API tools faq
paste
Guest User

Untitled

a guest
Aug 11th, 2017
329
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.97 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-08-2017
  2. Ran by mike (administrator) on MIKEPC (11-08-2017 01:06:49)
  3. Running from C:\Users\mike\Downloads
  4. Loaded Profiles: mike (Available Profiles: mike)
  5. Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. () C:\Program Files (x86)\InternetOff\IOffSvc.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  16. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  17. (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\igfxCUIService.exe
  18. (Intel) C:\Program Files (x86)\Intel Driver Update Utility\DSAService.exe
  19. (Realtek) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
  20. () C:\Windows\runSW.exe
  21. () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
  22. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  23. () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
  24. (Microsoft Corporation) C:\Windows\System32\Locator.exe
  25. (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  26. (Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe
  27. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  28. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  29. (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
  30. (Hammer & Chisel, Inc.) C:\Users\mike\AppData\Local\Discord\app-0.0.297\Discord.exe
  31. (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
  32. (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
  33. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  34. (Spotify Ltd) C:\Users\mike\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  35. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  36. (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
  37. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  38. (Hammer & Chisel, Inc.) C:\Users\mike\AppData\Local\Discord\app-0.0.297\Discord.exe
  39. (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  40. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  41. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  42. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  43. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  44. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  45. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  46. (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  47. (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
  48. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
  49. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
  50. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  51. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  52. (Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
  53. () C:\Program Files\pia_manager\pia_manager.exe
  54. (hxxp://www.ruby-lang.org/) C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\bin\rubyw.exe
  55. () C:\Program Files\pia_manager\pia_manager.exe
  56. (hxxp://www.ruby-lang.org/) C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\bin\rubyw.exe
  57. (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
  58. (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
  59. (The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
  60. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  61. (The Pidgin developer community) C:\Program Files (x86)\Pidgin\pidgin.exe
  62. (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  63. (Samuel Attard) C:\Users\mike\AppData\Local\GPMDP_3\app-4.4.0\Google Play Music Desktop Player.exe
  64. (Samuel Attard) C:\Users\mike\AppData\Local\GPMDP_3\app-4.4.0\Google Play Music Desktop Player.exe
  65. (Samuel Attard) C:\Users\mike\AppData\Local\GPMDP_3\app-4.4.0\Google Play Music Desktop Player.exe
  66. (Samuel Attard) C:\Users\mike\AppData\Local\GPMDP_3\app-4.4.0\Google Play Music Desktop Player.exe
  67. (Hammer & Chisel, Inc.) C:\Users\mike\AppData\Local\Discord\app-0.0.297\Discord.exe
  68. (Microvirt Software Technology Co. Ltd.) C:\Program Files\Microvirt\MEmu\MemuService.exe
  69. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  70. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
  71. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  72. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  73. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  74. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  75. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  76. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  77. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  78. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  79. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  80. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  81. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  82. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  83. (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
  84. (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
  85. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  86. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  87. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  88. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  89. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  90. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  91.  
  92. ==================== Registry (Whitelisted) ====================
  93.  
  94. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  95.  
  96. HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
  97. HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
  98. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-03-29] (Realtek Semiconductor)
  99. HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  100. HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-25] (Logitech, Inc.)
  101. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated)
  102. HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.)
  103. HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver Update Utility\DsaTray.exe [132856 2017-05-18] (Intel)
  104. HKLM-x32\...\Run: [DriverPack Notifier] => C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe --run startup
  105. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
  106. HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [449280 2017-07-05] (Power Software Ltd)
  107. Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
  108. HKLM\...\Policies\Explorer: [NoAutorun] 1
  109. HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
  110. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-17] (Valve Corporation)
  111. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
  112. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Spotify Web Helper] => C:\Users\mike\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1560176 2017-06-11] (Spotify Ltd)
  113. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Spotify] => C:\Users\mike\AppData\Roaming\Spotify\Spotify.exe [7009904 2017-06-11] (Spotify Ltd)
  114. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9773272 2017-05-19] (Piriform Ltd)
  115. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [InternetOff] => C:\Program Files (x86)\InternetOff\InternetOff.exe [3182360 2016-05-25] ()
  116. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [5077792 2017-05-16] (Nota Inc.)
