Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.01.2019 Ran by [removed] (administrator) on DESKTOP-39DB5TF (25-01-2019 21:22:17) Running from C:\Users\[removed]\Downloads [removed] Platform: Windows 10 Enterprise Version 1803 17134.407 (X64) Language: English (United States) Default browser: FF Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (FreeDownloadManager.org) C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe (EnigmaSoft Limited) C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1901.7-0\MsMpEng.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1901.7-0\NisSrv.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\InputMethod\CHT\ChtIME.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9230280 2017-06-21] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489384 2017-06-21] (Realtek Semiconductor) HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [723928 2017-01-26] (Waves Audio Ltd.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-12] () HKLM-x32\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-104378065-2299909944-1035316951-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3208992 2018-10-13] (Valve Corporation) HKU\S-1-5-21-104378065-2299909944-1035316951-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [3932672 2018-07-06] (Microsoft Corporation) <==== ATTENTION HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2019-01-23] (Google Inc.) Startup: C:\Users\Kashif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2018-06-13] ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) GroupPolicy: Restriction ? <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: Hosts file not detected in the default directory Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1c9ebcc9-5618-49d9-b80c-97f8863de84c}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{b377dc45-f841-46ea-bc58-d666ce95d1dc}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope value is missing SearchScopes: HKU\S-1-5-21-104378065-2299909944-1035316951-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = BHO: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2018-09-29] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2018-09-29] (Oracle Corporation) BHO-x32: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: gb06lqm6.Kashif-1544626519532 FF ProfilePath: C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\weyqsod6.default [not found] <==== ATTENTION FF ProfilePath: C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\g6wyoki8.437m4gjd.default-1523539312422 [not found] <==== ATTENTION FF ProfilePath: C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\jlymv6kk.user [2019-01-24] FF Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\jlymv6kk.user\Extensions\[removed] [2019-01-24] FF ProfilePath: C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532 [2019-01-25] FF NewTab: Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532 -> about:newtab FF Extension: (Hide My IP) - C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532\Extensions\[removed] [2019-01-05] FF Extension: (Notifier for Gmail™) - C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532\Extensions\[removed] [2019-01-02] FF Extension: (clean-youtube) - C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532\Extensions\[removed] [2019-01-02] FF Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\Kashif\AppData\Roaming\Mozilla\Firefox\Profiles\gb06lqm6.Kashif-1544626519532\Extensions\[removed] [2019-01-24] FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2018-09-29] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2018-09-29] (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-01-23] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-01-23] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN) FF Plugin HKU\S-1-5-21-104378065-2299909944-1035316951-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Kashif\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-09-05] (Zoom Video Communications, Inc.) Chrome: ======= CHR Profile: C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default [2019-01-23] CHR Extension: (Slides) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-23] CHR Extension: (Docs) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-23] CHR Extension: (Google Drive) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-01-23] CHR Extension: (YouTube) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-23] CHR Extension: (Sheets) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-23] CHR Extension: (Google Docs Offline) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-23] CHR Extension: (Chrome Web Store Payments) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-23] CHR Extension: (Gmail) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-01-23] CHR Extension: (Chrome Media Router) - C:\Users\Kashif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-01-23] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6875688 2018-09-28] () R2 EsgShKernel; C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe [10191664 2019-01-21] (EnigmaSoft Limited) S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2269504 2018-10-25] (Electronic Arts) S4 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3130184 2018-10-25] (Electronic Arts) S4 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [309984 2017-06-21] (Realtek Semiconductor) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation) S4 sesvc; C:\Program Files (x86)\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com) [File not signed] S4 ShMonitor; C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe [539440 2019-01-21] (EnigmaSoft Limited) S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\NisSrv.exe [4096976 2019-01-24] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1901.7-0\MsMpEng.exe [113992 2019-01-24] (Microsoft Corporation) S3 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc [X] S4 HnGSteamService; H:\SteamLibrary\steamapps\common\Heroes & Generals\hngservice.exe [X] S2 QMEmulatorService; "D:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe" [X] ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 25444; C:\Users\Kashif\AppData\Local\Temp\rr.bat [12144 2019-01-25] () [File not signed] <==== ATTENTION R2 aow_drv; D:\Program Files\TxGameAssistant\UI\2.0.7755.123\aow_drv_x64_ev.sys [859240 2019-01-07] (Tencent) R0 C51E748E; C:\Windows\System32\drivers\C51E748E.sys [478392 2019-01-22] (Kaspersky Lab ZAO) R3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-19] (Samsung Electronics Co., Ltd.) R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d62x64.sys [534488 2017-05-31] (Intel Corporation) R3 EnigmaFileMonDriver; C:\Windows\system32\Drivers\EnigmaFileMonDriver.sys [69432 2019-01-24] (EnigmaSoft Limited) R3 IntcAzAudAddService; C:\Windows\system32\drivers\RTDVHD64.sys [2682824 2017-06-21] (Realtek Semiconductor Corp.) S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [12400 2018-09-29] (Macrovision Europe Ltd) [File not signed] R3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.) S3 usbrndis6; C:\Windows\System32\drivers\usb80236.sys [22016 2018-04-12] (Microsoft Corporation) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46488 2019-01-24] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [343032 2019-01-24] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [63480 2019-01-24] (Microsoft Corporation) R3 wovad_micarray; C:\Windows\system32\drivers\womic.sys [37944 2018-05-13] (Windows (R) Win 7 DDK provider) R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [310536 2018-09-27] (BigNox Corporation) R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2019-01-22] (Zemana Ltd.) S3 CBC46GPC; \??