API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 19th, 2014
53
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.78 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
  2. Ran by Chandler (administrator) on CHANDLER-M14X on 19-03-2014 18:13:17
  3. Running from C:\Users\Chandler\Downloads
  4. Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
  5. Internet Explorer Version 8
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  17. (Microsoft Corporation) C:\Windows\system32\WLANExt.exe
  18. (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  19. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  20. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  21. () C:\Windows\SysWOW64\PnkBstrA.exe
  22. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  24. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  25. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  26. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  27. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  28. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  29. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  30. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  31. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  32. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  33. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
  34. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  35. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  36. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  37. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  38. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  39. (Google Inc.) C:\Users\Chandler\AppData\Local\Google\Chrome\Application\chrome.exe
  40. (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
  41. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  42. (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
  43.  
  44.  
  45. ==================== Registry (Whitelisted) ==================
  46.  
  47. HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6602856 2011-02-01] (Realtek Semiconductor)
  48. HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-12-17] (Intel(R) Corporation)
  49. HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
  50. HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-09] (NVIDIA Corporation)
  51. HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2011-02-01] (Realtek Semiconductor)
  52. HKLM\...\Run: [Command Center Controllers] - C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12656 2012-06-15] (Alienware)
  53. HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
  54. HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-09] (AVAST Software)
  55. HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] - C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [1545584 2011-01-10] ()
  56. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  57. HKU\S-1-5-21-3302613279-1342707372-354726626-1002\...\Run: [EPLTarget\P0000000000000000] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-27] (SEIKO EPSON CORPORATION)
  58. AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [174296 2014-02-08] (NVIDIA Corporation)
  59. AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148528 2014-02-08] (NVIDIA Corporation)
  60.  
  61. ==================== Internet (Whitelisted) ====================
  62.  
  63. HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  64. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com?type=714647&fr=spigot-yhp-ie
  65. StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  66. SearchScopes: HKCU - {FB19D7D7-030F-4CBA-90F5-DD9607E8D15A} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}
  67. SearchScopes: HKCU - {FB48B168-84BB-CCE3-D32D-94102F37C5B0} URL = http://www.bing.com/search?q={searchTerms}&pc=Z149&form=ZGAIDF&install_date=20111110&iesrc={referrer:source}
  68. BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  69. BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  70. BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
  71. BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  72. BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  73. BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  74. Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  75. Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  76. Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  77. Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
  78. DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
  79. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  80. Tcpip\Parameters: [DhcpNameServer] 50.57.99.138 50.57.100.29 8.8.8.8
  81. Tcpip\..\Interfaces\{2E78D95F-DD24-48EC-9B34-B3113F66BD57}: [NameServer]0.0.0.0
  82.  
  83. FireFox:
  84. ========
  85. FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_44.dll ()
  86. FF Plugin: @microsoft.com/GENUINE - disabled No File
  87. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  88. FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
  89. FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
  90. FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  91. FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  92. FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
  93. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  94. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
  95. FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  96. FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Chandler\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  97. FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Chandler\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  98.  
  99. Chrome:
  100. =======
  101. CHR HomePage: hxxp://www.youtube.com/feed/subscriptions
  102. CHR Plugin: (Shockwave Flash) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.225\pepflashplayer.dll No File
  103. CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
  104. CHR Plugin: (Native Client) - C:\Users\Chandler\AppData\Local\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
  105. CHR Plugin: (Chrome PDF Viewer) - C:\Users\Chandler\AppData\Local\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
  106. CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
  107. CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  108. CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll No File
  109. CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File
  110. CHR Plugin: (Unity Player) - C:\Users\Chandler\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
  111. CHR Plugin: (Google Update) - C:\Users\Chandler\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
  112. CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
  113. CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
  114. CHR Extension: (BetterTTV) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-01-19]
  115. CHR Extension: (Google Drive) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-23]
  116. CHR Extension: (YouTube Options) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn [2014-03-10]
  117. CHR Extension: (YouTube) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-23]
  118. CHR Extension: (4chan X) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\cellaaeoekimmemgdheibaibbaoeefbl [2013-04-24]
  119. CHR Extension: (Google Search) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-23]
  120. CHR Extension: (Dota 2 Stream Viewer) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\dckodhdcpcdalhfmboodbkolcanpdekc [2013-04-23]
  121. CHR Extension: (AdBlock) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-23]
  122. CHR Extension: (RadioEnhancer) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfijnebfkjdclmcedinoknekamigckii [2013-08-13]
  123. CHR Extension: (Google Wallet) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
  124. CHR Extension: (Gmail) - C:\Users\Chandler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-23]
  125. CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Chandler\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2013-04-23]
  126. CHR HKCU\...\Chrome\Extension: [pmcmflmkceipgecmhoddphflfndnfbbe] - C:\Users\Chandler\AppData\Local\CRE\pmcmflmkceipgecmhoddphflfndnfbbe.crx [2013-04-23]
  127. CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-01-14]
  128. CHR HKLM-x32\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Chandler\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2014-01-14]
  129. CHR HKLM-x32\...\Chrome\Extension: [pmcmflmkceipgecmhoddphflfndnfbbe] - C:\Users\Chandler\AppData\Local\CRE\pmcmflmkceipgecmhoddphflfndnfbbe.crx [2014-01-14]
  130.  
