Over the past month or so I've been having small Issues with my computer. First was my Battle.Net client would stop working. (It was responding but not finishing the update process.) A friend of mine tried to help via TeamViewer but no luck so we gave up. Now after installing win10 things have gotten a whole lot worse. Google Chrome stopped working, talking about not being able to connect to the proxy my system was using, which is impossible because I dont have my system set up to use a proxy.
This next thing just started last night. counter strike had some texture problems with the home screen and now i cant access the steam community or update my games.
I've ran
AVG
MalwareByts
&
GMER
both AVG and MWB came up clean but not soon after running GMER I got the BlueScreen of Death both times I tried to run it.
I attached the 'Addition' file because it exceeded the maximum allowed characters.
FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015
Ran by [removed] (administrator) on KARRMA-PC (02-09-2015 15:39:34)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(http://tortoisesvn.net) C:\Config.Msi\226392.rbf
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-26] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14850168 2015-08-29] (Logitech Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3730344 2015-07-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2572198188-481956686-841600760-1000\...\Run: [Spotify Web Helper] => C:\Users\Karrma\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-30] (Spotify Ltd)
HKU\S-1-5-21-2572198188-481956686-841600760-1000\...\Run: [OneDrive] => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\OneDrive.exe [382144 2015-08-29] (Microsoft Corporation)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\adobe air application installer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\bf4.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\bf4_x86.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dosbox.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\drivernavigator.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtlite.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originuninstall.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\sptdinst-x64.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ursaconsole.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\vid.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: [S-1-5-21-2572198188-481956686-841600760-1000] => 127.0.0.1:9666
Tcpip\..\Interfaces\{9b93177e-408a-4af0-a3ad-a1d2964729d9}: [NameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2572198188-481956686-841600760-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {A3F5C5D7-9D8E-4743-AABE-FC7DAF30446B} URL =
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://blekko.com/ws/?source=c3348dd4&t ... 68EAE32&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={CCD2CB2D-F015-4D6A-829D-8B65FB294262}&mid=a4268847bcd747d08a90f18676988c02-3db6f44a3e2703a145c84da4a37a016cbc27d0cd&lang=en&ds=AVG&coid=avgtbavg&cmpid=0415avt&pr=fr&d=2014-04-08 13:21:56&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Babylon toolbar helper -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> No File
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-24] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-04-30] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-24] (Oracle Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/s ... tor/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.1.0\ViProtocol.dll [2014-07-10] (AVG Secure Search)
FireFox:
========
FF ProfilePath: C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739
FF NewTab: hxxp://www.bing.com/?pc=COSP&ptag=D0710 ... =CT3334470
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: false
FF SelectedSearchEngine: Bing
FF Homepage: hxxps://www.google.com/
FF Keyword.URL:
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-31] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-31] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1219160.dll [2015-07-22] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll [No File]
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-07-16] (DivX, LLC)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-01] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Karrma\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Karrma\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Karrma\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2012-08-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: Gif Delayer - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\[removed] [2014-02-04]
FF Extension: Thumbnail Zoom Plus - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\[removed] [2014-02-04]
FF Extension: Adblock Plus - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-06]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-06]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Web TuneUp\FireFoxExt\4.1.0.411
FF Extension: AVG Web TuneUp - C:\ProgramData\AVG Web TuneUp\FireFoxExt\4.1.0.411 [2015-04-30]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-07-20]
Chrome:
=======
CHR Profile: C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-01]
CHR Extension: (Google Drive) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-01]
CHR Extension: (YouTube) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-01]
CHR Extension: (Google Search) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-01]
CHR Extension: (Gmail) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-01]
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bghejdcdajlenjngcknlkkoakmmjfanb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eajjckckolcbgmmenaiiigegbadpeghb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iadddcofhgaeeniecnhpopipbhijnphj] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iedokolghlgkcnafplkbjeokfamliokd] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jddmfogomafbmjkfcpfpnjfgecnjffng] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kpmccjcnkhkgcipodalpmbpighkgiaif] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lopcjmbilgeapfldddijpgpahphngjdk] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mhgliccaogcekoldfmachhehepjdfobj] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nfkbfmjkmioenefhjdonleflegoephgm] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pedogdjgmjlabbbdhokgdafpglnjinhc] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bghejdcdajlenjngcknlkkoakmmjfanb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eajjckckolcbgmmenaiiigegbadpeghb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iadddcofhgaeeniecnhpopipbhijnphj] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iedokolghlgkcnafplkbjeokfamliokd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jddmfogomafbmjkfcpfpnjfgecnjffng] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kpmccjcnkhkgcipodalpmbpighkgiaif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [lopcjmbilgeapfldddijpgpahphngjdk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mffdcionknddopdmdnloanoafafkmckb] - C:\Users\Karrma\AppData\Roaming\OpenCandy\46C1F19CC73C4BD4888715C22DC9AD81\extension.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [mhgliccaogcekoldfmachhehepjdfobj] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nfkbfmjkmioenefhjdonleflegoephgm] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pedogdjgmjlabbbdhokgdafpglnjinhc] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-02-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1528432 2015-07-07] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3518376 2015-07-07] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [314304 2015-07-07] (AVG Technologies CZ, s.r.o.)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-26] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-26] (NVIDIA Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [192120 2015-08-29] (Logitech Inc.)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-26] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-26] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-11] (Electronic Arts)
S4 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-03-15] ()
S4 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-03-13] ()
S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2970424 2015-06-29] (AVG Technologies)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [792016 2015-02-09] (Tunngle.net GmbH)
S2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-06-29] (AVG Technologies)
S2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-06-29] (AVG Technologies)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)
S4 vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [1875480 2015-04-30] (AVG Secure Search)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-29] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-29] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)
S4 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-04-30] ()
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21152 2015-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\system32\DRIVERS\avgfwd6a.sys [67552 2015-04-14] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [293296 2015-06-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [226784 2015-06-10] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [295400 2015-06-15] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-05-29] (Disc Soft Ltd)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-10] (Logitech Inc.)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-29] (Microsoft Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-26] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation)
S3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [31144 2015-06-25] (TuneUp Software)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
U3 idsvc; no ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-02 15:39 - 2015-09-02 15:39 - 00033713 _____ C:\Users\Karrma\Desktop\FRST.txt
2015-09-02 15:27 - 2015-09-02 15:39 - 00000000 ____D C:\FRST
2015-09-02 15:17 - 2015-09-02 15:17 - 02188800 _____ (Farbar) C:\Users\Karrma\Desktop\FRST64.exe
2015-09-02 15:15 - 2015-09-02 15:15 - 00688992 _____ (Swearware) C:\Users\Karrma\Desktop\dds.scr
2015-09-02 15:03 - 2015-09-02 15:03 - 00016148 _____ C:\WINDOWS\system32\KARRMA-PC_Karrma_HistoryPrediction.bin
2015-09-02 14:45 - 2015-09-02 14:45 - 00280360 _____ C:\WINDOWS\Minidump\090215-27109-01.dmp
2015-09-02 14:42 - 2015-09-02 14:46 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-09-02 14:34 - 2015-09-02 14:45 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-02 14:34 - 2015-09-02 14:34 - 00359352 _____ C:\WINDOWS\Minidump\090215-45531-01.dmp
2015-09-02 14:33 - 2015-09-02 14:45 - 378643563 _____ C:\WINDOWS\MEMORY.DMP
