API tools faq
paste
Guest User

Untitled

a guest
May 31st, 2017
315
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 50.60 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-05-2017
  2. Ran by PeterComp (administrator) on PETERCOMP-PC (31-05-2017 15:21:33)
  3. Running from F:\downloads\AntiMalware
  4. Loaded Profiles: PeterComp (Available Profiles: PeterComp)
  5. Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  15. () C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
  16. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  17. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  18. () C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
  19. () C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
  20. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
  21. (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  22. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  23. (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
  24. (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
  25. (Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
  26. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
  27. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  28. (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
  29. (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
  30. (Valve Corporation) G:\Steam\Steam.exe
  31. () C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
  32. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  33. (Spotify Ltd) C:\Users\PeterComp\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  34. (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
  35. (Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe
  36. (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
  37. (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
  38. (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  39. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  40. (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  41. () C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
  42. (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  43. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  44. (Valve Corporation) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe
  45. () C:\Windows\SysWOW64\PnkBstrA.exe
  46. (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
  47. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  48. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  49. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  50. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  51. (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
  52. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  53. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
  54. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
  55. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  56. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  57. () C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
  58. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  59. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  60. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  61. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  62. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  63. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  64. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  65. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  66. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  67. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  68. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  69. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  70. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  71. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  72. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  73. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  74. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  75. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  76. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  77. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  78. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  79. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  80. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  81. (Farbar) F:\downloads\AntiMalware\FarBar64.exe
  82.  
  83. ==================== Registry (Whitelisted) ====================
  84.  
  85. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  86.  
  87. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)
  88. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
  89. HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [567088 2016-10-14] ()
  90. HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-05-09] (Apple Inc.)
  91. HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-30] (AVAST Software)
  92. HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
  93. HKLM-x32\...\Run: [FLxHCIm64] => C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [183808 2013-07-11] (Windows (R) Win 7 DDK provider)
  94. HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  95. HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  96. HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
  97. HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
  98. HKLM-x32\...\Run: [] => [X]
  99. HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
  100. HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [29246632 2017-05-30] (Dropbox, Inc.)
  101. HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [421768 2016-04-25] (Acronis International GmbH)
  102. HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7382232 2016-10-14] ()
  103. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
  104. HKU\S-1-5-21-4212444594-818129302-1918108688-1000\...\Run: [AdobeBridge] => [X]
  105. HKU\S-1-5-21-4212444594-818129302-1918108688-1000\...\Run: [Steam] => G:\Steam\steam.exe [3019552 2017-04-25] (Valve Corporation)
  106. HKU\S-1-5-21-4212444594-818129302-1918108688-1000\...\Run: [Spotify Web Helper] => C:\Users\PeterComp\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-13] (Spotify Ltd)
  107. HKU\S-1-5-21-4212444594-818129302-1918108688-1000\...\MountPoints2: {84952505-a3d7-11e6-9020-74d4358c53a3} - H:\vs_ultimate.exe
  108. AppInit_DLLs: acaptuser64.dll => C:\Windows\system32\acaptuser64.dll [119160 2008-06-12] (Adobe Systems, Inc.)
  109. AppInit_DLLs-x32: acaptuser32.dll => C:\Windows\SysWOW64\acaptuser32.dll [111992 2008-06-12] (Adobe Systems, Inc.)
  110. ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  111. ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  112. ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  113. ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  114. ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  115. ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  116. ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  117. ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  118. ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  119. ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-30] (Dropbox, Inc.)
  120. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  121. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  122. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  123. ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-30] (AVAST Software)
  124. ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
  125. ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
  126. ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis)
  127. ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  128. ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  129. ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  130. ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  131. ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  132. ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  133. ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  134. ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  135. ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  136. ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-30] (Dropbox, Inc.)
  137. Startup: C:\Users\PeterComp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird.lnk [2016-11-06]
  138. ShortcutTarget: Mozilla Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
  139.  
  140. ==================== Internet (Whitelisted) ====================
  141.  
  142. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  143.  
  144. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  145. Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 75.153.171.122
  146. Tcpip\..\Interfaces\{1B46435C-5314-4FBD-95AB-9B9BD35BC1CF}: [DhcpNameServer] 192.168.1.254 75.153.171.122
  147. Tcpip\..\Interfaces\{E0475405-03A7-4BE7-B748-9760D00F91EB}: [DhcpNameServer] 7.254.254.254
  148.  
