API tools faq
paste
Guest User

FRST.txt

a guest
Jul 1st, 2016
343
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 89.44 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-06-2016
  2. Ran by Zack (administrator) on AVALAR (01-07-2016 16:34:25)
  3. Running from C:\Users\Zack\Desktop
  4. Loaded Profiles: Zack (Available Profiles: Zack & Max & Angel)
  5. Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: FF)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
  16. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
  17. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  18. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  19. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
  20. (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  21. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  22. (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  24. () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
  25. (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
  26. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  27. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
  28. (SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
  29. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  30. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
  31. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  32. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  33. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  34. (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
  35. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  36. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  37. (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
  38. (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  39. (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  40. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  41.  
  42.  
  43. ==================== Registry (Whitelisted) ===========================
  44.  
  45. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  46.  
  47. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-20] (Realtek Semiconductor)
  48. HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
  49. HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation)
  50. HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
  51. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
  52. HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15642744 2016-03-30] (Logitech Inc.)
  53. HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
  54. HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-10-16] ()
  55. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
  56. HKU\S-1-5-21-4074752734-1498080178-2832112840-1000\...\MountPoints2: {85483547-c065-11e5-a6ed-806e6f6e6963} - D:\ASRSetup.exe
  57. HKU\S-1-5-21-4074752734-1498080178-2832112840-1000\...\MountPoints2: {9e94f06c-c2b8-11e5-b228-d05099874bf1} - G:\setup.exe
  58. HKU\S-1-5-21-4074752734-1498080178-2832112840-1000\...\MountPoints2: {b82b16f9-cb97-11e5-9ad9-d05099874bf1} - D:\MotoCastSetup.exe -a
  59. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
  60. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
  61. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
  62.  
  63. ==================== Internet (Whitelisted) ====================
  64.  
  65. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  66.  
  67. Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75
  68. Tcpip\..\Interfaces\{A69CA695-AC93-44E5-B179-4A41093F9ED6}: [DhcpNameServer] 75.75.76.76 75.75.75.75
  69. Tcpip\..\Interfaces\{FB89D8D9-F5A8-42B9-BDAB-2AD77B0B28A6}: [DhcpNameServer] 68.87.66.246 162.150.8.37
  70. ManualProxies:
  71.  
  72. Internet Explorer:
  73. ==================
  74. HKU\S-1-5-21-4074752734-1498080178-2832112840-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  75. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-13] (Oracle Corporation)
  76. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-13] (Oracle Corporation)
  77.  
  78. FireFox:
  79. ========
  80. FF ProfilePath: C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default
  81. FF DefaultSearchEngine.US: Google
  82. FF Homepage: hxxps://www.google.com/?gws_rd=ssl
  83. FF NetworkProxy: "autoconfig_url", "data:;base64,ZnVuY3Rpb24gRmluZFByb3h5Rm9yVVJMKHVybCwgaG9zdCkgeyBpZih1cmwuaW5kZXhPZigiaHR0cHM6Ly8iKSA+IC0xKSB7IHJldHVybiAiUFJPWFkgOTg3NjA3LmJpejo4MDgwIjsgfSBlbHNlIHJldHVybiAiSFRUUFMgOTg3NjA3LmJpejo4MDgwIjsgfQ=="
  84. FF NetworkProxy: "type", 0
  85. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-18] ()
  86. FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-13] (Oracle Corporation)
  87. FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-13] (Oracle Corporation)
  88. FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  89. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
  90. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
  91. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-18] ()
  92. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
  93. FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  94. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
  95. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-02] (NVIDIA Corporation)
  96. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-02] (NVIDIA Corporation)
  97. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
  98. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
  99. FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
  100. FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
  101. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
  102. FF user.js: detected! => C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default\user.js [2016-05-21]
  103. FF Extension: MEGA - C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default\Extensions\firefox@mega.co.nz.xpi [2016-07-01]
  104. FF Extension: ExHentai Easy 2 - C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default\Extensions\jid1-7NbXi2AqS1oUFw@jetpack.xpi [2016-04-27]
  105. FF Extension: Download YouTube Videos as MP4 - C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-03-21]
  106. FF Extension: Adblock Plus - C:\Users\Zack\AppData\Roaming\Mozilla\Firefox\Profiles\vq9omgu8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
  107.  
  108. Chrome:
  109. =======
  110. CHR Profile: C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default
  111. CHR Extension: (Google Docs) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-23]
  112. CHR Extension: (Google Drive) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-23]
  113. CHR Extension: (Skype Calling) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2016-01-23]
  114. CHR Extension: (YouTube) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-23]
  115. CHR Extension: (Google Search) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-23]
  116. CHR Extension: (Google+) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2016-01-23]
  117. CHR Extension: (Pandora) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl [2016-01-23]
  118. CHR Extension: (Google Docs Offline) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-23]
  119. CHR Extension: (AdBlock) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-11]
  120. CHR Extension: (Pokémon Showdown Enhanced Tooltips) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmkpigbaephkbabhogllilhepglikolk [2016-01-23]
  121. CHR Extension: (Avast Online Security) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-13]
  122. CHR Extension: (YouRepeat) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\idpjonelgkpmoamjkigojeifadlhlbna [2016-01-23]
  123. CHR Extension: (Web Wrapped - Skype) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnnmpdconejcjioiidgjgkglakjegcmo [2016-01-23]
  124. CHR Extension: (Dark MLP theme) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\lchgdglkpmnhfdjjbohfblpfdabndcbc [2016-03-05]
  125. CHR Extension: (Webcam Toy) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade [2016-01-23]
  126. CHR Extension: (Do It! Shia Labeouf (Super Pack)) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\miagjfhahnjmnnmhdgelhmbpjgojfnok [2016-02-18]
  127. CHR Extension: (UltraSurf Security, Privacy & Unblock VPN) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjnbclmflcpookeapghfhapeffmpodij [2016-01-23]
  128. CHR Extension: (Chrome Web Store Payments) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-23]
  129. CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn [2016-01-23]
  130. CHR Extension: (My Chrome Theme) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-01-23]
  131. CHR Extension: (Gmail) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-23]
  132. CHR Profile: C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 1
  133. CHR Profile: C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2
  134. CHR Extension: (Google Slides) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-29]
  135. CHR Extension: (Google Docs) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-30]
  136. CHR Extension: (Google Drive) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-30]
  137. CHR Extension: (YouTube) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-30]
  138. CHR Extension: (Google Sheets) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-29]
  139. CHR Extension: (Google Docs Offline) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-30]
  140. CHR Extension: (Chrome Web Store Payments) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-30]
  141. CHR Extension: (Gmail) - C:\Users\Zack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-30]
  142.  
  143. ==================== Services (Whitelisted) ========================
  144.  
  145. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  146.  
  147. R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
  148. R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
  149. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
  150. S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [441880 2016-06-30] (BlueStack Systems, Inc.)
  151. R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [421400 2016-06-30] (BlueStack Systems, Inc.)
  152. S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [458264 2016-06-30] (BlueStack Systems, Inc.)
  153. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
  154. R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
  155. R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] ()
  156. R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-03-30] (Logitech Inc.)
  157. S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
  158. S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
  159. R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
  160. R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
  161. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
  162. R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
  163. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
  164. R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5232072 2016-05-09] (SoftEther VPN Project at University of Tsukuba, Japan.)
  165. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7031056 2016-05-02] (TeamViewer GmbH)
  166. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  167.  
  168. ===================== Drivers (Whitelisted) ==========================
  169.  
  170. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  171.  
