API tools faq
paste
Guest User

Untitled

a guest
Nov 10th, 2015
194
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.43 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
  2. Ran by Sigma (administrator) on SIGMA-HP (10-11-2015 06:43:39)
  3. Running from C:\Users\Sigma\Desktop
  4. Loaded Profiles: Sigma & DefaultAppPool (Available Profiles: Sigma & DefaultAppPool)
  5. Platform: Windows 10 Pro (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
  16. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  17. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  18. (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
  19. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
  20. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
  21. (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
  22. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  23. (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
  24. (Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
  25. (Microsoft Corporation) C:\Windows\System32\mqsvc.exe
  26. (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
  27. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  28. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  29. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
  30. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
  31. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  32. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  33. (Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
  34. (Intel Corporation) C:\Windows\System32\igfxEM.exe
  35. (Intel Corporation) C:\Windows\System32\igfxHK.exe
  36. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  37. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
  38. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  39. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  40. (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
  41. (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
  42. (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
  43. (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
  44. (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  45. (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  46. (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
  47. (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  48. (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
  49. (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15081.0_x64__8wekyb3d8bbwe\Video.UI.exe
  50. (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
  51. (Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
  52. () C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
  53. (Microsoft Corporation) C:\Windows\System32\cmd.exe
  54. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  55. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  56. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  57. (Farbar) C:\Users\Sigma\Desktop\FRST64 (2).exe
  58.  
  59.  
  60. ==================== Registry (Whitelisted) ===========================
  61.  
  62. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  63.  
  64. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8498392 2015-08-28] (Realtek Semiconductor)
  65. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-17] (NVIDIA Corporation)
  66. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  67. HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-09-07] (Synaptics Incorporated)
  68. HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
  69. HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581432 2014-06-09] (Hewlett-Packard Development Company, L.P.)
  70. HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [380680 2014-08-20] (Hewlett-Packard Development Company, L.P.)
  71. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
  72. HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
  73. HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [127528 2015-07-08] (Hewlett-Packard Company)
  74. HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.)
  75. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NAC Assessment Agent.lnk [2015-09-14]
  76. ShortcutTarget: NAC Assessment Agent.lnk -> C:\Program Files (x86)\Extreme Networks\NAC Agent\NacAgent.exe (Extreme Networks, Inc)
  77.  
  78. ==================== Internet (Whitelisted) ====================
  79.  
  80. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  81.  
  82. Tcpip\Parameters: [DhcpNameServer] 8.8.8.8
  83. Tcpip\..\Interfaces\{479a2263-f1a2-4236-9ef7-6d6ae65b9eb5}: [DhcpNameServer] 8.8.8.8
  84. Tcpip\..\Interfaces\{f272d75e-579b-4835-9104-2d7c26563d37}: [DhcpNameServer] 172.20.168.11 172.20.168.10
  85.  
  86. Internet Explorer:
  87. ==================
  88. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  89. HKU\S-1-5-21-3290876315-848689152-142388844-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  90. HKU\S-1-5-21-3290876315-848689152-142388844-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://js.redirect.hp.com/jumpstation?bd=all&c=144&locale=ww_ww&pf=cnnb&s=ieHPtab&tp=iehome
  91. HKU\S-1-5-21-3290876315-848689152-142388844-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
  92. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27] (Oracle Corporation)
  93. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  94. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27] (Oracle Corporation)
  95. BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
  96. BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-12-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
  97. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  98. BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
  99.  
  100. FireFox:
  101. ========
  102. FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-27] (Oracle Corporation)
  103. FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-27] (Oracle Corporation)
  104. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  105. FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-05] (Adobe Systems, Inc.)
  106. FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
  107. FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
  108. FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
  109. FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
  110. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
  111. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
  112. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  113. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  114. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
  115. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
  116. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
  117.  
  118. Chrome:
  119. =======
  120. CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3333529&octid=EB_ORIGINAL_CTID&ISID=M356ACEE5-BBCA-4E13-8FED-94BDB67AD5E7&SearchSource=55&CUI=&UM=8&UP=SPED42155C-CBE1-4D32-A504-CB5608DA6BC2&D=100515&SSPV=
  121. CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3333529&octid=EB_ORIGINAL_CTID&ISID=M356ACEE5-BBCA-4E13-8FED-94BDB67AD5E7&SearchSource=55&CUI=&UM=8&UP=SPED42155C-CBE1-4D32-A504-CB5608DA6BC2&D=100515&SSPV="
  122. CHR Profile: C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default
  123. CHR Extension: (Google Slides) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-26]
  124. CHR Extension: (Google Docs) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-26]
  125. CHR Extension: (Google Drive) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
  126. CHR Extension: (YouTube) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
  127. CHR Extension: (Google Search) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
  128. CHR Extension: (Google Sheets) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-26]
  129. CHR Extension: (Google Docs Offline) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
  130. CHR Extension: (Autofill) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmmgnhgdeffjkdckmikfpnddkbbfkkk [2015-08-28]
  131. CHR Extension: (Chrome Web Store Payments) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-26]
  132. CHR Extension: (Gmail) - C:\Users\Sigma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-26]
  133.  