  131. ==================== Services (Whitelisted) =================
  132.  
  133. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-09] (AVAST Software)
  134. S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
  135. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-09] (NVIDIA Corporation)
  136. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-09] (NVIDIA Corporation)
  137. R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-06-19] ()
  138.  
  139. ==================== Drivers (Whitelisted) ====================
  140.  
  141. U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
  142. R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
  143. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-09] (AVAST Software)
  144. R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-14] (AVAST Software)
  145. R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-14] ()
  146. R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-09] (AVAST Software)
  147. R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-09] (AVAST Software)
  148. R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-09] (AVAST Software)
  149. R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
  150. R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-14] ()
  151. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-28] (DT Soft Ltd)
  152. R3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
  153. R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2014-02-08] (NVIDIA Corporation)
  154. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
  155. R3 SaiK0CCB; C:\Windows\System32\DRIVERS\SaiK0CCB.sys [171016 2010-08-10] (Saitek)
  156. R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [22792 2010-08-10] (Saitek)
  157. R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [50056 2010-08-10] (Saitek)
  158. R3 SaiU0CCB; C:\Windows\System32\DRIVERS\SaiU0CCB.sys [41096 2010-08-10] (Saitek)
  159. S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2011-08-23] (Texas Instruments)
  160. R3 VSTWinDriver6; C:\Windows\System32\drivers\VSTwindrvr6.sys [252928 2013-03-29] (Jungo)
  161. S3 VX6000; C:\Windows\System32\DRIVERS\VX6000Xp.sys [2143600 2009-06-30] (Microsoft Corporation
  162. )
  163. S3 catchme; \??\C:\ComboFix\catchme.sys [X]
  164. S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]
  165. S4 NVHDA; system32\drivers\nvhda64v.sys [X]
  166. S3 X6va005; \??\C:\Users\Chandler\AppData\Local\Temp\00574.tmp [X]
  167.  
  168. ==================== NetSvcs (Whitelisted) ===================
  169.  
  170.  
  171. ==================== One Month Created Files and Folders ========
  172.  