  172. S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-06-30] (BlueStack Systems)
  173. S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-06-30] (Bluestack System Inc. )
  174. R0 dcrypt; C:\Windows\System32\drivers\dcrypt.sys [210632 2014-07-09] ()
  175. S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
  176. R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
  177. R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-05-27] ()
  178. R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-05-27] ()
  179. R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
  180. R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-10] (Logitech Inc.)
  181. S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
  182. S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
  183. R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
  184. R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
  185. R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0077.sys [38432 2016-05-09] (SoftEther Corporation)
  186. S3 Neo_VPN2; C:\Windows\System32\DRIVERS\Neo_0074.sys [38432 2016-05-09] (SoftEther Corporation)
  187. R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
  188. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
  189. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
  190. R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation )
  191. S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [50392 2015-08-13] (Razer Inc)
  192. S3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2015-08-10] (The OpenVPN Project)
  193. S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
  194. S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
  195. S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
  196.  
  197. ========================== Drivers MD5 =======================
  198.  
  199. C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
  200. C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
  201. C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
  202. C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
  203. C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
  204. C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
  205. C:\Windows\system32\drivers\afd.sys 9A4A1EEE802BF2F878EE8EAB407B21B7
  206. C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
  207. C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
  208. C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
  209. C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
  210. C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
  211. C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
  212. C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
  213. C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
  214. C:\Windows\system32\drivers\appid.sys 5F9389D9A2D5A2A7B03DC92914B43A88
  215. C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
  216. C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
  217. C:\Windows\System32\DRIVERS\AsrAppCharger.sys E1AFEE1584C74050DE0DD16DE2A54BF3
  218. C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
  219. C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
  220. C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
  221. C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
  222. C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
  223. C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
  224. C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
  225. C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
  226. C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
  227. C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
  228. C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
  229. C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
  230. C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
  231. C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys 3AB75DB389DA8E898AE7972EF7F39242
  232. C:\Program Files (x86)\Bluestacks\BstkDrv.sys 95820BAC50416203BAB1AA3B1D5C6ED5
  233. C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
  234. C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
  235. C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
  236. C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
  237. C:\Windows\System32\CLFS.sys 404B7DF9CA4D1CB675045AF220FF3285
  238. C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
  239. C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
  240. C:\Windows\System32\Drivers\cng.sys 3323F76352B0AF14B2CDC4DFBF3E980A
  241. C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
  242. C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
  243. C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
  244. C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
  245. C:\Windows\System32\drivers\dcrypt.sys EDB72F4A46C39452D1A5414F7D26454A
  246. C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
  247. C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
  248. C:\Windows\System32\drivers\disk.sys 616387BBD83372220B09DE95F4E67BBC
  249. C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
  250. C:\Windows\system32\drivers\drmkaud.sys 26FE888505E5A945B0536AF9A2A27A6F
  251. C:\Windows\System32\drivers\dxgkrnl.sys 3A9D7D464BDB3B70D7ECF689ADABBD4D
  252. C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
  253. C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
  254. C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
  255. C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
  256. C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
  257. C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
  258. C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
  259. C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
  260. C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
  261. C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
  262. C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
  263. C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
  264. C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
  265. C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
  266. C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
  267. C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
  268. C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
  269. C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
  270. C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
  271. C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
  272. C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
  273. C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
  274. C:\Windows\System32\drivers\HTTP.sys F61634BEC53F73702A10DE69F6DCAF57
  275. C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
  276. C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit
  277. C:\Windows\System32\DRIVERS\iaStorA.sys 9EBE1AE8B3DA91D06BE1971EB37F7DA0
  278. C:\Windows\System32\DRIVERS\iaStorF.sys C018747131B4E90E9267BA5B31EB43A7
  279. C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
  280. C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
  281. C:\Windows\System32\Drivers\INETMON.sys 0BBE196EED750C18E5D4B3CB55EB097C
  282. C:\Windows\System32\drivers\RTKVHD64.sys 2DF4ACBD8897D56091C9873DE210C2BD
  283. C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
  284. C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
  285. C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
  286. C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
  287. C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
  288. C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
  289. C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
  290. C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
  291. C:\Windows\System32\DRIVERS\ISCTD.sys 35C0995BCDB0E45D1EEBE4FB582D1563
  292. C:\Windows\System32\DRIVERS\iusb3hcs.sys 45392E76EE30DC9C8F0181C785F0BA48
  293. C:\Windows\System32\DRIVERS\iusb3hub.sys C6E8FB7FF41877378CCB30DE6E9941DF
  294. C:\Windows\System32\DRIVERS\iusb3xhc.sys 6FBA980433B2B21604CE990FBF542D3F
  295. C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
  296. C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
  297. C:\Windows\System32\Drivers\ksecdd.sys 5BBD8497E3E19128FFA06B7CCA5CC717
  298. C:\Windows\System32\Drivers\ksecpkg.sys 326D48841B92CB8E8B6B1308311B5727
  299. C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
  300. C:\Windows\System32\drivers\LGBusEnum.sys 17325C9B9ADB2BB99049936D0C9812C8
  301. C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys 2D7F1C02B94D6F0F3E10107E5EA8E141
  302. C:\Windows\System32\drivers\LGJoyXlCore.sys C7AF05942E041D4B1F345ACF79993BB3
  303. C:\Windows\System32\drivers\LGVirHid.sys 1DDB8DE3D6EEF31EDCF4977B2D2FAACC
  304. C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
  305. C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
  306. C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
  307. C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
  308. C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
  309. C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
  310. C:\Windows\system32\drivers\mbam.sys 78BFF5425E044086E74E78650A359FBB
  311. C:\Windows\system32\drivers\mwac.sys 452ACB7A9914398D9E18CCCFFCF92208
  312. C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
  313. C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
  314. C:\Windows\System32\DRIVERS\TeeDriverx64.sys 1BC9159CF58BABD89419072EA180A8F6
  315. C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
  316. C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
  317. C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
  318. C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
  319. C:\Windows\System32\drivers\mountmgr.sys 67050452C0118BAF2883928E6FCCFE47
  320. C:\Windows\System32\DRIVERS\MpFilter.sys DA0FAEE45D6F03D7647851A20977A7D0
  321. C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
  322. C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
  323. C:\Windows\system32\drivers\mrxdav.sys D7ADC2B83CA0B0381F75A98351F72CEE
  324. C:\Windows\System32\DRIVERS\mrxsmb.sys E8B2BE69999B74528DFD454F62ADA978
  325. C:\Windows\System32\DRIVERS\mrxsmb10.sys 8F3B145F690B36201CF2F468D8FF02B9
  326. C:\Windows\System32\DRIVERS\mrxsmb20.sys 5ECCDFFA286EA61CBCC17D3E733A9951
  327. C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
  328. C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