  149. Internet Explorer:
  150. ==================
  151. HKU\S-1-5-21-4212444594-818129302-1918108688-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.youtube.com/channel/UCDsEcdYZBRdhv2dQ1vlCG9g
  152. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-04-20] (Oracle Corporation)
  153. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
  154. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
  155. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-20] (Oracle Corporation)
  156. BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
  157. BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
  158. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-20] (Oracle Corporation)
  159. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
  160. BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
  161. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
  162. BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-01-21] (Microsoft Corporation)
  163. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-20] (Oracle Corporation)
  164. BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
  165. Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated)
  166. Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-01-23] (Microsoft Corporation)
  167.  
  168. FireFox:
  169. ========
  170. FF Plugin: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\system32\npDeployJava1.dll [2017-03-31] (Oracle Corporation)
  171. FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-20] (Oracle Corporation)
  172. FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  173. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
  174. FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
  175. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems)
  176. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
  177. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
  178. FF Plugin-x32: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2017-03-31] (Oracle Corporation)
  179. FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-20] (Oracle Corporation)
  180. FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  181. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
  182. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
  183. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
  184. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
  185. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems)
  186. FF Plugin HKU\S-1-5-21-4212444594-818129302-1918108688-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PeterComp\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2017-03-08] (Unity Technologies ApS)
  187. FF Plugin HKU\S-1-5-21-4212444594-818129302-1918108688-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2017-04-05] ()
  188.  
  189. Chrome:
  190. =======
  191. CHR HomePage: Default -> hxxp://www.google.ca/
  192. CHR Session Restore: Default -> is enabled.
  193. CHR Profile: C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default [2017-05-31]
  194. CHR Extension: (Google Drive) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-20]
  195. CHR Extension: (YouTube) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-20]
  196. CHR Extension: (History 2) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cahejgbbfgmlmjgdjlibphdjeldhagkp [2016-11-20]
  197. CHR Extension: (Plex) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpniocchabmgenibceglhnfeimmdhdfm [2017-01-26]
  198. CHR Extension: (Google Docs Offline) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-20]
  199. CHR Extension: (Twitter unfollow) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmbbkpclbfmdacknjehonbfcilcfnkmb [2016-12-03]
  200. CHR Extension: (Chrome Web Store Payments) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
  201. CHR Extension: (SEO for Chrome) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\oangcciaeihlfmhppegpdceadpfaoclj [2016-11-20]
  202. CHR Extension: (Gmail) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-20]
  203. CHR Extension: (Chrome Media Router) - C:\Users\PeterComp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-16]
  204.  
  205. ==================== Services (Whitelisted) ====================
  206.  
  207. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  208.  
  209. R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1244408 2016-10-14] ()
  210. R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated)
  211. R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [4463592 2017-02-08] ()
  212. R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
  213. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
  214. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-30] (AVAST Software)
  215. S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
  216. S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-26] (Dropbox, Inc.)
  217. S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-26] (Dropbox, Inc.)
  218. R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-05-30] (Dropbox, Inc.)
  219. S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2016-11-10] (Macrovision Europe Ltd.) [File not signed]
  220. R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2016-12-20] (Ellora Assets Corp.) [File not signed]
  221. S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
  222. R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
  223. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
  224. R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21312 2017-03-30] (Microsoft Corporation)
  225. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
  226. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
  227. R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-14] () [File not signed]
  228. S4 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4884064 2015-08-11] (Acronis)
  229. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
  230. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2117128 2016-11-15] (Electronic Arts)
  231. S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2178576 2016-11-15] (Electronic Arts)
  232. R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-12-02] ()
  233. S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
  234. R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [9698296 2016-04-16] ()
  235. S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
  236. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10888944 2017-04-25] (TeamViewer GmbH)
  237. S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [872432 2016-06-23] (Tunngle.net GmbH)
  238. S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
  239. S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation)
  240. S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [128232 2017-02-08] (Microsoft Corporation)
  241. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-03-25] (Microsoft Corporation)
  242.  
  243. ===================== Drivers (Whitelisted) ======================
  244.  
  245. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  246.  