  173. 2014-03-19 18:13 - 2014-03-19 18:13 - 00015615 _____ () C:\Users\Chandler\Downloads\FRST.txt
  174. 2014-03-19 18:09 - 2014-03-19 18:13 - 00015788 _____ () C:\Users\Chandler\Downloads\Search.txt
  175. 2014-03-19 18:09 - 2014-03-19 18:13 - 00000000 ____D () C:\FRST
  176. 2014-03-19 18:07 - 2014-03-19 18:07 - 00023037 _____ () C:\ComboFix.txt
  177. 2014-03-19 17:47 - 2014-03-19 17:47 - 00001439 _____ () C:\Users\Chandler\Desktop\FRST64.lnk
  178. 2014-03-19 17:44 - 2014-03-19 17:45 - 02157056 _____ (Farbar) C:\Users\Chandler\Downloads\FRST64.exe
  179. 2014-03-19 15:20 - 2014-03-19 18:01 - 00001098 _____ () C:\Windows\PFRO.log
  180. 2014-03-19 15:06 - 2014-03-19 15:06 - 00013402 _____ () C:\Users\Chandler\Desktop\ComboFix.lnk
  181. 2014-03-19 15:05 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
  182. 2014-03-19 15:05 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
  183. 2014-03-19 15:05 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
  184. 2014-03-19 15:05 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
  185. 2014-03-19 15:05 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
  186. 2014-03-19 15:05 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
  187. 2014-03-19 15:05 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
  188. 2014-03-19 15:05 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
  189. 2014-03-19 15:04 - 2014-03-19 18:07 - 00000000 ____D () C:\Qoobox
  190. 2014-03-19 15:04 - 2014-03-19 15:29 - 00000000 ____D () C:\Windows\erdnt
  191. 2014-03-19 15:03 - 2014-03-19 15:03 - 05190052 ____R (Swearware) C:\Users\Chandler\Downloads\ComboFix.exe
  192. 2014-03-19 14:34 - 2014-03-19 14:34 - 00114760 _____ () C:\Users\Chandler\AppData\Local\GDIPFONTCACHEV1.DAT
  193. 2014-03-19 14:33 - 2014-03-19 18:02 - 00000504 _____ () C:\Windows\setupact.log
  194. 2014-03-19 14:33 - 2014-03-19 14:33 - 00000000 _____ () C:\Windows\setuperr.log
  195. 2014-03-19 14:32 - 2014-03-19 14:34 - 00494536 _____ () C:\Windows\system32\FNTCACHE.DAT
  196. 2014-03-18 23:36 - 2014-03-18 23:37 - 02873906 _____ () C:\Users\Chandler\Downloads\OTL.Txt
  197. 2014-03-18 23:36 - 2014-03-18 23:36 - 00153712 _____ () C:\Users\Chandler\Downloads\Extras.Txt
  198. 2014-03-18 23:26 - 2014-03-18 23:26 - 00602112 _____ (OldTimer Tools) C:\Users\Chandler\Downloads\OTL.exe
  199. 2014-03-18 23:22 - 2014-03-18 23:22 - 00178168 _____ () C:\Users\Chandler\Documents\cc_20140318_232207.reg
  200. 2014-03-18 23:15 - 2014-03-18 23:15 - 00409600 _____ (Farbar) C:\Users\Chandler\Downloads\FSS (1).exe
  201. 2014-03-18 23:07 - 2014-03-18 23:07 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT (2).exe
  202. 2014-03-18 22:59 - 2014-03-18 22:59 - 00000000 ____D () C:\Windows\ERUNT
  203. 2014-03-18 22:58 - 2014-03-18 22:58 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT (1).exe
  204. 2014-03-18 22:53 - 2014-03-18 22:54 - 04765152 _____ (Piriform Ltd) C:\Users\Chandler\Downloads\ccsetup411.exe
  205. 2014-03-18 22:51 - 2014-03-18 22:55 - 00000000 ____D () C:\AdwCleaner
  206. 2014-03-18 22:51 - 2014-03-18 22:51 - 01950720 _____ () C:\Users\Chandler\Downloads\AdwCleaner.exe
  207. 2014-03-18 22:51 - 2014-03-18 22:51 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT.exe
  208. 2014-03-18 22:49 - 2014-03-18 23:15 - 00000254 _____ () C:\Users\Chandler\Downloads\FSS.txt
  209. 2014-03-18 22:49 - 2014-03-18 22:49 - 00409600 _____ (Farbar) C:\Users\Chandler\Downloads\FSS.exe
  210. 2014-03-18 22:46 - 2014-03-18 22:46 - 04110135 _____ () C:\Users\Chandler\Downloads\tdsskiller.zip
