API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 25th, 2015
645
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 82.54 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-05-2015 01
  2. Ran by Moni (administrator) on MONI-PC on 25-05-2015 08:33:05
  3. Running from C:\Users\Moni\Desktop
  4. Loaded Profiles: Moni & Mcx1-MONI-PC (Available Profiles: Moni & Mcx1-MONI-PC)
  5. Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  17. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  18. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  19. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  20. (Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
  21. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  22. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  23. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  24. () C:\Users\Moni\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
  25. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  26. (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
  27. (Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
  28. (TunnelBear) D:\TunnelBear\TBear.Client.exe
  29. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  30. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  31. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  32. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  33. (www.BitComet.com) D:\BitComet\BitComet.exe
  34. (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
  35. (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
  36. (Flux Software LLC) C:\Users\Moni\AppData\Local\FluxSoftware\Flux\flux.exe
  37. () C:\Program Files (x86)\puush\puush.exe
  38. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  39. () C:\ProgramData\DatacardService\HWDeviceService64.exe
  40. () C:\Program Files (x86)\AVG Secure Search\vprot.exe
  41. (MyWebSearch.com) C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSSVC.EXE
  42. (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
  43. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  44. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  45. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  46. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  47. (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
  48. (TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlservice.exe
  49. (Famatech Corp.) C:\Windows\SysWOW64\rserver30\rserver3.exe
  50. (A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
  51. (Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
  52. (Somoto LTD) C:\Program Files (x86)\Movies App\SafetyNut\SafetyNutManager.exe
  53. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  54. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  55. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  56. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  57. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  58. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  59. (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
  60. (Somoto LTD) C:\Program Files (x86)\Movies App\SafetyNut\SafetyNutManager.exe
  61. (Somoto LTD) C:\Program Files (x86)\Movies App\SafetyNut\safetynut.exe
  62. (Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
  63. (TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe
  64. (Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
  65. (Wondershare) C:\Program Files (x86)\Wondershare\MobileGo for Android\MobileGoService.exe
  66. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
  67. (TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe
  68. (TMRG, Inc.) C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe
  69. (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
  70. (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.5.0\ToolbarUpdater.exe
  71. (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
  72. () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.5.0\loggingserver.exe
  73. (Winstep Software Technologies) D:\Winstep\WsxService.exe
  74. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  75. (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
  76. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  77. (www.BitComet.com) D:\BitComet\tools\BitCometService.exe
  78. (Microsoft Corporation) C:\Windows\System32\alg.exe
  79. (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
  80. () D:\TunnelBear\TBear.Maintenance.exe
  81. () C:\ProgramData\GBox\GBox.exe
  82. () C:\ProgramData\OptimizerPro\OptimizerPro.exe
  83. () C:\ProgramData\GBox\GBox.exe
  84. () C:\ProgramData\OptimizerPro\OptimizerPro.exe
  85. () C:\ProgramData\GBox\GBox.exe
  86. () C:\ProgramData\OptimizerPro\OptimizerPro.exe
  87. () C:\ProgramData\steg\steg.exe
  88. () C:\ProgramData\tor\tor.exe
  89. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  90. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  91. (Famatech Corp.) C:\Windows\SysWOW64\rserver30\FamItrfc.Exe
  92. (Famatech Corp.) C:\Windows\SysWOW64\rserver30\FamItrfc.Exe
  93. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  94. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  95. () C:\Users\Moni\AppData\Local\Viber\Viber.exe
  96. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  97. (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
  98. () C:\ProgramData\rkcl\rkcl.exe
  99. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  100. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  101. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  102. (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
  103. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
  104. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  105. (NVIDIA Corporation) C:\Users\Moni\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
  106. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  107.  
  108.  
  109. ==================== Registry (Whitelisted) ==================
  110.  
  111. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  112.  
  113. HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
  114. HKLM\...\Run: [XeroxEndeavorBackgroundTask] => rundll32.exe xrWCbgnd.dll,LaunchBgTask 1
  115. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
  116. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  117. HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
  118. HKLM-x32\...\Run: [Adobe ARM] => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  119. HKLM-x32\...\Run: [] => [X]
  120. HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe
  121. HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
  122. HKLM-x32\...\Run: [FileTransferForMobileGo] => C:\Program Files (x86)\Wondershare\MobileGo for Android\FileTransfer.exe [336272 2014-11-05] (Wondershare)
  123. HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2510784 2015-05-14] ()
  124. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [AdobeBridge] => [X]
  125. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [BitComet] => D:\BitComet\BitComet.exe [17257648 2013-12-31] (www.BitComet.com)
  126. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
  127. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [25700400 2015-04-28] (Google)
  128. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [f.lux] => C:\Users\Moni\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
  129. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [GoogleChromeAutoLaunch_2AB7CFC998D028F823B446CEC054EA1A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-05-05] (Google Inc.)
  130. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-31] ()
  131. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3328384 2015-05-10] (Echobit LLC)
  132. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Run: [Viber] => C:\Users\Moni\AppData\Local\Viber\Viber.exe [936656 2014-10-20] ()
  133. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {2257eafd-6170-11e1-9def-90d4fb622999} - H:\AutoRun.exe
  134. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {277a4398-d264-11e1-a6fa-88ae1d83c45e} - G:\setup.exe
  135. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {6cc48bd8-609f-11e1-9359-cf17e4c60f9e} - H:\setup_vmb_lite.exe /checkApplicationPresence
  136. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {6cc48cf4-609f-11e1-9359-cf17e4c60f9e} - I:\AutoRun.exe
  137. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {6cc48cf8-609f-11e1-9359-cf17e4c60f9e} - H:\AutoRun.exe
  138. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {79f71797-9889-11e2-a99c-88ae1d83c45e} - F:\AutoRun.exe
  139. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {8e61bc57-cc08-11e1-b52a-88ae1d83c45e} - H:\AutoRun.exe