  134. ==================== Services (Whitelisted) ========================
  135.  
  136. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  137.  
  138. R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1385640 2015-08-28] (Intel Corporation)
  139. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-17] (NVIDIA Corporation)
  140. R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
  141. R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19184 2015-01-27] (Intel Corporation)
  142. R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [150256 2015-07-13] (Intel Corporation)
  143. R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-10-08] (Intel Corporation)
  144. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
  145. S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-04-09] ()
  146. R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-07-06] (Intel Corporation)
  147. S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
  148. R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-09-07] (Microsoft Corporation)
  149. S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-17] (NVIDIA Corporation)
  150. S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-17] (NVIDIA Corporation)
  151. R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [7743472 2015-08-19] (Reimage®)
  152. R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-08-28] (Realtek Semiconductor)
  153. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
  154. R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [44544 2015-03-03] (Synaptics Incorporated) [File not signed]
  155. S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation)
  156. S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-09-07] (Microsoft Corporation)
  157. R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-09-07] (Microsoft Corporation)
  158. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
  159. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
  160.  
  161. ===================== Drivers (Whitelisted) ==========================
  162.  
  163. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  164.  
  165. R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
  166. R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
  167. R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [47096 2015-08-28] (Intel Corporation)
  168. R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [43512 2015-08-28] (Intel Corporation)
  169. R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [41976 2015-08-28] (Intel Corporation)
  170. R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [251384 2015-08-28] (Intel Corporation)
  171. S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [41080 2015-11-02] ()
  172. R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [132360 2015-06-15] (Intel Corporation)
  173. R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [255216 2015-07-13] (Intel Corporation)
  174. R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
  175. S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
  176. R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184096 2015-06-29] (Intel Corporation)
  177. R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-09-07] (Microsoft Corporation)
  178. R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [4043544 2015-07-16] (Intel Corporation)
  179. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-17] (NVIDIA Corporation)
  180. R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation)
  181. S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-09-11] (Realtek )
  182. S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [391896 2015-03-23] (Realsil Semiconductor Corporation)
  183. S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [33448 2015-04-07] (Synaptics Incorporated)
  184. R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44216 2015-09-07] (Synaptics Incorporated)
  185. U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-11-04] ()
  186. S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
  187. S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
  188. R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
  189. R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
  190. R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [30544 2015-09-07] (HP)
  191. U3 idsvc; no ImagePath
  192. S3 intaud_WaveExtensible; system32\drivers\intelaud.sys [X]
  193. S3 iwdbus; \SystemRoot\System32\drivers\iwdbus.sys [X]
  194. S3 usb3Hub; \SystemRoot\System32\drivers\usb3Hub.sys [X]
  195. S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
  196. U3 wpcsvc; no ImagePath
  197.  
  198. ==================== NetSvcs (Whitelisted) ===================
  199.  
  200. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  201.  
  202.  
  203. ==================== One Month Created files and folders ========
  204.  
  205. (If an entry is included in the fixlist, the file/folder will be moved.)
  206.  