\C:\Users\Kashif\AppData\Local\Temp\CBC46GPC.sys [X] <==== ATTENTION S3 DTy33drT; \??\C:\Users\Kashif\AppData\Local\Temp\DTy33drT.sys [X] <==== ATTENTION S3 DvF7sQg; \??\C:\Users\Kashif\AppData\Local\Temp\DvF7sQg.sys [X] <==== ATTENTION S1 edunnlkt; \??\C:\Windows\system32\drivers\edunnlkt.sys [X] S1 hmnjqglu; \??\C:\Windows\system32\drivers\hmnjqglu.sys [X] S1 mapqqash; \??\C:\Windows\system32\drivers\mapqqash.sys [X] S3 MBAMFarflt; system32\DRIVERS\farflt.sys [X] S1 mruniurr; \??\C:\Windows\system32\drivers\mruniurr.sys [X] S3 Uxv34iGQ; \??\C:\Users\Kashif\AppData\Local\Temp\Uxv34iGQ.sys [X] <==== ATTENTION S1 vhrxropv; \??\C:\Windows\system32\drivers\vhrxropv.sys [X] S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X] S3 ZBD50BdQ; \??\C:\Users\Kashif\AppData\Local\Temp\ZBD50BdQ.sys [X] <==== ATTENTION ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-01-25 21:22 - 2019-01-25 21:23 - 000014645 _____ C:\Users\Kashif\Downloads\FRST.txt 2019-01-25 21:21 - 2019-01-25 21:22 - 000000000 ____D C:\FRST 2019-01-25 21:20 - 2019-01-25 21:20 - 002428416 _____ (Farbar) C:\Users\Kashif\Downloads\FRST64.exe 2019-01-25 21:18 - 2019-01-25 21:18 - 001787904 _____ (Farbar) C:\Users\Kashif\Downloads\FRST.exe 2019-01-25 20:12 - 2019-01-25 20:13 - 000000000 ____D C:\Users\Kashif\Desktop\AAPIcc 2019-01-25 20:08 - 2019-01-23 11:54 - 002464768 _____ () C:\Users\Kashif\Desktop\STOPDecrypter.exe 2019-01-25 20:07 - 2019-01-25 20:07 - 002362920 _____ C:\Users\Kashif\Downloads\STOPDecrypter.zip 2019-01-25 19:09 - 2018-12-18 20:37 - 004796416 _____ C:\Users\Kashif\Desktop\hackpubgm.com esp.exe 2019-01-25 16:02 - 2019-01-25 16:02 - 005122236 _____ C:\Users\Kashif\Downloads\pubg_v0105_hack_55465.zip 2019-01-25 00:05 - 2019-01-25 00:05 - 000000000 ____D C:\Users\Kashif\Downloads\Full Driver 2019-01-24 23:50 - 2019-01-25 00:04 - 153715262 _____ C:\Users\Kashif\Downloads\Full Driver.zip 2019-01-24 23:43 - 2019-01-24 23:43 - 006084571 _____ C:\Users\Kashif\Downloads\v2.8 hackPUBgm.com.rar 2019-01-24 23:23 - 2019-01-24 23:23 - 006142670 _____ C:\Users\Kashif\Downloads\v2.8_hackPUBgm.com.zip 2019-01-24 23:16 - 2019-01-24 23:16 - 005232908 _____ C:\Users\Kashif\Downloads\pubg_hack_tencent_buddy_aim_esp_fly_no_recoil_speedhack_e93df.zip 2019-01-24 21:05 - 2019-01-24 21:06 - 000000000 ____D C:\Users\Kashif\Desktop\Locale Emulator 2019-01-24 20:08 - 2019-01-24 20:08 - 000001343 _____ C:\Users\Kashif\Desktop\AndroidEmulator - Shortcut.lnk 2019-01-24 20:04 - 2019-01-25 19:47 - 000000203 _____ C:\Users\Kashif\Desktop\运行配置.ini 2019-01-24 19:48 - 2019-01-24 19:48 - 004729482 _____ C:\Users\Kashif\Desktop\hackpubgm.com esp line.zip 2019-01-24 19:45 - 2019-01-24 19:45 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\Tencent 2019-01-24 19:45 - 2019-01-24 19:45 - 000000000 ____D C:\ProgramData\Tencent 2019-01-24 19:43 - 2019-01-24 19:43 - 000000000 ____D C:\Users\Kashif\Downloads\hackpubgm.com v1.8esp line ver0.10.0 (1) 2019-01-24 19:32 - 2019-01-24 19:33 - 004729479 _____ C:\Users\Kashif\Downloads\hackpubgm.com v1.8esp line ver0.10.0 (1).zip 2019-01-24 19:32 - 2019-01-24 19:32 - 004729479 _____ C:\Users\Kashif\Downloads\hackpubgm.com v1.8esp line ver0.10.0.zip 2019-01-24 19:01 - 2019-01-24 19:01 - 001851392 _____ C:\Users\Kashif\Downloads\C++_Dx11.rar.fdmdownload 2019-01-24 19:01 - 2019-01-24 19:01 - 000000377 _____ C:\Users\Kashif\Downloads\PUBG MOBILE_v0.9.0_apkpure.com (1).xapk 2019-01-24 19:01 - 2019-01-24 19:01 - 000000000 _____ C:\Users\Kashif\Downloads\4nqtx88zz7bwzmxaqex5c4xacr.mp4.fdmdownload 2019-01-24 17:55 - 2019-01-24 17:55 - 000000000 ____D C:\ProgramData\dbg 2019-01-23 20:39 - 2019-01-23 20:40 - 000000000 ____D C:\Program Files\Recuva 2019-01-23 20:39 - 2019-01-23 20:39 - 000002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-01-23 20:39 - 2019-01-23 20:39 - 000002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-01-23 20:39 - 2019-01-23 20:39 - 000001699 _____ C:\Users\Public\Desktop\Recuva.lnk 2019-01-23 20:39 - 2019-01-23 20:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva 2019-01-23 20:28 - 2019-01-24 18:51 - 000003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2019-01-23 20:28 - 2019-01-24 18:51 - 000003122 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2019-01-23 20:28 - 2019-01-23 20:40 - 000000000 ____D C:\Users\Kashif\AppData\Local\Google 2019-01-23 20:28 - 2019-01-23 20:39 - 000000000 ____D C:\Program Files (x86)\Google 2019-01-23 20:25 - 2019-01-23 20:27 - 005562976 _____ (Piriform Ltd) C:\Users\Kashif\Downloads\rcsetup153.exe 2019-01-23 20:13 - 2019-01-23 20:13 - 000001139 _____ C:\Users\Public\Desktop\VLC media player.lnk 2019-01-23 20:04 - 2019-01-23 20:04 - 000000000 ___HD C:\$AV_ASW 2019-01-23 19:33 - 2019-01-23 19:45 - 000000000 ____D C:\Users\Kashif\Desktop\testdisk-7.0 2019-01-23 19:30 - 2019-01-23 19:30 - 000003990 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-01-23 18:56 - 2019-01-23 19:08 - 012444088 _____ C:\Users\Kashif\Downloads\testdisk-7.0.win.zip 2019-01-23 18:52 - 2019-01-25 20:13 - 001040283 _____ C:\Users\Kashif\Desktop\STOPDecrypter-log.txt 2019-01-23 18:09 - 2019-01-23 18:13 - 007450264 _____ (AVAST Software) C:\Users\Kashif\Downloads\avast_free_antivirus_setup_online.exe 2019-01-23 16:36 - 2019-01-23 16:36 - 037463816 _____ C:\Users\Kashif\Desktop\b735856a10b1f65ad7abae23b88ca863.apk 2019-01-23 16:32 - 2019-01-23 16:36 - 037463816 _____ C:\Users\Kashif\Downloads\b735856a10b1f65ad7abae23b88ca863.apk 2019-01-22 23:53 - 2019-01-23 03:19 - 000000000 ____D C:\KVRT_Data 2019-01-22 23:53 - 2019-01-22 23:53 - 000478392 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\C51E748E.sys 2019-01-22 23:30 - 2019-01-22 23:52 - 157708584 _____ (AO Kaspersky Lab) C:\Users\Kashif\Downloads\KVRT.exe 2019-01-22 23:26 - 2019-01-25 21:21 - 000213582 _____ C:\Windows\ZAM_Guard.krnl.trace 2019-01-22 23:26 - 2019-01-24 18:53 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware 2019-01-22 23:26 - 2019-01-24 18:26 - 000097729 _____ C:\Windows\ZAM.krnl.trace 2019-01-22 23:26 - 2019-01-22 23:26 - 000203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys 2019-01-22 23:26 - 2019-01-22 23:26 - 000000000 ____D C:\Users\Kashif\AppData\Local\Zemana 2019-01-22 23:23 - 2019-01-22 23:26 - 006624296 _____ (Zemana Ltd. ) C:\Users\Kashif\Downloads\Zemana.AntiMalware.Setup.exe 2019-01-22 23:08 - 2019-01-22 23:08 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic 2019-01-22 23:07 - 2019-01-22 23:08 - 000000000 ____D C:\ProgramData\ParetoLogic 2019-01-22 23:07 - 2019-01-22 23:07 - 000000000 ____D C:\Program Files (x86)\ParetoLogic 2019-01-22 22:12 - 2019-01-22 22:16 - 005341830 _____ C:\Users\Kashif\Downloads\RakhniDecryptor.zip 2019-01-22 19:48 - 2019-01-22 19:48 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\WinRAR 2019-01-22 19:47 - 2019-01-22 19:47 - 000000000 ____D C:\Users\Administrator\AppData\Local\Comms 2019-01-22 19:42 - 2019-01-24 18:51 - 000002768 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2 2019-01-22 19:42 - 2019-01-22 19:42 - 000000000 ___RD C:\Users\Administrator\OneDrive 2019-01-22 19:42 - 2019-01-22 19:42 - 000000000 ____D C:\Users\Administrator\AppData\Local\PlaceholderTileLogoFolder 2019-01-22 19:40 - 2019-01-22 19:40 - 000001417 _____ C:\Users\Administrator\Desktop\Microsoft Edge.lnk 2019-01-22 19:40 - 2019-01-22 19:40 - 000000000 ____D C:\Users\Administrator\AppData\Local\Publishers 2019-01-22 19:40 - 2019-01-22 19:40 - 000000000 ____D C:\Users\Administrator\AppData\Local\MicrosoftEdge 2019-01-22 19:39 - 2019-01-22 19:49 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages 2019-01-22 19:39 - 2019-01-22 19:42 - 000002387 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-01-22 19:39 - 2019-01-22 19:42 - 000000000 ____D C:\Users\Administrator 2019-01-22 19:39 - 2019-01-22 19:40 - 000000000 ____D C:\Users\Administrator\AppData\Local\ConnectedDevicesPlatform 2019-01-22 19:39 - 2019-01-22 19:39 - 000000020 ___SH C:\Users\Administrator\ntuser.ini 2019-01-22 19:39 - 2019-01-22 19:39 - 000000000 ___RD C:\Users\Administrator\3D Objects 2019-01-22 19:39 - 2019-01-22 19:39 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2019-01-22 18:46 - 2019-01-22 18:46 - 000000546 _____ C:\Users\Kashif\Documents\backup.reg 2019-01-22 17:41 - 2019-01-22 17:41 - 000000000 ___HD C:\$SysReset 2019-01-22 00:15 - 2019-01-22 00:15 - 000000000 ____D C:\Users\Kashif\AppData\Local\mbamtray 2019-01-22 00:15 - 2019-01-22 00:15 - 000000000 ____D C:\Users\Kashif\AppData\Local\mbam 2019-01-21 23:53 - 2019-01-21 23:53 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\www.shadowexplorer.com 2019-01-21 23:51 - 2019-01-21 23:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShadowExplorer 2019-01-21 23:51 - 2019-01-21 23:51 - 000000000 ____D C:\Program Files (x86)\ShadowExplorer 2019-01-21 23:50 - 2019-01-21 23:55 - 082430032 _____ (Malwarebytes ) C:\Users\Kashif\Downloads\mb3-setup-consumer-3.6.1.2711-1.0.519-1.0.8878.exe 2019-01-21 23:50 - 2019-01-21 23:50 - 000969845 _____ (ShadowExplorer.com ) C:\Users\Kashif\Downloads\ShadowExplorer-0.9-setup.exe 2019-01-21 23:41 - 2019-01-24 22:22 - 000069432 _____ (EnigmaSoft Limited) C:\Windows\system32\Drivers\EnigmaFileMonDriver.sys 2019-01-21 23:41 - 2019-01-22 00:26 - 000000000 ____D C:\ProgramData\EnigmaSoft Limited 2019-01-21 23:41 - 2019-01-21 23:41 - 000001055 _____ C:\Users\Public\Desktop\SpyHunter5.lnk 2019-01-21 23:41 - 2019-01-21 23:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EnigmaSoft 2019-01-21 23:40 - 2019-01-21 23:41 - 000000000 ____D C:\sh5ldr 2019-01-21 23:30 - 2019-01-21 23:30 - 000000000 ____D C:\Program Files\EnigmaSoft 2019-01-20 15:14 - 2019-01-20 15:14 - 000001412 _____ C:\Listpubg_all.pv 2019-01-20 14:36 - 2019-01-23 15:21 - 000000000 ____D C:\PUBGVN006 2019-01-20 14:14 - 2019-01-20 14:18 - 000000000 ____D C:\PUBGVN007 2019-01-20 13:22 - 2019-01-20 13:22 - 000000000 ____D C:\Users\Kashif\Documents\FonePaw 2019-01-20 13:20 - 2019-01-20 13:20 - 000000000 ____D C:\Users\Kashif\AppData\Local\FonePaw 2019-01-20 13:20 - 2019-01-20 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FonePaw 2019-01-20 13:20 - 2019-01-20 13:20 - 000000000 ____D C:\ProgramData\FonePaw 2019-01-20 13:17 - 2019-01-20 13:19 - 010237368 _____ (FonePaw ) C:\Users\Kashif\Downloads\data-recovery.exe 2019-01-20 00:29 - 2019-01-20 00:29 - 000000000 _RSHD C:\ProgramData\Key-Base 2019-01-20 00:29 - 2019-01-20 00:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Repair for Video 2019-01-20 00:29 - 2019-01-20 00:29 - 000000000 ____D C:\ProgramData\{73AF10B8-A66E-1A23-3EC2-6CBC3675BA0D} 2019-01-20 00:29 - 2019-01-20 00:29 - 000000000 ____D C:\Program Files (x86)\Stellar Repair for Video 2019-01-20 00:26 - 2019-01-20 00:28 - 024314336 _____ (Stellar Information Technology Pvt Ltd ) C:\Users\Kashif\Downloads\StellarPhoenixVideoRepair.exe 2019-01-20 00:20 - 2019-01-18 23:28 - 794621918 _____ C:\Users\Kashif\Desktop\Alpha 2018 English www.downloadhub.link 720p Web-DL 750MB ESubs.AVI.mkv 2019-01-20 00:18 - 2019-01-20 00:19 - 000000203 _____ C:\Users\Kashif\Desktop\aaaa.mp4 2019-01-19 21:46 - 2019-01-19 21:46 - 000000000 ____D C:\Windows\pss 2019-01-19 20:40 - 2019-01-19 20:40 - 000000045 _____ C:\Users\Kashif\nuuid.ini 2019-01-19 19:23 - 2019-01-18 23:31 - 1585857730 _____ C:\Users\Kashif\Desktop\PUBG MOBILE_v0.9.0_apkpure.com.apk 2019-01-19 16:05 - 2019-01-19 16:05 - 000000020 ___SH C:\Users\Kashif\ntuser.ini 2019-01-19 15:25 - 2019-01-21 22:04 - 000000437 _____ C:\Users\Kashif\Documents\XGtz.ini 2019-01-19 15:25 - 2019-01-21 22:04 - 000000252 _____ C:\Users\Kashif\gcg.txt 2019-01-19 00:09 - 2019-01-19 15:10 - 000000343 _____ C:\Users\Kashif\rstr2.ini 2019-01-18 23:17 - 2019-01-18 23:17 - 000001372 _____ C:\Users\Kashif\_openme.txt 2019-01-18 23:16 - 2019-01-22 00:26 - 000000000 ____D C:\Users\Kashif\AppData\Local\8aa817e5-345c-431b-a270-7d72100bb152 2019-01-18 23:16 - 2019-01-19 16:07 - 000000000 ____D C:\Users\Kashif\AppData\Local\ff77ef97-3db3-46d8-bf10-0e611b22b56c 2019-01-18 23:16 - 2019-01-18 23:16 - 000001372 _____ C:\Users\Public\Documents\_openme.txt 2019-01-18 23:16 - 2019-01-18 23:16 - 000001372 _____ C:\ProgramData\_openme.txt 2019-01-18 23:15 - 2019-01-18 23:15 - 001246160 _____ (Mozilla Foundation) C:\ProgramData\nss3.dll 2019-01-18 23:14 - 2019-01-22 00:26 - 000000000 ____D C:\Program Files (x86)\LetsSee! 2019-01-18 23:14 - 2019-01-18 23:14 - 000137168 _____ (Mozilla Foundation) C:\ProgramData\mozglue.dll 2019-01-18 21:27 - 2019-01-18 21:27 - 000146296 _____ C:\Users\Kashif\Desktop\46419806_1757938980981394_4815860083550322688_n.mp4 2019-01-15 20:58 - 2019-01-18 23:28 - 000000385 _____ C:\Users\Kashif\Documents\wuhui.ini.rumba 2019-01-11 23:06 - 2019-01-11 23:07 - 000001117 _____ C:\Users\Kashif\Desktop\Emaillll.txt 2019-01-08 23:55 - 2019-01-08 23:55 - 000000000 ____D C:\Users\Kashif\Downloads\Antiban PASS hackpubgm.com 2019-01-07 21:17 - 2019-01-07 21:17 - 000000000 ____D C:\Windows\LastGood.Tmp 2019-01-05 11:14 - 2019-01-05 11:14 - 000000000 ____D C:\Users\Kashif\AppData\LocalLow\MSLiveStickerWhiteList 2019-01-05 11:14 - 2019-01-05 11:14 - 000000000 ____D C:\Users\Kashif\AppData\LocalLow\MSLiveSticker 2019-01-05 10:12 - 2019-01-05 10:13 - 000000000 _____ C:\Windows\paopaologin.ppa 2019-01-04 21:24 - 2019-01-18 23:31 - 000000343 _____ C:\Users\Kashif\rstr2.ini.rumba 2018-12-27 17:01 - 2019-01-18 23:26 - 000000340 _____ C:\ProgramData\version_changelog.txt.rumba 2018-12-27 17:01 - 2018-12-27 17:01 - 000000006 _____ C:\ProgramData\version_changelog.txt 2018-12-27 16:01 - 2019-01-24 18:51 - 000003588 _____ C:\Windows\System32\Tasks\Windows Utility Service Checker Tool Background 165062957339816 2018-12-27 