  140. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {92bf2344-6171-11e1-bdce-b36dfc1a9f98} - H:\AutoRun.exe
  141. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {a6db8b5f-3e02-11e1-b10b-88ae1d83c45e} - G:\setup_vmc_lite.exe /checkApplicationPresence
  142. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {a6db8b65-3e02-11e1-b10b-88ae1d83c45e} - G:\setup_vmc_lite.exe /checkApplicationPresence
  143. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {b3a5e9fb-39cc-11e1-a69b-88ae1d83c45e} - 0
  144. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {befe23ab-5eca-11e1-a5a9-aa55b3fff9e0} - K:\AutoRun.exe
  145. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {befe23ad-5eca-11e1-a5a9-aa55b3fff9e0} - K:\AutoRun.exe
  146. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {e1d77772-fcfe-11e1-b8c8-88ae1d83c45e} - F:\AutoRun.exe
  147. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {e1d7779c-fcfe-11e1-b8c8-88ae1d83c45e} - F:\AutoRun.exe
  148. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {f6f9f5dd-c995-11e1-823b-88ae1d83c45e} - H:\AutoRun.exe
  149. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {f6f9f5ee-c995-11e1-823b-88ae1d83c45e} - H:\AutoRun.exe
  150. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {f6f9f5ff-c995-11e1-823b-88ae1d83c45e} - H:\AutoRun.exe
  151. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\MountPoints2: {ff4f14fa-5481-11e1-96ad-a7c08798e007} - F:\MGS2SSetup.exe
  152. HKU\S-1-5-21-3181489392-1428851397-2468278675-1005\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe [1266712 2013-05-31] (AVG Secure Search)
  153. HKU\S-1-5-21-3181489392-1428851397-2468278675-1005\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe [1266712 2013-06-07] (AVG Secure Search)
  154. HKU\S-1-5-21-3181489392-1428851397-2468278675-1005\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [343552 2009-07-14] (Microsoft Corporation) <==== ATTENTION
  155. IFEO\bitguard.exe: [Debugger] tasklist.exe
  156. IFEO\bprotect.exe: [Debugger] tasklist.exe
  157. IFEO\bpsvc.exe: [Debugger] tasklist.exe
  158. IFEO\browsemngr.exe: [Debugger] tasklist.exe
  159. IFEO\browserdefender.exe: [Debugger] tasklist.exe
  160. IFEO\browsermngr.exe: [Debugger] tasklist.exe
  161. IFEO\browserprotect.exe: [Debugger] tasklist.exe
  162. IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
  163. IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
  164. IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
  165. IFEO\delta babylon.exe: [Debugger] tasklist.exe
  166. IFEO\delta tb.exe: [Debugger] tasklist.exe
  167. IFEO\delta2.exe: [Debugger] tasklist.exe
  168. IFEO\deltainstaller.exe: [Debugger] tasklist.exe
  169. IFEO\deltasetup.exe: [Debugger] tasklist.exe
  170. IFEO\deltatb.exe: [Debugger] tasklist.exe
  171. IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
  172. IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
  173. IFEO\iminentsetup.exe: [Debugger] tasklist.exe
  174. IFEO\jumpflip: [Debugger] tasklist.exe
  175. IFEO\protectedsearch.exe: [Debugger] tasklist.exe
  176. IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
  177. IFEO\searchinstaller.exe: [Debugger] tasklist.exe
  178. IFEO\searchprotection.exe: [Debugger] tasklist.exe
  179. IFEO\searchprotector.exe: [Debugger] tasklist.exe
  180. IFEO\searchsettings.exe: [Debugger] tasklist.exe
  181. IFEO\searchsettings64.exe: [Debugger] tasklist.exe
  182. IFEO\snapdo.exe: [Debugger] tasklist.exe
  183. IFEO\stinst32.exe: [Debugger] tasklist.exe
  184. IFEO\stinst64.exe: [Debugger] tasklist.exe
  185. IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
  186. IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
  187. IFEO\umbrella.exe: [Debugger] tasklist.exe
  188. IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
  189. IFEO\volaro: [Debugger] tasklist.exe
  190. IFEO\vonteera: [Debugger] tasklist.exe
  191. IFEO\websteroids.exe: [Debugger] tasklist.exe
  192. IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
  193. HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Movies App\SafetyNut\safetycrt.dll [493776 2014-12-15] ()
  194. HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Movies App\SafetyNut\x64\safetycrt.dll [669392 2014-12-15] ()
  195. ShellIconOverlayIdentifiers: [ 0POLinkIconDone] -> {4931EE43-90CB-4D46-A50F-474D7C5D97BE} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
  196. ShellIconOverlayIdentifiers: [ 1POLinkIconFailed] -> {828F1FF1-021C-4EC0-A4F8-B1BFF6390DD3} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
  197. ShellIconOverlayIdentifiers: [ 2POLinkIconIng] -> {8AE3CBEA-8E21-4883-BFD0-925F5513F190} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
  198. ShellIconOverlayIdentifiers: [ 3POLinkIconProhibited] -> {DED0F1AF-0505-4FB7-83AA-C2E51FA0721F} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
  199. ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  200. ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  201. ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  202. ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  203. ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  204. ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  205. ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  206. ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-03-05] (Dropbox, Inc.)
  207. ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  208. ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  209. ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  210. ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  211. ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  212. ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  213. ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  214. ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Moni\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-03-05] (Dropbox, Inc.)
  215. GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  216. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  217. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  218.  
  219. ==================== Internet (Whitelisted) ====================
  220.  
  221. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  222.  
  223. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940
  224. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940
  225. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  226. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  227. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940
  228. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940
  229. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  230. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  231. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=592&bs=true&q=
  232. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://smart-homepage.blogspot.com
  233. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  234. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=112555&tt=090812_ppc_3212_1&babsrc=HP_ss&mntrId=f259e42100000000000088ae1d83c45e
  235. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?affID=112555&tt=090812_ppc_3212_1&babsrc=HP_ss&mntrId=f259e42100000000000088ae1d83c45e
  236. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=592
  237. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=592&bs=true&q=
  238. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&tid=592&bs=true&q=
  239. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=112555&tt=090812_ppc_3212_1&babsrc=HP_ss&mntrId=f259e42100000000000088ae1d83c45e
  240. HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940
  241. URLSearchHook: HKLM-x32 - Default Value = {3B81079D-2AC9-425f-A494-A1C7D93AFA3C}
  242. URLSearchHook: HKLM-x32 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
  243. URLSearchHook: HKLM-x32 - GagetBox - {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - C:\Program Files (x86)\GadgetBox\gadgetBoxTB.dll (GadgetBox)
  244. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\11.3\ytdToolbarIE64.dll (Spigot, Inc.)
  245. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\11.3\ytdToolbarIE.dll (Spigot, Inc.)
  246. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - Search.com Toolbar - {BFEAF3D0-307E-4F52-B64A-AF56BABE82B5} - C:\Program Files (x86)\Search.com Toolbar\IE\6.9\searchcomToolbarIE.dll (CBS Interactive)
  247. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - GagetBox - {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - C:\Program Files (x86)\GadgetBox\gadgetBoxTB.dll (GadgetBox)
  248. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTo0.dll (Conduit Ltd.)