  207. 2015-11-10 06:43 - 2015-11-10 06:44 - 00019324 _____ C:\Users\Sigma\Desktop\FRST.txt
  208. 2015-11-10 06:43 - 2015-11-10 06:43 - 00000000 ____D C:\FRST
  209. 2015-11-10 06:42 - 2015-11-10 06:43 - 02198528 _____ (Farbar) C:\Users\Sigma\Desktop\FRST64 (2).exe
  210. 2015-11-10 06:41 - 2015-11-10 06:41 - 00016148 _____ C:\WINDOWS\system32\SIGMA-HP_Sigma_HistoryPrediction.bin
  211. 2015-11-09 21:41 - 2015-11-09 21:41 - 00457632 _____ (Bleeping Computer, LLC) C:\Users\Sigma\Downloads\FixExec.exe
  212. 2015-11-09 21:38 - 2015-11-09 21:39 - 00448512 _____ (OldTimer Tools) C:\Users\Sigma\Downloads\TFC.exe
  213. 2015-11-09 21:36 - 2015-11-09 21:36 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Sigma\Downloads\sc-cleaner.exe
  214. 2015-11-09 21:33 - 2015-11-09 21:33 - 00584288 _____ (Oracle Corporation) C:\Users\Sigma\Downloads\JavaSetup8u65 (2).exe
  215. 2015-11-09 21:28 - 2015-11-09 21:28 - 25824792 _____ C:\Users\Sigma\Downloads\WindowsServer2003-KB942288-v4-ia64.exe
  216. 2015-11-09 21:28 - 2015-11-09 21:28 - 03589956 _____ C:\Users\Sigma\Downloads\Windows6.0-KB942288-v2-ia64.msu
  217. 2015-11-09 21:28 - 2015-11-09 21:28 - 03086960 _____ C:\Users\Sigma\Downloads\Windows6.0-KB942288-v2-x64 (1).msu
  218. 2015-11-09 21:22 - 2015-11-09 21:22 - 03086960 _____ C:\Users\Sigma\Downloads\Windows6.0-KB942288-v2-x64.msu
  219. 2015-11-09 21:13 - 2015-11-09 21:13 - 00004338 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater
  220. 2015-11-09 21:13 - 2015-11-09 21:13 - 00003520 _____ C:\WINDOWS\System32\Tasks\Reimage Reminder
  221. 2015-11-09 21:12 - 2015-11-09 21:13 - 00000000 ____D C:\rei
  222. 2015-11-09 21:12 - 2015-11-09 21:13 - 00000000 ____D C:\ProgramData\Reimage Protector
  223. 2015-11-09 21:12 - 2015-11-09 21:13 - 00000000 ____D C:\Program Files\Reimage
  224. 2015-11-09 21:12 - 2015-11-09 21:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
  225. 2015-11-09 21:11 - 2015-11-09 21:13 - 00000148 _____ C:\WINDOWS\Reimage.ini
  226. 2015-11-09 21:11 - 2015-11-09 21:11 - 00772016 _____ (Reimage®) C:\Users\Sigma\Downloads\ReimageRepair.exe
  227. 2015-11-09 21:08 - 2015-11-09 21:08 - 00584288 _____ (Oracle Corporation) C:\Users\Sigma\Downloads\JavaSetup8u65 (1).exe
  228. 2015-11-09 17:21 - 2015-11-09 18:04 - 00000000 ____D C:\Users\Sigma\Downloads\Anna (2013) [1080p]
  229. 2015-11-09 11:17 - 2015-11-09 11:17 - 00000224 _____ C:\Users\Sigma\Downloads\Ch 4 ServerLogs.csv
  230. 2015-11-07 09:14 - 2015-11-07 09:14 - 53770968 _____ (Microsoft Corporation) C:\Users\Sigma\Downloads\Windows-KB890830-x64-V5.29.exe
  231. 2015-11-07 09:10 - 2015-11-07 09:10 - 00001790 _____ C:\Users\Sigma\Downloads\redist.txt
  232. 2015-11-06 22:22 - 2015-11-06 22:22 - 00000000 ____D C:\Users\Sigma\Downloads\Sinister 2 {2015} CAM XVID AC3-MRG
  233. 2015-11-06 22:16 - 2015-11-06 22:18 - 00000000 ____D C:\Users\Sigma\Downloads\Sinister (2012)
  234. 2015-11-05 18:04 - 2015-11-05 18:12 - 00000000 ____D C:\Users\Sigma\Downloads\Gone Girl (2014)
  235. 2015-11-04 20:29 - 2015-11-04 20:29 - 01126018 _____ C:\Users\Sigma\Downloads\Deadweight Loss of Taxation.pptx
  236. 2015-11-04 19:47 - 2015-11-09 11:01 - 00000000 ____D C:\Users\Sigma\AppData\Local\CrashDumps
  237. 2015-11-04 19:22 - 2015-11-04 19:22 - 00010626 _____ C:\Users\Sigma\Downloads\Book3Group assignemnt Stat 2.xlsx
  238. 2015-11-04 11:47 - 2015-11-07 07:55 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  239. 2015-11-04 11:47 - 2015-11-04 16:30 - 00000000 ____D C:\ProgramData\RogueKiller
  240. 2015-11-04 11:47 - 2015-11-04 11:47 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
  241. 2015-11-04 11:46 - 2015-11-04 17:16 - 00000000 ____D C:\Users\Sigma\Desktop\mbar
  242. 2015-11-04 11:46 - 2015-11-04 11:47 - 18969672 _____ C:\Users\Sigma\Downloads\RogueKiller.exe
  243. 2015-11-04 11:46 - 2015-11-04 11:46 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Sigma\Downloads\mbar-1.09.3.1001.exe
  244. 2015-11-04 11:44 - 2015-11-04 11:44 - 00584288 _____ (Oracle Corporation) C:\Users\Sigma\Downloads\JavaSetup8u65.exe
  245. 2015-11-04 11:13 - 2015-11-07 09:05 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
  246. 2015-11-04 09:41 - 2015-11-04 09:42 - 16969531 _____ C:\Users\Sigma\Downloads\Greenfoot-generic-300.jar
  247. 2015-11-04 07:56 - 2015-11-04 07:56 - 00054657 _____ C:\Users\Sigma\Downloads\Shortcut.txt
  248. 2015-11-03 21:31 - 2015-11-03 21:31 - 00036032 _____ C:\Users\Sigma\Downloads\Bank.zip
  249. 2015-11-03 19:25 - 2015-11-03 19:25 - 00000000 ____D C:\Users\Sigma\AppData\Local\NetworkTiles
  250. 2015-11-03 18:27 - 2015-11-03 18:30 - 67591367 _____ C:\Users\Sigma\Downloads\7. Surplus AUDIO.ppsm
  251. 2015-11-03 18:22 - 2015-11-03 18:22 - 00425447 _____ C:\Users\Sigma\Downloads\Taxes.pptx