  211. 2014-03-18 22:45 - 2014-03-18 22:45 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Chandler\Downloads\tdsskiller.exe
  212. 2014-03-18 22:43 - 2014-03-18 22:43 - 00000000 ____D () C:\ProgramData\Dell
  213. 2014-03-18 22:41 - 2014-03-18 22:42 - 73305424 _____ (Dell Inc.) C:\Users\Chandler\Downloads\Application_8D9J2_WN_2.8.8.0_A01.EXE
  214. 2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display
  215. 2014-03-18 22:39 - 2014-03-18 22:39 - 16864256 _____ () C:\Users\Chandler\Downloads\R296022 (1).exe
  216. 2014-03-18 22:32 - 2014-03-18 22:33 - 03586464 _____ () C:\Users\Chandler\Downloads\M14xR1_W74_A08_ZPE (1).exe
  217. 2014-03-18 22:32 - 2014-03-18 22:32 - 03586464 _____ () C:\Users\Chandler\Downloads\M14xR1_W74_A08_ZPE.exe
  218. 2014-03-18 22:13 - 2014-03-18 22:13 - 00404048 _____ () C:\Users\Chandler\Downloads\DellSystemDetect.exe
  219. 2014-03-18 15:24 - 2014-03-18 15:24 - 00000000 ___RD () C:\Program Files (x86)\Skype
  220. 2014-03-18 15:24 - 2014-03-18 15:24 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Skype
  221. 2014-03-14 20:54 - 2014-03-14 20:54 - 00000000 ____D () C:\Program Files\Common Files\EPSON
  222. 2014-03-14 20:54 - 2011-04-18 18:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMIVE.DLL
  223. 2014-03-14 20:54 - 2011-03-13 18:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BIVE.DLL
  224. 2014-03-14 20:54 - 2007-04-09 16:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
  225. 2014-03-14 18:49 - 2014-03-14 18:49 - 00000282 _____ () C:\SSUUpdater.log
  226. 2014-03-14 18:29 - 2014-03-14 18:29 - 22688408 _____ (Splashtop Inc.) C:\Users\Chandler\Downloads\Splashtop_Streamer_WIN_v2.5.5.2.EXE
  227. 2014-03-14 11:37 - 2014-03-14 11:37 - 16864256 _____ () C:\Users\Chandler\Downloads\R296022.exe
  228. 2014-03-08 22:23 - 2014-03-08 22:36 - 00000000 ____D () C:\ProgramData\HitmanPro
  229. 2014-03-08 22:22 - 2014-03-08 22:22 - 13485202 _____ () C:\Users\Chandler\Downloads\hitmanpro379.zip
  230. 2014-03-04 21:27 - 2014-03-04 21:27 - 00000000 ____D () C:\ProgramData\EPSON
  231. 2014-02-24 18:20 - 2014-02-24 18:20 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Blizzard
  232. 2014-02-23 14:39 - 2014-03-13 15:02 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
  233. 2014-02-23 14:38 - 2014-02-23 14:38 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Blizzard Entertainment
  234. 2014-02-23 14:37 - 2014-03-18 17:26 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Battle.net
  235. 2014-02-23 14:37 - 2014-03-10 17:31 - 00000000 ____D () C:\Program Files (x86)\Battle.net
  236. 2014-02-23 14:37 - 2014-03-10 16:24 - 00000000 ____D () C:\Users\Chandler\AppData\Roaming\Battle.net
  237. 2014-02-23 14:36 - 2014-02-23 14:36 - 05971136 _____ (Blizzard Entertainment) C:\Users\Chandler\Downloads\Hearthstone-Beta-Setup-enUS.exe
  238. 2014-02-18 17:56 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\SysWOW64\NV
  239. 2014-02-18 17:56 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\system32\NV
  240. 2014-02-18 17:53 - 2014-02-08 13:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  241. 2014-02-18 17:53 - 2014-02-08 13:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
  242. 2014-02-18 17:53 - 2014-02-08 13:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  243. 2014-02-18 17:53 - 2014-02-08 13:34 - 18257576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
  244. 2014-02-18 17:53 - 2014-02-08 13:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
  245. 2014-02-18 17:53 - 2014-02-08 13:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