  249. URLSearchHook: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 - (No Name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSSRCAS.DLL (MyWebSearch.com)
  250. SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  251. SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  252. SearchScopes: HKLM -> {52db1893-8a90-4192-aede-08e00b8f8473} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=a15005-148&apn_uid=0695044213944151&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
  253. SearchScopes: HKLM -> {AA74FE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=stonicrow&chnl=stonicrow&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DzztA0CyEyD0E0EyEtBtCtN0D0Tzu0CtByEtBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1975286060
  254. SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  255. SearchScopes: HKLM-x32 -> Backup.Old.DefaultScope {AA74FE59-BC4C-4172-9AC4-73315F71CFFE}
  256. SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  257. SearchScopes: HKLM-x32 -> {52db1893-8a90-4192-aede-08e00b8f8473} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=a15005-148&apn_uid=0695044213944151&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
  258. SearchScopes: HKLM-x32 -> {72015028-694F-B215-0E17-3B6E199F6EB1} URL = http://search.gboxapp.com/?q={searchTerms}
  259. SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
  260. SearchScopes: HKLM-x32 -> {AA74FE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q={searchTerms}
  261. SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=stonicrow&chnl=stonicrow&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DzztA0CyEyD0E0EyEtBtCtN0D0Tzu0CtByEtBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1975286060
  262. SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://search.gboxapp.com/?q={searchTerms}
  263. SearchScopes: HKLM-x32 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={49A57737-0BFA-11E2-BFBD-88AE1D83C45E}
  264. SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
  265. SearchScopes: HKU\.DEFAULT -> {33524C00-63FB-43DB-A6BF-0A4E14B24649} URL = http://www.basicscan.com/?prt=BASICSCAN115&keywords={searchTerms}
  266. SearchScopes: HKU\.DEFAULT -> {47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF} URL = http://www.basicserve.com/?prt=BASICSERVE115&sp=&keywords={searchTerms}
  267. SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
  268. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  269. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> BrowserMngrDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  270. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> Backup.Old.DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  271. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  272. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.gigabase.ru/search?q={searchTerms}&clid=1
  273. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F25988AE1D83C45E&affID=128492&tsp=5264
  274. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {1F7878FB-13DF-4E3F-9DCA-ABAC41E52ED2} URL = http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
  275. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {2CF13FD9-315B-413B-A339-4A6F4CACEDB9} URL = http://t1.search.com/search?q={searchTerms}
  276. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {33524C00-63FB-43DB-A6BF-0A4E14B24649} URL = http://www.basicscan.com/?prt=BscscnPB&keywords={searchTerms}
  277. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1415639473&from=wpc&uid=WDCXWD6400BEVT-22A0RT0_WD-WX71A804394043940&q={searchTerms}
  278. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF} URL = http://www.basicserve.com/?prt=bscsrvlink5&sp=&keywords={searchTerms}
  279. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
  280. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {52db1893-8a90-4192-aede-08e00b8f8473} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=a15005-148&apn_uid=0695044213944151&apn_dtid=BND101&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
  281. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {72015028-694F-B215-0E17-3B6E199F6EB1} URL = http://search.babylon.com/?q={searchTerms}&affID=112555&tt=090812_ppc_3212_1&babsrc=SP_ss&mntrId=f259e42100000000000088ae1d83c45e
  282. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL =
  283. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={FE3E8E5F-8C14-45B8-A746-A1F784C5628E}&mid=4bcd29d8ce2147d08bb059e75b672dad-5d28af1a4b4adffb8029b0d5e95c6ecc0152629a&lang=en&ds=gm011&pr=sa&d=2012-10-03 17:05:11&v=17.1.2.1&pid=avg&sg=43&sap=dsp&q={searchTerms}
  284. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {A8BE2D8E-4604-4846-B044-6A1AC1AB1492} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
  285. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {AA74FE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://search.gboxapp.com/?q={searchTerms}
  286. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=stonicrow&chnl=stonicrow&cd=2XzuyEtN2Y1L1Qzuzzzz0A0EtC0DzztA0CyEyD0E0EyEtBtCtN0D0Tzu0CtByEtBtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1975286060
  287. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://search.gboxapp.com/?q={searchTerms}
  288. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {BE3B0D25-D1DE-4C9C-AB62-263CE4184C59} URL = http://www.mysearchresults.com/search?c=2402&t=15&q={searchTerms}
  289. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb167/?search={searchTerms}&loc=IB_DS&a=6R8AuDGDwI&i=26
  290. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {D32AB177-DDFA-4263-B652-3E00DC4EED28} URL = http://www.google.com/search?q={searchTerms}
  291. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={49A57737-0BFA-11E2-BFBD-88AE1D83C45E}
  292. SearchScopes: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> {FF2A2C0A-FD8D-42DE-B0E5-0AB0FD8CE029} URL = http://mp3tubetoolbar.com/?tmp=toolbar_sb_results&prt=pinballtbfour01ie&Keywords={searchTerms}&clid=b5088342e51e45a8bd3c9740f9942153
  293. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-04] (Oracle Corporation)
  294. BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
  295. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
  296. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-04] (Oracle Corporation)
  297. BHO-x32: MyWebSearch Search Assistant BHO -> {00A6FAF1-072E-44cf-8957-5838F569A31D} -> C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSSRCAS.DLL [2012-03-31] (MyWebSearch.com)
  298. BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> D:\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
  299. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-04] (Oracle Corporation)
  300. BHO-x32: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> C:\Windows\SysWow64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.dll [2014-11-11] (Search Results LLC.)
  301. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
  302. BHO-x32: Staging -> {C35B7206-62EB-F808-5475-18A6FDE7DD94} -> c:\Users\All Users\dl159\159.dll [2014-11-21] ()
  303. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-04] (Oracle Corporation)
  304. BHO-x32: YTD Toolbar -> {F3FEE66E-E034-436a-86E4-9690573BEE8A} -> C:\Program Files (x86)\YTD Toolbar\IE\11.3\ytdToolbarIE.dll [2015-03-19] (Spigot, Inc.)
  305. Toolbar: HKLM - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\11.3\ytdToolbarIE64.dll [2015-03-19] (Spigot, Inc.)
  306. Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.5.0.909\AVG Secure Search_toolbar.dll [2015-05-14] (AVG Secure Search)
  307. Toolbar: HKLM-x32 - YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YTD Toolbar\IE\11.3\ytdToolbarIE.dll [2015-03-19] (Spigot, Inc.)
  308. Toolbar: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
  309. Toolbar: HKU\S-1-5-21-3181489392-1428851397-2468278675-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
  310. DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
  311. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
  312. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
  313. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
  314. Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.5.0\ViProtocol.dll [2015-05-14] (AVG Secure Search)
  315. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  316. Tcpip\Parameters: [DhcpNameServer] 89.190.192.166 89.190.192.162
  317. Tcpip\..\Interfaces\{1A0A3083-6DDB-42D4-87D9-10FB05FA9538}: [NameServer] 212.39.90.42 212.39.90.43
  318. Tcpip\..\Interfaces\{53719EE1-9E8D-4388-925A-D70C27AB7A96}: [NameServer] 211.162.78.1,211.162.78.2
  319. Tcpip\..\Interfaces\{78EB48DC-3FFE-4ED5-9975-15EB8E31727D}: [NameServer] 212.39.90.42 212.39.90.43
  320.  
  321. FireFox:
  322. ========
  323. FF ProfilePath: C:\Users\Moni\AppData\Roaming\Mozilla\Firefox\Profiles\cokd9nus.default-1427527468806
  324. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-18] ()
  325. FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
  326. FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll [2013-04-13] (Oracle Corporation)
  327. FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-04] (Oracle Corporation)
  328. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  329. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
  330. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  331. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-18] ()
  332. FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll [2013-06-26] (Adobe Systems, Inc.)
  333. FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.5.0\\npsitesafety.dll No File
  334. FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll No File
  335. FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll No File
  336. FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-02-27] (Google)
  337. FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> D:\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
  338. FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-04] (Oracle Corporation)
  339. FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-04] (Oracle Corporation)
  340. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  341. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
  342. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  343. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  344. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
  345. FF Plugin-x32: @mywebsearch.com/Plugin -> C:\Program Files (x86)\MyWebSearch\bar\2.bin\NPMyWebS.dll [2012-03-31] (MyWebSearch.com)
  346. FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll [2012-04-11] ( )
  347. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
  348. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
  349. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-07-05] (Pando Networks)
  350. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  351. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
  352. FF Plugin-x32: @videolan.org/vlc,version=2.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
  353. FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
  354. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)
  355. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @nsroblox.roblox.com/launcher -> C:\Program Files (x86)\Roblox\Versions\version-695ea9f5bdba4fec\\NPRobloxProxy.dll No File
  356. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Moni\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
  357. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Moni\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google)
  358. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @talk.google.com/O1DPlugin -> C:\Users\Moni\AppData\Roaming\Mozilla\plugins\npo1d.dll [2013-07-02] (Google)
  359. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @talk.google.com/O3DPlugin -> C:\Users\Moni\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] ()
  360. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Moni\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
  361. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Moni\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll No File
  362. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Moni\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-21] (Unity Technologies ApS)
  363. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: facebook.com/fbDesktopPlugin -> C:\Users\Moni\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll [2013-03-07] (Facebook, Inc.)
  364. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-07-05] (Pando Networks)
  365. FF Plugin HKU\S-1-5-21-3181489392-1428851397-2468278675-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
  366. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
  367. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)
  368. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2012-06-28] (Nullsoft, Inc.)