  252. 2015-11-03 17:10 - 2015-11-03 17:10 - 05637361 _____ (Swearware) C:\Users\Sigma\Downloads\Unconfirmed 140602.crdownload
  253. 2015-11-03 16:41 - 2015-11-03 16:41 - 00184620 _____ C:\Users\Sigma\Downloads\JavaRa-2.6.1.zip
  254. 2015-11-03 16:20 - 2015-11-03 16:20 - 00000000 ____D C:\Users\Sigma\AppData\Local\PeerDistRepub
  255. 2015-11-03 16:01 - 2015-11-03 16:24 - 00005812 _____ C:\zoek-results.log
  256. 2015-11-02 21:24 - 2015-11-02 21:24 - 00000000 ____D C:\uninst
  257. 2015-11-02 21:21 - 2015-11-04 07:56 - 00044680 _____ C:\Users\Sigma\Downloads\Addition.txt
  258. 2015-11-02 21:13 - 2015-11-04 13:19 - 00000000 ____D C:\ProgramData\HitmanPro
  259. 2015-11-02 21:13 - 2015-11-02 21:13 - 11336600 _____ (SurfRight B.V.) C:\Users\Sigma\Downloads\HitmanPro_x64.exe
  260. 2015-11-02 21:13 - 2015-11-02 21:13 - 00041080 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
  261. 2015-11-02 21:12 - 2015-11-04 07:56 - 00060298 _____ C:\Users\Sigma\Downloads\FRST.txt
  262. 2015-11-02 21:12 - 2015-11-02 21:12 - 02198016 _____ (Farbar) C:\Users\Sigma\Downloads\FRST64 (1).exe
  263. 2015-11-02 21:11 - 2015-11-02 21:11 - 02019656 _____ (Bleeping Computer, LLC) C:\Users\Sigma\Downloads\rkill.exe
  264. 2015-11-02 21:10 - 2015-11-02 21:24 - 01801288 _____ (Malwarebytes) C:\Users\Sigma\Downloads\JRT (2).exe
  265. 2015-11-02 21:10 - 2015-11-02 21:10 - 00000000 ____D C:\Users\Sigma\AppData\Local\Geckofx
  266. 2015-11-02 21:09 - 2015-11-02 21:09 - 00003897 _____ C:\Users\Sigma\AppData\LocalLow\lpm.dat
  267. 2015-11-02 21:09 - 2015-11-02 21:09 - 00000000 ____D C:\Users\Sigma\AppData\Roaming\c
  268. 2015-11-02 21:09 - 2015-11-02 21:09 - 00000000 ____D C:\ProgramData\u4c
  269. 2015-11-02 21:00 - 2015-11-02 21:01 - 01708032 _____ C:\Users\Sigma\Downloads\adwcleaner_5.016.exe
  270. 2015-11-02 20:59 - 2015-11-02 21:00 - 05637361 _____ (Swearware) C:\Users\Sigma\Downloads\ComboFix.exe
  271. 2015-11-02 19:37 - 2015-11-02 19:41 - 00000000 ____D C:\Users\Sigma\Downloads\Insidious Chapter 3 (2015)
  272. 2015-11-02 19:36 - 2015-11-02 21:09 - 00000000 ____D C:\Users\Sigma\AppData\Roaming\DivX
  273. 2015-11-02 19:34 - 2015-11-02 21:10 - 00000000 ____D C:\Program Files (x86)\DivX
  274. 2015-11-02 19:23 - 2015-11-02 19:23 - 00000000 ____D C:\Users\Sigma\Downloads\Sinister 2 2015 720p BrRip x264 - iFT
  275. 2015-11-02 19:01 - 2015-11-02 19:01 - 00000000 ____D C:\Users\Sigma\Downloads\Sinister 2 2015 720p BrRip x264 - RARBG
  276. 2015-11-02 10:29 - 2015-11-02 10:29 - 00001728 _____ C:\Users\Sigma\AppData\Local\recently-used.xbel
  277. 2015-11-01 12:04 - 2015-11-01 12:06 - 00000000 ____D C:\Users\Sigma\Downloads\The Loved Ones (2009) DVDRIP Xvid-BHRG
  278. 2015-10-31 13:21 - 2015-10-31 13:26 - 1558558720 _____ C:\Users\Sigma\Downloads\7500.2014.L1.HDRip.avi
  279. 2015-10-30 11:59 - 2015-10-30 11:59 - 00000000 ____D C:\Users\Sigma\Downloads\Stephen King's It 1990 DVDRip Srkfan
  280. 2015-10-30 09:53 - 2015-10-30 09:53 - 01801288 _____ (Malwarebytes) C:\Users\Sigma\Downloads\JRT (1).exe
  281. 2015-10-30 09:50 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Shutter.[2008.Eng].DVDRip.DivX-LTT
  282. 2015-10-30 09:43 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Shutter.2004.DVDRip.XviD-PROMiSE
  283. 2015-10-29 23:51 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\The.Vatican.Tapes.2015.BRRip.XViD-ETRG
  284. 2015-10-29 23:46 - 2015-10-27 18:38 - 21871616 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
  285. 2015-10-29 23:46 - 2015-10-27 18:16 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
  286. 2015-10-29 23:46 - 2015-10-21 07:45 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
  287. 2015-10-29 23:46 - 2015-10-21 07:44 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
  288. 2015-10-29 23:46 - 2015-10-21 07:43 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
  289. 2015-10-29 23:46 - 2015-10-21 07:39 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
  290. 2015-10-29 23:46 - 2015-10-21 07:00 - 24595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
  291. 2015-10-29 23:46 - 2015-10-21 07:00 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
  292. 2015-10-29 23:46 - 2015-10-21 06:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
  293. 2015-10-29 23:46 - 2015-10-21 06:57 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
  294. 2015-10-29 23:46 - 2015-10-21 06:52 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
  295. 2015-10-29 23:46 - 2015-10-21 06:50 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
  296. 2015-10-29 23:46 - 2015-10-21 06:48 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
  297. 2015-10-29 23:46 - 2015-10-21 06:47 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