  329. C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
  330. C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
  331. C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
  332. C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
  333. C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
  334. C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
  335. C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
  336. C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
  337. C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
  338. C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
  339. C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
  340. C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
  341. C:\Windows\System32\drivers\ndis.sys F7309F42555F8AAB7144A51A1F2585B0
  342. C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
  343. C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
  344. C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
  345. C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
  346. C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
  347. C:\Windows\System32\DRIVERS\Neo_0077.sys 3351A92971670764F014A566D1106E2B
  348. C:\Windows\System32\DRIVERS\Neo_0074.sys 3351A92971670764F014A566D1106E2B
  349. C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
  350. C:\Windows\System32\DRIVERS\netbt.sys E47D571FEC2C76E867935109AB2A770C
  351. C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
  352. C:\Windows\System32\DRIVERS\NisDrvWFP.sys 6D79C8CB73187FBEAAD1F680FADF98D3
  353. C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
  354. C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
  355. C:\Windows\System32\Drivers\Ntfs.sys 47B2D0B31BDC3EBE6090228E2BA3764D
  356. C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
  357. C:\Windows\System32\drivers\nvhda64v.sys 1F99AD85DC4F9E322CDE2363378CD374
  358. C:\Windows\System32\DRIVERS\nvlddmkm.sys F1AD55BE455B70D8348C08EC891BA263
  359. C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
  360. C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
  361. C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys F82BCEB9F57B2959F6AAE2A3DDA892A8
  362. C:\Windows\System32\drivers\nvvad64v.sys F37FE6B15A987AEEC08EEF531F2FAED7
  363. C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
  364. C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
  365. C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
  366. C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
  367. C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
  368. C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
  369. C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
  370. C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
  371. C:\Windows\System32\drivers\peauth.sys ED6E75158D28D33A2E2A020AC5B2B59D
  372. C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
  373. C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
  374. C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
  375. C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
  376. C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
  377. C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
  378. C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
  379. C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
  380. C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
  381. C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
  382. C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
  383. C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
  384. C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
  385. C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
  386. C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
  387. C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
  388. C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
  389. C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
  390. C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41
  391. C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
  392. C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
  393. C:\Windows\System32\DRIVERS\Rt64win7.sys D2D055E7ED70A5EE885D17D35DF97E80
  394. C:\Windows\System32\DRIVERS\rtwlanu.sys 7135C3E86471731D4977396AF692CDB6
  395. C:\Windows\System32\DRIVERS\rzendpt.sys 5709A79EC6011BF109C7167DDC6EC603
  396. C:\Windows\System32\DRIVERS\rzudd.sys E7E36EA112048AC5AC8AA15B6EC35109
  397. C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
  398. C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
  399. C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
  400. C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
  401. C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit
  402. C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
  403. C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
  404. C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
  405. C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
  406. C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
  407. C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
  408. C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
  409. C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
  410. C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
  411. C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
  412. C:\Windows\System32\DRIVERS\srv.sys F2F4B895296EE3ECCE781CC2A296A5D1
  413. C:\Windows\System32\DRIVERS\srv2.sys FD0008BEDD2723170CCA7D61837DFD52
  414. C:\Windows\System32\DRIVERS\srvnet.sys 63B5845D9379262083655D5C6AB8DFC5
  415. C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
  416. C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
  417. C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
  418. C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
  419. C:\Windows\System32\DRIVERS\tap-tb-0901.sys 5B4A09AB34D0205C616C4D247AD29F57
  420. C:\Windows\System32\DRIVERS\tap0901.sys 3C32FF010F869BC184DF71290477384E
  421. C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
  422. C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
  423. C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
  424. C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
  425. C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
  426. C:\Windows\System32\DRIVERS\tdx.sys AA77EB517D2F07A947294F260E3ACA83
  427. C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
  428. C:\Windows\System32\DRIVERS\tssecsrv.sys 19BEDA57F3E0A06B8D5EB6D619BD5624
  429. C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
  430. C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
  431. C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
  432. C:\Windows\System32\DRIVERS\t_mouse.sys A070ABB9D85582B2BECADBE6FCD12350
  433. C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
  434. C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
  435. C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
  436. C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
  437. C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
  438. C:\Windows\System32\Drivers\usbaapl64.sys F957092C63CD71D85903CA0D8370F473
  439. C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
  440. C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
  441. C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
  442. C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
  443. C:\Windows\system32\drivers\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
  444. C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
  445. C:\Windows\system32\drivers\USBSTOR.SYS D029DD09E22EB24318A8FC3D8138BA43
  446. C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
  447. C:\Windows\System32\DRIVERS\VClone.sys 2CB7AEA800B614184238232FBA4430E1
  448. C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
  449. C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
  450. C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
  451. C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
  452. C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
  453. C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
  454. C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
  455. C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
  456. C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
  457. C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
  458. C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
  459. C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
  460. C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit
  461. C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
  462. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  463. C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
  464. C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
  465. C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
  466. C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
  467. C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
  468. C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
  469. C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
  470. C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
  471. C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
  472. C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
  473. C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
  474.  
  475. ==================== NetSvcs (Whitelisted) ===================
  476.  
  477. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  478.  
  479.  
  480. ==================== One Month Created files and folders ========
  481.  
  482. (If an entry is included in the fixlist, the file/folder will be moved.)
  483.  
  484. 2016-07-01 16:34 - 2016-07-01 16:34 - 00037590 _____ C:\Users\Zack\Desktop\FRST.txt
  485. 2016-07-01 16:33 - 2016-07-01 16:34 - 00000000 ____D C:\FRST
  486. 2016-07-01 16:30 - 2016-07-01 16:30 - 02390016 _____ (Farbar) C:\Users\Zack\Desktop\FRST64.exe
  487. 2016-07-01 12:36 - 2016-07-01 12:36 - 00001822 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk
  488. 2016-07-01 12:36 - 2016-07-01 12:36 - 00000000 ____D C:\ProgramData\Bluestacks
  489. 2016-07-01 12:36 - 2016-07-01 12:36 - 00000000 ____D C:\Program Files (x86)\Bluestacks
  490. 2016-06-27 20:32 - 2016-06-27 20:32 - 00000000 ____D C:\Users\Zack\AppData\Roaming\PDAppFlex
  491. 2016-06-25 23:24 - 2016-06-26 14:44 - 00000000 ____D C:\Program Files (x86)\Life Is Strange