  369. FF Plugin ProgramFiles/Appdata: C:\Users\Moni\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2013-07-02] (Google)
  370. FF Plugin ProgramFiles/Appdata: C:\Users\Moni\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll [2013-07-02] ()
  371. FF Plugin ProgramFiles/Appdata: C:\Users\Moni\AppData\Roaming\mozilla\plugins\npo1d.dll [2013-07-02] (Google)
  372. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml [2014-12-21]
  373. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2014-09-02]
  374. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2014-11-10]
  375. FF Extension: MP3Tube Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\mp3tubetoolbar@mp3tubetoolbar.com [2014-07-22]
  376. FF Extension: BasicScan - C:\Program Files (x86)\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C} [2014-07-22]
  377. FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-22]
  378. FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-07-22]
  379. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2014-07-22]
  380. FF Extension: BasicServe - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{740B3FD5-4483-469D-BE7F-8555B153BD04} [2014-07-22]
  381. FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
  382. FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
  383. FF HKLM-x32\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files (x86)\MyWebSearch\bar\2.bin
  384. FF Extension: My Web Search - C:\Program Files (x86)\MyWebSearch\bar\2.bin [2012-03-31]
  385. FF HKLM-x32\...\Firefox\Extensions: [fbphotozoom@installdaddy.com] - C:\Program Files (x86)\fbphotozoom\fbphotozoom15.xpi
  386. FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
  387. FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
  388. FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.9.799
  389. FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.9.799 [2014-09-02]
  390. FF HKLM-x32\...\Firefox\Extensions: [statuswinks@StatusWinks] - C:\Users\Moni\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks
  391. FF Extension: Smiley Bar for Facebook - C:\Users\Moni\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks [2012-12-16]
  392. FF HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension
  393. FF HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Firefox\Extensions: [statuswinks@StatusWinks] - C:\Users\Moni\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks
  394. FF HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\...\Firefox\Extensions: [specialsavings@vshsolutions.com] - C:\Users\Moni\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com
  395. FF Extension: Special Savings - C:\Users\Moni\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com [2012-12-16]
  396. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]
  397.  
  398. Chrome:
  399. =======
  400. CHR HomePage: Default -> hxxp://www.google.com/
  401. CHR StartupUrls: Default -> "https://www.google.bg/", "https://www.youtube.com/?feature=ytca"
  402. CHR Profile: C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default
  403. CHR Extension: (Magic Actions for YouTube™) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-03-20]
  404. CHR Extension: (Google Drive) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24]
  405. CHR Extension: (Please enter your password) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2015-01-22]
  406. CHR Extension: (Ultron Browser NewTab Page) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bokdjpogohejegnkmlijjnfohcbcifkk [2015-03-15]
  407. CHR Extension: (Gom VPN - Bypass blocked sites) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckiahbcmlmkpfiijecbpflfahoimklke [2015-03-26]
  408. CHR Extension: (Tampermonkey) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-03-19]
  409. CHR Extension: (YouTube mp3) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkonfbfckdamohdkmechhhnnoblpbena [2015-03-31]
  410. CHR Extension: (Gom VPN - App to bypass blocked sites) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\eelphgpfmjhndihoopgadghfonahifel [2015-03-26]
  411. CHR Extension: (TickTick - Todo & Task List) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\eempgbpnkjnacmilmobpbhbfpdjdcpgd [2015-01-22]
  412. CHR Extension: (Conversor de Medidas) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbiicdapcioonpclifmhmcnhhdegnpke [2015-01-22]
  413. CHR Extension: (Bookmark Manager) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-02]
  414. CHR Extension: (SoundCloud) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipebkipbeggmmkjjljenoblnfaenambp [2015-01-22]
  415. CHR Extension: (Ultron Browser) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfldicokfdgaipmlmfghjfhkaijlpcoi [2015-03-15]
  416. CHR Extension: (Hangouts) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2015-01-22]
  417. CHR Extension: (Turn Off the Lights) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\labjanboighjienkhiabgpefblkbmemd [2015-01-22]
  418. CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
  419. CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-03-29]
  420. CHR Extension: (Facebook Messenger) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdapmeleikeppmfgadilffngabfpibok [2015-01-26]
  421. CHR Extension: (Google Wallet) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-19]
  422. CHR Extension: (Hover Zoom) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2015-03-15]
  423. CHR Extension: (dotEPUB) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\okpfiebkkmjcnodegbbbiellepfhoglm [2015-01-22]
  424. CHR Extension: (Click&Clean App) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-03-15]
  425. CHR Extension: (Ambient Aurea) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkaglmndhfgdaiaccjglghcbnfinfffa [2015-03-20]
  426. CHR Profile: C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1
  427. CHR Extension: (Movies Toolbar) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomic [2015-01-22]
  428. CHR Extension: (Ask Toolbar) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaamnjcfigiihfpfilaaiifgdgfogcg [2015-01-22]
  429. CHR Extension: (Google Slides) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-22]
  430. CHR Extension: (SpecialSavings.com) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aidbbndgjnlaclnmhkdimcdjiebjpdel [2015-01-22]
  431. CHR Extension: (Google Docs) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-22]
  432. CHR Extension: (Google Drive) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-22]
  433. CHR Extension: (Funmoods) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bbjciahceamgodcoidkjpchnokgfpphh [2015-01-22]
  434. CHR Extension: (Bcool) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bkimjmdklbhkpnpknanflhneggbkhncj [2015-01-22]
  435. CHR Extension: (YouTube) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-22]
  436. CHR Extension: (Google Search) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-22]
  437. CHR Extension: (DownTango Launcher Toolbar) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ejdabpabkmacjiiooccecnpakonoibah [2015-01-22]
  438. CHR Extension: (Google Sheets) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-22]
  439. CHR Extension: (Smiley Bar for Facebook) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgojaaaiddhmiiakpejiklijbalpckih [2015-01-22]
  440. CHR Extension: (SweetIM for Facebook) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-01-22]
  441. CHR Extension: (Select Links App) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jhhjnhpfgnffpcjncnmkfiahofahoihh [2015-01-22]
  442. CHR Extension: (New tab for Chrome™) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [2015-01-22]
  443. CHR Extension: (DefaultTab) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc [2015-01-22]
  444. CHR Extension: (Skype Click to Call) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-01-22]
  445. CHR Extension: (AVG Security Toolbar) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2015-01-22]
  446. CHR Extension: (Google Wallet) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-22]
  447. CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2015-01-22]
  448. CHR Extension: (DealPly Shopping) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ojcgaoafcmbadjkfdippkdddgkeaipbn [2015-01-22]
  449. CHR Extension: (Sense) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pflmllfnnabikmfkkaddkoolinlfninn [2015-01-23]
  450. CHR Extension: (GoPhoto.it) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk [2015-01-22]
  451. CHR Extension: (Gmail) - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-22]
  452. CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Moni\AppData\Local\funmoods.crx [2012-08-29]
  453. CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
  454. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Moni\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2015-01-24]
  455. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Moni\AppData\Local\funmoods.crx [2012-08-29]
  456. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - http://clients2.google.com/service/update2/crx
  457. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [Not Found]
  458. CHR HKU\S-1-5-21-3181489392-1428851397-2468278675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
  459. CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Moni\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx [2013-08-19]