  298. 2015-10-29 23:46 - 2015-10-21 06:46 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
  299. 2015-10-29 23:46 - 2015-10-21 06:46 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
  300. 2015-10-29 23:46 - 2015-10-21 06:44 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
  301. 2015-10-29 23:46 - 2015-10-21 06:44 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
  302. 2015-10-29 23:46 - 2015-10-21 06:43 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
  303. 2015-10-29 23:46 - 2015-10-21 06:42 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
  304. 2015-10-29 23:46 - 2015-10-21 06:41 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
  305. 2015-10-29 23:46 - 2015-10-21 06:40 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
  306. 2015-10-29 23:46 - 2015-10-21 06:38 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
  307. 2015-10-29 23:46 - 2015-10-21 00:53 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
  308. 2015-10-29 23:46 - 2015-10-21 00:49 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
  309. 2015-10-29 23:46 - 2015-10-21 00:13 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
  310. 2015-10-29 23:46 - 2015-10-21 00:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
  311. 2015-10-29 23:46 - 2015-10-21 00:08 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
  312. 2015-10-29 23:46 - 2015-10-21 00:05 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
  313. 2015-10-29 23:46 - 2015-10-21 00:03 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
  314. 2015-10-29 23:46 - 2015-10-21 00:03 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
  315. 2015-10-29 23:46 - 2015-10-20 23:58 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
  316. 2015-10-29 23:46 - 2015-10-20 23:58 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
  317. 2015-10-29 23:46 - 2015-10-20 23:55 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
  318. 2015-10-26 17:53 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\At.the.Devils.Door.2014.1080p.BluRay.H264.AAC-RARBG
  319. 2015-10-25 17:12 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\The Descent Part 2 (2009)
  320. 2015-10-21 16:19 - 2015-10-21 16:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
  321. 2015-10-21 16:13 - 2015-10-21 16:13 - 01089105 _____ (pendrivelinux.com) C:\Users\Sigma\Downloads\Universal-USB-Installer-1.9.6.1.exe
  322. 2015-10-21 15:14 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Out.of.the.Dark.2014.BRRip.XviD.AC3-EVO
  323. 2015-10-21 12:22 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\The.Pyramid.2014.HDRip.XViD-juggs[ETRG]
  324. 2015-10-20 15:11 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Case39 (2009) [1080p]
  325. 2015-10-19 08:43 - 2015-10-19 16:49 - 00000000 ____D C:\Users\Sigma\.dia
  326. 2015-10-19 08:42 - 2015-10-19 08:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dia
  327. 2015-10-19 08:42 - 2015-10-19 08:43 - 00000000 ____D C:\Program Files (x86)\Dia
  328. 2015-10-19 08:41 - 2015-10-19 08:42 - 19620143 _____ (The Dia Developers) C:\Users\Sigma\Downloads\dia-setup-0.97.2-2-unsigned.exe
  329. 2015-10-16 18:00 - 2015-10-16 18:00 - 00001112 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
  330. 2015-10-16 17:59 - 2015-10-16 18:00 - 08159440 _____ (TeamViewer GmbH) C:\Users\Sigma\Downloads\TeamViewer_Setup_en (2).exe
  331. 2015-10-15 16:43 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Area 51.2015.HDRip.XViD-ETRG
  332. 2015-10-14 19:27 - 2015-10-14 19:28 - 02091520 _____ (Conner Bernhard) C:\Users\Sigma\Downloads\NetAdapterRepair1.2.exe
  333. 2015-10-14 19:25 - 2015-10-14 19:25 - 02196992 _____ (Farbar) C:\Users\Sigma\Downloads\FRST64.exe
  334. 2015-10-14 16:22 - 2015-09-30 23:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
  335. 2015-10-14 16:22 - 2015-09-24 22:04 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
  336. 2015-10-14 16:22 - 2015-09-24 22:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
  337. 2015-10-14 16:22 - 2015-09-24 22:01 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
  338. 2015-10-14 16:22 - 2015-09-24 22:01 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
  339. 2015-10-14 16:22 - 2015-09-24 22:00 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
  340. 2015-10-14 16:22 - 2015-09-24 22:00 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
  341. 2015-10-14 16:22 - 2015-09-24 21:59 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
  342. 2015-10-14 16:22 - 2015-09-24 21:59 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
  343. 2015-10-14 16:22 - 2015-09-24 21:59 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
  344. 2015-10-14 16:22 - 2015-09-24 21:59 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