16:01 - 2019-01-18 23:19 - 000000000 ____D C:\ProgramData\Performance Tool 2018-12-27 16:00 - 2019-01-22 00:26 - 000000000 ____D C:\ProgramData\System Updates ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-01-25 20:04 - 2018-04-12 16:22 - 000000000 ____D C:\Users\Kashif\AppData\LocalLow\Mozilla 2019-01-25 18:55 - 2018-04-12 04:30 - 000000000 ____D C:\Windows\CbsTemp 2019-01-25 16:58 - 2018-09-28 01:04 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\uTorrent 2019-01-25 15:26 - 2018-06-17 22:27 - 000004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{19FC0E75-EF34-43EB-983C-DE3A59014C34} 2019-01-25 01:04 - 2018-12-18 20:22 - 000000000 ____D C:\Users\Kashif\AppData\Local\Free Download Manager 2019-01-25 00:09 - 2018-09-25 19:52 - 000000000 ____D C:\ProgramData\Package Cache 2019-01-24 22:22 - 2018-06-17 22:27 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-01-24 22:20 - 2018-04-12 02:04 - 000524288 _____ C:\Windows\system32\config\BBI 2019-01-24 22:17 - 2018-06-17 22:15 - 000000000 ____D C:\Users\Kashif 2019-01-24 21:43 - 2018-04-12 23:15 - 000000000 ____D C:\Windows\system32\Drivers\wd 2019-01-24 21:25 - 2018-12-13 19:14 - 000000000 ____D C:\Users\Kashif\AppData\Local\CrashDumps 2019-01-24 21:22 - 2018-06-17 22:11 - 000000000 ____D C:\Windows\system32\SleepStudy 2019-01-24 19:54 - 2018-12-13 18:54 - 000000000 ____D C:\ProgramData\AVAST Software 2019-01-24 19:45 - 2018-12-12 20:18 - 000918336 _____ C:\Windows\ntbtlog.txt 2019-01-24 19:43 - 2018-12-12 20:18 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job 2019-01-24 18:53 - 2018-04-12 23:55 - 000000422 _____ C:\Windows\Tasks\update-sys.job 2019-01-24 18:53 - 2018-04-12 23:55 - 000000422 _____ C:\Windows\Tasks\update-S-1-5-21-104378065-2299909944-1035316951-1001.job 2019-01-24 18:51 - 2018-12-18 20:22 - 000001944 _____ C:\Windows\System32\Tasks\FreeDownloadManagerNetworkMonitor 2019-01-24 18:51 - 2018-12-13 19:03 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2019-01-24 18:51 - 2018-09-27 01:19 - 000002366 _____ C:\Windows\System32\Tasks\Shutdown 2019-01-24 18:51 - 2018-06-17 22:27 - 000003054 _____ C:\Windows\System32\Tasks\update-S-1-5-21-104378065-2299909944-1035316951-1001 2019-01-24 18:51 - 2018-06-17 22:27 - 000002856 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-104378065-2299909944-1035316951-1001 2019-01-24 18:51 - 2018-06-17 22:27 - 000002802 _____ C:\Windows\System32\Tasks\update-sys 2019-01-24 18:51 - 2018-06-17 22:27 - 000002304 _____ C:\Windows\System32\Tasks\RtHDVBg_PushButton 2019-01-23 20:26 - 2018-12-20 19:19 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\vlc 2019-01-23 20:10 - 2018-04-12 22:35 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2019-01-23 20:10 - 2018-04-12 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2019-01-23 20:10 - 2018-04-12 22:34 - 000000000 ____D C:\Program Files (x86)\WinRAR 2019-01-23 19:28 - 2018-04-12 04:38 - 000000000 ___HD C:\Windows\ELAMBKUP 2019-01-23 15:15 - 2018-06-22 19:55 - 000000000 ____D C:\Windows\Minidump 2019-01-23 15:15 - 2018-06-11 22:55 - 001322322 ____N C:\Windows\Minidump\012319-27984-01.dmp 2019-01-22 19:51 - 2018-04-12 04:38 - 000000000 ____D C:\Windows\AppReadiness 2019-01-22 19:47 - 2018-04-12 04:38 - 000000000 ___RD C:\Windows\PrintDialog 2019-01-22 19:39 - 2018-04-12 15:13 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-01-22 17:07 - 2018-04-12 16:18 - 000000000 __SHD C:\Users\Kashif\IntelGraphicsProfiles 2019-01-22 00:26 - 2018-12-13 18:38 - 000000000 ____D C:\Program Files\L4BOSREEZ0 2019-01-22 00:26 - 2018-12-12 20:11 - 000000000 ____D C:\Program Files\U575XLNMK1 2019-01-22 00:26 - 2018-12-12 19:28 - 000000000 ____D C:\Windows\SysWOW64\ymqbbfax 2019-01-22 00:26 - 2018-12-12 19:25 - 000000000 ____D C:\Program Files\8Y4JOEUNN3 2019-01-22 00:26 - 2018-12-12 18:28 - 000000000 ____D C:\Program Files\LNH0VQVW45 2019-01-22 00:26 - 2018-12-12 18:26 - 000000000 ___HD C:\Windows\rss 2019-01-22 00:23 - 2018-04-12 22:03 - 000000000 ____D C:\Users\Kashif\AppData\Local\ElevatedDiagnostics 2019-01-21 15:05 - 2018-04-12 04:38 - 000000000 ____D C:\Windows\LiveKernelReports 2019-01-20 12:28 - 2018-04-12 04:38 - 000000000 ____D C:\Windows\system32\NDF 2019-01-19 22:52 - 2018-09-24 16:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software 2019-01-19 22:44 - 2018-12-25 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 2019-01-19 21:18 - 2018-12-12 22:08 - 000000000 ____D C:\Program Files\WSA9FBSEZY 2019-01-19 21:18 - 2018-12-12 21:22 - 000000000 ____D C:\Program Files\LOAV2BQKOG 2019-01-19 21:18 - 2018-12-12 21:12 - 000000000 ____D C:\Program Files\LV0PXNIMYQ 2019-01-19 21:02 - 2018-12-22 19:32 - 000000000 ____D C:\ProgramData\Lavasoft 2019-01-19 20:41 - 2018-09-27 17:39 - 000000000 ____D C:\Users\Kashif\AppData\Local\Nox 2019-01-19 20:40 - 2018-09-27 17:41 - 000000000 ____D C:\Users\Kashif\.android 2019-01-19 20:40 - 2018-09-27 17:40 - 000000000 ____D C:\Users\Kashif\vmlogs 2019-01-19 20:40 - 2018-09-27 17:40 - 000000000 ____D C:\Users\Kashif\.BigNox 2019-01-19 15:10 - 2018-04-12 15:13 - 000000000 ____D C:\Users\Kashif\AppData\Local\VirtualStore 2019-01-18 23:31 - 2018-12-24 13:32 - 000000598 _____ C:\Users\Kashif\gcg.txt.rumba 2019-01-18 23:31 - 2018-12-20 18:49 - 1585857730 _____ C:\Users\Kashif\Downloads\PUBG MOBILE_v0.9.0_apkpure.com.xapk 2019-01-18 23:31 - 2018-12-19 22:15 - 040822561 _____ C:\Users\Kashif\Downloads\PUBG MOBILE_v0.9.0_apkpure.com.apk.rumba 2019-01-18 23:31 - 2018-12-19 19:41 - 000345958 _____ C:\Users\Kashif\Downloads\seo-idea-lightbulbs-ss-1920.jpg.rumba 2019-01-18 23:31 - 2018-12-12 23:52 - 006038582 _____ C:\Users\Kashif\Downloads\SpyHunter-Installer.exe.rumba 2019-01-18 23:31 - 2018-11-29 00:13 - 003591771 _____ C:\Users\Kashif\Downloads\Sad Music That Youtubers Use PewDiePie.mp3.rumba 2019-01-18 23:31 - 2018-11-28 23:31 - 000016975 _____ C:\Users\Kashif\Downloads\Teacher Vs Students Part 3-[AudioTrimmer.com](1).mp3.rumba 2019-01-18 23:31 - 2018-11-28 23:28 - 000033103 _____ C:\Users\Kashif\Downloads\Teacher Vs Students Part 3-[AudioTrimmer.com].mp3.rumba 2019-01-18 23:31 - 2018-11-28 23:20 - 005040591 _____ C:\Users\Kashif\Downloads\Teacher Vs Students Part 3.mp3.rumba 2019-01-18 23:31 - 2018-10-26 22:09 - 056032198 _____ C:\Users\Kashif\Downloads\torbrowser-install-win64-8.0.3_en-US.exe.rumba 2019-01-18 23:31 - 2018-09-30 12:00 - 001804343 _____ C:\Users\Kashif\Downloads\wo_mic_client_setup.exe.rumba 2019-01-18 23:31 - 2018-09-30 12:00 - 000252294 _____ C:\Users\Kashif\Downloads\wo_mic_driver_signed.exe.rumba 2019-01-18 23:31 - 2018-09-29 22:43 - 000001361 _____ C:\Users\Kashif\Downloads\sg_backup_2018-09-29-2243.spg.rumba 2019-01-18 23:31 - 2018-09-29 22:42 - 000659790 _____ C:\Users\Kashif\Downloads\TCPOptimizer.exe.rumba 2019-01-18 23:31 - 2018-09-27 17:41 - 000000400 _____ C:\Users\Kashif\inittk.ini.rumba 2019-01-18 23:31 - 2018-09-27 17:40 - 000000379 _____ C:\Users\Kashif\nuuid.ini.rumba 2019-01-18 23:31 - 2018-09-27 17:40 - 000000375 _____ C:\Users\Kashif\inst.ini.rumba 2019-01-18 23:31 - 2018-09-26 15:30 - 001275838 _____ C:\Users\Kashif\Downloads\Pubg 200Mb Highly Compressed Techbyaman.part4.rar.part.rumba 2019-01-18 23:31 - 2018-09-25 17:42 - 001573902 _____ C:\Users\Kashif\Downloads\SteamSetup.exe.rumba 2019-01-18 23:31 - 2018-09-23 22:33 - 002994326 _____ C:\Users\Kashif\Downloads\uTorrent.exe.rumba 2019-01-18 23:31 - 2018-09-14 19:27 - 014484146 _____ C:\Users\Kashif\Downloads\Qayamat Aane Wali Hai Full Song SK~Chhutta.mp3.rumba 2019-01-18 23:31 - 2018-09-11 15:33 - 000000000 ____D C:\Users\Kashif\Downloads\rubber.