  492. 2016-06-23 01:03 - 2016-05-16 19:22 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
  493. 2016-06-23 01:03 - 2016-05-16 19:19 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  494. 2016-06-23 01:03 - 2016-05-16 19:19 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
  495. 2016-06-23 01:03 - 2016-05-16 19:19 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  496. 2016-06-23 01:03 - 2016-05-16 19:19 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  497. 2016-06-23 01:03 - 2016-05-16 19:18 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
  498. 2016-06-23 01:03 - 2016-05-16 19:18 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
  499. 2016-06-23 01:03 - 2016-05-16 19:17 - 01732888 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  500. 2016-06-23 01:03 - 2016-05-16 19:16 - 01314136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
  501. 2016-06-23 01:03 - 2016-05-16 19:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  502. 2016-06-23 01:03 - 2016-05-16 19:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  503. 2016-06-23 01:03 - 2016-05-16 19:14 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
  504. 2016-06-23 01:03 - 2016-05-16 19:14 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
  505. 2016-06-23 01:03 - 2016-05-16 19:14 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  506. 2016-06-23 01:03 - 2016-05-16 19:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  507. 2016-06-23 01:03 - 2016-05-16 19:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  508. 2016-06-23 01:03 - 2016-05-16 19:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  509. 2016-06-23 01:03 - 2016-05-16 19:14 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
  510. 2016-06-23 01:03 - 2016-05-16 19:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
  511. 2016-06-23 01:03 - 2016-05-16 19:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  512. 2016-06-23 01:03 - 2016-05-16 19:14 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  513. 2016-06-23 01:03 - 2016-05-16 19:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
  514. 2016-06-23 01:03 - 2016-05-16 19:14 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
  515. 2016-06-23 01:03 - 2016-05-16 19:14 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
  516. 2016-06-23 01:03 - 2016-05-16 19:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  517. 2016-06-23 01:03 - 2016-05-16 19:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
  518. 2016-06-23 01:03 - 2016-05-16 19:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  519. 2016-06-23 01:03 - 2016-05-16 19:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  520. 2016-06-23 01:03 - 2016-05-16 19:14 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
  521. 2016-06-23 01:03 - 2016-05-16 19:14 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  522. 2016-06-23 01:03 - 2016-05-16 19:14 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  523. 2016-06-23 01:03 - 2016-05-16 19:14 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
  524. 2016-06-23 01:03 - 2016-05-16 19:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  525. 2016-06-23 01:03 - 2016-05-16 19:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
  526. 2016-06-23 01:03 - 2016-05-16 19:14 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  527. 2016-06-23 01:03 - 2016-05-16 19:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
  528. 2016-06-23 01:03 - 2016-05-16 19:14 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  529. 2016-06-23 01:03 - 2016-05-16 19:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  530. 2016-06-23 01:03 - 2016-05-16 19:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  531. 2016-06-23 01:03 - 2016-05-16 19:14 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
  532. 2016-06-23 01:03 - 2016-05-16 19:14 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  533. 2016-06-23 01:03 - 2016-05-16 19:14 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  534. 2016-06-23 01:03 - 2016-05-16 19:14 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  535. 2016-06-23 01:03 - 2016-05-16 19:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  536. 2016-06-23 01:03 - 2016-05-16 19:14 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
  537. 2016-06-23 01:03 - 2016-05-16 19:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  538. 2016-06-23 01:03 - 2016-05-16 19:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  539. 2016-06-23 01:03 - 2016-05-16 19:14 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  540. 2016-06-23 01:03 - 2016-05-16 19:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
  541. 2016-06-23 01:03 - 2016-05-16 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  542. 2016-06-23 01:03 - 2016-05-16 19:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  543. 2016-06-23 01:03 - 2016-05-16 19:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  544. 2016-06-23 01:03 - 2016-05-16 19:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
  545. 2016-06-23 01:03 - 2016-05-16 19:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
  546. 2016-06-23 01:03 - 2016-05-16 19:14 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  547. 2016-06-23 01:03 - 2016-05-16 19:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  548. 2016-06-23 01:03 - 2016-05-16 19:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  549. 2016-06-23 01:03 - 2016-05-16 19:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  550. 2016-06-23 01:03 - 2016-05-16 19:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  551. 2016-06-23 01:03 - 2016-05-16 19:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
  552. 2016-06-23 01:03 - 2016-05-16 19:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
  553. 2016-06-23 01:03 - 2016-05-16 19:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
  554. 2016-06-23 01:03 - 2016-05-16 19:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  555. 2016-06-23 01:03 - 2016-05-16 19:14 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
  556. 2016-06-23 01:03 - 2016-05-16 19:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
  557. 2016-06-23 01:03 - 2016-05-16 19:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
  558. 2016-06-23 01:03 - 2016-05-16 19:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
  559. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
  560. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
  561. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
  562. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
  563. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
  564. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
  565. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
  566. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
  567. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
  568. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
  569. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
  570. 2016-06-23 01:03 - 2016-05-16 19:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
  571. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
  572. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
  573. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
  574. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
  575. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
  576. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
  577. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
  578. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
  579. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
  580. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
  581. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
  582. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
  583. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
  584. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
  585. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
  586. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
  587. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
  588. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
  589. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
  590. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
  591. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
  592. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
  593. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
  594. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
  595. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
  596. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
  597. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
  598. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
  599. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
  600. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
  601. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
  602. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
  603. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
  604. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
  605. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
  606. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
  607. 2016-06-23 01:03 - 2016-05-16 19:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
  608. 2016-06-23 01:03 - 2016-05-16 17:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
  609. 2016-06-23 01:03 - 2016-05-16 17:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  610. 2016-06-23 01:03 - 2016-05-16 17:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  611. 2016-06-23 01:03 - 2016-05-16 17:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
  612. 2016-06-23 01:03 - 2016-05-16 17:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
  613. 2016-06-23 01:03 - 2016-05-16 17:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  614. 2016-06-23 01:03 - 2016-05-16 17:16 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  615. 2016-06-23 01:03 - 2016-05-16 17:15 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  616. 2016-06-23 01:03 - 2016-05-16 17:15 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  617. 2016-06-23 01:03 - 2016-05-16 17:14 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  618. 2016-06-23 01:03 - 2016-05-16 17:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  619. 2016-06-23 01:03 - 2016-05-16 17:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  620. 2016-06-23 01:03 - 2016-05-16 17:10 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