  345. 2015-10-14 16:22 - 2015-09-24 21:38 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
  346. 2015-10-14 16:22 - 2015-09-24 21:38 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
  347. 2015-10-14 16:22 - 2015-09-24 21:36 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
  348. 2015-10-14 16:22 - 2015-09-24 21:34 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
  349. 2015-10-14 16:22 - 2015-09-24 21:33 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
  350. 2015-10-14 16:22 - 2015-09-24 21:32 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
  351. 2015-10-14 16:21 - 2015-10-10 02:12 - 00078528 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
  352. 2015-10-14 16:21 - 2015-10-05 22:03 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
  353. 2015-10-14 16:21 - 2015-10-05 21:46 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
  354. 2015-10-14 16:21 - 2015-09-30 23:01 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
  355. 2015-10-14 16:21 - 2015-09-30 23:01 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
  356. 2015-10-14 16:21 - 2015-09-30 23:01 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
  357. 2015-10-14 16:21 - 2015-09-30 23:01 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
  358. 2015-10-14 16:21 - 2015-09-30 22:03 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
  359. 2015-10-14 16:21 - 2015-09-24 23:01 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
  360. 2015-10-14 16:21 - 2015-09-24 23:01 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
  361. 2015-10-14 16:21 - 2015-09-24 22:56 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
  362. 2015-10-14 16:21 - 2015-09-24 22:52 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
  363. 2015-10-14 16:21 - 2015-09-24 22:33 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
  364. 2015-10-14 16:21 - 2015-09-24 22:26 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
  365. 2015-10-14 16:21 - 2015-09-24 22:11 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
  366. 2015-10-14 16:21 - 2015-09-24 22:11 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
  367. 2015-10-14 16:21 - 2015-09-24 22:09 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
  368. 2015-10-14 16:21 - 2015-09-24 22:07 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
  369. 2015-10-14 16:21 - 2015-09-24 22:04 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
  370. 2015-10-14 16:21 - 2015-09-24 22:03 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
  371. 2015-10-14 16:21 - 2015-09-24 22:03 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
  372. 2015-10-14 16:21 - 2015-09-24 22:02 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
  373. 2015-10-14 16:21 - 2015-09-24 22:02 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
  374. 2015-10-14 16:21 - 2015-09-24 22:00 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
  375. 2015-10-14 16:21 - 2015-09-24 22:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
  376. 2015-10-14 16:21 - 2015-09-24 21:59 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
  377. 2015-10-14 16:21 - 2015-09-24 21:59 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
  378. 2015-10-14 16:21 - 2015-09-24 21:58 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
  379. 2015-10-14 16:21 - 2015-09-24 21:47 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
  380. 2015-10-14 16:21 - 2015-09-24 21:47 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
  381. 2015-10-14 16:21 - 2015-09-24 21:38 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
  382. 2015-10-14 16:21 - 2015-09-24 21:38 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
  383. 2015-10-14 16:21 - 2015-09-24 21:37 - 00766976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
  384. 2015-10-14 16:21 - 2015-09-24 21:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
  385. 2015-10-14 16:21 - 2015-09-24 21:37 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
  386. 2015-10-14 16:21 - 2015-09-24 21:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
  387. 2015-10-14 16:21 - 2015-09-24 21:34 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
  388. 2015-10-14 16:21 - 2015-09-24 21:34 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
  389. 2015-10-14 16:21 - 2015-09-24 21:34 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
  390. 2015-10-14 16:21 - 2015-09-24 21:34 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
  391. 2015-10-14 16:21 - 2015-09-24 21:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
  392. 2015-10-13 16:37 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\Nightlight.2015.HDRip.XViD-ETRG
  393. 2015-10-12 18:32 - 2015-11-03 00:35 - 00000000 ____D C:\Users\Sigma\Downloads\The.Gift.2015.HC.HDRip.XviD.AC3-EVO
  394.  