(2010).eng.1cd.(4169377) 2019-01-18 23:31 - 2018-09-11 15:32 - 000016019 _____ C:\Users\Kashif\Downloads\rubber.(2010).eng.1cd.(4169377).zip.rumba 2019-01-18 23:31 - 2018-09-05 23:09 - 000133974 _____ C:\Users\Kashif\Downloads\Zoom_launcher.exe.rumba 2019-01-18 23:31 - 2018-08-29 13:11 - 000002678 _____ C:\Users\Kashif\Downloads\vacavilleautotint-com_20180829T081104Z_CrawlErrors.csv.rumba 2019-01-18 23:31 - 2018-08-26 19:40 - 000101054 _____ C:\Users\Kashif\Downloads\Tani Non Repaint Gift Indicator(1).ex4.rumba 2019-01-18 23:31 - 2018-08-26 11:00 - 000101054 _____ C:\Users\Kashif\Downloads\Tani Non Repaint Gift Indicator.ex4.rumba 2019-01-18 23:31 - 2018-08-24 12:59 - 000000000 ____D C:\Users\Kashif\Downloads\Video 2019-01-18 23:31 - 2018-08-21 12:58 - 000008256 _____ C:\Users\Kashif\Downloads\Sessions.mq4.rumba 2019-01-18 23:31 - 2018-08-12 23:49 - 000149341 _____ C:\Users\Kashif\Downloads\www_babypips_com_learn_forex_bollinger_bands.pdf.rumba 2019-01-18 23:31 - 2018-08-12 23:48 - 000724515 _____ C:\Users\Kashif\Downloads\www-babypips-com-learn-forex-bollinger-bands.pdf.rumba 2019-01-18 23:31 - 2018-08-12 22:13 - 000367173 _____ C:\Users\Kashif\Downloads\Screen Shot 2018-08-12 at 9.30.28 AM.png.rumba 2019-01-18 23:31 - 2018-07-31 23:25 - 000044182 _____ C:\Users\Kashif\Downloads\www.TamilRockers.gs - Deadpool 2 (2018)[720p New HQ DVDScr - HQ Line Audios - [Tamil + Telugu + Hindi + Eng] - x264 - 1.1GB] English.zip.rumba 2019-01-18 23:31 - 2018-07-21 20:17 - 000008718 _____ C:\Users\Kashif\Downloads\Tani Forex Non Repaint Signal indicator(1).ex4.rumba 2019-01-18 23:31 - 2018-07-18 13:45 - 009693190 _____ C:\Users\Kashif\Downloads\WinSCP-5.13.3-Setup.exe.rumba 2019-01-18 23:31 - 2018-07-10 09:56 - 017548545 _____ C:\Users\Kashif\Downloads\The Forex Bible.pdf.rumba 2019-01-18 23:31 - 2018-07-10 09:56 - 000567673 _____ C:\Users\Kashif\Downloads\Trigger Strategy How to Make Every Day Payday.pdf.rumba 2019-01-18 23:31 - 2018-06-24 00:29 - 000152378 _____ C:\Users\Kashif\Downloads\Untitled design.jpg.rumba 2019-01-18 23:31 - 2018-06-17 22:28 - 000000354 ___SH C:\Users\Kashif\ntuser.ini.rumba 2019-01-18 23:31 - 2018-05-15 13:54 - 000008718 _____ C:\Users\Kashif\Downloads\Tani Forex Non Repaint Signal indicator.ex4.rumba 2019-01-18 23:31 - 2018-05-06 21:51 - 000053384 _____ C:\Users\Kashif\Downloads\Tani Moving Average Cross EA(1).ex4.rumba 2019-01-18 23:31 - 2018-05-02 22:35 - 000008763 _____ C:\Users\Kashif\Downloads\Search_keyword_report.pdf.rumba 2019-01-18 23:31 - 2018-04-30 14:01 - 000750485 _____ C:\Users\Kashif\Downloads\Trading_in_the_Zone Mark Douglas.pdf.rumba 2019-01-18 23:31 - 2018-04-30 13:58 - 007938850 _____ C:\Users\Kashif\Downloads\The-ultimate-guide-to-price-action-trading.pdf.rumba 2019-01-18 23:31 - 2018-04-29 00:56 - 000115123 _____ C:\Users\Kashif\Downloads\The.Notebook.2004.720p.BrRip.x264.YIFY.en.srt.rumba 2019-01-18 23:31 - 2018-04-26 23:00 - 000150079 _____ C:\Users\Kashif\Downloads\young_couple_dating_men_women_advice-1024x640.jpg.rumba 2019-01-18 23:31 - 2018-04-26 22:56 - 000149524 _____ C:\Users\Kashif\Downloads\shutterstock_5194908101.jpg.rumba 2019-01-18 23:31 - 2018-04-19 13:06 - 000053384 _____ C:\Users\Kashif\Downloads\Tani Moving Average Cross EA.ex4.rumba 2019-01-18 23:31 - 2018-04-12 15:15 - 000000000 ___RD C:\Users\Kashif\OneDrive 2019-01-18 23:30 - 2018-12-25 17:52 - 1639999135 _____ C:\Users\Kashif\Downloads\iGame_IG010_AOS_No42_0.10.0.10121_Shipping_US_Google_GLOBAL.signed.shell.uawebsite.apk 2019-01-18 23:30 - 2018-12-24 21:36 - 170723621 _____ C:\Users\Kashif\Downloads\mqywsmotdbyzpgubta7yon4wsa.mp4.rumba 2019-01-18 23:30 - 2018-12-18 23:04 - 642574044 _____ C:\Users\Kashif\Downloads\Laila Majnu 2018 Hindi www.downloadhub.link HDRip 720p HEVC (1).mkv.rumba 2019-01-18 23:30 - 2018-12-18 20:24 - 1586028053 _____ C:\Users\Kashif\Downloads\iGame_090_AOS_No20_0.9.0.9630_Shipping_US_Google_GLOBAL.signed.shell.uawebsite.apk.rumba 2019-01-18 23:30 - 2018-11-29 00:37 - 000230911 _____ C:\Users\Kashif\Downloads\Laila Main Laila Raees Shah Rukh Khan Sunny Leone Pawni Pandey Ram Sampath-[AudioTrimmer.com].mp3.rumba 2019-01-18 23:30 - 2018-11-29 00:32 - 002559615 _____ C:\Users\Kashif\Downloads\Laila Main Laila Raees Shah Rukh Khan Sunny Leone Pawni Pandey Ram Sampath.mp3.rumba 2019-01-18 23:30 - 2018-11-28 23:34 - 000150895 _____ C:\Users\Kashif\Downloads\Merged_Teach_Teach_Teach_Teach_Teach.mp3.rumba 2019-01-18 23:30 - 2018-11-28 23:30 - 000174607 _____ C:\Users\Kashif\Downloads\Merged_Teach_Teach_Teach.mp3.rumba 2019-01-18 23:30 - 2018-11-20 23:32 - 106806105 _____ C:\Users\Kashif\Downloads\ldd.rar.rumba 2019-01-18 23:30 - 2018-11-14 18:15 - 000004002 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-11-14 at 18_14_58.csv.rumba 2019-01-18 23:30 - 2018-11-09 22:24 - 069551550 _____ C:\Users\Kashif\Downloads\OBS-Studio-22.0.2-Full-Installer-x64.exe.rumba 2019-01-18 23:30 - 2018-10-23 21:01 - 000005234 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-23 at 21_01_28.csv.rumba 2019-01-18 23:30 - 2018-10-20 18:17 - 000003756 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-20 at 18_16_56.csv.rumba 2019-01-18 23:30 - 2018-10-18 17:24 - 000008126 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-18 at 17_24_52.csv.rumba 2019-01-18 23:30 - 2018-10-16 20:59 - 000027374 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-16 at 20_59_28.csv.rumba 2019-01-18 23:30 - 2018-10-15 22:03 - 000018342 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-15 at 22_02_48.csv.rumba 2019-01-18 23:30 - 2018-10-15 16:46 - 000031142 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-15 at 16_46_40.csv.rumba 2019-01-18 23:30 - 2018-10-14 12:40 - 000011118 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-14 at 12_40_44.csv.rumba 2019-01-18 23:30 - 2018-10-12 20:41 - 000005086 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-12 at 20_41_33.csv.rumba 2019-01-18 23:30 - 2018-10-12 20:40 - 000093460 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-12 at 20_40_43.csv.rumba 2019-01-18 23:30 - 2018-10-12 20:05 - 000005994 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-12 at 20_04_58.csv.rumba 2019-01-18 23:30 - 2018-10-10 18:44 - 000004472 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-10 at 18_44_22.csv.rumba 2019-01-18 23:30 - 2018-10-09 14:04 - 000008232 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-09 at 14_03_57.csv.rumba 2019-01-18 23:30 - 2018-10-04 21:28 - 000010964 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-04 at 21_27_55.csv.rumba 2019-01-18 23:30 - 2018-10-04 21:27 - 000016814 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-10-04 at 21_25_10.csv.rumba 