723456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 03922448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 03465312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 02941496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 02574272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437563.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437563.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 01038392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00974784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00944184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00894400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00801560 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00683824 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00642392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00573072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00572584 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00470584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00327408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00172736 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00150784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-10-25 20:04 - 2016-10-22 10:25 - 00042296 _____ C:\Windows\system32\nvinfo.pb
2016-10-25 20:04 - 2016-10-22 10:25 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-10-25 20:04 - 2016-10-22 10:25 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-10-19 20:54 - 2016-10-19 21:03 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\DayZ
2016-10-14 16:26 - 2016-10-14 16:26 - 00000553 _____ C:\Users\Public\Desktop\Steam.lnk
2016-10-14 16:20 - 2016-10-15 16:49 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-10-14 15:52 - 2016-08-03 16:18 - 00058952 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys
2016-10-14 15:52 - 2016-08-03 16:10 - 00050776 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys
2016-10-14 15:01 - 2016-08-04 12:59 - 00054328 _____ (ThreatTrack Security Inc.) C:\Windows\system32\Drivers\WebExaminer64.sys
2016-10-14 15:00 - 2016-10-14 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIPRE
2016-10-14 15:00 - 2016-08-03 17:46 - 00082064 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\sbhips.sys
2016-10-14 15:00 - 2016-04-20 16:26 - 00047632 _____ (ThreatTrack Security Inc.) C:\Windows\system32\sbbd.exe
2016-10-14 14:58 - 2016-10-14 15:02 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\VIPRE
2016-10-14 14:25 - 2016-10-14 14:25 - 00000000 ____D C:\ProgramData\NortonInstaller
2016-10-14 14:25 - 2016-10-14 14:25 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-10-14 14:18 - 2016-10-14 14:55 - 00000000 ____D C:\ProgramData\Norton
2016-10-14 14:18 - 2016-10-14 14:18 - 00000000 ____D C:\Users\Public\Downloads\Norton
2016-10-14 14:06 - 2016-10-14 16:01 - 00000000 ____D C:\ProgramData\VIPRE
2016-10-12 16:46 - 2016-10-05 10:56 - 01644736 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 01242304 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 00602304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 00591040 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 00329920 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 00290496 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-10-12 16:46 - 2016-10-05 10:56 - 00144576 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-12 16:46 - 2016-10-05 10:56 - 00085696 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-12 16:46 - 2016-10-05 10:20 - 01030408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-10-12 16:46 - 2016-10-05 10:20 - 00875480 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-10-12 16:46 - 2016-10-05 10:19 - 00129376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2016-10-12 16:46 - 2016-10-05 10:18 - 07468384 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-10-12 16:46 - 2016-10-05 10:18 - 01317640 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-10-12 16:46 - 2016-10-05 10:18 - 01142560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-10-12 16:46 - 2016-10-05 10:01 - 01637216 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-12 16:46 - 2016-10-05 10:01 - 01337184 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2016-10-12 16:46 - 2016-10-05 09:54 - 01297760 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2016-10-12 16:46 - 2016-10-05 09:17 - 03693064 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-10-12 16:46 - 2016-10-05 09:15 - 00304752 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-10-12 16:46 - 2016-10-05 09:14 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-10-12 16:46 - 2016-10-05 09:09 - 00604920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-10-12 16:46 - 2016-10-05 08:45 - 00987488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2016-10-12 16:46 - 2016-10-05 08:39 - 01988448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-10-12 16:46 - 2016-10-05 08:39 - 00576856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-10-12 16:46 - 2016-10-05 08:38 - 00636296 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-10-12 