  460. CHR HKLM-x32\...\Chrome\Extension: [aaaamnjcfigiihfpfilaaiifgdgfogcg] - C:\Users\Moni\AppData\Local\APN\GoogleCRXs\aaaamnjcfigiihfpfilaaiifgdgfogcg_7.17.2.0.crx [2013-02-01]
  461. CHR HKLM-x32\...\Chrome\Extension: [aidbbndgjnlaclnmhkdimcdjiebjpdel] - C:\Users\Moni\AppData\Roaming\SpecialSavings\SpecialSavings_2.0.0.crx [2012-08-19]
  462. CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Moni\AppData\Local\funmoods.crx [2012-08-29]
  463. CHR HKLM-x32\...\Chrome\Extension: [bcjagnifjocnddgeknajocbkkhlgibem] - C:\Program Files (x86)\Surf Canyon\surfcanyon.crx [Not Found]
  464. CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Moni\AppData\Local\Temp\ccex.crx [Not Found]
  465. CHR HKLM-x32\...\Chrome\Extension: [bkimjmdklbhkpnpknanflhneggbkhncj] - C:\ProgramData\Bcool\bkimjmdklbhkpnpknanflhneggbkhncj.crx [2012-08-06]
  466. CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
  467. CHR HKLM-x32\...\Chrome\Extension: [ejdabpabkmacjiiooccecnpakonoibah] - C:\Program Files (x86)\DownTangoLauncherToolbar\chrome\DownTangoLauncherToolbar.crx [2012-09-11]
  468. CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Moni\AppData\Roaming\BabSolution\CR\Delta.crx [Not Found]
  469. CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\Betcat\WebCakeLayers.crx [Not Found]
  470. CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [Not Found]
  471. CHR HKLM-x32\...\Chrome\Extension: [hgojaaaiddhmiiakpejiklijbalpckih] - C:\Users\Moni\AppData\Roaming\StatusWinks\statuswinks.crx [2012-10-11]
  472. CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [Not Found]
  473. CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-10-01]
  474. CHR HKLM-x32\...\Chrome\Extension: [jhhjnhpfgnffpcjncnmkfiahofahoihh] - C:\Program Files (x86)\OApps\chrome-sl.crx [2013-07-13]
  475. CHR HKLM-x32\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files (x86)\Perion\NewTab\newTab.crx [2012-07-29]
  476. CHR HKLM-x32\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files (x86)\DefaultTab\DefaultTab.crx [2013-02-12]
  477. CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
  478. CHR HKLM-x32\...\Chrome\Extension: [mpieaakhacmfleokhjcjnpcnmnmpfkid] - C:\Program Files (x86)\fbphotozoom\fbphotozoom15.crx [Not Found]
  479. CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx [2014-04-27]
  480. CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Moni\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-10-01]
  481. CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx [2012-07-31]
  482. CHR HKLM-x32\...\Chrome\Extension: [pmlghpafmmnmmkjdhacccolfgnkiboco] - C:\Program Files (x86)\1ClickDownload\oneclickdownloader11.crx [Not Found]
  483.  
  484. Opera:
  485. =======
  486. OPR Extension: (SavePass) - C:\Users\Moni\AppData\Roaming\Opera Software\Opera Stable\Extensions\eoakcjefpghelmgacocefhiniapndeoo [2014-07-29]
  487. OPR Extension: (Adblock Plus) - C:\Users\Moni\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-08-04]
  488.  
  489. ==================== Services (Whitelisted) =================
  490.  
  491. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  492.  
  493. S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-18] () []
  494. R3 BITCOMET_HELPER_SERVICE; D:\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
  495. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  496. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  497. R2 DefaultTabUpdate; C:\Users\Moni\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-07-13] () []
  498. S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2015-05-10] (Echobit LLC)
  499. R2 fc67e7a0; c:\Program Files (x86)\DeltaFix\DeltaFix.dll [3906048 2014-11-10] () [] <==== ATTENTION
  500. R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [96768 2012-06-27] (Freemake) []
  501. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
  502. R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
  503. S2 ldr; C:\ProgramData\rkcl\ldr.exe [105984 2015-05-25] () []
  504. R2 MyWebSearchService; C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSSVC.EXE [34320 2012-03-31] (MyWebSearch.com)
  505. S4 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [204304 2012-04-11] (Nitro PDF Software)
  506. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
  507. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
  508. S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910128 2015-02-19] (Electronic Arts)
  509. R2 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [186136 2013-08-17] (TMRG, Inc.) <==== ATTENTION
  510. S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
  511. R2 RServer3; C:\Windows\SysWOW64\rserver30\RServer3.exe [1154752 2012-12-19] (Famatech Corp.)
  512. R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4250624 2014-06-09] (A-Volute) []
  513. R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
  514. R2 SafetyNutManager; C:\Program Files (x86)\Movies App\SafetyNut\SafetyNutManager.exe [3574480 2014-12-15] (Somoto LTD)
  515. R4 steg; C:\ProgramData\steg\steg.exe [4079104 2015-05-20] () []
  516. R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [392984 2014-04-13] (Tlapia)
  517. S2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [394520 2014-04-13] (Tlapia)
  518. S4 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)
  519. R3 TunnelBearMaintenance; D:\TunnelBear\TBear.Maintenance.exe [26048 2014-07-05] ()
  520. R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-28] (Ulead Systems, Inc.) []
  521. S4 VIVACOM 3G USB Modem. RunOuc; C:\Program Files (x86)\VIVACOM 3G USB Modem\UpdateDog\ouc.exe [655712 2012-09-15] ()
  522. S4 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [9216 2010-04-28] (Vodafone) []
  523. R2 vToolbarUpdater18.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.5.0\ToolbarUpdater.exe [1812416 2015-05-14] (AVG Secure Search)
  524. R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)
  525. R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-07-10] (Western Digital Technologies, Inc.)
  526. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  527. S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
  528. S2 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [X]
  529. R2 Winstep Xtreme Service; D:\Winstep\WsxService [X]
  530.  
  531. ==================== Drivers (Whitelisted) ====================
  532.  
  533. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  534.  
  535. S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] ()
  536. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-07-21] (DT Soft Ltd)
  537. R3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2015-01-24] (Echobit, LLC)
  538. R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Movies App\SafetyNut\x64\configmgrc3.cfg [46160 2014-12-15] (Somoto LTD)
  539. S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
  540. S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [224768 2012-09-15] (Huawei Technologies Co., Ltd.)
  541. S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
  542. S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [29696 2012-10-11] (ManyCam LLC)
  543. R3 mcdevice; C:\Windows\System32\DRIVERS\mcdevice.sys [334400 2011-05-19] (ShiningMorning Inc.)
  544. R3 mirrorv3; C:\Windows\System32\DRIVERS\rminiv3.sys [5632 2012-12-18] (Famatech International Corp.)
  545. R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
  546. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
  547. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
  548. R1 raddrvv3; C:\Windows\SysWOW64\rserver30\raddrvv3.sys [71576 2012-12-19] (Famatech Corp.)
  549. S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
  550. S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
  551. R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
  552. R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-05-23] (Windows (R) Win 7 DDK provider)
  553. S3 s217bus; C:\Windows\System32\DRIVERS\s217bus.sys [108072 2007-11-02] (MCCI Corporation)
  554. S3 s217mdfl; C:\Windows\System32\DRIVERS\s217mdfl.sys [19496 2007-11-02] (MCCI Corporation)
  555. S3 s217mdm; C:\Windows\System32\DRIVERS\s217mdm.sys [145448 2007-11-02] (MCCI Corporation)
  556. S3 s217nd5; C:\Windows\System32\DRIVERS\s217nd5.sys [33832 2007-11-02] (MCCI Corporation)
  557. S3 s217obex; C:\Windows\System32\DRIVERS\s217obex.sys [124968 2007-11-02] (MCCI Corporation)
  558. S3 s217unic; C:\Windows\System32\DRIVERS\s217unic.sys [138792 2007-11-02] (MCCI)
  559. S3 StkTMini; C:\Windows\System32\Drivers\StkTMini.sys [528256 2007-11-15] (Syntek)
  560. R3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [39168 2014-06-17] (The OpenVPN Project)
  561. U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
  562. S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
  563. S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) []
  564. S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
  565. S1 aydcepjb; \??\C:\Windows\system32\drivers\aydcepjb.sys [X]
  566. S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
  567. S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
  568. S1 tibhfuuh; \??\C:\Windows\system32\drivers\tibhfuuh.sys [X]
  569. S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [X]
  570. S1 udkhquam; \??\C:\Windows\system32\drivers\udkhquam.sys [X]
  571. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  572. S3 X6va006; \??\C:\Users\Moni\AppData\Local\Temp\0066667.tmp [X]
  573.  