  247. S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-30] (AVAST Software)
  248. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-30] (AVAST Software)
  249. R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-30] (AVAST Software)
  250. R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-30] (AVAST Software)
  251. R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-30] (AVAST Software)
  252. R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-30] (AVAST Software)
  253. R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-05-09] ()
  254. R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [366432 2017-02-08] (Acronis International GmbH)
  255. R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [77480 2013-07-02] (Fresco Logic)
  256. R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [187320 2017-05-31] (Malwarebytes)
  257. R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [113592 2017-05-31] (Malwarebytes)
  258. R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-05-31] (Malwarebytes)
  259. R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-05-31] (Malwarebytes)
  260. R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [84256 2017-05-31] (Malwarebytes)
  261. R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
  262. R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
  263. R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23968 2015-10-01] (Saitek)
  264. R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51488 2015-10-01] (Saitek)
  265. R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [39464 2016-04-27] (Tunngle.net GmbH)
  266. R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1267552 2017-02-08] (Acronis International GmbH)
  267. R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [193376 2017-02-08] (Acronis International GmbH)
  268. S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [601432 2017-02-08] (Acronis International GmbH)
  269. R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [279392 2017-02-08] (Acronis International GmbH)
  270. S3 _hid_0738_1708; C:\Windows\System32\DRIVERS\_hid_0738_1708.sys [180928 2015-10-01] (Saitek)
  271. S3 _usb_0738_1708; C:\Windows\System32\DRIVERS\_usb_0738_1708.sys [46528 2015-10-01] (Saitek)
  272. S3 dbx; system32\DRIVERS\dbx.sys [X]
  273.  
  274. ==================== NetSvcs (Whitelisted) ===================
  275.  
  276. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  277.  
  278.  
  279. ==================== One Month Created files and folders ========
  280.  
  281. (If an entry is included in the fixlist, the file/folder will be moved.)
  282.  
  283. 2017-05-31 15:21 - 2017-05-31 15:21 - 00000000 ____D C:\FRST
  284. 2017-05-31 14:53 - 2017-05-31 14:53 - 00395160 _____ C:\Windows\Minidump\053117-11062-01.dmp
  285. 2017-05-31 14:44 - 2017-05-31 14:53 - 00113592 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
  286. 2017-05-31 14:44 - 2017-05-31 14:53 - 00084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
  287. 2017-05-31 14:44 - 2017-05-31 14:44 - 00187320 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
  288. 2017-05-31 14:43 - 2017-05-31 14:53 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  289. 2017-05-31 14:43 - 2017-05-31 14:53 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
  290. 2017-05-31 14:43 - 2017-05-31 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  291. 2017-05-31 14:43 - 2017-05-31 14:43 - 00000000 ____D C:\ProgramData\Malwarebytes
  292. 2017-05-31 14:43 - 2017-05-31 14:43 - 00000000 ____D C:\Program Files\Malwarebytes
  293. 2017-05-31 14:43 - 2017-05-09 16:37 - 00077440 _____ C:\Windows\system32\Drivers\mbae64.sys
  294. 2017-05-31 14:24 - 2017-05-31 14:24 - 00000000 ____D C:\Users\PeterComp\Desktop\Armaan
  295. 2017-05-31 13:46 - 2017-05-31 13:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  296. 2017-05-31 13:44 - 2017-05-31 13:44 - 00388568 _____ C:\Windows\Minidump\053117-11546-01.dmp
  297. 2017-05-31 04:28 - 2017-05-31 04:28 - 00388648 _____ C:\Windows\Minidump\053117-12500-01.dmp
  298. 2017-05-31 04:25 - 2017-05-31 04:25 - 00389272 _____ C:\Windows\Minidump\053117-10281-01.dmp
  299. 2017-05-31 04:21 - 2017-05-31 04:21 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  300. 2017-05-31 04:21 - 2017-05-31 04:21 - 00000342 ____H C:\Windows\Tasks\Avast Emergency Update.job
  301. 2017-05-31 04:21 - 2017-05-30 23:20 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
  302. 2017-05-31 04:18 - 2017-05-31 04:21 - 00281904 _____ C:\Windows\ntbtlog.txt
  303. 2017-05-31 04:18 - 2017-05-31 04:18 - 00409032 _____ C:\Windows\Minidump\053117-10343-01.dmp