  395. ==================== One Month Modified files and folders ========
  396.  
  397. (If an entry is included in the fixlist, the file/folder will be moved.)
  398.  
  399. 2015-11-10 06:43 - 2015-08-26 23:27 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
  400. 2015-11-10 06:32 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\sru
  401. 2015-11-10 06:27 - 2015-06-23 21:50 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
  402. 2015-11-10 00:19 - 2015-08-26 22:53 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E5EB64FF-FBC3-45BE-B7B0-A3CA0D44DA30}
  403. 2015-11-09 22:07 - 2015-07-10 07:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
  404. 2015-11-09 21:23 - 2015-08-27 10:10 - 00000000 ____D C:\Users\Sigma\AppData\Roaming\Skype
  405. 2015-11-09 21:08 - 2015-08-27 07:31 - 00000000 ____D C:\Users\Sigma\AppData\Roaming\uTorrent
  406. 2015-11-09 21:02 - 2015-09-07 07:05 - 00000000 ____D C:\Users\Sigma
  407. 2015-11-09 18:41 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\AppReadiness
  408. 2015-11-08 08:17 - 2015-09-07 07:04 - 01007522 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  409. 2015-11-07 22:18 - 2015-08-27 10:13 - 00000000 ____D C:\Users\Sigma\Documents\Youcam
  410. 2015-11-07 22:17 - 2015-08-26 23:27 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
  411. 2015-11-07 22:16 - 2015-09-14 18:42 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  412. 2015-11-07 22:15 - 2015-09-07 07:02 - 00000000 ____D C:\ProgramData\Validity
  413. 2015-11-07 22:15 - 2015-07-10 07:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
  414. 2015-11-07 13:42 - 2015-07-10 04:05 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
  415. 2015-11-07 09:04 - 2015-09-07 06:57 - 00019644 _____ C:\WINDOWS\PFRO.log
  416. 2015-11-07 08:11 - 2015-09-14 15:57 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
  417. 2015-11-07 08:11 - 2015-09-14 15:57 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  418. 2015-11-07 08:11 - 2015-09-14 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  419. 2015-11-07 08:11 - 2015-09-14 15:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
  420. 2015-11-07 07:55 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\Resources
  421. 2015-11-05 19:40 - 2015-08-27 23:22 - 00000052 _____ C:\WINDOWS\SysWOW64\DOErrors.log
  422. 2015-11-05 17:03 - 2015-08-26 22:51 - 00003862 _____ C:\WINDOWS\System32\Tasks\Registration
  423. 2015-11-04 13:19 - 2015-06-23 21:48 - 00000000 ____D C:\ProgramData\Package Cache
  424. 2015-11-04 13:14 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\registration
  425. 2015-11-04 13:04 - 2015-09-01 06:09 - 00000000 __RHD C:\MSOCache
  426. 2015-11-04 13:04 - 2015-08-27 00:15 - 00000000 ____D C:\Program Files\Java
  427. 2015-11-04 11:26 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\NDF
  428. 2015-11-04 10:22 - 2015-09-22 13:10 - 00000000 ____D C:\Users\DefaultAppPool
  429. 2015-11-03 14:18 - 2015-08-26 23:23 - 00000000 ____D C:\WINDOWS\system32\appmgmt
  430. 2015-11-03 13:59 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
  431. 2015-11-03 00:36 - 2015-07-10 06:04 - 00000000 ____D C:\Program Files\Windows Defender
  432. 2015-11-03 00:35 - 2015-10-09 13:42 - 00000000 ____D C:\Users\Sigma\Downloads\Pirates of the Caribbean - On Stranger Tides (2011)
  433. 2015-11-03 00:35 - 2015-10-09 07:56 - 00000000 ____D C:\Users\Sigma\Downloads\Pirates of the Caribbean - At Worlds End (2007)
  434. 2015-11-03 00:35 - 2015-10-07 19:20 - 00000000 ____D C:\Users\Sigma\Downloads\Candyman.1992.1080p.BluRay.x264.anoXmous
  435. 2015-11-03 00:35 - 2015-10-05 14:28 - 00000000 ____D C:\Users\Sigma\Downloads\Jeepers.Creepers.II.2003.1080p.BluRay.x264.DD5.1-FGT
  436. 2015-11-03 00:35 - 2015-09-20 17:58 - 00000000 ____D C:\Users\Sigma\Downloads\Southpaw.2015.HDRip.XviD-ETRG
  437. 2015-11-03 00:35 - 2015-09-11 16:17 - 00000000 ____D C:\Users\Sigma\Downloads\POWER ISO 4.7