  574. ==================== NetSvcs (Whitelisted) ===================
  575.  
  576. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  577.  
  578.  
  579. ==================== One Month Created files and folders ========
  580.  
  581. (If an entry is included in the fixlist, the file/folder will be moved.)
  582.  
  583. 2015-05-25 08:33 - 2015-05-25 08:35 - 00068076 _____ () C:\Users\Moni\Desktop\FRST.txt
  584. 2015-05-25 08:32 - 2015-05-25 08:33 - 00000000 ____D () C:\FRST
  585. 2015-05-25 08:32 - 2015-05-25 08:31 - 02108416 _____ (Farbar) C:\Users\Moni\Desktop\FRST64.exe
  586. 2015-05-25 08:31 - 2015-05-25 08:31 - 02108416 _____ (Farbar) C:\Users\Moni\Downloads\FRST64.exe
  587. 2015-05-25 08:21 - 2015-05-25 08:21 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
  588. 2015-05-25 08:21 - 2015-05-25 08:21 - 00000000 ____D () C:\Program Files\Unlocker
  589. 2015-05-25 08:18 - 2015-05-25 08:20 - 01078591 _____ () C:\Users\Moni\Downloads\Unlocker1.9.2.exe
  590. 2015-05-25 08:17 - 2015-05-25 08:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
  591. 2015-05-25 00:02 - 2015-05-25 00:22 - 00000000 ____D () C:\ProgramData\rkcl
  592. 2015-05-23 11:17 - 2015-05-23 11:17 - 00575510 _____ () C:\Users\Moni\Downloads\JaYamxM.mp4
  593. 2015-05-22 15:46 - 2015-05-22 19:26 - 00000000 ____D () C:\Users\Moni\Desktop\NVO MAT
  594. 2015-05-20 19:35 - 2015-05-20 19:35 - 00000062 ____H () C:\Users\Moni\Downloads\.picasa.ini
  595. 2015-05-20 15:59 - 2015-05-20 16:29 - 00000000 ____D () C:\Users\Moni\Desktop\NVO
  596. 2015-05-20 14:48 - 2015-05-25 00:03 - 00000000 ____D () C:\ProgramData\steg
  597. 2015-05-20 14:48 - 2015-05-20 14:48 - 00000000 ____D () C:\ProgramData\tor
  598. 2015-05-18 23:26 - 2015-05-18 23:26 - 00093077 _____ () C:\Users\Moni\Downloads\preview_image
  599. 2015-05-18 22:00 - 2015-05-18 22:00 - 00000000 ____D () C:\Users\Moni\Tracing
  600. 2015-05-18 21:55 - 2015-05-18 21:55 - 00000000 ____D () C:\ProgramData\Digger
  601. 2015-05-14 11:43 - 2015-05-14 11:43 - 00001794 _____ () C:\Users\Moni\Desktop\испански.txt
  602. 2015-05-12 08:42 - 2015-05-12 09:00 - 72390124 _____ () C:\Users\Moni\Downloads\cm12.1_golden.nova.20150510.zip
  603. 2015-05-12 08:14 - 2015-05-12 08:24 - 34391673 _____ () C:\Users\Moni\Downloads\cm12.0_golden.nova.20150131 (2).zip
  604. 2015-05-11 22:59 - 2015-05-11 23:17 - 73061212 _____ () C:\Users\Moni\Downloads\cm12.0_golden.nova.20150131 (1).zip
  605. 2015-05-11 22:17 - 2015-05-11 22:17 - 130498368 _____ () C:\Users\Moni\Desktop\cm12.0_golden.nova.20150131.zip
  606. 2015-05-11 21:47 - 2015-05-11 22:17 - 130498368 _____ () C:\Users\Moni\Downloads\cm12.0_golden.nova.20150131.zip
  607. 2015-05-11 21:44 - 2015-05-11 21:43 - 229325307 _____ () C:\Users\Moni\Desktop\pa_gapps-modular-mini-5.0.1-RC3-20150201-signed.zip
  608. 2015-05-11 21:34 - 2015-05-11 21:43 - 229325307 _____ () C:\Users\Moni\Downloads\pa_gapps-modular-mini-5.0.1-RC3-20150201-signed.zip
  609. 2015-05-11 21:13 - 2015-05-11 21:13 - 08693820 _____ () C:\Users\Moni\Desktop\GT-I8190_TWRP_2.8.1.0.tar.md5
  610. 2015-05-11 21:12 - 2015-05-11 21:13 - 08693820 _____ () C:\Users\Moni\Downloads\GT-I8190_TWRP_2.8.1.0.tar.md5
  611. 2015-05-11 20:43 - 2015-05-11 20:47 - 00000000 ____D () C:\Users\Moni\Desktop\ъхъ
  612. 2015-05-11 20:12 - 2015-05-11 20:12 - 00002587 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
  613. 2015-05-11 20:09 - 2015-05-11 20:10 - 27024112 _____ (Microsoft Corporation) C:\Users\Moni\Downloads\PowerPointViewer.exe
  614. 2015-05-11 20:09 - 2015-05-11 20:09 - 00755056 _____ (Program Application software ) C:\Users\Moni\Downloads\Malavida_Download_Manager.exe
  615. 2015-05-11 19:54 - 2015-05-25 00:09 - 00405796 _____ () C:\Users\Moni\Downloads\ИНСТРУКТАЖ_ЗА_УЧЕНИКА.ppt
  616. 2015-05-10 21:51 - 2015-05-10 21:51 - 00000800 _____ () C:\Users\Moni\Desktop\thissoundslikeroleplaygonewrongplshalp.txt
  617. 2015-05-10 19:01 - 2015-05-10 19:06 - 00000880 _____ () C:\Users\Moni\Desktop\uhu.txt
  618. 2015-05-10 16:23 - 2015-05-10 16:23 - 00000000 ____D () C:\Windows\pss
  619. 2015-05-08 22:02 - 2015-05-08 22:02 - 00002143 _____ () C:\Users\Moni\Desktop\FLV Player.lnk
  620. 2015-05-03 20:05 - 2015-05-03 20:05 - 00000600 _____ () C:\Users\Moni\Desktop\Kerbal Space Program.lnk
  621. 2015-05-03 20:05 - 2015-05-03 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerbal Space Program
  622. 2015-05-03 13:48 - 2015-05-04 20:43 - 00000000 ____D () C:\Users\Moni\Desktop\100CANON
  623. 2015-04-27 19:59 - 2015-04-27 19:59 - 00000000 ____D () C:\Users\Moni\AppData\Local\openvr
  624. 2015-04-27 09:13 - 2015-04-27 09:13 - 00664645 _____ () C:\Users\Moni\Downloads\lia.rar
  625. 2015-04-27 09:13 - 2015-04-27 09:13 - 00664645 _____ () C:\Users\Moni\Desktop\lia.rar
  626.  
  627. ==================== One Month Modified files and folders ========
  628.  
  629. (If an entry is included in the fixlist, the file/folder will be moved.)