2015-09-02 00:59 - 2015-09-02 00:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-09-02 00:38 - 2015-09-02 00:53 - 17109714 _____ C:\Users\Karrma\Downloads\ROCCAT_Lua_DRV1.14.zip
2015-09-01 21:07 - 2015-09-01 21:07 - 00002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-01 21:07 - 2015-09-01 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-09-01 21:00 - 2015-09-01 21:07 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-01 21:00 - 2015-09-01 21:00 - 00929360 _____ (Google Inc.) C:\Users\Karrma\Downloads\ChromeSetup.exe
2015-09-01 01:32 - 2015-09-01 01:32 - 00000000 ____D C:\Users\Karrma\Downloads\Ernest Cline - Ready Player One (2011) -
2015-09-01 01:15 - 2015-09-01 01:15 - 02864184 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\Battle.net-Setup-enUS(1).exe
2015-09-01 01:15 - 2015-09-01 01:15 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-31 21:37 - 2015-08-31 21:39 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2015-08-31 21:26 - 2015-08-31 21:32 - 94449112 _____ (Logitech Inc.) C:\Users\Karrma\Downloads\LGS_8.72.98_x64_Logitech.exe
2015-08-31 21:16 - 2015-08-31 21:22 - 89180888 _____ (Logitech Inc.) C:\Users\Karrma\Downloads\LGS_8.72.98_x86_Logitech.exe
2015-08-31 21:09 - 2015-08-25 07:18 - 00574072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-08-31 21:07 - 2015-08-31 21:07 - 00000000 ____D C:\WINDOWS\LastGood
2015-08-31 21:05 - 2015-08-25 11:38 - 42840184 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 37819184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 22559352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 18569336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 16646624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 15630616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 14945552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 13667032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 12192048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 02354808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 02105976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01898104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435582.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01558648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435582.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01178576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01075320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01064752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01001440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00986232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00945272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-08-31 03:55 - 2015-08-31 03:55 - 00000000 ____D C:\Users\Karrma\AppData\Local\PeerDistRepub
2015-08-31 03:20 - 2015-08-31 03:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-30 14:37 - 2015-08-10 21:52 - 00069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-08-30 00:14 - 2015-08-30 00:14 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-30 00:14 - 2015-08-30 00:14 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-30 00:14 - 2015-08-30 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-29 22:18 - 2015-08-29 22:18 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-08-29 22:16 - 2015-08-30 15:47 - 11188880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-08-29 22:16 - 2015-08-25 11:38 - 17932648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 15334976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 12611824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 03480792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 03074776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 00034044 _____ C:\WINDOWS\system32\nvinfo.pb
2015-08-29 22:16 - 2015-08-10 21:52 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-08-29 22:16 - 2015-08-07 04:07 - 01898288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-29 22:16 - 2015-08-07 04:07 - 01558832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-29 21:19 - 2015-08-29 21:19 - 00009374 __RSH C:\ProgramData\ntuser.pol
2015-08-29 20:53 - 2015-08-29 20:53 - 00000000 ____D C:\Users\Karrma\AppData\Local\MicrosoftEdge
2015-08-29 20:33 - 2015-09-01 22:36 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-29 20:32 - 2015-08-29 19:39 - 00000000 __SHD C:\Recovery
2015-08-29 20:28 - 2015-08-29 20:28 - 00000000 ____D C:\Windows.old
2015-08-29 20:27 - 2015-08-29 20:27 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files\MSBuild
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\inetpub
2015-08-29 20:17 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-29 20:17 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 20:17 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-29 20:17 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-29 20:17 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 20:17 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-29 20:12 - 2015-08-29 20:12 - 00002376 _____ C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-29 20:10 - 2015-08-29 20:10 - 00000000 ____D C:\Users\Karrma\AppData\Local\Publishers
2015-08-29 20:08 - 2015-08-29 20:27 - 00000000 ____D C:\Users\Karrma\AppData\Local\Packages
2015-08-29 20:08 - 2015-08-29 20:08 - 00009066 __RSH C:\Users\Karrma\ntuser.pol
2015-08-29 20:08 - 2015-08-29 20:08 - 00000020 ___SH C:\Users\Karrma\ntuser.ini
2015-08-29 20:08 - 2015-08-29 20:08 - 00000000 ____D C:\Users\Karrma\AppData\Local\TileDataLayer
2015-08-29 20:04 - 2015-08-29 20:04 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-29 19:50 - 2015-08-29 19:50 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-08-29 19:47 - 2015-08-29 19:47 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-08-29 19:45 - 2015-09-02 15:01 - 00000000 ____D C:\Users\Karrma
2015-08-29 19:45 - 2015-08-29 20:08 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 __RSD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-29 19:40 - 2015-09-01 01:30 - 01005534 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-29 19:40 - 2015-08-29 19:40 - 00961296 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-08-29 19:39 - 2015-08-29 19:40 - 00021209 _____ C:\WINDOWS\iis.log
2015-08-29 19:39 - 2015-07-10 03:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-29 19:37 - 2015-08-29 21:10 - 00008636 _____ C:\WINDOWS\system32\lvcoinst.log
2015-08-29 19:37 - 2015-08-29 19:47 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-08-29 19:37 - 2015-08-29 19:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-08-29 19:37 - 2015-08-29 19:37 - 00000000 ____D C:\Program Files\VIA
2015-08-29 19:35 - 2015-09-01 22:44 - 00012854 _____ C:\WINDOWS\PFRO.log
2015-08-29 19:35 - 2015-08-29 19:36 - 00026380 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-29 19:05 - 2015-08-29 20:04 - 00006487 _____ C:\WINDOWS\comsetup.log
2015-08-29 19:02 - 2015-08-29 20:05 - 00010449 _____ C:\WINDOWS\diagerr.xml
2015-08-29 19:02 - 2015-08-29 20:05 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-08-29 15:36 - 2015-08-29 15:36 - 01810648 _____ (Logitech Inc.) C:\WINDOWS\system32\CaptureAPO.dll
2015-08-29 15:36 - 2015-08-29 15:36 - 01273448 _____ (Logitech Inc.) C:\WINDOWS\system32\RenderAPO.dll
2015-08-29 07:52 - 2015-08-29 07:52 - 00597640 _____ (Logitech Inc.) C:\WINDOWS\system32\CapturePropPage.dll
2015-08-29 07:52 - 2015-08-29 07:52 - 00508552 _____ (Logitech Inc.) C:\WINDOWS\system32\RenderPropPage.dll
2015-08-25 23:23 - 2015-08-26 07:56 - 00000000 ____D C:\Users\Karrma\Downloads\Stronghold.3.Gold.MULTi8-PROPHET
2015-08-25 23:22 - 2015-08-25 23:22 - 00097117 _____ C:\Users\Karrma\Downloads\Stronghold.3.Gold.MULTi8-PROPHET [IPT].torrent
2015-08-25 05:52 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-08-25 05:51 - 2015-08-25 05:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-08-25 05:51 - 2015-08-25 05:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-08-25 05:50 - 2015-08-25 05:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-25 05:50 - 2015-08-25 05:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 __RHD C:\MSOCache
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 ____D C:\Users\Karrma\AppData\Local\Microsoft Help
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 ____D C:\Program Files\Microsoft Office
2015-08-25 05:27 - 2015-08-25 05:40 - 00000000 ____D C:\Users\Karrma\Downloads\Microsoft Word 2010 Englishx86
2015-08-25 05:26 - 2015-08-25 05:26 - 00028590 _____ C:\Users\Karrma\Downloads\Microsoft Word 2010 Englishx86 [IPT].torrent
2015-08-24 17:04 - 2015-08-24 17:04 - 00001806 _____ C:\Users\Karrma\Downloads\FirstBackup.spg
2015-08-24 05:16 - 2015-08-24 05:16 - 02508432 _____ (Sysinternals - http://www.sysinternals.com) C:\Users\Karrma\Downloads\procexp.exe
2015-08-24 05:12 - 2015-08-27 20:44 - 00000000 ____D C:\Users\Karrma\Desktop\balls
2015-08-24 05:10 - 2015-08-24 05:10 - 01186640 _____ C:\Users\Karrma\Downloads\ProcessExplorer.zip
2015-08-23 15:47 - 2015-08-23 15:47 - 02864184 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\Battle.net-Setup-enUS.exe
2015-08-23 15:25 - 2015-08-23 16:12 - 00000000 ____D C:\Program Files\pia_manager
2015-08-23 15:25 - 2015-08-23 15:25 - 00031232 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys
2015-08-23 15:25 - 2015-08-23 15:25 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Titanium
2015-08-23 15:22 - 2015-08-23 15:24 - 25723531 _____ C:\Users\Karrma\Downloads\installer_win.exe
2015-08-23 15:08 - 2015-08-29 19:49 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2015-08-23 14:49 - 2015-08-23 14:49 - 03970746 _____ C:\Users\Karrma\Downloads\Battle.net-Agent-PC-Standalone.zip
2015-08-23 13:24 - 2015-08-23 13:24 - 03183672 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\StarCraft-II-Setup-enUS.exe
2015-08-23 00:37 - 2015-08-23 00:37 - 00001144 _____ C:\Users\Karrma\Desktop\Wat.txt
2015-08-22 19:30 - 2015-08-22 19:30 - 00000000 ____D C:\Users\Karrma\Downloads\Ready Player One - Ernest Cline
2015-08-22 19:29 - 2015-08-22 19:29 - 00000641 _____ C:\Users\Karrma\Downloads\Ready Player One - Ernest Cline [IPT].torrent
2015-08-22 19:27 - 2015-08-24 05:18 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-08-20 11:36 - 2015-08-29 19:53 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-20 11:22 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-20 11:22 - 2015-08-22 18:50 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-08-20 11:22 - 2015-08-20 11:22 - 00000000 ____D C:\Users\Karrma\Documents\StarCraft II
2015-08-20 11:21 - 2015-08-20 11:35 - 00001093 _____ C:\Users\Public\Desktop\StarCraft II.lnk
2015-08-19 21:44 - 2015-08-29 20:04 - 00003126 _____ C:\WINDOWS\System32\Tasks\{16D1C916-849C-4EB2-B319-A8DAB2B47778}
2015-08-19 16:30 - 2015-07-22 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-08-19 03:48 - 2015-09-01 21:05 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\PortForward.com