2019-01-18 23:30 - 2018-10-04 20:38 - 001301886 _____ C:\Users\Kashif\Downloads\Keyword Stats 2018-09-20 at 12_49_10.csv.rumba 2019-01-18 23:30 - 2018-10-02 00:24 - 008282344 _____ C:\Users\Kashif\Downloads\mw3 unlock all.rar.rumba 2019-01-18 23:30 - 2018-09-29 22:49 - 000012370 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-29 at 22_48_49.csv.rumba 2019-01-18 23:30 - 2018-09-29 14:23 - 030797046 _____ C:\Users\Kashif\Downloads\jre-7u51-windows-x64.exe.rumba 2019-01-18 23:30 - 2018-09-27 21:01 - 000008800 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-27 at 21_01_24.csv.rumba 2019-01-18 23:30 - 2018-09-27 16:37 - 144843107 _____ C:\Users\Kashif\Downloads\localized_common_mp.ff.rumba 2019-01-18 23:30 - 2018-09-26 23:51 - 000006864 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-26 at 23_51_12.csv.rumba 2019-01-18 23:30 - 2018-09-26 14:14 - 001903302 _____ C:\Users\Kashif\Downloads\JavaSetup8u181.exe.rumba 2019-01-18 23:30 - 2018-09-23 11:30 - 000003968 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-23 at 11_30_06.csv.rumba 2019-01-18 23:30 - 2018-09-21 12:49 - 063318526 _____ C:\Users\Kashif\Downloads\OriginThinSetup.exe.rumba 2019-01-18 23:30 - 2018-09-21 11:17 - 000003396 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-21 at 11_17_37.csv.rumba 2019-01-18 23:30 - 2018-09-20 14:21 - 000004418 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-20 at 14_20_45.csv.rumba 2019-01-18 23:30 - 2018-09-17 19:56 - 000004986 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-17 at 19_56_54.csv.rumba 2019-01-18 23:30 - 2018-09-16 23:14 - 000011038 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-16 at 23_14_02.csv.rumba 2019-01-18 23:30 - 2018-09-13 23:46 - 000007302 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-13 at 23_46_06.csv.rumba 2019-01-18 23:30 - 2018-09-12 22:41 - 000006188 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-12 at 22_41_38.csv.rumba 2019-01-18 23:30 - 2018-09-09 12:02 - 000004238 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-09 at 12_02_23.csv.rumba 2019-01-18 23:30 - 2018-09-07 23:27 - 000006080 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-07 at 23_27_00.csv.rumba 2019-01-18 23:30 - 2018-09-03 09:59 - 000020686 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-09-03 at 09_59_36.csv.rumba 2019-01-18 23:30 - 2018-08-31 22:36 - 008447047 _____ C:\Users\Kashif\Downloads\IMG_0372.png.rumba 2019-01-18 23:30 - 2018-08-31 17:35 - 007933698 _____ C:\Users\Kashif\Downloads\Naked.Forex.HighProbability.Techniques.for.Trading.Without.Indicators.pdf.rumba 2019-01-18 23:30 - 2018-08-29 08:47 - 000007960 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-29 at 08_47_10.csv.rumba 2019-01-18 23:30 - 2018-08-26 15:38 - 000049246 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-26 at 15_38_51.csv.rumba 2019-01-18 23:30 - 2018-08-25 15:15 - 000016118 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-25 at 15_14_54.csv.rumba 2019-01-18 23:30 - 2018-08-24 23:39 - 001222550 _____ C:\Users\Kashif\Downloads\mt4.exe.rumba 2019-01-18 23:30 - 2018-08-24 00:37 - 000007386 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-24 at 00_36_53.csv.rumba 2019-01-18 23:30 - 2018-08-23 00:19 - 000050205 _____ C:\Users\Kashif\Downloads\Ocean's Eight English.zip.rumba 2019-01-18 23:30 - 2018-08-23 00:19 - 000002075 _____ C:\Users\Kashif\Downloads\Ocean's 8 (Oceans Eight) 2018 - English.zip.rumba 2019-01-18 23:30 - 2018-08-21 14:46 - 000002016 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-21 at 14_46_08.csv.rumba 2019-01-18 23:30 - 2018-08-18 15:44 - 000042292 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-18 at 15_44_43.csv.rumba 2019-01-18 23:30 - 2018-08-17 00:43 - 000007982 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-17 at 00_43_28.csv.rumba 2019-01-18 23:30 - 2018-08-15 12:09 - 000005458 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-15 at 12_08_59.csv.rumba 2019-01-18 23:30 - 2018-08-12 12:13 - 000012196 _____ C:\Users\Kashif\Downloads\Keywords-Research.xlsx.rumba 2019-01-18 23:30 - 2018-08-12 12:12 - 000005518 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-12 at 12_12_02.csv.rumba 2019-01-18 23:30 - 2018-08-09 14:28 - 000008128 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-09 at 14_28_46.csv.rumba 2019-01-18 23:30 - 2018-08-07 20:24 - 000017548 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-07 at 20_24_35.csv.rumba 2019-01-18 23:30 - 2018-08-04 14:21 - 000008312 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-08-04 at 14_19_31.csv.rumba 2019-01-18 23:30 - 2018-08-02 11:55 - 001306430 _____ C:\Users\Kashif\Downloads\mt4setup.exe.rumba 2019-01-18 23:30 - 2018-07-31 20:35 - 001294670 _____ C:\Users\Kashif\Downloads\IMG_20180625_161834_373.jpg.rumba 2019-01-18 23:30 - 2018-07-28 15:45 - 000062895 _____ C:\Users\Kashif\Downloads\open-uri20160811-32147-1ie24w2_bfb77429.jpg.rumba 2019-01-18 23:30 - 2018-07-27 11:56 - 000007506 _____ C:\Users\Kashif\Downloads\Keyword Forecasts 2018-07-27 at 11_56_10.csv.rumba 2019-01-18 23:30 - 2018-07-23 11:27 - 000171778 _____ C:\Users\Kashif\Downloads\Khadim Galiyan.jpg.rumba 2019-01-18 23:30 - 2018-07-22 18:01 - 000151988 _____ C:\Users\Kashif\Downloads\maxresdefault.jpg.rumba 2019-01-18 23:30 - 2018-07-21 19:15 - 000010792 _____ C:\Users\Kashif\Downloads\Iron Vapin SEO Analysis.odt.rumba 2019-01-18 23:30 - 2018-07-20 11:23 - 000015100 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-07-20 at 11_23_48.csv.rumba 2019-01-18 23:30 - 2018-07-19 15:35 - 000005302 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-07-19 at 15_35_10.csv.rumba 2019-01-18 23:30 - 2018-07-18 11:46 - 020005455 _____ C:\Users\Kashif\Downloads\MEDAL.OF.HONOR.2K10.V1.0.ALL.NNGRP.NODVD.ZIPd.rumba 2019-01-18 23:30 - 2018-07-16 13:21 - 000014366 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-07-16 at 13_21_05.csv.rumba 2019-01-18 23:30 - 2018-07-16 13:00 - 003793781 _____ C:\Users\Kashif\Downloads\Keywords_Hashtags_post_samples_2.pdf.rumba 2019-01-18 23:30 - 2018-07-12 13:18 - 000150160 _____ C:\Users\Kashif\Downloads\khaani-on-geo.jpg.rumba 2019-01-18 23:30 - 2018-07-10 09:57 - 005275425 _____ C:\Users\Kashif\Downloads\Price Action Trading Course.pdf.rumba 2019-01-18 23:30 - 2018-07-08 13:51 - 000007476 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-07-08 at 13_51_10.csv.rumba 2019-01-18 23:30 - 2018-07-03 15:41 - 000005564 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-07-03 at 15_40_41.csv.rumba 2019-01-18 23:30 - 2018-06-26 12:26 - 000007882 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-26 at 12_25_39.csv.rumba 2019-01-18 23:30 - 2018-06-24 00:32 - 000742965 _____ C:\Users\Kashif\Downloads\My Invitation(1).jpeg.rumba 2019-01-18 23:30 - 2018-06-24 00:27 - 001583166 _____ C:\Users\Kashif\Downloads\My Invitation.jpeg.rumba 2019-01-18 23:30 - 2018-06-17 21:11 - 000051490 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-17 at 21_11_42.csv.rumba 2019-01-18 23:30 - 2018-06-17 12:33 - 000002666 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-17 at 12_31_19.csv.rumba 2019-01-18 23:30 - 2018-06-16 20:48 - 000019042 