  630.  
  631. 2015-05-25 08:34 - 2014-10-12 23:40 - 00000000 ___RD () C:\Users\Moni\Desktop\Избори
  632. 2015-05-25 08:31 - 2012-06-14 13:22 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
  633. 2015-05-25 08:30 - 2013-12-25 22:30 - 00000294 _____ () C:\Windows\Tasks\Dealply.job
  634. 2015-05-25 08:29 - 2011-12-28 03:52 - 01933818 _____ () C:\Windows\WindowsUpdate.log
  635. 2015-05-25 08:15 - 2011-12-27 19:47 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Skype
  636. 2015-05-25 07:46 - 2014-02-14 09:46 - 00000296 _____ () C:\Windows\Tasks\Funmoods.job
  637. 2015-05-25 07:42 - 2012-08-02 16:15 - 00000000 ____D () C:\Users\Moni\AppData\Local\CrashDumps
  638. 2015-05-25 07:39 - 2012-04-05 21:16 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  639. 2015-05-25 07:36 - 2009-07-14 06:20 - 00000000 ____D () C:\Windows\tracing
  640. 2015-05-25 07:01 - 2012-12-01 23:15 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3181489392-1428851397-2468278675-1000UA.job
  641. 2015-05-25 03:56 - 2014-01-29 22:56 - 00001544 _____ () C:\Windows\Tasks\Apps Hat Mini-updater.job
  642. 2015-05-25 03:56 - 2014-01-29 22:55 - 00001372 _____ () C:\Windows\Tasks\Apps Hat Mini-enabler.job
  643. 2015-05-25 03:55 - 2014-01-29 22:55 - 00002676 _____ () C:\Windows\Tasks\Apps Hat Mini-firefoxinstaller.job
  644. 2015-05-25 03:55 - 2014-01-29 22:55 - 00001494 _____ () C:\Windows\Tasks\Apps Hat Mini-codedownloader.job
  645. 2015-05-25 03:54 - 2014-01-29 22:54 - 00002166 _____ () C:\Windows\Tasks\Apps Hat Mini-chromeinstaller.job
  646. 2015-05-25 03:29 - 2014-12-21 18:28 - 00000000 ____D () C:\ProgramData\SafetyNut
  647. 2015-05-25 00:09 - 2015-02-07 00:22 - 01062660 _____ () C:\Users\Moni\Downloads\youtube-channel-art-template.psd
  648. 2015-05-24 22:39 - 2012-04-05 21:16 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  649. 2015-05-24 21:54 - 2014-05-31 12:36 - 00000000 ____D () C:\Program Files (x86)\RelevantKnowledge
  650. 2015-05-24 21:40 - 2014-12-08 21:46 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\ViberPC
  651. 2015-05-24 21:36 - 2014-12-08 21:44 - 00000000 ____D () C:\Users\Moni\AppData\Local\Viber
  652. 2015-05-24 21:29 - 2012-12-27 16:16 - 00000464 _____ () C:\Windows\Tasks\ParetoLogic Registration.job
  653. 2015-05-24 21:26 - 2012-04-01 19:12 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3181489392-1428851397-2468278675-1000Core.job
  654. 2015-05-23 11:43 - 2015-01-18 17:03 - 00024420 _____ () C:\Windows\setupact.log
  655. 2015-05-22 19:41 - 2014-01-19 19:27 - 00002210 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  656. 2015-05-22 19:01 - 2012-12-01 23:15 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3181489392-1428851397-2468278675-1000Core.job
  657. 2015-05-22 14:38 - 2009-07-14 08:13 - 00795754 _____ () C:\Windows\system32\PerfStringBackup.INI
  658. 2015-05-20 16:05 - 2012-08-02 13:15 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\vlc
  659. 2015-05-20 14:48 - 2015-01-08 17:55 - 00002676 _____ () C:\Windows\SysWOW64\uhawedgipsy.bin
  660. 2015-05-20 01:54 - 2009-07-14 07:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  661. 2015-05-20 01:54 - 2009-07-14 07:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  662. 2015-05-19 07:47 - 2014-06-19 18:30 - 00000000 ____D () C:\Program Files (x86)\Opera
  663. 2015-05-18 22:34 - 2012-04-05 21:16 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  664. 2015-05-18 22:34 - 2012-04-05 21:16 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  665. 2015-05-18 22:18 - 2014-08-04 14:34 - 00000000 ____D () C:\Users\Moni\AppData\Local\HockeyCrashes
  666. 2015-05-18 22:00 - 2011-12-27 17:57 - 00000000 ____D () C:\Users\Moni
  667. 2015-05-18 21:58 - 2011-12-27 19:43 - 00000000 ____D () C:\ProgramData\Skype
  668. 2015-05-18 21:57 - 2011-12-27 19:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
  669. 2015-05-18 21:54 - 2014-11-07 22:01 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
  670. 2015-05-18 21:54 - 2012-02-05 14:02 - 00000430 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
  671. 2015-05-18 21:51 - 2013-09-01 11:38 - 00028723 _____ () C:\autoupdate.log
  672. 2015-05-18 21:50 - 2014-09-24 20:28 - 00000000 ___RD () C:\Users\Moni\Google Drive
  673. 2015-05-18 21:45 - 2015-01-24 20:01 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
  674. 2015-05-18 21:45 - 2014-11-10 20:10 - 00000474 ____H () C:\Windows\Tasks\SW-Booster-S-792098896.job
  675. 2015-05-18 21:45 - 2013-06-07 20:29 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
  676. 2015-05-18 21:45 - 2013-05-31 18:26 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
  677. 2015-05-18 21:45 - 2012-08-06 18:43 - 00000324 ____H () C:\Windows\Tasks\GBoxUpdaterTask{E6BD1590-5E1B-4B65-8E94-FB1A09A03187}.job
  678. 2015-05-18 21:45 - 2012-08-06 18:42 - 00000372 ____H () C:\Windows\Tasks\OptimizerProUpdaterTask{48D49302-3060-4DE8-8D92-7DB9614AB643}.job
  679. 2015-05-18 21:44 - 2011-12-27 19:23 - 00000000 ____D () C:\ProgramData\NVIDIA
  680. 2015-05-18 21:44 - 2009-07-14 08:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  681. 2015-05-18 21:43 - 2010-11-21 06:47 - 24024386 _____ () C:\Windows\PFRO.log
  682. 2015-05-14 20:41 - 2012-10-03 17:05 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
  683. 2015-05-14 10:48 - 2014-06-17 21:22 - 00000000 ____D () C:\Program Files (x86)\Steam
  684. 2015-05-11 20:12 - 2015-03-11 13:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
  685. 2015-05-11 20:10 - 2014-09-22 12:21 - 00000000 ____D () C:\Program Files (x86)\MSECache
  686. 2015-05-11 20:00 - 2015-04-11 23:07 - 00000000 ____D () C:\Users\Moni\AppData\Local\Adobe
  687. 2015-05-11 20:00 - 2014-10-11 20:03 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Adobe
  688. 2015-05-10 16:27 - 2015-02-18 12:34 - 00000000 ____D () C:\Users\Moni\AppData\Local\Spotify
  689. 2015-05-10 15:51 - 2015-03-11 13:31 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\PolarisOfficeLink
  690. 2015-05-10 15:21 - 2015-02-18 12:32 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Spotify
  691. 2015-05-10 15:07 - 2014-09-24 19:58 - 00000000 ___RD () C:\Users\Moni\Dropbox
  692. 2015-05-10 15:07 - 2014-09-24 19:34 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Dropbox
  693. 2015-05-10 15:06 - 2014-09-24 19:40 - 00000000 ____D () C:\Users\Moni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
  694. 2015-05-10 14:46 - 2015-03-11 13:38 - 00000000 ___RD () C:\Users\Moni\Documents\Polaris Office
  695. 2015-05-10 14:44 - 2015-04-18 23:49 - 00000000 ____D () C:\Users\Moni\.VirtualBox
  696. 2015-05-08 22:02 - 2013-10-27 20:44 - 00000000 ____D () C:\Users\Moni\AppData\Local\WebPlayer
  697. 2015-05-08 21:49 - 2015-03-15 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
  698. 2015-05-04 22:47 - 2013-08-22 15:45 - 00000000 ___RD () C:\Users\Moni\Desktop\Pack_Memes_YgorTutoriais
  699. 2015-05-04 22:35 - 2012-08-02 16:13 - 00000000 ____D () C:\Users\Moni\Documents\Quobi
  700. 2015-04-27 12:49 - 2012-09-02 22:09 - 00000000 ____D () C:\BDS
  701.  