2015-08-19 03:48 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PortForward.com
2015-08-19 03:48 - 2015-08-19 03:48 - 00000000 ____D C:\Program Files (x86)\Portforward
2015-08-18 22:12 - 2015-07-16 13:12 - 00968704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.exe
2015-08-18 22:12 - 2015-07-16 12:33 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll
2015-08-18 22:12 - 2015-07-16 12:05 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmlmedia.dll
2015-08-18 22:06 - 2015-07-20 11:12 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-08-18 21:06 - 2015-08-18 21:05 - 03970746 _____ C:\Users\Karrma\Desktop\Battle.net-Agent-PC-Standalone.zip
2015-08-17 14:49 - 2015-08-17 14:49 - 00000000 ____D C:\ProgramData\IDM
2015-08-17 14:48 - 2015-08-17 14:48 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\IDM
2015-08-13 12:31 - 2015-08-17 14:02 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Octoshape
2015-08-13 02:03 - 2015-08-13 02:03 - 00001572 _____ C:\Users\Public\Desktop\Uplink.lnk
2015-08-08 03:15 - 2015-08-08 11:03 - 00000000 ____D C:\Users\Karrma\Downloads\Mad.Max.3.Beyond.Thunderdome.1985.DVDRiP.XViD-aGGr0
2015-08-08 03:13 - 2015-08-08 03:13 - 00017575 _____ C:\Users\Karrma\Downloads\Mad.Max.3.Beyond.Thunderdome.1985.DVDRiP.XViD-aGGr0 [IPT].torrent
2015-08-08 03:12 - 2015-08-08 03:12 - 00000000 ____D C:\Users\Karrma\Downloads\Uplink.Hacker.Elite-Sheppard22[GOG]
2015-08-08 03:11 - 2015-08-08 03:12 - 00014451 _____ C:\Users\Karrma\Downloads\Uplink.Hacker.Elite-Sheppard22[GOG] [IPT].torrent
2015-08-03 21:42 - 2015-08-06 00:28 - 00000000 ____D C:\Users\Karrma\Downloads\Mad.Max.2.The.Road.Warrior.1981.720p.BRRip.x264-x0r
2015-08-03 21:41 - 2015-08-03 21:41 - 00017303 _____ C:\Users\Karrma\Downloads\Mad.Max.2.The.Road.Warrior.1981.720p.BRRip.x264-x0r [IPT].torrent
2015-08-03 04:58 - 2015-08-03 20:53 - 00000000 ____D C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS
2015-08-03 04:57 - 2015-08-03 04:57 - 00003597 _____ C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS [IPT].torrent
2015-08-03 04:57 - 2015-08-03 04:57 - 00003597 _____ C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS [IPT] (1).torrent
2015-08-03 02:25 - 2015-08-03 02:25 - 00000000 ____D C:\Users\Karrma\Downloads\Mad Max 1979 720p BRRip REPACK 6CH AAC x264-SSDD
2015-08-03 02:22 - 2015-08-03 02:22 - 00020941 _____ C:\Users\Karrma\Downloads\Mad Max 1979 720p BRRip REPACK 6CH AAC x264-SSDD [IPT].torrent
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-02 15:05 - 2015-07-20 05:41 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-02 15:04 - 2015-07-20 05:41 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-02 15:03 - 2013-01-13 07:59 - 00000000 ____D C:\Users\Karrma\AppData\Local\TSVNCache
2015-09-02 15:02 - 2015-07-10 05:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-02 15:02 - 2015-07-10 05:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-02 15:02 - 2012-04-20 01:42 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-02 15:01 - 2015-07-10 02:05 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-09-02 14:48 - 2015-04-08 16:33 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-02 14:40 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-02 14:40 - 2014-01-10 02:56 - 00000000 ____D C:\WINDOWS\pss
2015-09-02 14:40 - 2012-04-20 02:29 - 00000000 ____D C:\ProgramData\MFAData
2015-09-02 14:16 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-09-02 14:15 - 2012-04-20 15:33 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Skype
2015-09-02 13:58 - 2014-02-22 18:33 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-02 13:55 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-02 13:54 - 2014-06-12 21:51 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\vlc
2015-09-02 02:46 - 2015-06-07 20:58 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-02 00:59 - 2012-04-20 00:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-01 22:44 - 2015-07-10 05:20 - 00222696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-01 22:36 - 2015-07-10 06:39 - 00000000 ___HD C:\$Windows.~BT
2015-09-01 22:19 - 2014-09-14 06:20 - 00000000 ____D C:\Users\Karrma\AppData\Local\Adobe
2015-09-01 21:00 - 2015-07-20 05:41 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-01 21:00 - 2015-07-20 05:41 - 00003744 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-01 00:32 - 2015-03-21 04:39 - 00000000 ____D C:\Users\Karrma\Desktop\Mis Desktop CleanUp
2015-08-31 21:42 - 2015-07-10 05:20 - 00028505 _____ C:\WINDOWS\setupact.log
2015-08-31 21:38 - 2014-07-20 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-08-31 21:36 - 2014-02-01 22:58 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-31 21:09 - 2013-11-13 07:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-31 21:09 - 2012-09-25 07:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-31 11:43 - 2012-10-03 00:15 - 00000000 ____D C:\Users\Karrma\AppData\Local\Spotify
2015-08-31 11:35 - 2012-10-03 00:14 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Spotify
2015-08-31 03:13 - 2014-02-22 18:33 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-30 04:35 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-08-30 02:23 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-30 02:23 - 2012-04-23 22:48 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Mozilla
2015-08-30 02:23 - 2012-04-19 23:53 - 00000000 ____D C:\Users\Karrma\AppData\Local\Google
2015-08-30 00:14 - 2015-04-06 03:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-29 22:17 - 2012-04-19 23:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-29 21:11 - 2015-07-10 02:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-29 20:33 - 2015-07-10 04:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-29 20:33 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-29 20:18 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-08-29 20:18 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-08-29 20:18 - 2015-07-10 04:01 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-08-29 20:18 - 2015-07-10 04:01 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-08-29 20:18 - 2015-07-10 04:00 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-08-29 20:18 - 2015-07-10 04:00 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-08-29 20:18 - 2015-07-10 03:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-29 20:12 - 2015-03-04 00:24 - 00000000 ___RD C:\Users\Karrma\OneDrive
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-29 20:06 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-29 20:04 - 2015-08-02 19:00 - 00003118 _____ C:\WINDOWS\System32\Tasks\{AEF9995E-06A4-4B44-B44B-6B49BC4AA857}
2015-08-29 20:04 - 2015-07-12 05:08 - 00003814 _____ C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2015-08-29 20:04 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Registration
2015-08-29 20:04 - 2015-06-07 13:39 - 00003098 _____ C:\WINDOWS\System32\Tasks\{F6E8B76C-DD56-4071-A92A-236852C0E069}
2015-08-29 20:04 - 2015-06-07 13:39 - 00003098 _____ C:\WINDOWS\System32\Tasks\{4C3A052C-F10C-4F0E-9FCD-BE2A6BBB5B53}
2015-08-29 20:04 - 2015-06-07 13:38 - 00003098 _____ C:\WINDOWS\System32\Tasks\{C76F3735-9E96-435B-982C-97FF9EB2D96B}
2015-08-29 20:04 - 2015-06-07 13:38 - 00003098 _____ C:\WINDOWS\System32\Tasks\{5E8097A0-D5A8-4AD1-A89C-B186167A41D0}
2015-08-29 20:04 - 2015-05-29 23:24 - 00004326 _____ C:\WINDOWS\System32\Tasks\Winupdate
2015-08-29 20:04 - 2015-05-29 23:24 - 00004304 _____ C:\WINDOWS\System32\Tasks\EssentialUpdateMachine
2015-08-29 20:04 - 2014-12-29 11:00 - 00003996 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-08-29 20:04 - 2014-12-19 03:44 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Reader and Acrobat Manager
2015-08-29 20:04 - 2014-11-22 04:30 - 00002914 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-08-29 20:04 - 2014-11-21 12:07 - 00003954 _____ C:\WINDOWS\System32\Tasks\Google Update
2015-08-29 20:04 - 2014-09-26 13:53 - 00003630 _____ C:\WINDOWS\System32\Tasks\{51B01CF0-4FA4-451F-8471-E317A57FE00A}
2015-08-29 20:04 - 2014-08-20 22:51 - 00003270 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2015-08-29 20:04 - 2014-08-20 22:50 - 00003244 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2015-08-29 20:04 - 2014-08-20 22:50 - 00003242 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2015-08-29 20:04 - 2014-08-13 07:03 - 00003848 _____ C:\WINDOWS\System32\Tasks\DivX online update program
2015-08-29 20:04 - 2014-08-05 18:46 - 00003502 _____ C:\WINDOWS\System32\Tasks\{FEBDC505-BB4E-4071-B5D9-000BE71A401F}
2015-08-29 20:04 - 2014-08-05 18:36 - 00003528 _____ C:\WINDOWS\System32\Tasks\{CF9A3FE1-70EE-428D-BCF8-CE25B9669D29}
2015-08-29 20:04 - 2014-07-20 07:24 - 00003958 _____ C:\WINDOWS\System32\Tasks\DriverNavigator Scheduled Scan
2015-08-29 20:04 - 2014-03-01 13:18 - 00003122 _____ C:\WINDOWS\System32\Tasks\{DEF374E7-870B-4DC5-A449-34DAD1406F48}
2015-08-29 20:04 - 2013-12-07 22:16 - 00003098 _____ C:\WINDOWS\System32\Tasks\{96E856D6-BCD1-42A7-AB95-47BD6F1373F2}
2015-08-29 20:04 - 2013-12-07 22:16 - 00003098 _____ C:\WINDOWS\System32\Tasks\{669DB003-927C-417B-9A80-83AB52080304}
2015-08-29 20:04 - 2013-12-07 22:15 - 00003098 _____ C:\WINDOWS\System32\Tasks\{3BD95F9A-49E2-48DF-A160-AF3D62519EFC}
2015-08-29 20:04 - 2013-11-09 03:06 - 00003356 _____ C:\WINDOWS\System32\Tasks\{2C21EF52-DCDF-4537-8F96-3C5E02A93640}
2015-08-29 20:04 - 2013-11-09 03:04 - 00003134 _____ C:\WINDOWS\System32\Tasks\{E7DD4A5E-A9AC-45E1-9922-E8D8C6011361}
2015-08-29 20:04 - 2013-10-03 22:35 - 00003166 _____ C:\WINDOWS\System32\Tasks\{FA469CB3-FEC0-46B6-BDB1-55DEB9BE0A64}
2015-08-29 20:04 - 2013-10-03 22:35 - 00003166 _____ C:\WINDOWS\System32\Tasks\{2471CDE3-94AD-429B-A621-21A0939D165F}
2015-08-29 20:04 - 2013-03-23 16:00 - 00003048 _____ C:\WINDOWS\System32\Tasks\{4DAC32CA-AC4C-4B04-ABCE-68C0713A1723}
2015-08-29 20:04 - 2013-03-19 17:27 - 00003326 _____ C:\WINDOWS\System32\Tasks\{1C8A8008-CB5D-4E62-BC2B-8D348895A604}
2015-08-29 20:04 - 2013-01-22 18:54 - 00002816 _____ C:\WINDOWS\System32\Tasks\ROC_REG_JAN_DELETE
2015-08-29 20:04 - 2012-08-07 03:30 - 00003522 _____ C:\WINDOWS\System32\Tasks\{086B8907-D872-48C1-9D5A-B9625E770C5C}
2015-08-29 20:04 - 2012-04-20 02:37 - 00003386 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2015-08-29 20:04 - 2012-04-19 23:53 - 00004006 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2572198188-481956686-841600760-1000UA
2015-08-29 20:04 - 2012-04-19 23:53 - 00003610 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2572198188-481956686-841600760-1000Core
2015-08-29 20:03 - 2015-07-10 04:04 - 00000000 __RSD C:\WINDOWS\Media