16:46 - 2016-10-05 08:38 - 00393056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-10-12 16:46 - 2016-10-05 08:37 - 00640976 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-10-12 16:46 - 2016-10-05 08:31 - 00422240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-10-12 16:46 - 2016-10-05 08:25 - 00871776 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-10-12 16:46 - 2016-10-05 08:23 - 00305808 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-10-12 16:46 - 2016-10-05 08:08 - 02937896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-10-12 16:46 - 2016-10-05 08:05 - 00256704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-10-12 16:46 - 2016-10-05 08:01 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2016-10-12 16:46 - 2016-10-05 08:00 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-10-12 16:46 - 2016-10-05 07:51 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-10-12 16:46 - 2016-10-05 07:50 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-10-12 16:46 - 2016-10-05 07:49 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2016-10-12 16:46 - 2016-10-05 07:49 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2016-10-12 16:46 - 2016-10-05 07:47 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\DevDispItemProvider.dll
2016-10-12 16:46 - 2016-10-05 07:47 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-10-12 16:46 - 2016-10-05 07:38 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-10-12 16:46 - 2016-10-05 07:35 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-10-12 16:46 - 2016-10-05 07:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-10-12 16:46 - 2016-10-05 07:33 - 00546456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-10-12 16:46 - 2016-10-05 07:32 - 00538744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-10-12 16:46 - 2016-10-05 07:30 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-10-12 16:46 - 2016-10-05 07:30 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2016-10-12 16:46 - 2016-10-05 07:30 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-10-12 16:46 - 2016-10-05 07:29 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-10-12 16:46 - 2016-10-05 07:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack_win.dll
2016-10-12 16:46 - 2016-10-05 07:23 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-10-12 16:46 - 2016-10-05 07:19 - 00717152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2016-10-12 16:46 - 2016-10-05 07:18 - 00253080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2016-10-12 16:46 - 2016-10-05 07:17 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-10-12 16:46 - 2016-10-05 07:17 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2016-10-12 16:46 - 2016-10-05 07:15 - 00458240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2016-10-12 16:46 - 2016-10-05 07:10 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-10-12 16:46 - 2016-10-05 07:10 - 00602624 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-10-12 16:46 - 2016-10-05 07:07 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationFrame.dll
2016-10-12 16:46 - 2016-10-05 07:05 - 00841728 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-10-12 16:46 - 2016-10-05 07:04 - 01718272 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-10-12 16:46 - 2016-10-05 07:02 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-10-12 16:46 - 2016-10-05 07:00 - 01661952 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-12 16:46 - 2016-10-05 07:00 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-10-12 16:46 - 2016-10-05 07:00 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-10-12 16:46 - 2016-10-05 06:57 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2016-10-12 16:46 - 2016-10-05 06:55 - 03549696 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-10-12 16:46 - 2016-10-05 06:48 - 02437120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-12 16:46 - 2016-10-05 06:40 - 03589120 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-10-12 16:46 - 2016-10-05 06:40 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-10-12 16:46 - 2016-10-05 06:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevDispItemProvider.dll
2016-10-12 16:46 - 2016-10-05 06:37 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2016-10-12 16:46 - 2016-10-05 06:30 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2016-10-12 16:46 - 2016-10-05 06:29 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-10-12 16:46 - 2016-10-05 06:29 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-10-12 16:46 - 2016-10-05 06:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2016-10-12 16:46 - 2016-10-05 06:24 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2016-10-12 16:46 - 2016-10-05 06:24 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2016-10-12 16:46 - 2016-10-05 06:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-10-12 16:46 - 2016-10-05 06:15 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2016-10-12 16:46 - 2016-10-05 06:14 - 03585536 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-10-12 