  117. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Run: [Google Play Music Desktop Player] => "C:\Users\mike\AppData\Local\GPMDP_3\update.exe" --processStart "Google Play Music Desktop Player.exe"
  118. GroupPolicy: Restriction <==== ATTENTION
  119.  
  120. ==================== Internet (Whitelisted) ====================
  121.  
  122. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  123.  
  124. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  125. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  126. Tcpip\..\Interfaces\{3521da0d-3bbd-40fc-807e-6420c00169cd}: [DhcpNameServer] 192.168.1.1
  127. Tcpip\..\Interfaces\{9d6dfcfe-c542-4222-8f9d-1c06371a7143}: [DhcpNameServer] 209.222.18.222 209.222.18.218
  128.  
  129. Internet Explorer:
  130. ==================
  131. BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
  132. BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
  133. BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
  134. BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
  135. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-23] (Oracle Corporation)
  136. BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
  137. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-23] (Oracle Corporation)
  138. BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
  139. Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
  140. Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
  141.  
  142. FireFox:
  143. ========
  144. FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
  145. FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2017-06-13] [not signed]
  146. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-10] ( Microsoft Corporation)
  147. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
  148. FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-23] (Oracle Corporation)
  149. FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-23] (Oracle Corporation)
  150. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
  151. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
  152. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
  153. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-11] (Google Inc.)
  154. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-11] (Google Inc.)
  155. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
  156.  
  157. Chrome:
  158. =======
  159. CHR Profile: C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default [2017-08-11]
  160. CHR Extension: (Google Slides) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-10]
  161. CHR Extension: (DocHub - Edit and Sign PDF Documents) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\adgncicbhbjfpijkdmbijninnhnmiblj [2017-06-10]
  162. CHR Extension: (Google Docs) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-10]
  163. CHR Extension: (Google Drive) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-10]
  164. CHR Extension: (YouTube) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-10]
  165. CHR Extension: (uBlock Origin) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-07-25]
  166. CHR Extension: (Tampermonkey) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-07-09]
  167. CHR Extension: (imgur Extension by Metronomik) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao [2017-06-12]
  168. CHR Extension: (Google Play Music) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2017-08-08]
  169. CHR Extension: (Google Sheets) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-10]
  170. CHR Extension: (PDFescape Free PDF Editor) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdefoklganepljiopdnglodohlgfikkl [2017-06-10]
  171. CHR Extension: (Google Docs Offline) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-10]
  172. CHR Extension: (Pixlr Editor) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmaknaampgiegkcjlimdiidlhopknpk [2017-06-10]
  173. CHR Extension: (SoundCloud Downloader Free) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\libedajeiljdoodmokbppgapcfbignci [2017-08-08]
  174. CHR Extension: (MDB, ACCDB Viewer and Reader) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcfgopgpdlpcphkcijidlencdankpgbc [2017-06-10]
  175. CHR Extension: (Chrome Web Store Payments) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-10]
  176. CHR Extension: (Checker Plus for Gmail™) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-09]
  177. CHR Extension: (Gmail) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-10]
  178. CHR Extension: (Chrome Media Router) - C:\Users\mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-11]
  179.  
  180. ==================== Services (Whitelisted) ====================
  181.  
  182. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  183.  
  184. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
  185. S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-06-13] ()
  186. R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2017-07-06] () [File not signed]
  187. R2 DSAService; C:\Program Files (x86)\Intel Driver Update Utility\DSAService.exe [21240 2017-05-18] (Intel)
  188. S3 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [824592 2017-03-07] ()
  189. R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\igfxCUIService.exe [324608 2017-05-30] (Intel Corporation)
  190. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
  191. R2 InternetOffService; C:\Program Files (x86)\InternetOff\IOffSvc.exe [1634072 2016-05-25] ()
  192. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)
  193. R2 MEmusvc; C:\Program Files\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.)
  194. R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)
  195. S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)
  196. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
  197. R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation)
  198. R2 RealtekWlanU; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek)
  199. S2 RTLDHCPService; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek)
  200. R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
  201. S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-18] (Microsoft Corporation)
  202. S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
  203. R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [157456 2017-03-07] ()
  204. S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [824592 2017-03-07] ()
  205. S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
  206. S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
  207.  
  208. ===================== Drivers (Whitelisted) ======================
  209.  
  210. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  211.  