2015-08-29 20:03 - 2015-07-10 04:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-29 20:00 - 2015-06-29 08:45 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-29 19:59 - 2015-07-10 04:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-08-29 19:59 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-29 19:59 - 2014-04-01 13:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-08-29 19:53 - 2015-07-30 20:02 - 00000000 ____D C:\WINDOWS\system32\W7NBC
2015-08-29 19:53 - 2015-07-10 15:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-08-29 19:53 - 2015-07-10 04:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:53 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-08-29 19:53 - 2015-06-27 20:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-29 19:53 - 2015-06-07 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-29 19:53 - 2015-04-08 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-29 19:53 - 2015-04-05 01:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard 8.6
2015-08-29 19:53 - 2015-03-26 00:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Singularity (64 bit) Viewer
2015-08-29 19:53 - 2015-03-04 00:29 - 00000000 ____D C:\WINDOWS\en
2015-08-29 19:53 - 2015-03-04 00:27 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-08-29 19:53 - 2015-02-04 03:39 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2015-08-29 19:53 - 2015-02-04 02:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo Dock
2015-08-29 19:53 - 2014-12-16 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2015-08-29 19:53 - 2014-11-21 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-08-29 19:53 - 2014-11-01 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-08-29 19:53 - 2014-10-24 03:27 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e
2015-08-29 19:53 - 2014-09-15 07:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock
2015-08-29 19:53 - 2014-08-25 05:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2015-08-29 19:53 - 2014-08-07 04:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-08-29 19:53 - 2014-08-02 01:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx
2015-08-29 19:53 - 2014-07-20 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIA
2015-08-29 19:53 - 2014-07-20 07:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverNavigator
2015-08-29 19:53 - 2014-06-12 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-29 19:53 - 2014-06-01 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2015-08-29 19:53 - 2014-02-07 20:17 - 00000000 ____D C:\WINDOWS\SysWOW64\syncdb
2015-08-29 19:53 - 2014-02-03 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-08-29 19:53 - 2014-02-01 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-08-29 19:53 - 2014-01-29 18:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-08-29 19:53 - 2013-12-07 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-29 19:53 - 2013-09-09 18:52 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-08-29 19:53 - 2013-05-27 18:22 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-29 19:53 - 2012-06-13 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCsoft
2015-08-29 19:53 - 2012-04-23 22:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Privacy SafeGuard
2015-08-29 19:53 - 2012-04-23 20:40 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2015-08-29 19:53 - 2012-04-20 00:24 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-29 19:53 - 2012-04-20 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-29 19:53 - 2009-07-13 22:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-29 19:50 - 2015-07-10 04:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log
2015-08-29 19:50 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:50 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:50 - 2009-07-13 20:20 - 00000000 ____D C:\Users\Default.migrated
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-08-29 19:49 - 2013-01-27 02:20 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2015-08-29 19:49 - 2012-04-23 20:32 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\schemas
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Resources
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-08-29 19:48 - 2012-04-27 12:52 - 00000000 ____D C:\WINDOWS\system32\SPReview
2015-08-29 19:48 - 2012-04-27 12:51 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2015-08-29 19:48 - 2012-04-23 19:52 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Help
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-29 19:47 - 2015-04-06 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-08-29 19:47 - 2014-10-12 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-29 19:47 - 2014-08-05 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SonicProjects
2015-08-29 19:47 - 2012-08-01 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2015-08-29 19:47 - 2012-07-23 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-08-29 19:47 - 2012-04-20 00:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-08-29 19:47 - 2012-04-19 23:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-29 19:47 - 2009-07-13 22:32 - 00000000 ____D C:\Program Files\DVD Maker
2015-08-29 19:46 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-29 19:46 - 2014-08-05 18:46 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SonicProjects
2015-08-29 19:46 - 2012-07-23 01:58 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-08-29 19:46 - 2012-04-20 17:47 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ventrilo
2015-08-29 19:46 - 2009-07-13 20:20 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-08-29 19:39 - 2015-07-10 02:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-29 19:35 - 2015-07-10 02:05 - 00000000 __RHD C:\Users\Default
2015-08-29 19:09 - 2009-07-13 21:45 - 00027392 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-29 19:09 - 2009-07-13 21:45 - 00027392 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-29 19:08 - 2012-04-20 01:24 - 01409614 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-08-27 22:17 - 2014-08-13 00:33 - 00007615 _____ C:\Users\Karrma\AppData\Local\Resmon.ResmonCfg
2015-08-26 17:37 - 2014-07-18 21:35 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-08-26 17:37 - 2013-12-19 00:40 - 01423120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-08-26 17:36 - 2014-07-18 21:35 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-08-26 17:36 - 2013-12-19 00:40 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-08-25 23:04 - 2012-04-19 23:53 - 00067072 _____ C:\Users\Karrma\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-25 11:38 - 2012-09-25 07:11 - 00112760 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-08-25 11:38 - 2012-09-25 07:11 - 00105080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 06884984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 03496752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 00937592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-25 08:57 - 2012-09-25 07:11 - 00385144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 00062584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-25 08:57 - 2010-07-09 16:17 - 02558584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-25 06:02 - 2012-09-25 07:11 - 05165808 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-25 05:51 - 2012-07-29 16:23 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-23 15:25 - 2013-05-07 20:44 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Apple Computer
2015-08-23 15:25 - 2013-05-07 20:44 - 00000000 ____D C:\Users\Karrma\AppData\Local\Apple Computer
2015-08-23 15:04 - 2015-02-08 08:29 - 00000000 __SHD C:\Users\Karrma\AppData\Local\EmieBrowserModeList
2015-08-23 15:04 - 2014-05-14 15:13 - 00000000 __SHD C:\Users\Karrma\AppData\Local\EmieUserList
2015-08-23 14:19 - 2015-03-26 00:45 - 00001094 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk
2015-08-19 17:19 - 2012-04-20 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-19 17:19 - 2012-04-20 15:33 - 00000000 ____D C:\ProgramData\Skype
2015-08-19 03:48 - 2012-05-04 21:00 - 00000000 ____D C:\Users\Karrma\AppData\Local\Downloaded Installations
2015-08-18 22:30 - 2013-12-07 16:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-18 22:30 - 2013-12-07 16:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-18 22:20 - 2013-07-25 03:05 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-18 22:12 - 2012-04-27 12:50 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-13 16:06 - 2015-07-10 04:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2015-08-13 16:01 - 2012-10-27 11:12 - 00000000 ____D C:\Program Files (x86)\DivX
2015-08-13 16:01 - 2012-10-27 11:10 - 00000000 ____D C:\ProgramData\DivX
2015-08-13 15:59 - 2013-03-08 13:18 - 00000000 ____D C:\ProgramData\NexonUS
2015-08-13 15:47 - 2014-05-31 22:43 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-08-13 15:37 - 2015-06-30 18:16 - 00000000 ____D C:\Users\Karrma\Documents\Stalker-SHOC
2015-08-13 15:34 - 2014-07-05 03:43 - 00000000 ____D C:\Program Files (x86)\ManyCam
2015-08-13 15:31 - 2015-05-23 22:23 - 00000000 ____D C:\ProgramData\TechSmith
2015-08-13 02:02 - 2015-04-06 08:23 - 00000000 ____D C:\GOG Games
2015-08-11 18:09 - 2015-05-25 16:38 - 00000000 ____D C:\Users\Karrma\AppData\Local\CrashDumps
2015-08-11 00:19 - 2012-04-22 02:35 - 00000000 ____D C:\ProgramData\Origin
2015-08-11 00:18 - 2014-02-01 22:07 - 00000000 ____D C:\Program Files (x86)\Origin
2015-08-10 21:52 - 2015-06-27 22:32 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-08-09 16:54 - 2014-07-20 07:24 - 00000438 _____ C:\WINDOWS\Tasks\DriverNavigator Scheduled Scan.job
2015-08-03 12:12 - 2012-07-05 18:17 - 00033856 ____H (LogMeIn, Inc.) C:\WINDOWS\system32\hamachi.sys
==================== Files in the root of some directories =======
2014-04-08 13:21 - 2014-09-03 21:25 - 0003741 _____ () C:\Program Files (x86)\Mozilla Firefoxwtu-secure-search.xml
2012-10-28 22:08 - 2013-01-24 15:08 - 0703117 _____ () C:\Users\Karrma\AppData\Roaming\technic-launcher.jar
2012-10-28 22:08 - 2013-01-23 18:20 - 0703104 _____ () C:\Users\Karrma\AppData\Roaming\technic-launcher.jar.bak
2014-08-28 00:14 - 2014-08-28 00:14 - 0000879 _____ () C:\Users\Karrma\AppData\Local\recently-used.xbel
2014-08-13 00:33 - 2015-08-27 22:17 - 0007615 _____ () C:\Users\Karrma\AppData\Local\Resmon.ResmonCfg
Some files in TEMP:
====================
C:\Users\Karrma\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Karrma\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Karrma\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-08-29 19:35
==================== End of FRST.txt ============================
This next thing just started last night. counter strike had some texture problems with the home screen and now i cant access the steam community or update my games.
I've ran
AVG
MalwareByts
&
GMER
both AVG and MWB came up clean but not soon after running GMER I got the BlueScreen of Death both times I tried to run it.
I attached the 'Addition' file because it exceeded the maximum allowed characters.
FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015
Ran by [removed] (administrator) on KARRMA-PC (02-09-2015 15:39:34)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(http://tortoisesvn.net) C:\Config.Msi\226392.rbf
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-26] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14850168 2015-08-29] (Logitech Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3730344 2015-07-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2572198188-481956686-841600760-1000\...\Run: [Spotify Web Helper] => C:\Users\Karrma\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-30] (Spotify Ltd)
HKU\S-1-5-21-2572198188-481956686-841600760-1000\...\Run: [OneDrive] => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\OneDrive.exe [382144 2015-08-29] (Microsoft Corporation)
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\adobe air application installer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\bf4.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\bf4_x86.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dosbox.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\drivernavigator.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtlite.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originuninstall.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\sptdinst-x64.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ursaconsole.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\vid.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64\FileSyncShell64.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Karrma\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll [2015-08-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Karrma\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-10] (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: [S-1-5-21-2572198188-481956686-841600760-1000] => 127.0.0.1:9666
Tcpip\..\Interfaces\{9b93177e-408a-4af0-a3ad-a1d2964729d9}: [NameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2572198188-481956686-841600760-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {A3F5C5D7-9D8E-4743-AABE-FC7DAF30446B} URL =
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://blekko.com/ws/?source=c3348dd4&t ... 68EAE32&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={CCD2CB2D-F015-4D6A-829D-8B65FB294262}&mid=a4268847bcd747d08a90f18676988c02-3db6f44a3e2703a145c84da4a37a016cbc27d0cd&lang=en&ds=AVG&coid=avgtbavg&cmpid=0415avt&pr=fr&d=2014-04-08 13:21:56&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2572198188-481956686-841600760-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Babylon toolbar helper -> {2EECD738-5844-4a99-B4B6-146BF802613B} -> No File
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-24] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-04-30] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-24] (Oracle Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/s ... tor/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.1.0\ViProtocol.dll [2014-07-10] (AVG Secure Search)
FireFox:
========
FF ProfilePath: C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739
FF NewTab: hxxp://www.bing.com/?pc=COSP&ptag=D0710 ... =CT3334470
FF DefaultSearchEngine: Bing
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: false
FF SelectedSearchEngine: Bing
FF Homepage: hxxps://www.google.com/
FF Keyword.URL:
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-31] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-31] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1219160.dll [2015-07-22] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll [No File]
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-07-16] (DivX, LLC)
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-01] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Karrma\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Karrma\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Karrma\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2012-08-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2572198188-481956686-841600760-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: Gif Delayer - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\[removed] [2014-02-04]
FF Extension: Thumbnail Zoom Plus - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\[removed] [2014-02-04]
FF Extension: Adblock Plus - C:\Users\Karrma\AppData\Roaming\Mozilla\Firefox\Profiles\jar4vj51.default-1376886799739\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-06]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-06]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Web TuneUp\FireFoxExt\4.1.0.411
FF Extension: AVG Web TuneUp - C:\ProgramData\AVG Web TuneUp\FireFoxExt\4.1.0.411 [2015-04-30]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-07-20]
Chrome:
=======
CHR Profile: C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-01]
CHR Extension: (Google Drive) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-01]
CHR Extension: (YouTube) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-01]
CHR Extension: (Google Search) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-01]
CHR Extension: (Gmail) - C:\Users\Karrma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-01]
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bghejdcdajlenjngcknlkkoakmmjfanb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eajjckckolcbgmmenaiiigegbadpeghb] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iadddcofhgaeeniecnhpopipbhijnphj] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iedokolghlgkcnafplkbjeokfamliokd] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jddmfogomafbmjkfcpfpnjfgecnjffng] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kpmccjcnkhkgcipodalpmbpighkgiaif] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lopcjmbilgeapfldddijpgpahphngjdk] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mhgliccaogcekoldfmachhehepjdfobj] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nfkbfmjkmioenefhjdonleflegoephgm] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2572198188-481956686-841600760-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pedogdjgmjlabbbdhokgdafpglnjinhc] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bghejdcdajlenjngcknlkkoakmmjfanb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eajjckckolcbgmmenaiiigegbadpeghb] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iadddcofhgaeeniecnhpopipbhijnphj] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iedokolghlgkcnafplkbjeokfamliokd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jddmfogomafbmjkfcpfpnjfgecnjffng] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kpmccjcnkhkgcipodalpmbpighkgiaif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [lopcjmbilgeapfldddijpgpahphngjdk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mffdcionknddopdmdnloanoafafkmckb] - C:\Users\Karrma\AppData\Roaming\OpenCandy\46C1F19CC73C4BD4888715C22DC9AD81\extension.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [mhgliccaogcekoldfmachhehepjdfobj] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nfkbfmjkmioenefhjdonleflegoephgm] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pedogdjgmjlabbbdhokgdafpglnjinhc] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-02-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1528432 2015-07-07] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3518376 2015-07-07] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [314304 2015-07-07] (AVG Technologies CZ, s.r.o.)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-26] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-26] (NVIDIA Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [192120 2015-08-29] (Logitech Inc.)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-26] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-26] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-11] (Electronic Arts)
S4 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-03-15] ()
S4 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-03-13] ()
S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2970424 2015-06-29] (AVG Technologies)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [792016 2015-02-09] (Tunngle.net GmbH)
S2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-06-29] (AVG Technologies)
S2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-06-29] (AVG Technologies)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)
S4 vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [1875480 2015-04-30] (AVG Secure Search)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-29] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-29] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)
S4 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-04-30] ()
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21152 2015-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\system32\DRIVERS\avgfwd6a.sys [67552 2015-04-14] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [293296 2015-06-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [226784 2015-06-10] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [295400 2015-06-15] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-05-29] (Disc Soft Ltd)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-10] (Logitech Inc.)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-29] (Microsoft Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-26] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation)
S3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [31144 2015-06-25] (TuneUp Software)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
U3 idsvc; no ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-02 15:39 - 2015-09-02 15:39 - 00033713 _____ C:\Users\Karrma\Desktop\FRST.txt
2015-09-02 15:27 - 2015-09-02 15:39 - 00000000 ____D C:\FRST
2015-09-02 15:17 - 2015-09-02 15:17 - 02188800 _____ (Farbar) C:\Users\Karrma\Desktop\FRST64.exe
2015-09-02 15:15 - 2015-09-02 15:15 - 00688992 _____ (Swearware) C:\Users\Karrma\Desktop\dds.scr
2015-09-02 15:03 - 2015-09-02 15:03 - 00016148 _____ C:\WINDOWS\system32\KARRMA-PC_Karrma_HistoryPrediction.bin
2015-09-02 14:45 - 2015-09-02 14:45 - 00280360 _____ C:\WINDOWS\Minidump\090215-27109-01.dmp
2015-09-02 14:42 - 2015-09-02 14:46 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-09-02 14:34 - 2015-09-02 14:45 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-02 14:34 - 2015-09-02 14:34 - 00359352 _____ C:\WINDOWS\Minidump\090215-45531-01.dmp
2015-09-02 14:33 - 2015-09-02 14:45 - 378643563 _____ C:\WINDOWS\MEMORY.DMP
2015-09-02 00:59 - 2015-09-02 00:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-09-02 00:38 - 2015-09-02 00:53 - 17109714 _____ C:\Users\Karrma\Downloads\ROCCAT_Lua_DRV1.14.zip
2015-09-01 21:07 - 2015-09-01 21:07 - 00002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-01 21:07 - 2015-09-01 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-09-01 21:00 - 2015-09-01 21:07 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-01 21:00 - 2015-09-01 21:00 - 00929360 _____ (Google Inc.) C:\Users\Karrma\Downloads\ChromeSetup.exe