16:46 - 2016-10-05 06:13 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2016-10-12 16:46 - 2016-10-05 06:10 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-10-12 16:46 - 2016-10-05 06:09 - 00501760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-10-12 16:46 - 2016-10-05 06:05 - 01467904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-10-12 16:46 - 2016-10-05 06:04 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-10-12 16:46 - 2016-10-05 06:04 - 00885248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-10-12 16:46 - 2016-10-05 05:59 - 02362880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-10-12 16:46 - 2016-10-05 05:55 - 04895232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-10-12 16:46 - 2016-10-05 05:54 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-12 16:46 - 2016-10-05 05:50 - 22379520 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-10-12 16:46 - 2016-10-05 05:50 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-10-12 16:46 - 2016-10-05 05:40 - 01626112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-10-12 16:46 - 2016-10-05 05:39 - 24611328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-10-12 16:46 - 2016-10-05 05:39 - 13392384 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-10-12 16:46 - 2016-10-05 05:39 - 01500672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-10-12 16:46 - 2016-10-05 05:33 - 14255104 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-10-12 16:46 - 2016-10-05 05:27 - 09920512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-10-12 16:46 - 2016-10-05 05:26 - 07836672 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-10-12 16:46 - 2016-10-05 05:22 - 03664384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-10-12 16:46 - 2016-10-05 05:13 - 19349504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-10-12 16:46 - 2016-10-05 05:13 - 18675200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-10-12 16:46 - 2016-10-05 05:13 - 12134400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-10-12 16:46 - 2016-10-05 05:06 - 12587008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-10-12 16:46 - 2016-10-05 05:01 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-10-12 16:46 - 2016-10-01 05:16 - 00446124 _____ C:\Windows\system32\ApnDatabase.xml
2016-10-12 16:46 - 2016-09-27 05:39 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-12 16:46 - 2016-09-17 11:08 - 01752576 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-10-12 16:46 - 2016-09-17 10:45 - 02610176 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-10-12 16:46 - 2016-09-17 10:28 - 03077120 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-10-12 16:46 - 2016-09-17 10:12 - 01526272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-10-12 16:46 - 2016-09-17 09:45 - 06312448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-10-12 16:46 - 2016-09-17 09:43 - 02552832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-10-12 16:46 - 2016-09-17 09:22 - 04405248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-10-12 16:46 - 2016-06-18 07:55 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2016-10-12 16:46 - 2016-06-18 07:51 - 00470528 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-10-12 16:46 - 2016-06-18 07:49 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2016-10-12 16:46 - 2016-06-18 07:45 - 00361472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2016-10-09 01:13 - 2016-10-09 01:47 - 00272454 _____ C:\TDSSKiller.3.1.0.11_09.10.2016_01.13.48_log.txt
2016-10-09 00:59 - 2016-10-09 00:59 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\ESET
2016-10-08 17:20 - 2016-10-08 17:20 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\LolClient
2016-10-08 16:17 - 2016-10-08 16:17 - 00000000 _____ C:\autoexec.bat
2016-10-08 14:50 - 2016-10-08 16:05 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\LocalLow\Adblock Plus for IE
2016-10-07 13:34 - 2016-10-07 13:34 - 00000000 _____ C:\Windows\system32\lic2.xml8976
2016-10-07 13:28 - 2016-10-07 13:28 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\QuickScan
2016-10-07 12:23 - 2016-10-07 12:23 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2016-10-07 12:23 - 2016-10-07 12:23 - 00000000 ____D C:\Program Files\HitmanPro
2016-10-07 12:19 - 2016-10-07 12:23 - 00000000 ____D C:\ProgramData\HitmanPro
2016-10-07 12:18 - 2016-10-27 17:43 - 00037005 _____ C:\Windows\ZAM_Guard.krnl.trace
2016-10-07 12:18 - 2016-10-14 03:34 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2016-10-07 12:18 - 2016-10-13 22:38 - 00017177 _____ C:\Windows\ZAM.krnl.trace
2016-10-07 12:18 - 2016-10-07 12:18 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2016-10-07 12:18 - 2016-10-07 12:18 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Zemana
2016-10-07 12:12 - 2016-10-24 22:01 - 00000000 ____D C:\AdwCleaner
2016-10-07 12:11 - 2016-10-15 16:22 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Steam
2016-10-07 11:49 - 2016-10-07 11:50 - 00000249 _____ C:\Windows\system32\Partizan.RRI
2016-10-07 11:40 - 2016-10-07 11:40 - 00000000 ____D C:\ProgramData\RegRun