  438. 2015-11-03 00:35 - 2015-08-27 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  439. 2015-11-03 00:35 - 2015-08-27 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
  440. 2015-11-03 00:35 - 2015-08-26 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  441. 2015-11-03 00:35 - 2015-08-19 02:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
  442. 2015-11-03 00:35 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SystemResources
  443. 2015-11-03 00:35 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\Globalization
  444. 2015-11-03 00:35 - 2015-07-10 04:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
  445. 2015-11-02 22:01 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\rescache
  446. 2015-11-02 21:26 - 2015-10-05 14:51 - 00000000 ____D C:\Users\Sigma\AppData\Local\Tempfolder
  447. 2015-11-02 21:11 - 2015-08-27 00:16 - 00000000 ____D C:\Users\Sigma\.oracle_jre_usage
  448. 2015-11-02 20:42 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
  449. 2015-10-29 23:57 - 2015-07-10 05:55 - 00000000 ____D C:\WINDOWS\CbsTemp
  450. 2015-10-29 23:35 - 2015-09-11 16:03 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
  451. 2015-10-26 09:11 - 2015-09-21 07:40 - 00000000 ___RD C:\Users\Sigma\Desktop\Python Projects
  452. 2015-10-26 09:11 - 2015-09-21 07:39 - 00000000 ___RD C:\Users\Sigma\Desktop\Java Projects
  453. 2015-10-22 06:43 - 2015-08-19 02:29 - 00000000 ____D C:\ProgramData\Skype
  454. 2015-10-21 16:19 - 2015-07-10 07:20 - 00024334 _____ C:\WINDOWS\setupact.log
  455. 2015-10-19 17:29 - 2015-09-14 13:44 - 00003242 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForSigma
  456. 2015-10-19 17:29 - 2015-09-14 13:44 - 00000350 _____ C:\WINDOWS\Tasks\HPCeeScheduleForSigma.job
  457. 2015-10-18 19:31 - 2015-07-10 07:20 - 00235568 _____ C:\WINDOWS\system32\FNTCACHE.DAT
  458. 2015-10-16 18:00 - 2015-09-14 15:41 - 00000000 ____D C:\Program Files (x86)\TeamViewer
  459. 2015-10-15 22:10 - 2015-07-10 06:06 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
  460. 2015-10-15 22:10 - 2015-07-10 06:06 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
  461. 2015-10-15 19:31 - 2015-09-11 16:04 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
  462. 2015-10-14 19:34 - 2015-08-19 02:25 - 00016452 _____ C:\WINDOWS\system32\results.xml
  463. 2015-10-14 19:05 - 2015-09-01 06:14 - 00000000 ____D C:\ProgramData\Microsoft Help
  464. 2015-10-14 19:02 - 2015-08-27 03:19 - 00000000 ____D C:\WINDOWS\system32\MRT
  465.  
  466. ==================== Files in the root of some directories =======
  467.  
  468. 2015-11-02 10:29 - 2015-11-02 10:29 - 0001728 _____ () C:\Users\Sigma\AppData\Local\recently-used.xbel
  469.  
  470. ==================== Bamital & volsnap =================
  471.  
  472. (There is no automatic fix for files that do not pass verification.)
  473.  
  474. C:\WINDOWS\system32\winlogon.exe => File is digitally signed
  475. C:\WINDOWS\system32\wininit.exe => File is digitally signed
  476. C:\WINDOWS\explorer.exe => File is digitally signed
  477. C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
  478. C:\WINDOWS\system32\svchost.exe => File is digitally signed
  479. C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
  480. C:\WINDOWS\system32\services.exe => File is digitally signed
  481. C:\WINDOWS\system32\User32.dll => File is digitally signed
  482. C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
  483. C:\WINDOWS\system32\userinit.exe => File is digitally signed
  484. C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
  485. C:\WINDOWS\system32\rpcss.dll => File is digitally signed
  486. C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
  487. C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
  488. C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
  489.  
  490.  
  491. LastRegBack: 2015-11-10 02:22
  492.  
  493. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!