2015-09-01 01:32 - 2015-09-01 01:32 - 00000000 ____D C:\Users\Karrma\Downloads\Ernest Cline - Ready Player One (2011) -
2015-09-01 01:15 - 2015-09-01 01:15 - 02864184 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\Battle.net-Setup-enUS(1).exe
2015-09-01 01:15 - 2015-09-01 01:15 - 00000000 ____D C:\ProgramData\Battle.net
2015-08-31 21:37 - 2015-08-31 21:39 - 00000000 ____D C:\Program Files\Logitech Gaming Software
2015-08-31 21:26 - 2015-08-31 21:32 - 94449112 _____ (Logitech Inc.) C:\Users\Karrma\Downloads\LGS_8.72.98_x64_Logitech.exe
2015-08-31 21:16 - 2015-08-31 21:22 - 89180888 _____ (Logitech Inc.) C:\Users\Karrma\Downloads\LGS_8.72.98_x86_Logitech.exe
2015-08-31 21:09 - 2015-08-25 07:18 - 00574072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-08-31 21:07 - 2015-08-31 21:07 - 00000000 ____D C:\WINDOWS\LastGood
2015-08-31 21:05 - 2015-08-25 11:38 - 42840184 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 37819184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 22559352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 18569336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 16646624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 15630616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 14945552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 13667032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 12192048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 02354808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 02105976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01898104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435582.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01558648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435582.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01178576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01075320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01064752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 01001440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00986232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00945272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-08-31 21:05 - 2015-08-25 11:38 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-08-31 03:55 - 2015-08-31 03:55 - 00000000 ____D C:\Users\Karrma\AppData\Local\PeerDistRepub
2015-08-31 03:20 - 2015-08-31 03:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-30 14:37 - 2015-08-10 21:52 - 00069416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-08-30 00:14 - 2015-08-30 00:14 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-30 00:14 - 2015-08-30 00:14 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-30 00:14 - 2015-08-30 00:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-29 22:18 - 2015-08-29 22:18 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-08-29 22:16 - 2015-08-30 15:47 - 11188880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-08-29 22:16 - 2015-08-25 11:38 - 17932648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 15334976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 12611824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 03480792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 03074776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-08-29 22:16 - 2015-08-25 11:38 - 00034044 _____ C:\WINDOWS\system32\nvinfo.pb
2015-08-29 22:16 - 2015-08-10 21:52 - 00072504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-08-29 22:16 - 2015-08-07 04:07 - 01898288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435560.dll
2015-08-29 22:16 - 2015-08-07 04:07 - 01558832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435560.dll
2015-08-29 21:19 - 2015-08-29 21:19 - 00009374 __RSH C:\ProgramData\ntuser.pol
2015-08-29 20:53 - 2015-08-29 20:53 - 00000000 ____D C:\Users\Karrma\AppData\Local\MicrosoftEdge
2015-08-29 20:33 - 2015-09-01 22:36 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-29 20:32 - 2015-08-29 19:39 - 00000000 __SHD C:\Recovery
2015-08-29 20:28 - 2015-08-29 20:28 - 00000000 ____D C:\Windows.old
2015-08-29 20:27 - 2015-08-29 20:27 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files\MSBuild
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-29 20:18 - 2015-08-29 20:18 - 00000000 ____D C:\inetpub
2015-08-29 20:17 - 2015-06-17 19:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-29 20:17 - 2015-06-17 19:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 20:17 - 2015-06-17 19:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-29 20:17 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-29 20:17 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-29 20:17 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-29 20:12 - 2015-08-29 20:12 - 00002376 _____ C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-29 20:10 - 2015-08-29 20:10 - 00000000 ____D C:\Users\Karrma\AppData\Local\Publishers
2015-08-29 20:08 - 2015-08-29 20:27 - 00000000 ____D C:\Users\Karrma\AppData\Local\Packages
2015-08-29 20:08 - 2015-08-29 20:08 - 00009066 __RSH C:\Users\Karrma\ntuser.pol
2015-08-29 20:08 - 2015-08-29 20:08 - 00000020 ___SH C:\Users\Karrma\ntuser.ini
2015-08-29 20:08 - 2015-08-29 20:08 - 00000000 ____D C:\Users\Karrma\AppData\Local\TileDataLayer
2015-08-29 20:04 - 2015-08-29 20:04 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-29 19:50 - 2015-08-29 19:50 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-08-29 19:50 - 2015-08-29 19:50 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-08-29 19:47 - 2015-08-29 19:47 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-08-29 19:45 - 2015-09-02 15:01 - 00000000 ____D C:\Users\Karrma
2015-08-29 19:45 - 2015-08-29 20:08 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 __RSD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-29 19:45 - 2015-07-10 04:04 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-29 19:40 - 2015-09-01 01:30 - 01005534 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-29 19:40 - 2015-08-29 19:40 - 00961296 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-08-29 19:39 - 2015-08-29 19:40 - 00021209 _____ C:\WINDOWS\iis.log
2015-08-29 19:39 - 2015-07-10 03:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-29 19:37 - 2015-08-29 21:10 - 00008636 _____ C:\WINDOWS\system32\lvcoinst.log
2015-08-29 19:37 - 2015-08-29 19:47 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-08-29 19:37 - 2015-08-29 19:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-08-29 19:37 - 2015-08-29 19:37 - 00000000 ____D C:\Program Files\VIA
2015-08-29 19:35 - 2015-09-01 22:44 - 00012854 _____ C:\WINDOWS\PFRO.log
2015-08-29 19:35 - 2015-08-29 19:36 - 00026380 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-29 19:05 - 2015-08-29 20:04 - 00006487 _____ C:\WINDOWS\comsetup.log
2015-08-29 19:02 - 2015-08-29 20:05 - 00010449 _____ C:\WINDOWS\diagerr.xml
2015-08-29 19:02 - 2015-08-29 20:05 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-08-29 15:36 - 2015-08-29 15:36 - 01810648 _____ (Logitech Inc.) C:\WINDOWS\system32\CaptureAPO.dll
2015-08-29 15:36 - 2015-08-29 15:36 - 01273448 _____ (Logitech Inc.) C:\WINDOWS\system32\RenderAPO.dll
2015-08-29 07:52 - 2015-08-29 07:52 - 00597640 _____ (Logitech Inc.) C:\WINDOWS\system32\CapturePropPage.dll
2015-08-29 07:52 - 2015-08-29 07:52 - 00508552 _____ (Logitech Inc.) C:\WINDOWS\system32\RenderPropPage.dll
2015-08-25 23:23 - 2015-08-26 07:56 - 00000000 ____D C:\Users\Karrma\Downloads\Stronghold.3.Gold.MULTi8-PROPHET
2015-08-25 23:22 - 2015-08-25 23:22 - 00097117 _____ C:\Users\Karrma\Downloads\Stronghold.3.Gold.MULTi8-PROPHET [IPT].torrent
2015-08-25 05:52 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-08-25 05:51 - 2015-08-25 05:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-08-25 05:51 - 2015-08-25 05:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-08-25 05:50 - 2015-08-25 05:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-25 05:50 - 2015-08-25 05:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 __RHD C:\MSOCache
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 ____D C:\Users\Karrma\AppData\Local\Microsoft Help
2015-08-25 05:50 - 2015-08-25 05:50 - 00000000 ____D C:\Program Files\Microsoft Office
2015-08-25 05:27 - 2015-08-25 05:40 - 00000000 ____D C:\Users\Karrma\Downloads\Microsoft Word 2010 Englishx86
2015-08-25 05:26 - 2015-08-25 05:26 - 00028590 _____ C:\Users\Karrma\Downloads\Microsoft Word 2010 Englishx86 [IPT].torrent
2015-08-24 17:04 - 2015-08-24 17:04 - 00001806 _____ C:\Users\Karrma\Downloads\FirstBackup.spg
2015-08-24 05:16 - 2015-08-24 05:16 - 02508432 _____ (Sysinternals - http://www.sysinternals.com) C:\Users\Karrma\Downloads\procexp.exe
2015-08-24 05:12 - 2015-08-27 20:44 - 00000000 ____D C:\Users\Karrma\Desktop\balls
2015-08-24 05:10 - 2015-08-24 05:10 - 01186640 _____ C:\Users\Karrma\Downloads\ProcessExplorer.zip
2015-08-23 15:47 - 2015-08-23 15:47 - 02864184 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\Battle.net-Setup-enUS.exe
2015-08-23 15:25 - 2015-08-23 16:12 - 00000000 ____D C:\Program Files\pia_manager
2015-08-23 15:25 - 2015-08-23 15:25 - 00031232 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys
2015-08-23 15:25 - 2015-08-23 15:25 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Titanium
2015-08-23 15:22 - 2015-08-23 15:24 - 25723531 _____ C:\Users\Karrma\Downloads\installer_win.exe
2015-08-23 15:08 - 2015-08-29 19:49 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2015-08-23 14:49 - 2015-08-23 14:49 - 03970746 _____ C:\Users\Karrma\Downloads\Battle.net-Agent-PC-Standalone.zip
2015-08-23 13:24 - 2015-08-23 13:24 - 03183672 _____ (Blizzard Entertainment) C:\Users\Karrma\Downloads\StarCraft-II-Setup-enUS.exe
2015-08-23 00:37 - 2015-08-23 00:37 - 00001144 _____ C:\Users\Karrma\Desktop\Wat.txt
2015-08-22 19:30 - 2015-08-22 19:30 - 00000000 ____D C:\Users\Karrma\Downloads\Ready Player One - Ernest Cline
2015-08-22 19:29 - 2015-08-22 19:29 - 00000641 _____ C:\Users\Karrma\Downloads\Ready Player One - Ernest Cline [IPT].torrent
2015-08-22 19:27 - 2015-08-24 05:18 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-08-20 11:36 - 2015-08-29 19:53 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-20 11:22 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-08-20 11:22 - 2015-08-22 18:50 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-08-20 11:22 - 2015-08-20 11:22 - 00000000 ____D C:\Users\Karrma\Documents\StarCraft II
2015-08-20 11:21 - 2015-08-20 11:35 - 00001093 _____ C:\Users\Public\Desktop\StarCraft II.lnk
2015-08-19 21:44 - 2015-08-29 20:04 - 00003126 _____ C:\WINDOWS\System32\Tasks\{16D1C916-849C-4EB2-B319-A8DAB2B47778}
2015-08-19 16:30 - 2015-07-22 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-08-19 03:48 - 2015-09-01 21:05 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\PortForward.com