2016-10-07 11:39 - 2016-10-07 11:52 - 00000000 ____D C:\Program Files (x86)\UnHackMe
2016-10-07 11:39 - 2016-10-07 11:39 - 00000002 RSHOT C:\Windows\winstart.bat
2016-10-07 11:39 - 2016-10-07 11:39 - 00000002 RSHOT C:\Windows\SysWOW64\CONFIG.NT
2016-10-07 11:39 - 2016-10-07 11:39 - 00000002 RSHOT C:\Windows\SysWOW64\AUTOEXEC.NT
2016-10-06 23:21 - 2016-10-06 23:21 - 00002283 _____ C:\Users\Ra'ed AL-Huraid\Desktop\Discord.lnk
2016-10-06 23:21 - 2016-10-06 23:21 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Discord
2016-10-06 22:52 - 2016-10-06 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-10-06 15:04 - 2016-10-07 13:42 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-10-06 15:04 - 2016-10-07 13:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-10-06 15:04 - 2016-10-06 15:04 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-10-06 15:01 - 2016-10-06 15:01 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-06 15:00 - 2016-10-06 15:00 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-10-05 16:26 - 2016-10-06 23:07 - 00004012 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-05 16:26 - 2016-10-06 23:07 - 00003984 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-05 16:26 - 2016-10-06 23:07 - 00003948 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-05 16:26 - 2016-10-06 23:07 - 00003922 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-05 16:26 - 2016-10-06 23:07 - 00003760 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-10-05 16:26 - 2016-10-06 23:07 - 00003718 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-09-30 16:51 - 2016-09-30 16:51 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Steam
2016-09-30 16:51 - 2016-09-30 16:51 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\LocalLow\E_Line Media
2016-09-30 16:51 - 2016-09-30 16:51 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\EMU
2016-09-30 16:49 - 2016-09-30 16:49 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\BANDAI NAMCO Games
2016-09-30 11:44 - 2016-09-30 11:44 - 00002103 _____ C:\Users\Ra'ed AL-Huraid\Desktop\Virtual CloneDrive.lnk
2016-09-29 16:17 - 2015-05-27 14:51 - 00156160 _____ C:\Windows\system32\FW1FontWrapper_x64.dll
2016-09-27 20:58 - 2016-10-15 04:22 - 00007604 _____ C:\Users\Ra'ed AL-Huraid\AppData\Local\Resmon.ResmonCfg

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-10-27 17:40 - 2016-08-04 12:07 - 00879220 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-27 17:40 - 2015-10-30 10:21 - 00000000 ____D C:\Windows\INF
2016-10-27 17:35 - 2016-08-04 21:30 - 00003480 _____ C:\Windows\SysWOW64\VipreEdgeProtectionOff.ini
2016-10-27 17:35 - 2016-08-04 21:30 - 00003480 _____ C:\Windows\system32\VipreEdgeProtectionOff.ini
2016-10-27 17:35 - 2016-08-04 12:02 - 00000000 ___RD C:\Users\Ra'ed AL-Huraid\OneDrive
2016-10-27 17:34 - 2016-08-17 02:04 - 00000000 ____D C:\ProgramData\NVIDIA
2016-10-27 17:34 - 2016-08-05 10:14 - 00000934 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-27 17:34 - 2016-08-05 08:34 - 01048576 _____ C:\Windows\PE_Rom.dll
2016-10-27 17:34 - 2016-08-04 11:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-27 17:33 - 2015-10-30 09:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-10-27 17:32 - 2016-08-05 11:17 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Origin
2016-10-27 17:24 - 2016-08-05 10:14 - 00000938 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-27 17:24 - 2016-08-05 08:48 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Adobe
2016-10-27 17:24 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-27 17:24 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-27 17:22 - 2016-08-09 13:13 - 00000000 ____D C:\ProgramData\Oracle
2016-10-27 17:06 - 2016-08-21 00:15 - 00290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe
2016-10-27 17:04 - 2016-08-05 06:59 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Battle.net
2016-10-27 16:49 - 2016-08-05 08:27 - 00004186 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{5CA81C59-4679-4D4C-8428-746188EA12E1}
2016-10-27 16:48 - 2016-08-05 11:46 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Ubisoft Game Launcher
2016-10-27 16:47 - 2016-08-05 11:03 - 00000000 ____D C:\ProgramData\Origin
2016-10-27 16:46 - 2016-08-04 21:17 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\Deployment
2016-10-27 16:43 - 2016-08-05 10:08 - 00000000 ___RD C:\Users\Ra'ed AL-Huraid\Desktop\Overclocking Tools
2016-10-27 16:43 - 2016-08-04 11:57 - 00228040 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-27 16:42 - 2016-09-16 15:18 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-10-27 16:37 - 2015-10-30 10:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-27 16:37 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\AppReadiness
2016-10-25 20:06 - 2016-08-27 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-10-25 20:06 - 2016-08-04 12:34 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-25 20:06 - 2016-08-04 12:34 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-25 20:05 - 2016-08-04 12:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-25 20:05 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\Help