  212. S3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\igdkmd64.sys [11066320 2017-05-30] (Intel Corporation)
  213. S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [58792 2017-03-05] (Visicom Media Inc.)
  214. S3 mcaudrv_simple; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [35960 2014-12-28] (Visicom Media Inc.)
  215. R2 memudrv; C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
  216. R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_2386fda73b467ac8\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation)
  217. S3 NvnUsbAudio; C:\WINDOWS\system32\DRIVERS\nvnusbaudio.sys [54000 2015-06-10] (Novation DMS Ltd.)
  218. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation)
  219. R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
  220. R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-07-26] (NVIDIA Corporation)
  221. R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-18] (Realtek )
  222. R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [6359040 2016-12-22] (Realtek Semiconductor Corporation )
  223. S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
  224. S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
  225. S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
  226. S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
  227. S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
  228.  
  229. ==================== NetSvcs (Whitelisted) ===================
  230.  
  231. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  232.  
  233.  
  234. ==================== One Month Created files and folders ========
  235.  
  236. (If an entry is included in the fixlist, the file/folder will be moved.)
  237.  
  238. 2017-08-11 01:06 - 2017-08-11 01:07 - 000022040 _____ C:\Users\mike\Downloads\FRST.txt
  239. 2017-08-11 01:06 - 2017-08-11 01:06 - 002381824 _____ (Farbar) C:\Users\mike\Downloads\FRST64.exe
  240. 2017-08-11 01:06 - 2017-08-11 01:06 - 000000000 ____D C:\FRST
  241. 2017-08-11 00:07 - 2017-08-11 00:09 - 000000000 ____D C:\Users\mike\AppData\Roaming\brave
  242. 2017-08-11 00:07 - 2017-08-11 00:07 - 000002234 _____ C:\Users\mike\Desktop\Brave.lnk
  243. 2017-08-11 00:07 - 2017-08-11 00:07 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave Software
  244. 2017-08-11 00:06 - 2017-08-11 00:07 - 000000000 ____D C:\Users\mike\AppData\Local\brave
  245. 2017-08-11 00:04 - 2017-08-11 00:04 - 118086632 _____ (Brave Software) C:\Users\mike\Downloads\BraveSetup-x64.exe
  246. 2017-08-09 01:18 - 2017-08-09 01:18 - 000000000 ____D C:\Users\mike\Downloads\MEmu Download
  247. 2017-08-09 01:18 - 2017-08-09 01:18 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEmu
  248. 2017-08-09 01:18 - 2017-08-09 01:18 - 000000000 ____D C:\Users\mike\.MemuHyperv
  249. 2017-08-09 01:17 - 2017-08-09 01:17 - 000000000 ____D C:\Users\mike\.android
  250. 2017-08-09 01:17 - 2017-08-09 01:17 - 000000000 ____D C:\Program Files\Microvirt
  251. 2017-08-09 01:06 - 2017-08-09 01:07 - 350196392 _____ (Microvirt Software Technology Co. Ltd.) C:\Users\mike\Downloads\Memu-Setup.exe
  252. 2017-08-08 20:25 - 2017-08-08 20:25 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
  253. 2017-08-08 01:11 - 2017-08-08 01:11 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
  254. 2017-08-08 01:10 - 2017-08-08 01:44 - 000000000 ____D C:\Users\mike\Downloads\Sound Cloud
  255. 2017-08-07 20:00 - 2017-08-07 20:01 - 000000000 ____D C:\Users\mike\AppData\Roaming\Google Play Music Desktop Player
  256. 2017-08-07 20:00 - 2017-08-07 20:00 - 057574312 _____ (Samuel Attard) C:\Users\mike\Downloads\Google.Play.Music.Desktop.Player.Setup.exe
  257. 2017-08-07 20:00 - 2017-08-07 20:00 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samuel Attard