  621. 2016-06-23 01:03 - 2016-05-16 17:10 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
  622. 2016-06-23 01:03 - 2016-05-16 17:10 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
  623. 2016-06-23 01:03 - 2016-05-16 17:10 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
  624. 2016-06-23 01:03 - 2016-05-16 17:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
  625. 2016-06-23 01:03 - 2016-05-16 17:09 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
  626. 2016-06-23 01:03 - 2016-05-16 17:09 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
  627. 2016-06-23 01:03 - 2016-05-16 17:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
  628. 2016-06-23 01:03 - 2016-05-16 17:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
  629. 2016-06-23 01:03 - 2016-05-13 18:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  630. 2016-06-23 01:03 - 2016-05-13 18:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  631. 2016-06-23 01:03 - 2016-05-13 18:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  632. 2016-06-23 01:03 - 2016-05-13 18:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
  633. 2016-06-23 01:03 - 2016-05-13 17:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  634. 2016-06-23 01:03 - 2016-05-13 17:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  635. 2016-06-23 01:03 - 2016-05-13 17:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  636. 2016-06-23 01:03 - 2016-05-13 17:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  637. 2016-06-23 01:03 - 2016-05-13 17:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  638. 2016-06-23 01:03 - 2016-05-13 17:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  639. 2016-06-23 01:03 - 2016-05-13 17:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
  640. 2016-06-23 01:03 - 2016-05-13 17:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  641. 2016-06-23 01:03 - 2016-05-13 17:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  642. 2016-06-23 01:03 - 2016-05-13 17:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  643. 2016-06-23 01:03 - 2016-05-13 17:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  644. 2016-06-23 01:03 - 2016-05-13 17:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
  645. 2016-06-23 01:03 - 2016-05-12 13:14 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
  646. 2016-06-23 01:03 - 2016-05-12 13:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
  647. 2016-06-23 01:03 - 2016-05-12 11:18 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
  648. 2016-06-23 01:03 - 2016-05-12 11:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
  649. 2016-06-23 01:03 - 2016-05-12 11:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
  650. 2016-06-23 01:03 - 2016-05-04 13:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
  651. 2016-06-23 01:03 - 2016-05-04 13:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
  652. 2016-06-23 01:03 - 2016-05-04 13:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
  653. 2016-06-23 01:03 - 2016-05-04 13:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
  654. 2016-06-23 01:03 - 2016-05-04 13:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
  655. 2016-06-23 01:03 - 2016-05-04 13:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
  656. 2016-06-23 01:03 - 2016-05-04 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
  657. 2016-06-23 01:03 - 2016-05-04 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
  658. 2016-06-23 01:03 - 2016-05-04 13:16 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
  659. 2016-06-23 01:03 - 2016-05-04 13:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
  660. 2016-06-23 01:03 - 2016-05-04 11:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
  661. 2016-06-23 01:03 - 2016-05-04 10:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
  662. 2016-06-22 23:50 - 2016-07-01 09:17 - 00223744 _____ () C:\Users\Zack\Downloads\Autoclicker B & L.exe
  663. 2016-06-21 06:26 - 2016-07-01 09:17 - 00357467 _____ C:\Users\Zack\Downloads\7Clicker.jar
  664. 2016-06-20 16:44 - 2016-06-20 16:44 - 00000478 __RSH C:\Users\Angel\ntuser.pol
  665. 2016-06-20 01:19 - 2016-06-20 01:19 - 00000000 ___DX C:\Users\Zack\Documents\私立さくらんぼ小学校
  666. 2016-06-20 01:14 - 2016-06-20 01:14 - 00000000 ____D C:\ProgramData\私立さくらんぼ小学校
  667. 2016-06-20 01:14 - 2016-06-20 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\私立さくらんぼ小学校
  668. 2016-06-20 01:12 - 2016-06-20 01:12 - 00000000 ___DX C:\Program Files (x86)\私立さくらんぼ小学校
  669. 2016-06-18 20:46 - 2016-06-18 20:46 - 00012134 _____ C:\Users\Max\Desktop\Dark Souls III.xml
  670. 2016-06-18 18:37 - 2016-06-18 18:37 - 00000478 __RSH C:\Users\Max\ntuser.pol
  671. 2016-06-18 06:00 - 2016-06-18 06:00 - 00000478 __RSH C:\Users\Zack\ntuser.pol
  672. 2016-06-14 17:01 - 2016-05-23 19:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  673. 2016-06-14 17:01 - 2016-05-23 18:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  674. 2016-06-14 17:01 - 2016-05-21 13:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  675. 2016-06-14 17:01 - 2016-05-21 12:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  676. 2016-06-14 17:01 - 2016-05-20 18:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  677. 2016-06-14 17:01 - 2016-05-20 18:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  678. 2016-06-14 17:01 - 2016-05-20 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  679. 2016-06-14 17:01 - 2016-05-20 18:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  680. 2016-06-14 17:01 - 2016-05-20 18:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  681. 2016-06-14 17:01 - 2016-05-20 18:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  682. 2016-06-14 17:01 - 2016-05-20 18:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  683. 2016-06-14 17:01 - 2016-05-20 18:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  684. 2016-06-14 17:01 - 2016-05-20 18:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  685. 2016-06-14 17:01 - 2016-05-20 18:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  686. 2016-06-14 17:01 - 2016-05-20 18:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  687. 2016-06-14 17:01 - 2016-05-20 17:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  688. 2016-06-14 17:01 - 2016-05-20 17:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  689. 2016-06-14 17:01 - 2016-05-20 17:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  690. 2016-06-14 17:01 - 2016-05-20 17:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  691. 2016-06-14 17:01 - 2016-05-20 17:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  692. 2016-06-14 17:01 - 2016-05-20 17:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  693. 2016-06-14 17:01 - 2016-05-20 17:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  694. 2016-06-14 17:01 - 2016-05-20 17:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  695. 2016-06-14 17:01 - 2016-05-20 17:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  696. 2016-06-14 17:01 - 2016-05-20 17:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  697. 2016-06-14 17:01 - 2016-05-20 17:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  698. 2016-06-14 17:01 - 2016-05-20 17:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  699. 2016-06-14 17:01 - 2016-05-20 17:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  700. 2016-06-14 17:01 - 2016-05-20 17:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  701. 2016-06-14 17:01 - 2016-05-20 17:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  702. 2016-06-14 17:01 - 2016-05-20 17:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  703. 2016-06-14 17:01 - 2016-05-20 17:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  704. 2016-06-14 17:01 - 2016-05-20 17:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  705. 2016-06-14 17:01 - 2016-05-20 17:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  706. 2016-06-14 17:01 - 2016-05-20 17:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  707. 2016-06-14 17:01 - 2016-05-20 17:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  708. 2016-06-14 17:01 - 2016-05-20 17:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  709. 2016-06-14 17:01 - 2016-05-20 17:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
  710. 2016-06-14 17:01 - 2016-05-20 17:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  711. 2016-06-14 17:01 - 2016-05-20 17:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  712. 2016-06-14 17:01 - 2016-05-20 17:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  713. 2016-06-14 17:01 - 2016-05-20 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  714. 2016-06-14 17:01 - 2016-05-20 17:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
  715. 2016-06-14 17:01 - 2016-05-20 17:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  716. 2016-06-14 17:01 - 2016-05-20 17:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  717. 2016-06-14 17:01 - 2016-05-20 17:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  718. 2016-06-14 17:01 - 2016-05-20 17:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  719. 2016-06-14 17:01 - 2016-05-20 17:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  720. 2016-06-14 17:01 - 2016-05-20 17:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
  721. 2016-06-14 17:01 - 2016-05-20 17:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  722. 2016-06-14 17:01 - 2016-05-20 17:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
  723. 2016-06-14 17:01 - 2016-05-20 17:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  724. 2016-06-14 17:01 - 2016-05-20 17:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  725. 2016-06-14 17:01 - 2016-05-20 17:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  726. 2016-06-14 17:01 - 2016-05-20 17:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  727. 2016-06-14 17:01 - 2016-05-20 17:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  728. 2016-06-14 17:01 - 2016-05-20 17:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  729. 2016-06-14 17:01 - 2016-05-20 17:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  730. 2016-06-14 17:01 - 2016-05-20 17:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  731. 2016-06-14 17:01 - 2016-05-20 17:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  732. 2016-06-14 17:01 - 2016-05-20 16:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  733. 2016-06-14 17:01 - 2016-05-20 16:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  734. 2016-06-14 17:01 - 2016-05-20 16:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  735. 2016-06-14 17:01 - 2016-05-20 16:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  736. 2016-06-14 17:01 - 2016-05-20 16:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  737. 2016-06-14 17:01 - 2016-05-20 16:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  738. 2016-06-14 16:58 - 2016-06-06 12:58 - 00041704 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