  304. 2017-05-30 23:26 - 2017-05-30 23:26 - 00047120 _____ C:\Users\PeterComp\AppData\Roaming\itunes_ftp.dat
  305. 2017-05-30 23:25 - 2017-05-30 23:25 - 00245264 _____ C:\Users\PeterComp\AppData\Roaming\itunes_el.dat
  306. 2017-05-30 23:21 - 2017-05-30 23:21 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\AVAST Software
  307. 2017-05-30 23:21 - 2017-05-30 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
  308. 2017-05-30 23:20 - 2017-05-30 23:20 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
  309. 2017-05-30 23:20 - 2017-05-30 23:20 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
  310. 2017-05-30 23:20 - 2017-05-30 23:20 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
  311. 2017-05-30 23:20 - 2017-05-30 23:20 - 00232464 _____ C:\Users\PeterComp\AppData\Roaming\itunes_br.dat
  312. 2017-05-30 23:20 - 2017-05-30 23:20 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
  313. 2017-05-30 23:20 - 2017-05-30 23:20 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
  314. 2017-05-30 23:20 - 2017-05-30 23:20 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
  315. 2017-05-30 23:20 - 2017-05-30 23:20 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
  316. 2017-05-30 23:20 - 2017-05-30 23:20 - 00000000 ____D C:\Program Files\AVAST Software
  317. 2017-05-30 23:18 - 2017-05-30 23:20 - 00000000 ____D C:\ProgramData\AVAST Software
  318. 2017-05-30 23:17 - 2017-05-31 14:51 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\tor
  319. 2017-05-30 23:09 - 2017-05-30 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
  320. 2017-05-30 23:09 - 2017-05-30 23:09 - 00000000 ____D C:\Program Files\7-Zip
  321. 2017-05-30 22:48 - 2017-05-30 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beast Mode Night of the Werewolf
  322. 2017-05-30 22:48 - 2017-05-30 22:48 - 00000000 _____ C:\Users\Public\Desktop\Beast Mode
  323. 2017-05-30 21:34 - 2017-05-31 04:15 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Clickteam
  324. 2017-05-30 20:56 - 2017-05-30 20:56 - 00003234 _____ C:\Windows\System32\Tasks\{5FAC499B-F547-4307-858C-F3A5A66F3787}
  325. 2017-05-30 19:30 - 2017-05-30 21:32 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\solicus
  326. 2017-05-30 19:30 - 2017-05-30 19:30 - 00000000 ____D C:\Program Files (x86)\solicus
  327. 2017-05-30 03:22 - 2017-05-30 03:22 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
  328. 2017-05-29 21:00 - 2017-05-29 21:00 - 00000000 ____D C:\Users\PeterComp\Desktop\UE4AppData
  329. 2017-05-28 13:50 - 2017-05-28 13:51 - 195230341 _____ C:\Users\PeterComp\Desktop\Believable Humans (In Video Game Animation).mp4
  330. 2017-05-27 18:17 - 2017-05-27 18:17 - 00000000 ____D C:\Users\Public\Apeirogon
  331. 2017-05-27 17:15 - 2017-05-27 17:16 - 18868893 _____ C:\Bubbles.wmv
  332. 2017-05-27 14:22 - 2017-05-27 14:53 - 00000000 ____D C:\Users\PeterComp\Desktop\Source
  333. 2017-05-27 14:13 - 2017-05-27 14:20 - 00000000 ____D C:\Users\PeterComp\Desktop\OceanProjectBuild
  334. 2017-05-26 22:47 - 2017-05-26 22:47 - 00000000 ____D C:\Users\PeterComp\AppData\Local\SirenGame
  335. 2017-05-25 13:44 - 2017-05-25 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
  336. 2017-05-25 13:44 - 2017-05-25 13:44 - 00000000 ____D C:\Program Files\CPUID
  337. 2017-05-24 23:58 - 2017-05-24 23:58 - 00000000 ____D C:\Users\PeterComp\AppData\LocalLow\Spiderling Games
  338. 2017-05-24 23:34 - 2017-05-24 23:40 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Apple Computer
  339. 2017-05-24 23:34 - 2017-05-24 23:34 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  340. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Apple Computer
  341. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Apple
  342. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  343. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\ProgramData\Apple Computer
  344. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files\iTunes
  345. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files\iPod
  346. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files\Bonjour
  347. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files (x86)\Bonjour
  348. 2017-05-24 23:34 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
  349. 2017-05-24 23:33 - 2017-05-24 23:34 - 00000000 ____D C:\ProgramData\Apple
  350. 2017-05-24 23:33 - 2017-05-24 23:34 - 00000000 ____D C:\Program Files\Common Files\Apple
  351. 2017-05-23 12:21 - 2017-05-23 12:23 - 00001200 _____ C:\Users\Public\Desktop\CrotchRockets 4.15.lnk