  246. 2014-02-18 17:53 - 2014-02-08 13:34 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
  247. 2014-02-18 17:53 - 2014-02-08 13:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
  248. 2014-02-18 17:53 - 2014-02-08 13:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  249. 2014-02-18 17:53 - 2014-02-08 13:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  250. 2014-02-18 17:53 - 2014-02-08 13:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  251. 2014-02-18 17:53 - 2014-02-08 13:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  252. 2014-02-18 17:53 - 2014-02-08 13:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  253. 2014-02-18 17:53 - 2014-02-08 13:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  254. 2014-02-18 17:53 - 2014-02-08 13:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
  255. 2014-02-18 17:53 - 2014-02-08 13:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
  256. 2014-02-18 17:53 - 2014-02-08 13:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
  257. 2014-02-18 17:53 - 2014-02-08 13:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
  258. 2014-02-18 17:53 - 2014-02-08 13:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  259. 2014-02-18 17:53 - 2014-02-08 13:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  260. 2014-02-18 17:53 - 2014-02-08 13:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  261. 2014-02-18 17:53 - 2014-02-08 13:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  262. 2014-02-18 17:53 - 2014-02-08 13:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
  263. 2014-02-18 17:53 - 2014-02-08 13:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
  264. 2014-02-18 17:53 - 2014-02-08 13:34 - 00300320 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
  265. 2014-02-18 17:53 - 2014-02-08 13:34 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
  266. 2014-02-17 15:38 - 2014-02-17 15:38 - 00227466 _____ () C:\Users\Chandler\Downloads\exp 10 vapor pressure modified 6000s.cmbl
  267. 2014-02-17 15:08 - 2014-02-17 15:08 - 00604819 _____ (Ryan Gregg ) C:\Users\Chandler\Downloads\gcfscape185.exe
  268. 2014-02-17 15:08 - 2014-02-17 15:08 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Nem's Tools
  269. 2014-02-17 15:08 - 2014-02-17 15:08 - 00000000 ____D () C:\Program Files\Nem's Tools
  270. 2014-02-17 15:05 - 2014-02-17 15:05 - 00000000 ____D () C:\Program Files (x86)\VTFEdit
  271. 2014-02-17 15:04 - 2014-02-17 15:04 - 00852049 _____ (Neil Jedrzejewski & Ryan Gregg ) C:\Users\Chandler\Downloads\vtfedit125-11.exe
  272. 2014-02-17 15:01 - 2014-02-17 15:02 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Paint.NET
  273. 2014-02-17 15:01 - 2014-02-17 15:01 - 00000000 ____D () C:\Program Files\Paint.NET
  274. 2014-02-17 15:00 - 2014-02-17 15:00 - 03739157 _____ () C:\Users\Chandler\Downloads\Paint.NET.3.5.11.Install.zip
  275.  
  276. ==================== One Month Modified Files and Folders =======
  277.  
  278. 2014-03-19 18:13 - 2014-03-19 18:13 - 00015615 _____ () C:\Users\Chandler\Downloads\FRST.txt
  279. 2014-03-19 18:13 - 2014-03-19 18:09 - 00015788 _____ () C:\Users\Chandler\Downloads\Search.txt
  280. 2014-03-19 18:13 - 2014-03-19 18:09 - 00000000 ____D () C:\FRST
  281. 2014-03-19 18:11 - 2009-07-13 23:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  282. 2014-03-19 18:11 - 2009-07-13 23:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  283. 2014-03-19 18:09 - 2009-07-14 00:10 - 01596608 _____ () C:\Windows\WindowsUpdate.log