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-16 at 20_48_12.csv.rumba 2019-01-18 23:30 - 2018-06-11 11:24 - 000005584 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-11 at 11_24_34.csv.rumba 2019-01-18 23:30 - 2018-06-10 21:26 - 000014536 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-10 at 21_26_10.csv.rumba 2019-01-18 23:30 - 2018-06-04 21:03 - 000005750 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-04 at 21_03_39.csv.rumba 2019-01-18 23:30 - 2018-06-01 00:09 - 000008506 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-06-01 at 00_09_55.csv.rumba 2019-01-18 23:30 - 2018-05-25 12:56 - 000005684 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-25 at 12_56_07.csv.rumba 2019-01-18 23:30 - 2018-05-24 22:33 - 000006198 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-24 at 22_33_21.csv.rumba 2019-01-18 23:30 - 2018-05-24 20:38 - 000053928 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-24 at 20_38_02.csv.rumba 2019-01-18 23:30 - 2018-05-22 14:47 - 000924305 _____ C:\Users\Kashif\Downloads\paris-france-anniversary_camille_catherine_fine_art_marriage_02.png.rumba 2019-01-18 23:30 - 2018-05-22 14:24 - 000915396 _____ C:\Users\Kashif\Downloads\married-questions.png.rumba 2019-01-18 23:30 - 2018-05-15 19:22 - 000010270 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-15 at 19_22_11.csv.rumba 2019-01-18 23:30 - 2018-05-14 22:33 - 000003702 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-14 at 22_33_28.csv.rumba 2019-01-18 23:30 - 2018-05-11 20:31 - 000013796 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-11 at 20_31_04.csv.rumba 2019-01-18 23:30 - 2018-05-07 21:38 - 000024872 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-07 at 21_37_55.csv.rumba 2019-01-18 23:30 - 2018-05-06 14:04 - 000000350 _____ C:\Users\Kashif\Downloads\okja.2017.720p.webrip.x264-strife.srt.rumba 2019-01-18 23:30 - 2018-05-05 14:39 - 000006546 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-05 at 14_39_02.csv.rumba 2019-01-18 23:30 - 2018-05-03 18:33 - 000015224 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-03 at 18_33_50.csv.rumba 2019-01-18 23:30 - 2018-05-02 22:53 - 000013642 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-02 at 22_52_57.csv.rumba 2019-01-18 23:30 - 2018-05-01 21:10 - 000006634 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-05-01 at 21_10_22.csv.rumba 2019-01-18 23:30 - 2018-04-24 01:05 - 000004728 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-04-24 at 01_03_57.csv.rumba 2019-01-18 23:30 - 2018-04-20 23:33 - 000003950 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-04-20 at 23_33_03.csv.rumba 2019-01-18 23:30 - 2018-04-18 22:46 - 000018666 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-04-18 at 22_46_48.csv.rumba 2019-01-18 23:30 - 2018-04-16 21:31 - 000008262 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-04-16 at 21_30_51.csv.rumba 2019-01-18 23:30 - 2018-04-15 18:45 - 000007612 _____ C:\Users\Kashif\Downloads\Keyword Planner 2018-04-15 at 18_45_48.csv.rumba 2019-01-18 23:30 - 2018-04-15 13:23 - 000000834 _____ C:\Users\Kashif\Downloads\Planner_for_Keywords_Sue_at_Successful_Blogging__Money_Blogging_Keywords.csv.rumba 2019-01-18 23:30 - 2018-04-15 12:51 - 000000000 ____D C:\Users\Kashif\Downloads\Images 2019-01-18 23:29 - 2018-12-24 22:16 - 167616412 _____ C:\Users\Kashif\Downloads\debxcr47cbdgpjyge6duiy8g6y.mp4.rumba 2019-01-18 23:29 - 2018-12-18 20:09 - 002373402 _____ C:\Users\Kashif\Downloads\fdm5_x64_setup (1).exe.yqkey65.partial.rumba 2019-01-18 23:29 - 2018-12-18 19:59 - 051108254 _____ C:\Users\Kashif\Downloads\fdm5_x64_setup.exe.rumba 2019-01-18 23:29 - 2018-11-29 01:17 - 003753326 _____ C:\Users\Kashif\Downloads\Guru_Randhawa_Lahore_Official_Video_Bhushan_Kumar_Vee_DirectorGifty_T-Series[GrabvidtoMp3.com].mp3.rumba 2019-01-18 23:29 - 2018-11-29 00:18 - 000350012 _____ C:\Users\Kashif\Downloads\Dost-Dost-Na-Raha%20(SongsMp3.Com)-[AudioTrimmer.com].mp3.rumba 2019-01-18 23:29 - 2018-11-28 23:47 - 005385845 _____ C:\Users\Kashif\Downloads\Dost-Dost-Na-Raha%20(SongsMp3.Com).mp3.rumba 2019-01-18 23:29 - 2018-11-28 23:42 - 004672751 _____ C:\Users\Kashif\Downloads\Dushman Na Kare Dost Ne Wo Kaam Amit Kumar Lata Mangeshkar Aakhir Kyon 1985 Songs Smita Patil.mp3.rumba 2019-01-18 23:29 - 2018-11-28 22:55 - 003183246 _____ C:\Users\Kashif\Downloads\English Medium Sapna Chaudhary Vickky Kajla Masoom Sharma AK Jatti New Haryanvi Song 2018.mp3.rumba 2019-01-18 23:29 - 2018-11-16 19:59 - 019279958 _____ C:\Users\Kashif\Downloads\EViews10SVPatch_101618.exe.rumba 2019-01-18 23:29 - 2018-11-09 22:24 - 009090118 _____ C:\Users\Kashif\Downloads\GameDownload_PUBG_MOBILE_100103_1.0.5727.123(2).exe.rumba 2019-01-18 23:29 - 2018-11-08 23:30 - 005112814 _____ C:\Users\Kashif\Downloads\Detection.exe.rumba 2019-01-18 23:29 - 2018-11-05 20:09 - 009090118 _____ C:\Users\Kashif\Downloads\GameDownload_PUBG_MOBILE_100103_1.0.5727.123(1).exe.rumba 2019-01-18 23:29 - 2018-10-24 18:59 - 008020414 _____ C:\Users\Kashif\Downloads\Dominick Salvatore-International Economics(www.Iranidata.com).pdf.rumba 2019-01-18 23:29 - 2018-10-21 21:26 - 000629961 _____ C:\Users\Kashif\Downloads\green_cat_eyes_in_the_dark-wallpaper-1680x1050.jpg.rumba 2019-01-18 23:29 - 2018-09-29 22:43 - 000001361 _____ C:\Users\Kashif\Downloads\FirstBackup.spg.rumba 2019-01-18 23:29 - 2018-09-25 19:35 - 032440654 _____ C:\Users\Kashif\Downloads\EpicInstaller-7.14.2-fortnite-af1bf897643940b6a03b1fb3a40e2496.msi.rumba 2019-01-18 23:29 - 2018-09-24 16:00 - 009090118 _____ C:\Users\Kashif\Downloads\GameDownload_PUBG_MOBILE_100103_1.0.5727.123.exe.rumba 2019-01-18 23:29 - 2018-08-24 12:59 - 000000000 ____D C:\Users\Kashif\Downloads\Compressed 2019-01-18 23:29 - 2018-08-23 14:05 - 000104202 _____ C:\Users\Kashif\Downloads\C__CCDebitEasyAccess_SampleReport.pdf(1).pdf.rumba 2019-01-18 23:29 - 2018-08-19 12:42 - 000111322 _____ C:\Users\Kashif\Downloads\C__CCDebitEasyAccess_SampleReport.pdf.pdf.rumba 2019-01-18 23:29 - 2018-07-12 13:23 - 000104310 _____ C:\Users\Kashif\Downloads\dating-an-introvert(2).jpg.rumba 2019-01-18 23:29 - 2018-07-12 13:12 - 000108739 _____ C:\Users\Kashif\Downloads\dating-an-introvert(1).jpg.rumba 2019-01-18 23:29 - 2018-07-12 13:08 - 000106644 _____ C:\Users\Kashif\Downloads\dating-an-introvert.jpg.rumba 2019-01-18 23:29 - 2018-07-10 10:09 - 000456730 _____ C:\Users\Kashif\Downloads\Day-Trading.pdf.rumba 2019-01-18 23:29 - 2018-07-10 09:56 - 002297589 _____ C:\Users\Kashif\Downloads\Elliott Wave Principle - Key to Market Behavior.pdf.rumba 2019-01-18 23:29 - 2018-06-11 20:32 - 000000387 _____ C:\Users\Kashif\Downloads\google8b84002682eba65f.html.rumba 2019-01-18 23:29 - 2018-06-09 22:01 - 000056358 _____ C:\Users\Kashif\Downloads\Currency Meter .ex4.rumba 2019-01-18 23:29 - 2018-05-05 13:00 - 000812140 _____ C:\Users\Kashif\Downloads\ff (2)(2).jpg.rumba 2019-01-18 23:29 - 2018-05-05 12:55 - 000776044 _____ C:\Users\Kashif\Downloads\ff (2)(1).jpg.rumba 2019-01-18 23:29 - 2018-05-05 12:51 - 000752845 _____ C:\Users\Kashif\Downloads\ff (2).jpg.rumba 2019-01-18 23:29 - 2018-04-17 18:21 - 001205054 _____ C:\Users\Kashif\Downloads\flashplayer29_xa_install.exe.rumba 2019-01-18 23:29 - 2018-04-12 15:13 - 000000616 ___SH C:\Users\Kashif\Downloads\desktop.ini.rumba 2019-01-18 23:28 - 2018-12-25 17:55 - 239086434 _____ C:\Users\Kashif\Downloads\4nqtx88zz7bwzmxaqex5c4xacr.mp4.fdmdownload.rumba 2019-01-18 23:28 - 2018-12-24 13:32 - 000000370 _____ C:\Users\Kashif\Documents\XGtz.ini.rumba 2019-01-18 23:28 - 2018-12-18 23:18 - 794621918 _____ C:\Users\Kashif\Downloads\Alpha 2018 English www.downloadhub.link 720p Web-DL 750MB ESubs.mkv.mkv 2019-01-18 23:28 - 2018-12-18 17:29 - 000843925 _____ C:\Users\Kashif\Documents\Diagnostic Results of Tencent Gaming Buddy.zip.rumba 2019-01-18 23:28 - 2018-12-18 17:29 - 000000000 ____D C:\Users\Kashif\Documents\MobileGamePC 2019-01-18 23:28 - 2018-12-06 21:01 - 009832609 _____ C:\Users\Kashif\Downloads\asteriou__Applied_Econometrics__A_Modern_Approach_Using_Eviews_and_Microfit_Revised_Edition.pdf.rumba 2019-01-18 23:28 - 2018-11-28 17:45 - 000365200 _____ C:\Users\Kashif\Downloads\02 - Uska Hi Banana- DownloadMing.SE-[AudioTrimmer.com].mp3.rumba 2019-01-18 23:28 - 2018-11-20 23:46 - 156498325 _____ C:\Users\Kashif\Downloads\Big Update PUBG Mobile Patch.rar.rumba 2019-01-18 23:28 - 2018-10-24 19:00 - 008020414 _____ C:\Users\Kashif\Dominick Salvatore-International Economics(www.Iranidata.com).pdf.rumba 2019-01-18 23:28 - 2018-10-24 19:00 - 008020414 _____ C:\Users\Kashif\Documents\Dominick Salvatore-International Economics(www.Iranidata.com).pdf.rumba 2019-01-18 23:28 - 2018-10-21 17:25 - 000057525 _____ C:\Users\Kashif\Downloads\Attachment_1539963694.jpeg.rumba 2019-01-18 23:28 - 2018-09-30 19:29 - 000010858 _____ C:\Users\Kashif\Downloads\aggregatedOpportunity4CampaignContextKW.csv.rumba 2019-01-18 23:28 - 2018-09-28 20:22 - 000000000 ____D C:\Users\Kashif\AppData\LocalLow\Heroes and Generals 2019-01-18 23:28 - 2018-09-28 01:06 - 000000000 ____D C:\Users\Kashif\Downloads\Call.of.Duty.Modern.Warfare.3-RELOADED 2019-01-18 23:28 - 2018-09-27 16:29 - 049291619 _____ C:\Users\Kashif\Downloads\common_mp.ff.rumba 2019-01-18 23:28 - 2018-09-27 16:17 - 049291619 _____ C:\Users\Kashif\Downloads\common_mp_2.ff.rumba 2019-01-18 23:28 - 2018-09-20 19:39 - 001248262 _____ C:\Users\Kashif\Downloads\assetsfx4setup.exe.rumba 2019-01-18 23:28 - 2018-09-12 11:53 - 000000000 ____D C:\Users\Kashif\Documents\GTA San Andreas User Files 2019-01-18 23:28 - 2018-08-31 17:40 - 006902672 _____ C:\Users\Kashif\Downloads\'How To Make 1000 Pips Per Month And Keep It.pdf'.rumba 2019-01-18 23:28 - 2018-08-12 23:42 - 000075852 _____ C:\Users\Kashif\Downloads\babypips_com.pdf.rumba 2019-01-18 23:28 - 2018-07-27 20:51 - 000230434 _____ C:\Users\Kashif\Downloads\55326_black-wallpaper-android.jpg.rumba 2019-01-18 23:28 - 2018-07-21 02:13 - 000105494 _____ C:\Users\Kashif\Downloads\!DB_Agimat-DEV-FX 2016.ex4.rumba 2019-01-18 23:28 - 2018-07-10 09:57 - 002327732 _____ C:\Users\Kashif\Downloads\Candlesticks Fibonacci and Chart Pattern Trading Tools.pdf.rumba 2019-01-18 23:28 - 2018-07-08 12:47 - 000011107 _____ C:\Users\Kashif\Downloads\boho_keywords.png.rumba 2019-01-18 23:28 - 2018-06-25 11:14 - 000101459 _____ C:\Users\Kashif\Downloads\437014-weebly.jpg.rumba 2019-01-18 23:28 - 2018-06-24 13:55 - 000026734 _____ C:\Users\Kashif\Downloads\47012-stratton-[English-subtitles.org].zip.rumba 2019-01-18 23:28 - 2018-06-13 14:06 - 000000000 ____D C:\Users\Kashif\Documents\OneNote Notebooks 2019-01-18 23:28 - 2018-06-11 20:33 - 000000419 _____ C:\Users\Kashif\Downloads\BingSiteAuth.xml.rumba 2019-01-18 23:28 - 2018-05-22 14:53 - 001422993 _____ C:\Users\Kashif\Downloads\495c519741935560d93fd25952.png.rumba 2019-01-18 23:28 - 2018-05-22 14:32 - 000917123 _____ C:\Users\Kashif\Downloads\C2v8vR8XgAEeVlE(2).png.rumba 2019-01-18 23:28 - 2018-05-22 14:30 - 000952755 _____ C:\Users\Kashif\Downloads\C2v8vR8XgAEeVlE(1).png.rumba 2019-01-18 23:28 - 2018-05-22 14:29 - 000959412 _____ C:\Users\Kashif\Downloads\C2v8vR8XgAEeVlE.png.rumba 2019-01-18 23:28 - 2018-05-12 22:43 - 000000000 ____D C:\Users\Kashif\Documents\Stronghold Crusader 2019-01-18 23:28 - 2018-05-04 17:09 - 000000000 ___RD C:\Users\Kashif\3D Objects 2019-01-18 23:28 - 2018-04-12 15:13 - 000000736 ___SH C:\Users\Kashif\Documents\desktop.ini.rumba 2019-01-18 23:18 - 2018-09-21 12:55 - 000000000 ____D C:\ProgramData\Origin 2019-01-18 23:16 - 2018-11-13 20:48 - 000000000 ____D C:\ProgramData\Oracle 2019-01-18 23:16 - 2018-09-27 23:06 - 000000000 ____D C:\ProgramData\Caphyon 2019-01-18 23:16 - 2018-09-25 19:39 - 000000000 ____D C:\ProgramData\Epic 2019-01-18 23:16 - 2018-08-24 12:59 - 000000000 ____D C:\ProgramData\IDM 2019-01-18 23:16 - 2018-07-18 11:51 - 000000000 __SHD C:\ProgramData\DSS 2019-01-18 23:16 - 2018-06-17 22:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2019-01-18 23:16 - 2018-06-17 22:14 - 000000000 ____D C:\ProgramData\USOShared 2019-01-18 23:16 - 2018-04-26 14:30 - 000000000 ____D C:\ProgramData\Intel 2019-01-18 23:16 - 2018-04-12 16:06 - 000000000 ____D C:\ProgramData\MetaQuotes 2019-01-18 23:16 - 2016-07-16 16:47 - 000000000 ____D C:\ProgramData\Comms 2019-01-11 17:32 - 2018-04-12 17:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2019-01-11 00:28 - 2018-04-12 17:27 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2019-01-11 00:28 - 2018-04-12 17:27 - 000000000 ____D C:\Program Files\Mozilla Firefox 2019-01-07 21:16 - 2018-06-17 22:15 - 000000000 ____D C:\Users\defaultuser0 2019-01-04 21:27 - 2018-04-12 15:32 - 000006454 _____ C:\Users\Kashif\Desktop\Emails.txt 2019-01-04 00:23 - 2018-06-11 22:55 - 002147894 ____N C:\Windows\Minidump\010419-41062-01.dmp 2018-12-27 15:36 - 2018-08-24 14:35 - 000000000 ____D C:\Users\Kashif\AppData\Roaming\libraries ==================== Files in the root of some directories ======= 2019-01-18 23:14 - 2019-01-18 23:14 - 000137168 _____ (Mozilla Foundation) C:\ProgramData\mozglue.dll 2019-01-18 23:15 - 2019-01-18 23:15 - 001246160 _____ (Mozilla Foundation) C:\ProgramData\nss3.dll 2018-12-12 19:28 - 2018-12-12 19:29 - 006161408 _____ () C:\Users\Kashif\AppData\Local\dump007.dat 2018-12-12 18:44 - 2018-12-12 18:44 - 000000002 _____ () C:\Users\Kashif\AppData\Local\imw.ini 2018-12-12 18:25 - 2018-12-12 18:25 - 000140800 _____ () C:\Users\Kashif\AppData\Local\installer.dat 2018-04-12 23:55 - 2018-04-12 23:55 - 000000003 _____ () C:\Users\Kashif\AppData\Local\updater.log 2018-04-12 23:55 - 2018-04-12 23:55 - 000000425 _____ () C:\Users\Kashif\AppData\Local\UserProducts.xml Some files in TEMP: ==================== 2019-01-19 22:44 - 2018-12-21 12:35 - 000987896 _____ () C:\Users\Kashif\AppData\Local\Temp\BA7E.tmp.exe 2019-01-04 21:24 - 2019-01-24 01:17 - 000000000 ____D () C:\Users\Kashif\AppData\Local\Temp\JSCore.dll 2019-01-19 21:00 - 2019-01-18 23:16 - 000099896 _____ () C:\Users\Kashif\AppData\Local\Temp\Uninstall.exe ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\dllhost.exe => File is digitally signed C:\Windows\SysWOW64\dllhost.exe => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== restored successfully LastRegBack: 2018-06-17 22:11 ==================== End of FRST.txt ============================