  352. 2017-05-22 14:02 - 2017-05-22 15:02 - 00000000 ____D C:\Users\PeterComp\Desktop\Craigslist
  353. 2017-05-22 10:23 - 2017-05-31 14:53 - 00000000 ____D C:\Users\PeterComp\AppData\LocalLow\Mozilla
  354. 2017-05-21 11:46 - 2017-05-21 11:47 - 00000000 ____D C:\Users\PeterComp\Desktop\MinimapPluginClean
  355. 2017-05-16 23:31 - 2017-05-16 23:43 - 66349331 _____ C:\RadarStillBroken.wmv
  356. 2017-05-16 15:53 - 2017-05-16 15:53 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Google
  357. 2017-05-15 22:33 - 2017-05-15 22:33 - 00000000 ____D C:\Users\PeterComp\AppData\Local\.IdentityService
  358. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\3082
  359. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\2052
  360. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1055
  361. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1049
  362. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1046
  363. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1045
  364. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1042
  365. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1041
  366. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1040
  367. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1036
  368. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1031
  369. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1029
  370. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\1028
  371. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\3082
  372. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\2052
  373. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1055
  374. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1049
  375. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1046
  376. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1045
  377. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1042
  378. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1041
  379. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1040
  380. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1036
  381. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1031
  382. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1029
  383. 2017-05-15 22:28 - 2017-05-15 22:28 - 00000000 ____D C:\Windows\system32\1028
  384. 2017-05-15 22:25 - 2017-05-15 22:25 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
  385. 2017-05-15 22:25 - 2017-05-15 22:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
  386. 2017-05-15 22:18 - 2017-05-15 22:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
  387. 2017-05-15 22:18 - 2017-05-15 22:18 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
  388. 2017-05-15 22:18 - 2017-05-15 22:18 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\vstelemetry
  389. 2017-05-15 22:18 - 2017-05-15 22:18 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Visual Studio Setup
  390. 2017-05-15 22:18 - 2017-05-15 22:18 - 00000000 ____D C:\Users\PeterComp\AppData\Local\ServiceHub
  391. 2017-05-13 23:23 - 2017-05-13 23:23 - 00000000 ____D C:\Users\PeterComp\AppData\Local\id Software
  392. 2017-05-13 01:47 - 2017-05-14 02:49 - 00000000 __RHD C:\Users\PeterComp\Creative Cloud Files
  393. 2017-05-13 01:47 - 2017-05-14 02:49 - 00000000 ____D C:\ProgramData\boost_interprocess
  394. 2017-05-13 01:47 - 2017-05-13 01:47 - 00000040 ____H C:\60D9A22A5A43
  395. 2017-05-13 01:46 - 2017-05-13 01:46 - 00001221 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
  396. 2017-05-11 23:45 - 2017-05-12 00:57 - 00000000 ____D C:\Users\PeterComp\Desktop\RadarFixes
  397. 2017-05-10 18:02 - 2017-05-10 18:02 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Quixel
  398. 2017-05-10 17:59 - 2017-05-10 17:59 - 00001097 _____ C:\Users\Public\Desktop\dDo x64.lnk
  399. 2017-05-10 17:59 - 2017-05-10 17:59 - 00000000 ____D C:\ProgramData\Quixel
  400. 2017-05-10 03:09 - 2017-05-10 03:23 - 63387809 _____ C:\RadarBroken.wmv
  401. 2017-05-10 01:46 - 2017-05-10 01:56 - 58491614 _____ C:\RadarAddingEnemiesAfterRemoved.wmv
  402. 2017-05-02 17:58 - 2017-05-02 17:58 - 00000000 ____D C:\Users\PeterComp\AppData\Local\redout
  403. 2017-05-02 15:53 - 2017-05-02 15:53 - 00001174 _____ C:\Users\Public\Desktop\Silhouette 4.15.lnk
  404. 2017-05-02 03:02 - 2017-05-02 03:03 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Maxscript
  405. 2017-05-01 23:27 - 2017-05-01 23:27 - 00000000 ____D C:\Users\PeterComp\Desktop\Silhouette0.2
  406. 2017-05-01 18:53 - 2017-05-01 20:55 - 335642829 _____ C:\Fundamentals of Blueprint - Health System.wmv
  407. 2017-05-01 02:08 - 2017-05-01 02:08 - 00010344 _____ C:\Users\PeterComp\Desktop\UV2.uvw
  408.  