  284. 2014-03-19 18:07 - 2014-03-19 18:07 - 00023037 _____ () C:\ComboFix.txt
  285. 2014-03-19 18:07 - 2014-03-19 15:04 - 00000000 ____D () C:\Qoobox
  286. 2014-03-19 18:03 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
  287. 2014-03-19 18:02 - 2014-03-19 14:33 - 00000504 _____ () C:\Windows\setupact.log
  288. 2014-03-19 18:02 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  289. 2014-03-19 18:01 - 2014-03-19 15:20 - 00001098 _____ () C:\Windows\PFRO.log
  290. 2014-03-19 17:47 - 2014-03-19 17:47 - 00001439 _____ () C:\Users\Chandler\Desktop\FRST64.lnk
  291. 2014-03-19 17:47 - 2011-08-07 22:56 - 00000000 ____D () C:\Users\Chandler\AppData\Roaming\Skype
  292. 2014-03-19 17:45 - 2014-03-19 17:44 - 02157056 _____ (Farbar) C:\Users\Chandler\Downloads\FRST64.exe
  293. 2014-03-19 17:44 - 2013-03-10 13:21 - 00000000 ____D () C:\Users\Chandler\AppData\Roaming\vlc
  294. 2014-03-19 17:36 - 2012-09-16 21:00 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3302613279-1342707372-354726626-1002UA.job
  295. 2014-03-19 16:48 - 2011-06-09 10:25 - 00000000 ____D () C:\Program Files (x86)\Steam
  296. 2014-03-19 15:32 - 2009-07-13 22:20 - 00000000 __RHD () C:\Users\Default
  297. 2014-03-19 15:29 - 2014-03-19 15:04 - 00000000 ____D () C:\Windows\erdnt
  298. 2014-03-19 15:06 - 2014-03-19 15:06 - 00013402 _____ () C:\Users\Chandler\Desktop\ComboFix.lnk
  299. 2014-03-19 15:03 - 2014-03-19 15:03 - 05190052 ____R (Swearware) C:\Users\Chandler\Downloads\ComboFix.exe
  300. 2014-03-19 14:39 - 2009-07-14 00:13 - 00779266 _____ () C:\Windows\system32\PerfStringBackup.INI
  301. 2014-03-19 14:34 - 2014-03-19 14:34 - 00114760 _____ () C:\Users\Chandler\AppData\Local\GDIPFONTCACHEV1.DAT
  302. 2014-03-19 14:34 - 2014-03-19 14:32 - 00494536 _____ () C:\Windows\system32\FNTCACHE.DAT
  303. 2014-03-19 14:33 - 2014-03-19 14:33 - 00000000 _____ () C:\Windows\setuperr.log
  304. 2014-03-18 23:37 - 2014-03-18 23:36 - 02873906 _____ () C:\Users\Chandler\Downloads\OTL.Txt
  305. 2014-03-18 23:36 - 2014-03-18 23:36 - 00153712 _____ () C:\Users\Chandler\Downloads\Extras.Txt
  306. 2014-03-18 23:26 - 2014-03-18 23:26 - 00602112 _____ (OldTimer Tools) C:\Users\Chandler\Downloads\OTL.exe
  307. 2014-03-18 23:23 - 2012-02-22 20:15 - 00000000 ____D () C:\Users\Chandler\AppData\Roaming\uTorrent
  308. 2014-03-18 23:22 - 2014-03-18 23:22 - 00178168 _____ () C:\Users\Chandler\Documents\cc_20140318_232207.reg
  309. 2014-03-18 23:22 - 2011-06-26 18:12 - 00000000 ____D () C:\Users\Chandler\AppData\Local\CrashDumps
  310. 2014-03-18 23:15 - 2014-03-18 23:15 - 00409600 _____ (Farbar) C:\Users\Chandler\Downloads\FSS (1).exe
  311. 2014-03-18 23:15 - 2014-03-18 22:49 - 00000254 _____ () C:\Users\Chandler\Downloads\FSS.txt
  312. 2014-03-18 23:07 - 2014-03-18 23:07 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT (2).exe
  313. 2014-03-18 22:59 - 2014-03-18 22:59 - 00000000 ____D () C:\Windows\ERUNT
  314. 2014-03-18 22:58 - 2014-03-18 22:58 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT (1).exe
  315. 2014-03-18 22:57 - 2012-07-07 22:11 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
  316. 2014-03-18 22:55 - 2014-03-18 22:51 - 00000000 ____D () C:\AdwCleaner
  317. 2014-03-18 22:54 - 2014-03-18 22:53 - 04765152 _____ (Piriform Ltd) C:\Users\Chandler\Downloads\ccsetup411.exe
  318. 2014-03-18 22:54 - 2014-01-15 20:50 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
  319. 2014-03-18 22:54 - 2014-01-15 20:50 - 00000000 ____D () C:\Program Files\CCleaner
  320. 2014-03-18 22:51 - 2014-03-18 22:51 - 01950720 _____ () C:\Users\Chandler\Downloads\AdwCleaner.exe