  258. 2017-08-07 20:00 - 2017-08-07 20:00 - 000000000 ____D C:\Users\mike\AppData\Local\GPMDP_3
  259. 2017-08-06 01:25 - 2017-08-06 01:25 - 004204032 _____ (crosire) C:\Users\mike\Downloads\ReShade_Setup_3.0.8.exe
  260. 2017-08-01 18:52 - 2017-08-01 18:52 - 000000000 ____D C:\Users\mike\AppData\Roaming\Steam
  261. 2017-08-01 18:52 - 2017-08-01 18:52 - 000000000 ____D C:\Users\mike\AppData\Roaming\2K Sports
  262. 2017-08-01 18:51 - 2017-08-01 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NBA 2K16
  263. 2017-08-01 18:37 - 2017-08-01 18:51 - 000000000 ____D C:\Program Files (x86)\NBA 2K16
  264. 2017-08-01 17:48 - 2017-08-01 17:48 - 000000000 ____D C:\Users\mike\AppData\Roaming\PowerISO
  265. 2017-08-01 17:48 - 2017-08-01 17:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
  266. 2017-08-01 17:48 - 2017-08-01 17:48 - 000000000 ____D C:\Program Files\PowerISO
  267. 2017-08-01 17:48 - 2017-07-05 18:12 - 000128736 _____ (Power Software Ltd) C:\WINDOWS\system32\Drivers\scdemu.sys
  268. 2017-08-01 17:47 - 2017-08-01 17:47 - 004001480 _____ (Power Software Ltd) C:\Users\mike\Downloads\PowerISO6-x64.exe
  269. 2017-08-01 14:59 - 2017-08-01 14:59 - 000000000 ____D C:\WINDOWS\LastGood
  270. 2017-07-30 18:32 - 2017-07-30 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
  271. 2017-07-30 18:32 - 2017-07-30 18:32 - 000000000 ____D C:\Program Files (x86)\MacroRecorder
  272. 2017-07-30 18:31 - 2017-07-30 18:31 - 001501872 _____ (Jitbit Software ) C:\Users\mike\Downloads\MacroRecorderSetup.exe
  273. 2017-07-30 18:09 - 2017-07-30 18:09 - 000274432 _____ C:\Users\mike\Downloads\launchpad-mk2-updater.exe
  274. 2017-07-30 18:08 - 2017-07-30 18:08 - 000420644 _____ (Novation DMS Ltd. ) C:\Users\mike\Downloads\novation-usb-driver-2.7.exe
  275. 2017-07-30 18:08 - 2017-07-30 18:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novation
  276. 2017-07-30 18:08 - 2017-07-30 18:08 - 000000000 ____D C:\Program Files\Novation
  277. 2017-07-30 18:08 - 2015-06-10 09:59 - 000022256 _____ (Novation DMS Ltd.) C:\WINDOWS\system32\nvnusbaudio_coinst.dll
  278. 2017-07-30 18:08 - 2015-06-10 09:58 - 000054000 _____ (Novation DMS Ltd.) C:\WINDOWS\system32\Drivers\nvnusbaudio.sys
  279. 2017-07-30 17:44 - 2017-07-30 17:51 - 000000000 ____D C:\Users\mike\Documents\Ableton
  280. 2017-07-30 17:44 - 2017-07-30 17:44 - 000000398 __RSH C:\ProgramData\ntuser.pol
  281. 2017-07-30 17:43 - 2017-07-30 17:54 - 000000000 ____D C:\Users\mike\AppData\Roaming\Ableton
  282. 2017-07-30 17:43 - 2017-07-30 17:43 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software
  283. 2017-07-30 17:41 - 2017-07-30 18:13 - 000000000 ____D C:\ProgramData\Ableton
  284. 2017-07-30 17:41 - 2017-07-30 17:41 - 000000861 _____ C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Suite.lnk
  285. 2017-07-30 17:39 - 2017-07-30 17:39 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  286. 2017-07-30 17:39 - 2017-07-30 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  287. 2017-07-30 17:01 - 2017-07-30 17:39 - 000000000 ____D C:\Users\mike\Downloads\Ableton live Suite v9.5 WiN x86 x64-d33p57a7u5
  288. 2017-07-29 13:48 - 2017-07-29 13:49 - 000000000 ____D C:\Users\mike\AppData\Local\NVIDIA
  289. 2017-07-26 15:26 - 2017-08-02 19:40 - 000000024 _____ C:\Users\mike\notes.rq
  290. 2017-07-26 15:26 - 2017-07-26 15:26 - 000000000 ____D C:\Users\mike\.runiqueprefs
  291. 2017-07-26 14:24 - 2017-07-26 15:09 - 000000000 ____D C:\Users\mike\AppData\Roaming\runique2
  292. 2017-07-26 14:24 - 2017-07-26 14:26 - 000000000 ____D C:\Users\mike\runique_v2
  293. 2017-07-26 14:24 - 2017-07-26 14:24 - 001224997 _____ C:\Users\mike\Downloads\Runique.jar
  294. 2017-07-26 14:24 - 2017-07-26 14:24 - 000000000 ____D C:\Users\mike\AppData\Roaming\LSS
  295. 2017-07-25 18:41 - 2017-08-01 14:51 - 000000022 _____ C:\WINDOWS\S.dirmngr