  409. ==================== One Month Modified files and folders ========
  410.  
  411. (If an entry is included in the fixlist, the file/folder will be moved.)
  412.  
  413. 2017-05-31 15:04 - 2016-12-06 18:37 - 00004990 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for PeterComp-PC-PeterComp PeterComp-PC
  414. 2017-05-31 15:01 - 2009-07-13 21:45 - 00032416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  415. 2017-05-31 15:01 - 2009-07-13 21:45 - 00032416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  416. 2017-05-31 15:00 - 2009-07-13 22:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
  417. 2017-05-31 15:00 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\inf
  418. 2017-05-31 14:53 - 2017-04-05 22:35 - 00000000 ____D C:\Program Files (x86)\FormatFactory
  419. 2017-05-31 14:53 - 2017-01-08 20:48 - 1725462113 _____ C:\Windows\MEMORY.DMP
  420. 2017-05-31 14:53 - 2017-01-08 20:48 - 00000000 ____D C:\Windows\Minidump
  421. 2017-05-31 14:53 - 2016-11-26 15:28 - 00000910 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
  422. 2017-05-31 14:53 - 2016-11-05 21:13 - 00000000 ____D C:\ProgramData\NVIDIA
  423. 2017-05-31 14:53 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  424. 2017-05-31 13:52 - 2016-11-26 15:28 - 00000914 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
  425. 2017-05-31 13:46 - 2016-11-26 15:28 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Dropbox
  426. 2017-05-31 13:46 - 2016-11-26 15:28 - 00000000 ____D C:\Program Files (x86)\Dropbox
  427. 2017-05-31 13:45 - 2016-11-06 20:15 - 00000000 ____D C:\Users\PeterComp\AppData\Local\CrashDumps
  428. 2017-05-31 04:35 - 2016-11-06 14:48 - 00000000 ____D C:\Program Files (x86)\FlashFXP 5
  429. 2017-05-31 02:53 - 2016-11-08 16:35 - 00000000 ____D C:\Users\PeterComp\AppData\LocalLow\uTorrent
  430. 2017-05-31 02:53 - 2016-11-08 16:33 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\uTorrent
  431. 2017-05-31 02:00 - 2016-11-05 21:40 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Adobe
  432. 2017-05-30 19:27 - 2005-01-01 01:30 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Skype
  433. 2017-05-30 17:39 - 2016-11-06 23:00 - 00000132 _____ C:\Users\PeterComp\AppData\Roaming\Adobe PNG Format CS6 Prefs
  434. 2017-05-30 00:00 - 2016-11-06 16:53 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\vlc
  435. 2017-05-29 21:01 - 2016-11-05 23:58 - 00000000 ____D C:\Users\PeterComp\AppData\Local\UnrealEngine
  436. 2017-05-29 20:32 - 2009-07-13 22:08 - 00032574 _____ C:\Windows\Tasks\SCHEDLGU.TXT
  437. 2017-05-29 12:38 - 2016-11-06 20:47 - 00000132 _____ C:\Users\PeterComp\AppData\Roaming\Adobe Targa Format CS6 Prefs
  438. 2017-05-28 13:14 - 2016-11-23 20:25 - 00000000 ____D C:\Program Files (x86)\TeamViewer
  439. 2017-05-27 16:41 - 2016-11-05 23:52 - 00000000 ____D C:\ProgramData\FLEXnet
  440. 2017-05-24 15:36 - 2016-12-22 18:54 - 00001684 _____ C:\Windows\SysWOW64\AltST.rdt