  321. 2014-03-18 22:51 - 2014-03-18 22:51 - 01037734 _____ (Thisisu) C:\Users\Chandler\Downloads\JRT.exe
  322. 2014-03-18 22:49 - 2014-03-18 22:49 - 00409600 _____ (Farbar) C:\Users\Chandler\Downloads\FSS.exe
  323. 2014-03-18 22:46 - 2014-03-18 22:46 - 04110135 _____ () C:\Users\Chandler\Downloads\tdsskiller.zip
  324. 2014-03-18 22:46 - 2011-06-09 08:21 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
  325. 2014-03-18 22:45 - 2014-03-18 22:45 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Chandler\Downloads\tdsskiller.exe
  326. 2014-03-18 22:44 - 2011-06-15 20:16 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Deployment
  327. 2014-03-18 22:43 - 2014-03-18 22:43 - 00000000 ____D () C:\ProgramData\Dell
  328. 2014-03-18 22:42 - 2014-03-18 22:41 - 73305424 _____ (Dell Inc.) C:\Users\Chandler\Downloads\Application_8D9J2_WN_2.8.8.0_A01.EXE
  329. 2014-03-18 22:41 - 2014-03-18 22:41 - 00000000 ____D () C:\Program Files (x86)\Alienware On-Screen Display
  330. 2014-03-18 22:39 - 2014-03-18 22:39 - 16864256 _____ () C:\Users\Chandler\Downloads\R296022 (1).exe
  331. 2014-03-18 22:33 - 2014-03-18 22:32 - 03586464 _____ () C:\Users\Chandler\Downloads\M14xR1_W74_A08_ZPE (1).exe
  332. 2014-03-18 22:32 - 2014-03-18 22:32 - 03586464 _____ () C:\Users\Chandler\Downloads\M14xR1_W74_A08_ZPE.exe
  333. 2014-03-18 22:25 - 2011-06-15 20:06 - 00000000 ____D () C:\Users\Chandler\AppData\Local\SoftThinks
  334. 2014-03-18 22:13 - 2014-03-18 22:13 - 00404048 _____ () C:\Users\Chandler\Downloads\DellSystemDetect.exe
  335. 2014-03-18 21:36 - 2012-09-16 21:00 - 00000868 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3302613279-1342707372-354726626-1002Core.job
  336. 2014-03-18 17:26 - 2014-02-23 14:37 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Battle.net
  337. 2014-03-18 15:24 - 2014-03-18 15:24 - 00000000 ___RD () C:\Program Files (x86)\Skype
  338. 2014-03-18 15:24 - 2014-03-18 15:24 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Skype
  339. 2014-03-18 15:24 - 2011-08-07 22:56 - 00000000 ____D () C:\ProgramData\Skype
  340. 2014-03-16 18:55 - 2013-03-14 11:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
  341. 2014-03-16 18:54 - 2013-03-14 11:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
  342. 2014-03-14 20:54 - 2014-03-14 20:54 - 00000000 ____D () C:\Program Files\Common Files\EPSON
  343. 2014-03-14 18:49 - 2014-03-14 18:49 - 00000282 _____ () C:\SSUUpdater.log
  344. 2014-03-14 18:29 - 2014-03-14 18:29 - 22688408 _____ (Splashtop Inc.) C:\Users\Chandler\Downloads\Splashtop_Streamer_WIN_v2.5.5.2.EXE
  345. 2014-03-14 13:03 - 2012-04-28 17:28 - 00000000 ____D () C:\Users\Chandler\Documents\Torrents
  346. 2014-03-14 11:37 - 2014-03-14 11:37 - 16864256 _____ () C:\Users\Chandler\Downloads\R296022.exe
  347. 2014-03-13 15:02 - 2014-02-23 14:39 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
  348. 2014-03-10 17:54 - 2013-06-06 16:02 - 00000000 ____D () C:\Program Files (x86)\StarCraft II
  349. 2014-03-10 17:31 - 2014-02-23 14:37 - 00000000 ____D () C:\Program Files (x86)\Battle.net
  350. 2014-03-10 17:27 - 2011-06-15 20:06 - 00000000 ____D () C:\Users\Chandler
  351. 2014-03-10 16:24 - 2014-02-23 14:37 - 00000000 ____D () C:\Users\Chandler\AppData\Roaming\Battle.net
  352. 2014-03-10 16:24 - 2011-11-28 17:26 - 00000000 ____D () C:\Users\UpdatusUser.Chandler-M14x
  353. 2014-03-10 16:24 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
  354. 2014-03-10 16:24 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\AppCompat