2015-08-19 03:48 - 2015-08-29 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PortForward.com
2015-08-19 03:48 - 2015-08-19 03:48 - 00000000 ____D C:\Program Files (x86)\Portforward
2015-08-18 22:12 - 2015-07-16 13:12 - 00968704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.exe
2015-08-18 22:12 - 2015-07-16 12:33 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll
2015-08-18 22:12 - 2015-07-16 12:05 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmlmedia.dll
2015-08-18 22:06 - 2015-07-20 11:12 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-08-18 21:06 - 2015-08-18 21:05 - 03970746 _____ C:\Users\Karrma\Desktop\Battle.net-Agent-PC-Standalone.zip
2015-08-17 14:49 - 2015-08-17 14:49 - 00000000 ____D C:\ProgramData\IDM
2015-08-17 14:48 - 2015-08-17 14:48 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\IDM
2015-08-13 12:31 - 2015-08-17 14:02 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Octoshape
2015-08-13 02:03 - 2015-08-13 02:03 - 00001572 _____ C:\Users\Public\Desktop\Uplink.lnk
2015-08-08 03:15 - 2015-08-08 11:03 - 00000000 ____D C:\Users\Karrma\Downloads\Mad.Max.3.Beyond.Thunderdome.1985.DVDRiP.XViD-aGGr0
2015-08-08 03:13 - 2015-08-08 03:13 - 00017575 _____ C:\Users\Karrma\Downloads\Mad.Max.3.Beyond.Thunderdome.1985.DVDRiP.XViD-aGGr0 [IPT].torrent
2015-08-08 03:12 - 2015-08-08 03:12 - 00000000 ____D C:\Users\Karrma\Downloads\Uplink.Hacker.Elite-Sheppard22[GOG]
2015-08-08 03:11 - 2015-08-08 03:12 - 00014451 _____ C:\Users\Karrma\Downloads\Uplink.Hacker.Elite-Sheppard22[GOG] [IPT].torrent
2015-08-03 21:42 - 2015-08-06 00:28 - 00000000 ____D C:\Users\Karrma\Downloads\Mad.Max.2.The.Road.Warrior.1981.720p.BRRip.x264-x0r
2015-08-03 21:41 - 2015-08-03 21:41 - 00017303 _____ C:\Users\Karrma\Downloads\Mad.Max.2.The.Road.Warrior.1981.720p.BRRip.x264-x0r [IPT].torrent
2015-08-03 04:58 - 2015-08-03 20:53 - 00000000 ____D C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS
2015-08-03 04:57 - 2015-08-03 04:57 - 00003597 _____ C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS [IPT].torrent
2015-08-03 04:57 - 2015-08-03 04:57 - 00003597 _____ C:\Users\Karrma\Downloads\Prison.Architect.v33.ALPHA-OUTLAWS [IPT] (1).torrent
2015-08-03 02:25 - 2015-08-03 02:25 - 00000000 ____D C:\Users\Karrma\Downloads\Mad Max 1979 720p BRRip REPACK 6CH AAC x264-SSDD
2015-08-03 02:22 - 2015-08-03 02:22 - 00020941 _____ C:\Users\Karrma\Downloads\Mad Max 1979 720p BRRip REPACK 6CH AAC x264-SSDD [IPT].torrent
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-02 15:05 - 2015-07-20 05:41 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-02 15:04 - 2015-07-20 05:41 - 00000914 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-02 15:03 - 2013-01-13 07:59 - 00000000 ____D C:\Users\Karrma\AppData\Local\TSVNCache
2015-09-02 15:02 - 2015-07-10 05:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-02 15:02 - 2015-07-10 05:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-02 15:02 - 2012-04-20 01:42 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-02 15:01 - 2015-07-10 02:05 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-09-02 14:48 - 2015-04-08 16:33 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-02 14:40 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-02 14:40 - 2014-01-10 02:56 - 00000000 ____D C:\WINDOWS\pss
2015-09-02 14:40 - 2012-04-20 02:29 - 00000000 ____D C:\ProgramData\MFAData
2015-09-02 14:16 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-09-02 14:15 - 2012-04-20 15:33 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Skype
2015-09-02 13:58 - 2014-02-22 18:33 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-02 13:55 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-02 13:54 - 2014-06-12 21:51 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\vlc
2015-09-02 02:46 - 2015-06-07 20:58 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-02 00:59 - 2012-04-20 00:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-01 22:44 - 2015-07-10 05:20 - 00222696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-01 22:36 - 2015-07-10 06:39 - 00000000 ___HD C:\$Windows.~BT
2015-09-01 22:19 - 2014-09-14 06:20 - 00000000 ____D C:\Users\Karrma\AppData\Local\Adobe
2015-09-01 21:00 - 2015-07-20 05:41 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-01 21:00 - 2015-07-20 05:41 - 00003744 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-01 00:32 - 2015-03-21 04:39 - 00000000 ____D C:\Users\Karrma\Desktop\Mis Desktop CleanUp
2015-08-31 21:42 - 2015-07-10 05:20 - 00028505 _____ C:\WINDOWS\setupact.log
2015-08-31 21:38 - 2014-07-20 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-08-31 21:36 - 2014-02-01 22:58 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-31 21:09 - 2013-11-13 07:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-31 21:09 - 2012-09-25 07:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-31 11:43 - 2012-10-03 00:15 - 00000000 ____D C:\Users\Karrma\AppData\Local\Spotify
2015-08-31 11:35 - 2012-10-03 00:14 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Spotify
2015-08-31 03:13 - 2014-02-22 18:33 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-30 04:35 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-08-30 02:23 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-30 02:23 - 2012-04-23 22:48 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Mozilla
2015-08-30 02:23 - 2012-04-19 23:53 - 00000000 ____D C:\Users\Karrma\AppData\Local\Google
2015-08-30 00:14 - 2015-04-06 03:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-29 22:17 - 2012-04-19 23:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-29 21:11 - 2015-07-10 02:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-29 20:33 - 2015-07-10 04:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-29 20:33 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-29 20:18 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-08-29 20:18 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-08-29 20:18 - 2015-07-10 04:01 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-08-29 20:18 - 2015-07-10 04:01 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-08-29 20:18 - 2015-07-10 04:01 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-08-29 20:18 - 2015-07-10 04:01 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-08-29 20:18 - 2015-07-10 04:00 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-08-29 20:18 - 2015-07-10 04:00 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-08-29 20:18 - 2015-07-10 04:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-08-29 20:18 - 2015-07-10 04:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-08-29 20:18 - 2015-07-10 04:00 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-08-29 20:18 - 2015-07-10 03:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-29 20:12 - 2015-03-04 00:24 - 00000000 ___RD C:\Users\Karrma\OneDrive
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-29 20:09 - 2015-07-10 04:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-29 20:06 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-29 20:04 - 2015-08-02 19:00 - 00003118 _____ C:\WINDOWS\System32\Tasks\{AEF9995E-06A4-4B44-B44B-6B49BC4AA857}
2015-08-29 20:04 - 2015-07-12 05:08 - 00003814 _____ C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2015-08-29 20:04 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Registration
2015-08-29 20:04 - 2015-06-07 13:39 - 00003098 _____ C:\WINDOWS\System32\Tasks\{F6E8B76C-DD56-4071-A92A-236852C0E069}
2015-08-29 20:04 - 2015-06-07 13:39 - 00003098 _____ C:\WINDOWS\System32\Tasks\{4C3A052C-F10C-4F0E-9FCD-BE2A6BBB5B53}
2015-08-29 20:04 - 2015-06-07 13:38 - 00003098 _____ C:\WINDOWS\System32\Tasks\{C76F3735-9E96-435B-982C-97FF9EB2D96B}
2015-08-29 20:04 - 2015-06-07 13:38 - 00003098 _____ C:\WINDOWS\System32\Tasks\{5E8097A0-D5A8-4AD1-A89C-B186167A41D0}
2015-08-29 20:04 - 2015-05-29 23:24 - 00004326 _____ C:\WINDOWS\System32\Tasks\Winupdate
2015-08-29 20:04 - 2015-05-29 23:24 - 00004304 _____ C:\WINDOWS\System32\Tasks\EssentialUpdateMachine
2015-08-29 20:04 - 2014-12-29 11:00 - 00003996 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-08-29 20:04 - 2014-12-19 03:44 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Reader and Acrobat Manager
2015-08-29 20:04 - 2014-11-22 04:30 - 00002914 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-08-29 20:04 - 2014-11-21 12:07 - 00003954 _____ C:\WINDOWS\System32\Tasks\Google Update
2015-08-29 20:04 - 2014-09-26 13:53 - 00003630 _____ C:\WINDOWS\System32\Tasks\{51B01CF0-4FA4-451F-8471-E317A57FE00A}
2015-08-29 20:04 - 2014-08-20 22:51 - 00003270 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2015-08-29 20:04 - 2014-08-20 22:50 - 00003244 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2015-08-29 20:04 - 2014-08-20 22:50 - 00003242 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2015-08-29 20:04 - 2014-08-13 07:03 - 00003848 _____ C:\WINDOWS\System32\Tasks\DivX online update program
2015-08-29 20:04 - 2014-08-05 18:46 - 00003502 _____ C:\WINDOWS\System32\Tasks\{FEBDC505-BB4E-4071-B5D9-000BE71A401F}
2015-08-29 20:04 - 2014-08-05 18:36 - 00003528 _____ C:\WINDOWS\System32\Tasks\{CF9A3FE1-70EE-428D-BCF8-CE25B9669D29}
2015-08-29 20:04 - 2014-07-20 07:24 - 00003958 _____ C:\WINDOWS\System32\Tasks\DriverNavigator Scheduled Scan
2015-08-29 20:04 - 2014-03-01 13:18 - 00003122 _____ C:\WINDOWS\System32\Tasks\{DEF374E7-870B-4DC5-A449-34DAD1406F48}
2015-08-29 20:04 - 2013-12-07 22:16 - 00003098 _____ C:\WINDOWS\System32\Tasks\{96E856D6-BCD1-42A7-AB95-47BD6F1373F2}
2015-08-29 20:04 - 2013-12-07 22:16 - 00003098 _____ C:\WINDOWS\System32\Tasks\{669DB003-927C-417B-9A80-83AB52080304}
2015-08-29 20:04 - 2013-12-07 22:15 - 00003098 _____ C:\WINDOWS\System32\Tasks\{3BD95F9A-49E2-48DF-A160-AF3D62519EFC}
2015-08-29 20:04 - 2013-11-09 03:06 - 00003356 _____ C:\WINDOWS\System32\Tasks\{2C21EF52-DCDF-4537-8F96-3C5E02A93640}
2015-08-29 20:04 - 2013-11-09 03:04 - 00003134 _____ C:\WINDOWS\System32\Tasks\{E7DD4A5E-A9AC-45E1-9922-E8D8C6011361}
2015-08-29 20:04 - 2013-10-03 22:35 - 00003166 _____ C:\WINDOWS\System32\Tasks\{FA469CB3-FEC0-46B6-BDB1-55DEB9BE0A64}
2015-08-29 20:04 - 2013-10-03 22:35 - 00003166 _____ C:\WINDOWS\System32\Tasks\{2471CDE3-94AD-429B-A621-21A0939D165F}
2015-08-29 20:04 - 2013-03-23 16:00 - 00003048 _____ C:\WINDOWS\System32\Tasks\{4DAC32CA-AC4C-4B04-ABCE-68C0713A1723}
2015-08-29 20:04 - 2013-03-19 17:27 - 00003326 _____ C:\WINDOWS\System32\Tasks\{1C8A8008-CB5D-4E62-BC2B-8D348895A604}
2015-08-29 20:04 - 2013-01-22 18:54 - 00002816 _____ C:\WINDOWS\System32\Tasks\ROC_REG_JAN_DELETE
2015-08-29 20:04 - 2012-08-07 03:30 - 00003522 _____ C:\WINDOWS\System32\Tasks\{086B8907-D872-48C1-9D5A-B9625E770C5C}
2015-08-29 20:04 - 2012-04-20 02:37 - 00003386 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2015-08-29 20:04 - 2012-04-19 23:53 - 00004006 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2572198188-481956686-841600760-1000UA