  296. 2017-07-25 12:56 - 2017-07-25 12:56 - 000000000 ____D C:\Users\mike\AppData\Roaming\Gyazo
  297. 2017-07-25 12:55 - 2017-07-25 19:44 - 000000000 ____D C:\Program Files (x86)\Gyazo
  298. 2017-07-25 12:55 - 2017-07-25 12:55 - 013888456 _____ (Nota Inc. ) C:\Users\mike\Downloads\Gyazo-3.3.2.exe
  299. 2017-07-25 12:55 - 2017-07-25 12:55 - 000003504 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily
  300. 2017-07-25 12:55 - 2017-07-25 12:55 - 000003368 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine
  301. 2017-07-25 12:55 - 2017-07-25 12:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
  302. 2017-07-24 20:11 - 2017-07-24 20:11 - 000000000 ____D C:\Users\mike\AppData\Roaming\.kde
  303. 2017-07-24 20:11 - 2017-07-24 20:11 - 000000000 ____D C:\Users\mike\AppData\Local\GNU
  304. 2017-07-24 20:10 - 2017-07-25 17:34 - 000000000 ____D C:\Users\mike\AppData\Roaming\gnupg
  305. 2017-07-24 20:10 - 2017-07-24 20:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win
  306. 2017-07-24 20:10 - 2017-07-24 20:10 - 000000000 ____D C:\ProgramData\GNU
  307. 2017-07-24 20:10 - 2017-07-24 20:10 - 000000000 ____D C:\Program Files (x86)\GNU
  308. 2017-07-24 20:09 - 2017-07-24 20:09 - 025677520 _____ (g10 Code GmbH) C:\Users\mike\Downloads\gpg4win-2.3.4.exe
  309. 2017-07-24 20:09 - 2017-07-24 20:09 - 006472887 _____ C:\Users\mike\Downloads\gnupg-2.1.21.tar.bz2
  310. 2017-07-24 00:56 - 2017-07-24 00:56 - 007140873 _____ C:\Users\mike\Downloads\pidgin-otr-4.0.2.exe
  311. 2017-07-24 00:56 - 2017-07-24 00:56 - 000000000 ____D C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\pidgin-otr
  312. 2017-07-24 00:56 - 2017-07-24 00:56 - 000000000 ____D C:\Program Files (x86)\pidgin-otr
  313. 2017-07-24 00:45 - 2017-07-24 00:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTK2 Runtime
  314. 2017-07-24 00:45 - 2017-07-24 00:45 - 000000000 ____D C:\Program Files (x86)\GTK2-Runtime
  315. 2017-07-24 00:44 - 2017-07-24 00:45 - 007944501 _____ C:\Users\mike\Downloads\gtk2-runtime-2.24.10-2012-10-10-ash.exe
  316. 2017-07-24 00:44 - 2017-07-24 00:44 - 000120206 _____ C:\Users\mike\Downloads\gtk2_prefs-0.4.1.bin-gtk2.10-win32 (1).zip
  317. 2017-07-24 00:43 - 2017-08-08 13:05 - 000000000 ____D C:\Users\mike\AppData\Roaming\.purple
  318. 2017-07-24 00:43 - 2017-07-24 00:43 - 000120206 _____ C:\Users\mike\Downloads\gtk2_prefs-0.4.1.bin-gtk2.10-win32.zip
  319. 2017-07-24 00:43 - 2017-07-24 00:43 - 000000000 ____D C:\Users\mike\Downloads\gtk2_prefs-0.4.1.bin-gtk2.10-win32
  320. 2017-07-24 00:42 - 2017-07-24 00:42 - 000001060 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
  321. 2017-07-24 00:41 - 2017-07-24 00:56 - 000000000 ____D C:\Program Files (x86)\Pidgin
  322. 2017-07-24 00:41 - 2017-07-24 00:41 - 008807144 _____ C:\Users\mike\Downloads\pidgin-2.12.0.exe
  323. 2017-07-23 18:14 - 2017-07-23 18:14 - 000037137 _____ C:\Users\mike\Downloads\my-icons-collection.zip
  324. 2017-07-23 18:02 - 2017-07-23 18:02 - 000127873 _____ C:\Users\mike\Downloads\helvetica-neue-59751cee8ad86.ttf
  325. 2017-07-23 17:59 - 2017-07-23 17:59 - 018760159 _____ C:\Users\mike\Downloads\momentum-wallpapers.zip
  326. 2017-07-23 17:56 - 2017-07-23 17:56 - 000008063 _____ C:\Users\mike\Downloads\de-valencia.zip
  327. 2017-07-23 17:39 - 2017-06-27 16:27 - 000135616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
  328. 2017-07-23 17:38 - 2017-07-23 17:39 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
  329. 2017-07-23 17:36 - 2017-07-26 13:09 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
  330. 2017-07-23 17:36 - 2017-07-26 13:09 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
  331. 2017-07-23 17:36 - 2017-06-27 18:39 - 040239736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