  355. 2014-03-08 22:36 - 2014-03-08 22:23 - 00000000 ____D () C:\ProgramData\HitmanPro
  356. 2014-03-08 22:22 - 2014-03-08 22:22 - 13485202 _____ () C:\Users\Chandler\Downloads\hitmanpro379.zip
  357. 2014-03-04 21:27 - 2014-03-04 21:27 - 00000000 ____D () C:\ProgramData\EPSON
  358. 2014-02-26 00:18 - 2011-08-16 21:19 - 00000000 ___RD () C:\Users\Chandler\Documents\School
  359. 2014-02-24 18:20 - 2014-02-24 18:20 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Blizzard
  360. 2014-02-23 14:38 - 2014-02-23 14:38 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Blizzard Entertainment
  361. 2014-02-23 14:36 - 2014-02-23 14:36 - 05971136 _____ (Blizzard Entertainment) C:\Users\Chandler\Downloads\Hearthstone-Beta-Setup-enUS.exe
  362. 2014-02-22 11:28 - 2011-07-10 21:19 - 00000000 ____D () C:\Users\Chandler\Documents\b
  363. 2014-02-18 17:57 - 2011-06-09 09:51 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
  364. 2014-02-18 17:56 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\SysWOW64\NV
  365. 2014-02-18 17:56 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\system32\NV
  366. 2014-02-18 17:56 - 2011-06-09 07:58 - 00000000 ____D () C:\ProgramData\NVIDIA
  367. 2014-02-17 15:38 - 2014-02-17 15:38 - 00227466 _____ () C:\Users\Chandler\Downloads\exp 10 vapor pressure modified 6000s.cmbl
  368. 2014-02-17 15:08 - 2014-02-17 15:08 - 00604819 _____ (Ryan Gregg ) C:\Users\Chandler\Downloads\gcfscape185.exe
  369. 2014-02-17 15:08 - 2014-02-17 15:08 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Nem's Tools
  370. 2014-02-17 15:08 - 2014-02-17 15:08 - 00000000 ____D () C:\Program Files\Nem's Tools
  371. 2014-02-17 15:05 - 2014-02-17 15:05 - 00000000 ____D () C:\Program Files (x86)\VTFEdit
  372. 2014-02-17 15:04 - 2014-02-17 15:04 - 00852049 _____ (Neil Jedrzejewski & Ryan Gregg ) C:\Users\Chandler\Downloads\vtfedit125-11.exe
  373. 2014-02-17 15:02 - 2014-02-17 15:01 - 00000000 ____D () C:\Users\Chandler\AppData\Local\Paint.NET
  374. 2014-02-17 15:01 - 2014-02-17 15:01 - 00000000 ____D () C:\Program Files\Paint.NET
  375. 2014-02-17 15:00 - 2014-02-17 15:00 - 03739157 _____ () C:\Users\Chandler\Downloads\Paint.NET.3.5.11.Install.zip
  376.  
  377. Files to move or delete:
  378. ====================
  379. C:\Users\Chandler\jagex_cl_runescape_LIVE.dat
  380. C:\Users\Chandler\jagex_runescape_preferences.dat
  381. C:\Users\Chandler\jagex_runescape_preferences2.dat
  382. C:\Users\Chandler\random.dat
  383.  
  384.  
  385. ==================== Bamital & volsnap Check =================
  386.  
  387. C:\Windows\System32\winlogon.exe => MD5 is legit
  388. C:\Windows\System32\wininit.exe => MD5 is legit
  389. C:\Windows\SysWOW64\wininit.exe => MD5 is legit
  390. C:\Windows\explorer.exe
  391. [2012-11-11 18:10] - [2011-02-26 01:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48
  392.  
  393. C:\Windows\SysWOW64\explorer.exe => MD5 is legit
  394. C:\Windows\System32\svchost.exe => MD5 is legit
  395. C:\Windows\SysWOW64\svchost.exe => MD5 is legit
  396. C:\Windows\System32\services.exe => MD5 is legit
  397. C:\Windows\System32\User32.dll => MD5 is legit
  398. C:\Windows\SysWOW64\User32.dll => MD5 is legit
  399. C:\Windows\System32\userinit.exe => MD5 is legit
  400. C:\Windows\SysWOW64\userinit.exe => MD5 is legit
  401. C:\Windows\System32\rpcss.dll => MD5 is legit
  402. C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
  403.  
  404.  
  405. LastRegBack: 2014-03-10 16:03
  406.  
  407. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!