  739. 2016-06-14 16:58 - 2016-06-06 12:50 - 01204224 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  740. 2016-06-14 16:58 - 2016-06-03 09:05 - 01413120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
  741. 2016-06-14 16:58 - 2016-05-27 09:06 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
  742. 2016-06-14 16:58 - 2016-05-27 09:06 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
  743. 2016-06-14 16:58 - 2016-05-27 09:06 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
  744. 2016-06-14 16:58 - 2016-05-27 09:06 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
  745. 2016-06-14 16:58 - 2016-05-22 09:06 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
  746. 2016-06-14 16:58 - 2016-05-18 12:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  747. 2016-06-14 16:58 - 2016-05-18 12:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  748. 2016-06-14 16:58 - 2016-05-13 18:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
  749. 2016-06-14 16:58 - 2016-05-13 18:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
  750. 2016-06-14 16:58 - 2016-05-13 18:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
  751. 2016-06-14 16:58 - 2016-05-13 18:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
  752. 2016-06-14 16:58 - 2016-05-13 18:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
  753. 2016-06-14 16:58 - 2016-05-13 17:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
  754. 2016-06-14 16:58 - 2016-05-13 17:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
  755. 2016-06-14 16:58 - 2016-05-13 17:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
  756. 2016-06-14 16:58 - 2016-05-13 17:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
  757. 2016-06-14 16:58 - 2016-05-13 17:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
  758. 2016-06-14 16:58 - 2016-05-12 13:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
  759. 2016-06-14 16:58 - 2016-05-12 13:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  760. 2016-06-14 16:58 - 2016-05-12 13:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
  761. 2016-06-14 16:58 - 2016-05-12 13:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
  762. 2016-06-14 16:58 - 2016-05-12 13:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
  763. 2016-06-14 16:58 - 2016-05-12 13:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
  764. 2016-06-14 16:58 - 2016-05-12 13:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
  765. 2016-06-14 16:58 - 2016-05-12 13:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
  766. 2016-06-14 16:58 - 2016-05-12 13:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
  767. 2016-06-14 16:58 - 2016-05-12 11:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
  768. 2016-06-14 16:58 - 2016-05-12 11:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
  769. 2016-06-14 16:58 - 2016-05-12 11:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
  770. 2016-06-14 16:58 - 2016-05-12 11:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
  771. 2016-06-14 16:58 - 2016-05-12 11:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
  772. 2016-06-14 16:58 - 2016-05-12 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
  773. 2016-06-14 16:58 - 2016-05-12 11:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
  774. 2016-06-14 16:58 - 2016-05-12 11:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  775. 2016-06-14 16:58 - 2016-05-12 10:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
  776. 2016-06-14 16:58 - 2016-05-12 10:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
  777. 2016-06-14 16:58 - 2016-05-12 10:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
  778. 2016-06-14 16:58 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
  779. 2016-06-14 16:58 - 2016-05-12 10:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
  780. 2016-06-14 16:58 - 2016-05-12 09:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
  781. 2016-06-14 16:58 - 2016-05-12 09:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
  782. 2016-06-14 16:58 - 2016-05-12 09:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
  783. 2016-06-14 16:58 - 2016-05-11 13:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
  784. 2016-06-14 16:58 - 2016-05-11 13:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
  785. 2016-06-14 16:58 - 2016-05-11 13:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
  786. 2016-06-14 16:58 - 2016-05-11 13:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
  787. 2016-06-14 16:58 - 2016-05-11 11:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
  788. 2016-06-14 16:58 - 2016-05-11 11:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
  789. 2016-06-14 16:58 - 2016-05-11 11:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
  790. 2016-06-14 16:58 - 2016-05-11 11:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
  791. 2016-06-14 16:58 - 2016-05-11 11:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
  792. 2016-06-14 16:58 - 2016-05-11 11:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
  793. 2016-06-14 16:58 - 2016-05-11 10:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
  794. 2016-06-14 16:49 - 2016-06-14 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grabber
  795. 2016-06-14 14:38 - 2016-06-14 21:40 - 00000000 ____D C:\Program Files (x86)\Grabber
  796. 2016-06-14 14:38 - 2016-06-14 14:38 - 00000000 ____D C:\Users\Zack\AppData\Local\Bionus
  797. 2016-06-13 21:42 - 2016-06-16 14:00 - 00000000 ____D C:\Program Files\dcrypt
  798. 2016-06-13 21:42 - 2014-07-09 10:42 - 00210632 _____ C:\Windows\system32\Drivers\dcrypt.sys
  799. 2016-06-13 12:06 - 2016-06-13 12:14 - 1690006904 _____ C:\Users\Max\Desktop\Video 6-13-2016 12-06-44 PM.mp4
  800. 2016-06-13 03:40 - 2016-06-13 03:40 - 00000000 ____D C:\Program Files (x86)\InViewer
  801. 2016-06-13 00:15 - 2016-06-13 09:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  802. 2016-06-12 21:46 - 2016-06-12 21:49 - 533438926 _____ C:\Users\Max\Desktop\Video 6-12-2016 9-46-51 PM.mp4
  803. 2016-06-12 01:34 - 2016-06-02 23:19 - 00113208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
  804. 2016-06-12 01:34 - 2016-05-03 22:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
  805. 2016-06-12 01:34 - 2016-05-03 22:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
  806. 2016-06-12 01:34 - 2016-05-03 22:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
  807. 2016-06-12 01:34 - 2016-05-03 22:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
  808. 2016-06-12 01:31 - 2016-06-03 03:38 - 39979576 _____ C:\Windows\system32\nvcompiler.dll
  809. 2016-06-12 01:31 - 2016-06-03 03:38 - 35115456 _____ C:\Windows\SysWOW64\nvcompiler.dll
  810. 2016-06-12 01:31 - 2016-06-03 03:38 - 31603768 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  811. 2016-06-12 01:31 - 2016-06-03 03:38 - 25377848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  812. 2016-06-12 01:31 - 2016-06-03 03:38 - 21802280 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  813. 2016-06-12 01:31 - 2016-06-03 03:38 - 21346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  814. 2016-06-12 01:31 - 2016-06-03 03:38 - 18143912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  815. 2016-06-12 01:31 - 2016-06-03 03:38 - 17738592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  816. 2016-06-12 01:31 - 2016-06-03 03:38 - 13460536 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
  817. 2016-06-12 01:31 - 2016-06-03 03:38 - 10643240 _____ C:\Windows\system32\nvptxJitCompiler.dll
  818. 2016-06-12 01:31 - 2016-06-03 03:38 - 08733608 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
  819. 2016-06-12 01:31 - 2016-06-03 03:38 - 03512888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  820. 2016-06-12 01:31 - 2016-06-03 03:38 - 03065280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  821. 2016-06-12 01:31 - 2016-06-03 03:38 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436839.dll
  822. 2016-06-12 01:31 - 2016-06-03 03:38 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436839.dll
  823. 2016-06-12 01:31 - 2016-06-03 03:38 - 00985144 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  824. 2016-06-12 01:31 - 2016-06-03 03:38 - 00908736 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  825. 2016-06-12 01:31 - 2016-06-03 03:38 - 00769984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  826. 2016-06-12 01:31 - 2016-06-03 03:38 - 00707520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  827. 2016-06-12 01:31 - 2016-06-03 03:38 - 00669952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
  828. 2016-06-12 01:31 - 2016-06-03 03:38 - 00565392 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
  829. 2016-06-12 01:31 - 2016-06-03 03:38 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
  830. 2016-06-12 01:31 - 2016-06-03 03:38 - 00476664 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
  831. 2016-06-12 01:31 - 2016-06-03 03:38 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
  832. 2016-06-12 01:31 - 2016-06-03 03:38 - 00422752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
  833. 2016-06-12 01:31 - 2016-06-03 03:38 - 00394912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
  834. 2016-06-12 01:31 - 2016-06-03 03:38 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
  835. 2016-06-12 01:31 - 2016-06-03 03:38 - 00178136 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
  836. 2016-06-12 01:31 - 2016-06-03 03:38 - 00155768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
  837. 2016-06-12 01:31 - 2016-06-03 03:38 - 00153416 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
  838. 2016-06-12 01:31 - 2016-06-03 03:38 - 00131768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
  839. 2016-06-10 23:34 - 2016-06-10 23:34 - 00000000 ____D C:\Users\Zack\Documents\Action!
  840. 2016-06-10 23:34 - 2016-06-10 23:34 - 00000000 ____D C:\Users\Zack\AppData\Roaming\Mirillis
  841. 2016-06-10 23:30 - 2016-07-01 14:01 - 00000000 ____D C:\Users\Max\Documents\Action!