2015-08-29 20:04 - 2012-04-19 23:53 - 00003610 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2572198188-481956686-841600760-1000Core
2015-08-29 20:03 - 2015-07-10 04:04 - 00000000 __RSD C:\WINDOWS\Media
2015-08-29 20:03 - 2015-07-10 04:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-29 20:00 - 2015-06-29 08:45 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-29 19:59 - 2015-07-10 04:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-08-29 19:59 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-29 19:59 - 2014-04-01 13:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-08-29 19:53 - 2015-07-30 20:02 - 00000000 ____D C:\WINDOWS\system32\W7NBC
2015-08-29 19:53 - 2015-07-10 15:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-08-29 19:53 - 2015-07-10 04:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:53 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-08-29 19:53 - 2015-06-27 20:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-29 19:53 - 2015-06-07 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-29 19:53 - 2015-04-08 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-29 19:53 - 2015-04-05 01:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard 8.6
2015-08-29 19:53 - 2015-03-26 00:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Singularity (64 bit) Viewer
2015-08-29 19:53 - 2015-03-04 00:29 - 00000000 ____D C:\WINDOWS\en
2015-08-29 19:53 - 2015-03-04 00:27 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-08-29 19:53 - 2015-02-04 03:39 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2015-08-29 19:53 - 2015-02-04 02:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo Dock
2015-08-29 19:53 - 2014-12-16 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2015-08-29 19:53 - 2014-11-21 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-08-29 19:53 - 2014-11-01 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-08-29 19:53 - 2014-10-24 03:27 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e
2015-08-29 19:53 - 2014-09-15 07:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock
2015-08-29 19:53 - 2014-08-25 05:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2015-08-29 19:53 - 2014-08-07 04:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-08-29 19:53 - 2014-08-02 01:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx
2015-08-29 19:53 - 2014-07-20 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIA
2015-08-29 19:53 - 2014-07-20 07:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverNavigator
2015-08-29 19:53 - 2014-06-12 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-08-29 19:53 - 2014-06-01 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2015-08-29 19:53 - 2014-02-07 20:17 - 00000000 ____D C:\WINDOWS\SysWOW64\syncdb
2015-08-29 19:53 - 2014-02-03 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-08-29 19:53 - 2014-02-01 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-08-29 19:53 - 2014-01-29 18:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-08-29 19:53 - 2013-12-07 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-29 19:53 - 2013-09-09 18:52 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-08-29 19:53 - 2013-05-27 18:22 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-29 19:53 - 2012-06-13 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCsoft
2015-08-29 19:53 - 2012-04-23 22:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Privacy SafeGuard
2015-08-29 19:53 - 2012-04-23 20:40 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2015-08-29 19:53 - 2012-04-20 00:24 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-29 19:53 - 2012-04-20 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-29 19:53 - 2009-07-13 22:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-29 19:50 - 2015-07-10 04:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log
2015-08-29 19:50 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:50 - 2015-07-10 04:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-29 19:50 - 2009-07-13 20:20 - 00000000 ____D C:\Users\Default.migrated
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-08-29 19:49 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-08-29 19:49 - 2013-01-27 02:20 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2015-08-29 19:49 - 2012-04-23 20:32 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\schemas
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Resources
2015-08-29 19:48 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-08-29 19:48 - 2012-04-27 12:52 - 00000000 ____D C:\WINDOWS\system32\SPReview
2015-08-29 19:48 - 2012-04-27 12:51 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2015-08-29 19:48 - 2012-04-23 19:52 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\Help
2015-08-29 19:47 - 2015-07-10 04:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-29 19:47 - 2015-04-06 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-08-29 19:47 - 2014-10-12 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-29 19:47 - 2014-08-05 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SonicProjects
2015-08-29 19:47 - 2012-08-01 22:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2015-08-29 19:47 - 2012-07-23 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-08-29 19:47 - 2012-04-20 00:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-08-29 19:47 - 2012-04-19 23:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-29 19:47 - 2009-07-13 22:32 - 00000000 ____D C:\Program Files\DVD Maker
2015-08-29 19:46 - 2015-07-10 04:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-29 19:46 - 2014-08-05 18:46 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SonicProjects
2015-08-29 19:46 - 2012-07-23 01:58 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-08-29 19:46 - 2012-04-20 17:47 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ventrilo
2015-08-29 19:46 - 2009-07-13 20:20 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-08-29 19:39 - 2015-07-10 02:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-29 19:35 - 2015-07-10 02:05 - 00000000 __RHD C:\Users\Default
2015-08-29 19:09 - 2009-07-13 21:45 - 00027392 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-29 19:09 - 2009-07-13 21:45 - 00027392 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-29 19:08 - 2012-04-20 01:24 - 01409614 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-08-27 22:17 - 2014-08-13 00:33 - 00007615 _____ C:\Users\Karrma\AppData\Local\Resmon.ResmonCfg
2015-08-26 17:37 - 2014-07-18 21:35 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-08-26 17:37 - 2013-12-19 00:40 - 01423120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-08-26 17:36 - 2014-07-18 21:35 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-08-26 17:36 - 2013-12-19 00:40 - 01710568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-08-25 23:04 - 2012-04-19 23:53 - 00067072 _____ C:\Users\Karrma\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-25 11:38 - 2012-09-25 07:11 - 00112760 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-08-25 11:38 - 2012-09-25 07:11 - 00105080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 06884984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 03496752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 00937592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-25 08:57 - 2012-09-25 07:11 - 00385144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-25 08:57 - 2012-09-25 07:11 - 00062584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-25 08:57 - 2010-07-09 16:17 - 02558584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-25 06:02 - 2012-09-25 07:11 - 05165808 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-25 05:51 - 2012-07-29 16:23 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-23 15:25 - 2013-05-07 20:44 - 00000000 ____D C:\Users\Karrma\AppData\Roaming\Apple Computer
2015-08-23 15:25 - 2013-05-07 20:44 - 00000000 ____D C:\Users\Karrma\AppData\Local\Apple Computer
2015-08-23 15:04 - 2015-02-08 08:29 - 00000000 __SHD C:\Users\Karrma\AppData\Local\EmieBrowserModeList
2015-08-23 15:04 - 2014-05-14 15:13 - 00000000 __SHD C:\Users\Karrma\AppData\Local\EmieUserList
2015-08-23 14:19 - 2015-03-26 00:45 - 00001094 _____ C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk
2015-08-19 17:19 - 2012-04-20 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-19 17:19 - 2012-04-20 15:33 - 00000000 ____D C:\ProgramData\Skype
2015-08-19 03:48 - 2012-05-04 21:00 - 00000000 ____D C:\Users\Karrma\AppData\Local\Downloaded Installations
2015-08-18 22:30 - 2013-12-07 16:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-18 22:30 - 2013-12-07 16:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-18 22:20 - 2013-07-25 03:05 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-18 22:12 - 2012-04-27 12:50 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-13 16:06 - 2015-07-10 04:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2015-08-13 16:01 - 2012-10-27 11:12 - 00000000 ____D C:\Program Files (x86)\DivX
2015-08-13 16:01 - 2012-10-27 11:10 - 00000000 ____D C:\ProgramData\DivX
2015-08-13 15:59 - 2013-03-08 13:18 - 00000000 ____D C:\ProgramData\NexonUS
2015-08-13 15:47 - 2014-05-31 22:43 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-08-13 15:37 - 2015-06-30 18:16 - 00000000 ____D C:\Users\Karrma\Documents\Stalker-SHOC
2015-08-13 15:34 - 2014-07-05 03:43 - 00000000 ____D C:\Program Files (x86)\ManyCam
2015-08-13 15:31 - 2015-05-23 22:23 - 00000000 ____D C:\ProgramData\TechSmith
2015-08-13 02:02 - 2015-04-06 08:23 - 00000000 ____D C:\GOG Games
2015-08-11 18:09 - 2015-05-25 16:38 - 00000000 ____D C:\Users\Karrma\AppData\Local\CrashDumps
2015-08-11 00:19 - 2012-04-22 02:35 - 00000000 ____D C:\ProgramData\Origin
2015-08-11 00:18 - 2014-02-01 22:07 - 00000000 ____D C:\Program Files (x86)\Origin
2015-08-10 21:52 - 2015-06-27 22:32 - 00050472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-08-09 16:54 - 2014-07-20 07:24 - 00000438 _____ C:\WINDOWS\Tasks\DriverNavigator Scheduled Scan.job
2015-08-03 12:12 - 2012-07-05 18:17 - 00033856 ____H (LogMeIn, Inc.) C:\WINDOWS\system32\hamachi.sys
==================== Files in the root of some directories =======
2014-04-08 13:21 - 2014-09-03 21:25 - 0003741 _____ () C:\Program Files (x86)\Mozilla Firefoxwtu-secure-search.xml
2012-10-28 22:08 - 2013-01-24 15:08 - 0703117 _____ () C:\Users\Karrma\AppData\Roaming\technic-launcher.jar
2012-10-28 22:08 - 2013-01-23 18:20 - 0703104 _____ () C:\Users\Karrma\AppData\Roaming\technic-launcher.jar.bak
2014-08-28 00:14 - 2014-08-28 00:14 - 0000879 _____ () C:\Users\Karrma\AppData\Local\recently-used.xbel
2014-08-13 00:33 - 2015-08-27 22:17 - 0007615 _____ () C:\Users\Karrma\AppData\Local\Resmon.ResmonCfg
Some files in TEMP:
====================
C:\Users\Karrma\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Karrma\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Karrma\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-08-29 19:35
==================== End of FRST.txt ============================