  441. 2017-05-23 22:33 - 2016-11-05 21:04 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  442. 2017-05-23 22:32 - 2016-11-05 21:12 - 00000000 ____D C:\ProgramData\Package Cache
  443. 2017-05-23 12:05 - 2016-11-21 22:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
  444. 2017-05-23 12:05 - 2016-11-06 04:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  445. 2017-05-16 14:26 - 2016-11-05 21:23 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  446. 2017-05-15 22:28 - 2017-04-03 13:24 - 00000000 ____D C:\Windows\SysWOW64\1033
  447. 2017-05-15 22:28 - 2017-04-03 13:23 - 00000000 ____D C:\Windows\system32\1033
  448. 2017-05-15 22:27 - 2017-04-03 13:23 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
  449. 2017-05-15 22:25 - 2009-07-13 22:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
  450. 2017-05-14 02:46 - 2016-11-05 18:34 - 00000000 ____D C:\Users\PeterComp
  451. 2017-05-13 02:22 - 2016-11-05 21:43 - 00000000 ____D C:\Program Files (x86)\Adobe
  452. 2017-05-13 02:19 - 2016-11-05 19:48 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Adobe
  453. 2017-05-13 01:47 - 2016-11-05 21:40 - 00000000 ____D C:\ProgramData\Adobe
  454. 2017-05-13 00:04 - 2016-11-08 18:21 - 00001456 _____ C:\Users\PeterComp\AppData\Local\Adobe Save for Web 13.0 Prefs
  455. 2017-05-11 22:45 - 2016-11-23 21:37 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Tunngle
  456. 2017-05-11 20:19 - 2017-03-13 21:44 - 00000000 ____D C:\ProgramData\Tunngle
  457. 2017-05-10 17:59 - 2016-12-25 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quixel
  458. 2017-05-09 13:08 - 2016-12-16 16:57 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  459. 2017-05-09 13:08 - 2016-12-16 16:57 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  460. 2017-05-09 13:08 - 2016-12-16 16:57 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  461. 2017-05-09 13:08 - 2016-12-16 16:57 - 00000000 ____D C:\Windows\system32\Macromed
  462. 2017-05-09 13:08 - 2016-11-05 21:43 - 00000000 ____D C:\Windows\SysWOW64\Macromed
  463. 2017-05-09 12:51 - 2017-03-09 17:44 - 00000000 ___RD C:\Program Files (x86)\Skype
  464. 2017-05-09 12:51 - 2005-01-01 01:30 - 00000000 ____D C:\ProgramData\Skype
  465. 2017-05-08 22:08 - 2016-12-05 17:02 - 00000000 ____D C:\Users\PeterComp\AppData\Roaming\Spotify
  466. 2017-05-08 22:08 - 2016-12-05 17:02 - 00000000 ____D C:\Users\PeterComp\AppData\Local\Spotify
  467. 2017-05-05 14:20 - 2017-03-28 12:46 - 00000274 _____ C:\Users\PeterComp\Desktop\CityOfBurnaby.txt
  468. 2017-05-05 14:09 - 2009-07-13 21:45 - 05090824 _____ C:\Windows\system32\FNTCACHE.DAT
  469. 2017-05-04 22:27 - 2016-11-05 21:03 - 00128264 _____ C:\Users\PeterComp\AppData\Local\GDIPFONTCACHEV1.DAT
  470. 2017-05-04 13:49 - 2017-04-09 04:44 - 00000274 _____ C:\Windows\ulead32.ini
  471. 2017-05-02 21:47 - 2017-04-03 22:41 - 00001144 _____ C:\Users\Public\Desktop\BeastMode 4.15.lnk
  472.  
  473. ==================== Files in the root of some directories =======
  474.  