  842. 2016-06-10 23:30 - 2016-06-10 23:30 - 00000000 ____D C:\Users\Max\AppData\Roaming\Mirillis
  843. 2016-06-10 23:29 - 2016-06-10 23:29 - 00000000 ____D C:\Program Files (x86)\Mirillis
  844. 2016-06-04 22:35 - 2016-04-09 02:58 - 14186496 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
  845. 2016-06-04 22:35 - 2016-04-09 02:57 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
  846. 2016-06-04 22:35 - 2016-04-09 02:54 - 12881408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
  847. 2016-06-04 22:35 - 2016-04-09 02:54 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
  848. 2016-06-04 22:35 - 2016-04-09 01:53 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
  849. 2016-06-04 22:35 - 2016-04-09 01:44 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
  850. 2016-06-04 18:02 - 2016-06-04 18:02 - 00000000 ____D C:\Users\Max\AppData\Roaming\.mono
  851. 2016-06-04 18:01 - 2016-06-04 18:01 - 00000000 ____D C:\Users\Max\AppData\LocalLow\Audiosurf_ LLC
  852. 2016-06-04 17:17 - 2016-07-01 11:59 - 00000000 ____D C:\Users\Max\AppData\Local\Bluestacks
  853. 2016-06-04 17:00 - 2016-06-04 17:31 - 00000252 _____ C:\Users\Max\AppData\LocalLow\rbxcsettings.rbx
  854. 2016-06-04 17:00 - 2016-06-04 17:05 - 00000000 ____D C:\Users\Max\AppData\Local\Roblox
  855. 2016-06-04 16:02 - 2016-06-04 16:25 - 00000000 ____D C:\Users\Max\AppData\Roaming\OBS
  856. 2016-06-04 16:01 - 2016-06-04 16:01 - 00000000 ____D C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
  857. 2016-06-03 20:20 - 2016-06-03 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  858. 2016-06-03 20:20 - 2016-06-03 20:20 - 00000000 ____D C:\Program Files\iTunes
  859. 2016-06-03 20:20 - 2016-06-03 20:20 - 00000000 ____D C:\Program Files\iPod
  860. 2016-06-03 20:20 - 2016-06-03 20:20 - 00000000 ____D C:\Program Files (x86)\iTunes
  861.  
  862. ==================== One Month Modified files and folders ========
  863.  
  864. (If an entry is included in the fixlist, the file/folder will be moved.)
  865.  
  866. 2016-07-01 16:30 - 2016-02-04 23:59 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  867. 2016-07-01 16:29 - 2016-01-21 18:00 - 00000000 ____D C:\Users\Zack\AppData\Roaming\Skype
  868. 2016-07-01 16:29 - 2009-07-14 00:45 - 00028768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  869. 2016-07-01 16:29 - 2009-07-14 00:45 - 00028768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  870. 2016-07-01 16:15 - 2016-05-09 04:00 - 00000000 ____D C:\Program Files\SoftEther VPN Client
  871. 2016-07-01 16:15 - 2016-01-23 18:27 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  872. 2016-07-01 16:14 - 2016-05-13 09:45 - 00000000 ____D C:\ProgramData\NVIDIA
  873. 2016-07-01 16:14 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  874. 2016-07-01 16:08 - 2016-03-29 19:32 - 00000000 ____D C:\Users\Max\AppData\Roaming\.minecraft
  875. 2016-07-01 16:04 - 2016-03-29 22:11 - 00000000 ____D C:\Users\Max\AppData\Roaming\Skype
  876. 2016-07-01 16:00 - 2016-01-22 22:13 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
  877. 2016-07-01 15:44 - 2016-01-23 18:27 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  878. 2016-07-01 15:12 - 2016-03-30 17:55 - 00000000 ____D C:\Users\Max\AppData\Local\osu!
  879. 2016-07-01 14:33 - 2016-01-22 13:02 - 00000000 ____D C:\Program Files (x86)\Steam
  880. 2016-07-01 14:32 - 2016-01-21 02:56 - 00000386 _____ C:\Windows\Tasks\update-sys.job
  881. 2016-07-01 13:35 - 2016-01-21 02:56 - 00000386 _____ C:\Windows\Tasks\update-S-1-5-21-4074752734-1498080178-2832112840-1000.job
  882. 2016-07-01 12:36 - 2016-01-25 04:25 - 00000000 ____D C:\ProgramData\BlueStacksSetup
  883. 2016-07-01 12:36 - 2009-07-13 23:20 - 00000000 __RHD C:\Users\Public\Libraries
  884. 2016-07-01 05:46 - 2016-02-27 15:59 - 00000000 ____D C:\ProgramData\boost_interprocess
  885. 2016-07-01 04:40 - 2016-01-23 07:19 - 00000000 ____D C:\Users\Zack\AppData\Local\CrashDumps
  886. 2016-07-01 02:00 - 2016-01-22 22:06 - 00000000 ____D C:\Users\Zack\AppData\Local\Adobe
  887. 2016-07-01 00:18 - 2016-01-21 01:50 - 00000000 ____D C:\Users\Zack\AppData\Local\osu!
  888. 2016-06-30 17:57 - 2016-01-24 07:20 - 00000000 ____D C:\Users\Zack\AppData\Roaming\qBittorrent
  889. 2016-06-30 16:41 - 2016-02-28 02:48 - 00000000 ____D C:\Users\Zack\AppData\Roaming\vlc
  890. 2016-06-30 15:45 - 2016-03-03 18:05 - 00000000 ____D C:\Users\Zack\AppData\Roaming\.minecraft
  891. 2016-06-29 21:19 - 2009-07-14 00:45 - 00000000 ____D C:\Windows\Setup
  892. 2016-06-29 16:58 - 2016-01-25 00:54 - 00000000 ____D C:\Users\Zack\AppData\Roaming\Steam
  893. 2016-06-29 03:46 - 2016-01-24 07:20 - 00000000 ____D C:\Program Files (x86)\qBittorrent
  894. 2016-06-29 02:24 - 2009-07-14 01:13 - 00783606 _____ C:\Windows\system32\PerfStringBackup.INI
  895. 2016-06-29 02:24 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf
  896. 2016-06-29 02:14 - 2016-02-29 19:50 - 00000000 ____D C:\Users\Zack\AppData\Local\Eclipse
  897. 2016-06-29 02:14 - 2016-02-29 19:46 - 00000000 ____D C:\Users\Zack\.p2
  898. 2016-06-28 20:49 - 2016-02-29 19:50 - 00000000 ____D C:\Users\Zack\workspace
  899. 2016-06-28 00:38 - 2016-03-29 20:13 - 00000000 ____D C:\Users\Max\Desktop\Minecraft
  900. 2016-06-27 13:09 - 2016-01-28 20:41 - 00000000 ____D C:\Users\Zack\AppData\Roaming\WinRAR
  901. 2016-06-26 23:57 - 2016-01-21 11:14 - 00000000 ____D C:\Users\Zack\AppData\Local\ElevatedDiagnostics
  902. 2016-06-26 23:18 - 2016-02-13 13:54 - 00000000 ____D C:\Users\Zack\AppData\Roaming\TS3Client
  903. 2016-06-26 01:03 - 2016-02-29 20:56 - 00000000 ____D C:\Program Files (x86)\TeamViewer
  904. 2016-06-25 23:46 - 2016-01-24 18:43 - 00000000 ____D C:\Users\Zack\Documents\My Games
  905. 2016-06-24 19:53 - 2016-02-04 20:43 - 00000000 ____D C:\Users\Max\Desktop\Max
  906. 2016-06-24 19:49 - 2016-01-24 12:36 - 00000000 ____D C:\Windows\Minidump
  907. 2016-06-23 20:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache
  908. 2016-06-23 01:07 - 2016-01-21 23:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
  909. 2016-06-23 01:07 - 2016-01-21 23:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
  910. 2016-06-23 01:07 - 2009-07-14 01:08 - 00032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT
  911. 2016-06-23 01:05 - 2016-01-21 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  912. 2016-06-21 19:37 - 2016-02-20 18:33 - 00000000 ____D C:\Users\Zack\.android
  913. 2016-06-21 19:37 - 2016-01-22 02:01 - 00000000 ____D C:\Users\Zack\.oracle_jre_usage
  914. 2016-06-21 08:46 - 2016-02-14 15:53 - 00000000 ____D C:\Program Files\CCleaner
  915. 2016-06-21 08:45 - 2016-01-22 06:28 - 00000000 ____D C:\Users\Zack\Documents\Stuff
  916. 2016-06-20 16:44 - 2016-04-01 03:19 - 00000000 ____D C:\Users\Angel
  917. 2016-06-18 18:37 - 2016-03-29 18:53 - 00000000 ____D C:\Users\Max
  918. 2016-06-18 06:00 - 2016-01-21 10:41 - 00000000 ____D C:\Users\Zack