2016-10-24 19:19 - 2016-08-26 15:41 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\TeamViewer
2016-10-24 18:34 - 2016-08-05 09:39 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\CrashDumps
2016-10-22 17:34 - 2016-08-05 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-22 17:33 - 2016-08-04 12:01 - 00000000 ____D C:\Users\Ra'ed AL-Huraid
2016-10-22 17:04 - 2016-08-04 12:35 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\NVIDIA Corporation
2016-10-22 16:11 - 2016-09-25 17:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-21 23:51 - 2016-09-17 22:26 - 00003422 _____ C:\Windows\System32\Tasks\EVGAPrecisionX
2016-10-21 23:49 - 2016-09-16 15:18 - 00000000 ____D C:\Program Files (x86)\EVGA
2016-10-21 21:24 - 2016-08-05 10:18 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-15 16:49 - 2016-08-04 12:36 - 00000000 ____D C:\Windows\system32\appmgmt
2016-10-14 19:03 - 2016-08-08 04:34 - 00000000 ____D C:\Program Files\Rockstar Games
2016-10-14 19:03 - 2016-08-08 04:34 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-10-14 19:03 - 2016-08-04 12:25 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-14 17:01 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\rescache
2016-10-14 16:51 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-14 16:51 - 2015-10-30 10:11 - 00000000 ____D C:\Windows\CbsTemp
2016-10-14 15:52 - 2016-08-04 21:26 - 00000000 ____D C:\Program Files (x86)\VIPRE
2016-10-14 14:53 - 2015-10-30 10:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-10-14 14:53 - 2015-10-30 09:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-10-14 14:39 - 2016-08-05 10:41 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-10-14 14:07 - 2016-08-05 10:41 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\IDM
2016-10-14 14:03 - 2016-09-16 17:08 - 00000000 ___RD C:\Users\Ra'ed AL-Huraid\Desktop\System Cleaners
2016-10-14 13:53 - 2016-09-22 18:25 - 00000000 ___HD C:\$SysReset
2016-10-14 03:36 - 2016-08-04 12:01 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-14 03:34 - 2015-10-30 10:24 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-10-14 03:34 - 2015-10-30 10:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-10-14 03:34 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2016-10-14 03:34 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\system32\en-GB
2016-10-13 17:25 - 2016-08-05 07:14 - 00000000 ____D C:\Windows\system32\MRT
2016-10-13 17:22 - 2016-08-05 07:14 - 143495576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-10-12 22:57 - 2016-08-05 10:41 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\DMCache
2016-10-11 16:02 - 2016-08-05 10:25 - 00004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-10-11 16:02 - 2016-08-05 08:37 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-10-10 00:33 - 2016-08-05 10:31 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\tixati
2016-10-08 17:18 - 2016-08-06 20:35 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Skype
2016-10-07 11:58 - 2015-10-30 10:24 - 00000000 ____D C:\Windows\schemas
2016-10-06 23:21 - 2016-08-05 07:25 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2016-10-06 23:21 - 2016-08-05 07:25 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\SquirrelTemp
2016-10-06 16:23 - 2015-10-30 21:04 - 00000000 ____D C:\Windows\SKB
2016-10-06 15:14 - 2015-10-30 21:04 - 00000000 ____D C:\Windows\en-GB
2016-10-06 01:35 - 2016-09-16 16:35 - 01065984 _____ C:\Users\Ra'ed AL-Huraid\AppData\Local\file__0.localstorage
2016-10-05 16:26 - 2016-08-27 18:51 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Local\NVIDIA
2016-10-01 03:23 - 2015-10-30 10:26 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-01 03:23 - 2015-10-30 10:26 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-30 10:51 - 2016-08-05 10:30 - 00000000 ____D C:\Users\Ra'ed AL-Huraid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tixati
2016-09-30 10:51 - 2016-08-05 10:30 - 00000000 ____D C:\Program Files\tixati
2016-09-30 07:24 - 2016-08-27 19:09 - 01842624 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-09-30 07:24 - 2016-08-27 19:09 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-09-30 07:24 - 2016-08-27 19:09 - 01444288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-09-30 07:24 - 2016-08-27 19:09 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-09-30 07:24 - 2016-08-27 19:09 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll

==================== Files in the root of some directories =======

2016-09-16 16:35 - 2016-10-06 01:35 - 1065984 _____ () C:\Users\Ra'ed AL-Huraid\AppData\Local\file__0.localstorage
2016-09-27 20:58 - 2016-10-15 04:22 - 0007604 _____ () C:\Users\Ra'ed AL-Huraid\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Ra'ed AL-Huraid\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Ra'ed AL-Huraid\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Ra'ed AL-Huraid\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-10-24 16:04

==================== End of FRST.txt ============================