  475. 2016-11-06 23:00 - 2017-05-30 17:39 - 0000132 _____ () C:\Users\PeterComp\AppData\Roaming\Adobe PNG Format CS6 Prefs
  476. 2016-11-06 20:47 - 2017-05-29 12:38 - 0000132 _____ () C:\Users\PeterComp\AppData\Roaming\Adobe Targa Format CS6 Prefs
  477. 2017-05-30 23:20 - 2017-05-30 23:20 - 0232464 _____ () C:\Users\PeterComp\AppData\Roaming\itunes_br.dat
  478. 2017-05-30 23:25 - 2017-05-30 23:25 - 0245264 _____ () C:\Users\PeterComp\AppData\Roaming\itunes_el.dat
  479. 2017-05-30 23:26 - 2017-05-30 23:26 - 0047120 _____ () C:\Users\PeterComp\AppData\Roaming\itunes_ftp.dat
  480. 2016-12-05 02:41 - 2017-05-10 16:40 - 0000025 ____H () C:\Users\PeterComp\AppData\Roaming\uninst45.log
  481. 2016-11-08 18:21 - 2017-05-13 00:04 - 0001456 _____ () C:\Users\PeterComp\AppData\Local\Adobe Save for Web 13.0 Prefs
  482. 2017-01-12 14:59 - 2017-04-26 17:43 - 0006144 _____ () C:\Users\PeterComp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  483. 2017-01-17 15:47 - 2017-01-17 15:47 - 0000292 _____ () C:\Users\PeterComp\AppData\Local\HamsterBookConverter.cfg
  484. 2016-12-05 02:41 - 2017-05-10 16:40 - 0000025 ____H () C:\Users\PeterComp\AppData\Local\uninst36.log
  485. 2016-11-05 21:04 - 2016-11-05 21:04 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  486. 2017-01-07 19:26 - 2017-01-07 19:26 - 0000016 _____ () C:\ProgramData\mntemp
  487. 2016-12-05 02:41 - 2017-05-10 16:40 - 0000025 ____H () C:\ProgramData\temp54.log
  488.  
  489. Files to move or delete:
  490. ====================
  491. C:\Users\PeterComp\{58C482E3-0C46-43EC-8EE5-C7230FFBC3D6}.dat
  492. C:\Users\PeterComp\{7FE16F2D-3565-4432-91C0-C1E96A2EB147}.dat
  493.  
  494.  
  495. Some files in TEMP:
  496. ====================
  497. 2017-05-30 23:16 - 2017-05-30 23:16 - 5169152 _____ (Puffelli ) C:\Users\PeterComp\AppData\Local\Temp\35849.exe
  498. 2016-11-05 23:50 - 2013-01-18 14:24 - 0040328 _____ (Autodesk, Inc.) C:\Users\PeterComp\AppData\Local\Temp\AcDeltree.exe
  499. 2016-12-20 15:53 - 2016-12-20 16:31 - 2016632 _____ (Flexera Software LLC) C:\Users\PeterComp\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
  500. 2016-11-28 23:08 - 2016-11-28 23:08 - 32075848 _____ (Ellora Assets Corporation ) C:\Users\PeterComp\AppData\Local\Temp\FreemakeVideoConverterFull.exe
  501. 2016-11-08 13:47 - 2016-11-08 13:47 - 17993968 _____ (Ellora Assets Corporation ) C:\Users\PeterComp\AppData\Local\Temp\FreemakeVideoDownloaderFull.exe
  502. 2017-04-20 01:37 - 2017-04-20 01:37 - 0739904 _____ (Oracle Corporation) C:\Users\PeterComp\AppData\Local\Temp\jre-8u131-windows-au.exe
  503. 2012-11-10 11:29 - 2012-11-10 11:29 - 0178760 ____R (Microsoft Corporation) C:\Users\PeterComp\AppData\Local\Temp\ose00000.exe
  504. 2017-03-09 17:44 - 2017-03-09 17:44 - 14456872 _____ (Microsoft Corporation) C:\Users\PeterComp\AppData\Local\Temp\vc_redist.x86.exe
  505. 2011-07-09 18:07 - 2011-07-09 18:07 - 0118784 _____ () C:\Users\PeterComp\AppData\Local\Temp\xmlUpdater.exe
  506.  
  507. ==================== Bamital & volsnap ======================
  508.  
  509. (There is no automatic fix for files that do not pass verification.)
  510.  
  511. C:\Windows\system32\winlogon.exe => File is digitally signed
  512. C:\Windows\system32\wininit.exe => File is digitally signed
  513. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  514. C:\Windows\explorer.exe => File is digitally signed
  515. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  516. C:\Windows\system32\svchost.exe => File is digitally signed
  517. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  518. C:\Windows\system32\services.exe => File is digitally signed
  519. C:\Windows\system32\User32.dll => File is digitally signed
  520. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  521. C:\Windows\system32\userinit.exe => File is digitally signed
  522. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  523. C:\Windows\system32\rpcss.dll => File is digitally signed
  524. C:\Windows\system32\dnsapi.dll => File is digitally signed
  525. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  526. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  527.  
  528. LastRegBack: 2017-05-23 16:00
  529.  
  530. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!