  919. 2016-06-18 04:00 - 2016-01-22 08:03 - 00007602 _____ C:\Users\Zack\AppData\Local\Resmon.ResmonCfg
  920. 2016-06-18 03:59 - 2016-01-22 22:13 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  921. 2016-06-18 03:59 - 2016-01-22 22:13 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  922. 2016-06-18 03:59 - 2016-01-22 22:13 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  923. 2016-06-18 03:11 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\NDF
  924. 2016-06-17 19:46 - 2016-01-23 18:27 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  925. 2016-06-15 16:40 - 2010-11-20 23:27 - 00484008 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  926. 2016-06-15 03:10 - 2009-07-14 00:45 - 04934320 _____ C:\Windows\system32\FNTCACHE.DAT
  927. 2016-06-15 03:08 - 2016-01-22 03:39 - 00000000 ____D C:\Windows\system32\appraiser
  928. 2016-06-15 03:07 - 2016-01-21 19:34 - 00000000 ____D C:\Windows\system32\MRT
  929. 2016-06-15 03:02 - 2016-01-21 19:34 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  930. 2016-06-14 17:35 - 2016-01-24 23:47 - 00000000 ____D C:\Games
  931. 2016-06-14 16:01 - 2016-01-21 01:21 - 01767944 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
  932. 2016-06-14 16:01 - 2016-01-21 01:21 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
  933. 2016-06-14 16:01 - 2016-01-21 01:21 - 01377800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
  934. 2016-06-14 16:01 - 2016-01-21 01:21 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
  935. 2016-06-14 16:01 - 2016-01-21 01:21 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
  936. 2016-06-13 09:14 - 2016-01-21 01:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  937. 2016-06-12 10:20 - 2016-01-21 01:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  938. 2016-06-12 01:35 - 2016-01-21 01:21 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
  939. 2016-06-12 01:34 - 2016-03-11 09:22 - 00000000 ____D C:\Program Files (x86)\VulkanRT
  940. 2016-06-10 23:30 - 2016-03-30 03:28 - 00000000 ____D C:\Users\Max\AppData\Local\Mirillis
  941. 2016-06-10 23:30 - 2016-01-22 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
  942. 2016-06-07 18:32 - 2016-05-07 09:57 - 00000000 ____D C:\Users\Zack\AppData\Roaming\mcnbs
  943. 2016-06-07 16:58 - 2016-05-31 17:39 - 00000000 ____D C:\Users\Max\AppData\Local\Fallout4
  944. 2016-06-03 20:20 - 2016-01-22 07:40 - 00000000 ____D C:\Program Files\Common Files\Apple
  945. 2016-06-03 03:38 - 2016-05-13 09:44 - 19180152 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
  946. 2016-06-03 03:38 - 2016-05-13 09:44 - 17290416 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
  947. 2016-06-03 03:38 - 2016-05-13 09:44 - 16756888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
  948. 2016-06-03 03:38 - 2016-05-13 09:44 - 14346320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
  949. 2016-06-03 03:38 - 2016-05-13 09:44 - 03825896 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
  950. 2016-06-03 03:38 - 2016-05-13 09:44 - 03383472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
  951. 2016-06-03 03:38 - 2016-05-13 09:44 - 00039124 _____ C:\Windows\system32\nvinfo.pb
  952. 2016-06-02 23:26 - 2016-05-13 09:45 - 06362560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
  953. 2016-06-02 23:26 - 2016-05-13 09:45 - 02453952 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
  954. 2016-06-02 23:26 - 2016-05-13 09:45 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
  955. 2016-06-02 23:26 - 2016-05-13 09:45 - 01351104 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
  956. 2016-06-02 23:26 - 2016-05-13 09:45 - 00534072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
  957. 2016-06-02 23:26 - 2016-05-13 09:45 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
  958. 2016-06-02 23:26 - 2016-05-13 09:45 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
  959. 2016-06-02 23:26 - 2016-05-13 09:45 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
  960. 2016-06-02 08:19 - 2016-05-13 09:45 - 06452948 _____ C:\Windows\system32\nvcoproc.bin
  961.  
  962. ==================== Files in the root of some directories =======
  963.  
  964. 2016-02-20 19:55 - 2016-02-20 19:56 - 0000626 _____ () C:\Users\Zack\AppData\Roaming\All CPU MeterV3_Settings.ini
  965. 2016-01-22 08:03 - 2016-06-18 04:00 - 0007602 _____ () C:\Users\Zack\AppData\Local\Resmon.ResmonCfg
  966. 2016-01-21 02:56 - 2016-01-21 02:56 - 0000003 _____ () C:\Users\Zack\AppData\Local\updater.log
  967. 2016-01-21 02:56 - 2016-01-21 02:56 - 0000424 _____ () C:\Users\Zack\AppData\Local\UserProducts.xml
  968. 2016-01-21 10:52 - 2016-01-21 10:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  969.  
  970. Some files in TEMP:
  971. ====================
  972. C:\Users\Max\AppData\Local\Temp\BluestacksUninstaller.exe
  973. C:\Users\Max\AppData\Local\Temp\HD-LibraryHandler.dll
  974. C:\Users\Max\AppData\Local\Temp\HD-Logger-Native.dll
  975. C:\Users\Max\AppData\Local\Temp\HD-ShortcutHandler.dll
  976. C:\Users\Max\AppData\Local\Temp\jansi-64-4315239675333896331.dll
  977. C:\Users\Max\AppData\Local\Temp\jansi-64-5676897623426652965.dll
  978. C:\Users\Max\AppData\Local\Temp\jansi-64-8382823767476886359.dll
  979. C:\Users\Max\AppData\Local\Temp\nvSCPAPI.dll
  980. C:\Users\Max\AppData\Local\Temp\nvStInst.exe
  981. C:\Users\Max\AppData\Local\Temp\uninstall.exe
  982. C:\Users\Zack\AppData\Local\Temp\JNativeHook-6810203529124573011.dll
  983.  
  984.  
  985. ==================== Bamital & volsnap =================
  986.  
  987. (There is no automatic fix for files that do not pass verification.)
  988.  
  989. C:\Windows\system32\winlogon.exe => File is digitally signed
  990. C:\Windows\system32\wininit.exe => File is digitally signed
  991. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  992. C:\Windows\explorer.exe => File is digitally signed
  993. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  994. C:\Windows\system32\svchost.exe => File is digitally signed
  995. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  996. C:\Windows\system32\services.exe => File is digitally signed
  997. C:\Windows\system32\User32.dll => File is digitally signed
  998. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  999. C:\Windows\system32\userinit.exe => File is digitally signed
  1000. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  1001. C:\Windows\system32\rpcss.dll => File is digitally signed
  1002. C:\Windows\system32\dnsapi.dll => File is digitally signed
  1003. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  1004. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  1005.  
  1006.  
  1007. LastRegBack: 2016-06-27 14:08
  1008.  
  1009. ==================== End of FRST.txt ============================
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!