  702. ==================== Files in the root of some directories =======
  703.  
  704. 2013-08-15 17:00 - 2013-08-16 13:37 - 0000132 ____H () C:\Users\Moni\AppData\Roaming\Adobe BMP Format CS6 Prefs
  705. 2013-03-14 11:15 - 2015-02-16 11:14 - 0000132 ____H () C:\Users\Moni\AppData\Roaming\Adobe PNG Format CS6 Prefs
  706. 2014-04-12 17:23 - 2014-04-12 16:45 - 0012005 ____H () C:\Users\Moni\AppData\Roaming\alsoft.ini
  707. 2014-10-03 16:09 - 2014-10-03 16:30 - 0000097 _____ () C:\Users\Moni\AppData\Roaming\LauncherSettings_live.cfg
  708. 2012-12-10 17:40 - 2012-12-10 17:40 - 0000000 ____H () C:\Users\Moni\AppData\Roaming\Made
  709. 2013-07-18 12:05 - 2013-08-13 10:40 - 0034816 ____H () C:\Users\Moni\AppData\Roaming\RZR_0010d58440a58281ec18ff3bf48c.db
  710. 2014-02-21 20:34 - 2014-04-08 20:33 - 0034816 ____H () C:\Users\Moni\AppData\Roaming\RZR_002065a748f9a23a54a46efc5796.db
  711. 2014-10-03 16:19 - 2014-10-03 16:20 - 0008144 _____ () C:\Users\Moni\AppData\Roaming\TheHunterSettings_live.bin
  712. 2014-10-03 16:12 - 2014-10-03 16:12 - 0000039 _____ () C:\Users\Moni\AppData\Roaming\TheHunterSettings_steam_live.cfg
  713. 2013-07-21 11:07 - 2013-07-21 11:07 - 0021541 ____H () C:\Users\Moni\AppData\Roaming\UserTile.png
  714. 2013-09-13 22:04 - 2014-03-20 12:30 - 0000175 ____H () C:\Users\Moni\AppData\Roaming\WB.CFG
  715. 2013-08-13 20:05 - 2013-08-13 20:06 - 0011220 ___RH () C:\Users\Moni\AppData\Local\CleanupUninstall.txt
  716. 2012-03-13 22:36 - 2015-01-05 17:09 - 0027648 ___RH () C:\Users\Moni\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  717. 2012-08-29 13:25 - 2012-08-29 13:24 - 0031465 ___RH () C:\Users\Moni\AppData\Local\funmoods.crx
  718. 2012-01-14 00:07 - 2012-01-14 00:07 - 0000092 ___RH () C:\Users\Moni\AppData\Local\fusioncache.dat
  719. 2014-01-05 23:31 - 2014-01-05 23:31 - 0000000 __RSH () C:\Users\Moni\AppData\Local\LumaEmu
  720. 2013-07-02 19:46 - 2014-06-20 18:25 - 0007645 ___RH () C:\Users\Moni\AppData\Local\Resmon.ResmonCfg
  721. 2015-01-08 17:52 - 2015-01-08 17:52 - 0000008 _____ () C:\ProgramData\-
  722. 2013-08-20 17:13 - 2013-08-20 17:13 - 0000000 _____ () C:\ProgramData\25263d3d42223a_c
  723. 2012-08-06 16:02 - 2012-08-06 16:02 - 0000000 _____ () C:\ProgramData\6bdb00fbc3e2a8b61e3a21542f636ae6_c
  724. 2015-04-18 23:42 - 2015-04-18 23:42 - 0740775 _____ () C:\ProgramData\AndyDrivers.zip
  725. 2010-04-22 20:37 - 2010-04-22 20:37 - 0155474 ____R () C:\ProgramData\DeviceManager.xml.rc4
  726.  
  727. Some files in TEMP:
  728. ====================
  729. C:\Users\Moni\AppData\Local\Temp\BI_RunOnce.exe
  730. C:\Users\Moni\AppData\Local\Temp\DeltaTB.exe
  731. C:\Users\Moni\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmps0n4sd.dll
  732. C:\Users\Moni\AppData\Local\Temp\FLVPlayerSetup.exe
  733. C:\Users\Moni\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
  734. C:\Users\Moni\AppData\Local\Temp\InstallGenieo.exe
  735. C:\Users\Moni\AppData\Local\Temp\jre-8u40-windows-au.exe
  736. C:\Users\Moni\AppData\Local\Temp\Nexus Mod Manager-0.53.5.exe
  737. C:\Users\Moni\AppData\Local\Temp\Nexus Mod Manager-0.53.6.exe
  738. C:\Users\Moni\AppData\Local\Temp\nvSCPAPI.dll
  739. C:\Users\Moni\AppData\Local\Temp\nvSCPAPI64.dll
  740. C:\Users\Moni\AppData\Local\Temp\nvStInst.exe
  741. C:\Users\Moni\AppData\Local\Temp\ochelper.exe
  742. C:\Users\Moni\AppData\Local\Temp\ose00000.exe
  743. C:\Users\Moni\AppData\Local\Temp\ose00001.exe
  744. C:\Users\Moni\AppData\Local\Temp\setup.exe
  745. C:\Users\Moni\AppData\Local\Temp\SkypeSetup.exe
  746. C:\Users\Moni\AppData\Local\Temp\skyrim 1.7 patch razor1911__10924_i1472443238_il595059.exe
  747. C:\Users\Moni\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
  748. C:\Users\Moni\AppData\Local\Temp\tmpC803.exe
  749. C:\Users\Moni\AppData\Local\Temp\tu17p84.exe
  750. C:\Users\Moni\AppData\Local\Temp\UmmyVideoDownloader.exe
  751. C:\Users\Moni\AppData\Local\Temp\Uninstall.exe
  752.  
  753.  
  754. ==================== Bamital & volsnap Check =================
  755.  
  756. (There is no automatic fix for files that do not pass verification.)
  757.  
  758. C:\Windows\System32\winlogon.exe => File is digitally signed
  759. C:\Windows\System32\wininit.exe => File is digitally signed
  760. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  761. C:\Windows\explorer.exe => File is digitally signed
  762. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  763. C:\Windows\System32\svchost.exe => File is digitally signed
  764. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  765. C:\Windows\System32\services.exe => File is digitally signed
  766. C:\Windows\System32\User32.dll => File is digitally signed
  767. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  768. C:\Windows\System32\userinit.exe => File is digitally signed
  769. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  770. C:\Windows\System32\rpcss.dll => File is digitally signed
  771. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  772.  
  773.  
  774. LastRegBack: 2015-03-28 12:47
  775.  
  776. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!