  332. 2017-07-23 17:36 - 2017-06-27 18:39 - 035838912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
  333. 2017-07-23 17:36 - 2017-06-27 18:39 - 035314296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
  334. 2017-07-23 17:36 - 2017-06-27 18:39 - 028953536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
  335. 2017-07-23 17:36 - 2017-06-27 18:39 - 013559376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
  336. 2017-07-23 17:36 - 2017-06-27 18:39 - 012337296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
  337. 2017-07-23 17:36 - 2017-06-27 18:39 - 012132272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
  338. 2017-07-23 17:36 - 2017-06-27 18:39 - 011501776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
  339. 2017-07-23 17:36 - 2017-06-27 18:39 - 010381664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
  340. 2017-07-23 17:36 - 2017-06-27 18:39 - 009982456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
  341. 2017-07-23 17:36 - 2017-06-27 18:39 - 004163008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
  342. 2017-07-23 17:36 - 2017-06-27 18:39 - 003595384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
  343. 2017-07-23 17:36 - 2017-06-27 18:39 - 001988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438476.dll
  344. 2017-07-23 17:36 - 2017-06-27 18:39 - 001597888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438476.dll
  345. 2017-07-23 17:36 - 2017-06-27 18:39 - 001278528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
  346. 2017-07-23 17:36 - 2017-06-27 18:39 - 001276992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
  347. 2017-07-23 17:36 - 2017-06-27 18:39 - 001067128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
  348. 2017-07-23 17:36 - 2017-06-27 18:39 - 001004664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
  349. 2017-07-23 17:36 - 2017-06-27 18:39 - 000996760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
  350. 2017-07-23 17:36 - 2017-06-27 18:39 - 000995224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
  351. 2017-07-23 17:36 - 2017-06-27 18:39 - 000972736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
  352. 2017-07-23 17:36 - 2017-06-27 18:39 - 000924096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
  353. 2017-07-23 17:36 - 2017-06-27 18:39 - 000781728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
  354. 2017-07-23 17:36 - 2017-06-27 18:39 - 000725112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
  355. 2017-07-23 17:36 - 2017-06-27 18:39 - 000689808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
  356. 2017-07-23 17:36 - 2017-06-27 18:39 - 000618744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
  357. 2017-07-23 17:36 - 2017-06-27 18:39 - 000617416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
  358. 2017-07-23 17:36 - 2017-06-27 18:39 - 000609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
  359. 2017-07-23 17:36 - 2017-06-27 18:39 - 000584128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
  360. 2017-07-23 17:36 - 2017-06-27 18:39 - 000578056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
  361. 2017-07-23 17:36 - 2017-06-27 18:39 - 000499320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
  362. 2017-07-23 17:36 - 2017-06-27 18:39 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
  363. 2017-07-23 17:36 - 2017-06-27 18:39 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json
  364. 2017-07-23 17:32 - 2017-07-23 17:34 - 454490136 _____ (NVIDIA Corporation) C:\Users\mike\Downloads\384.76-desktop-win10-64bit-international-whql.exe
  365. 2017-07-23 17:30 - 2017-07-23 17:30 - 000738880 _____ (Oracle Corporation) C:\Users\mike\Downloads\JavaSetup8u141.exe
  366. 2017-07-22 19:25 - 2017-07-22 19:25 - 000000000 ____D C:\Users\mike\AppData\Roaming\Tenorshare
  367. 2017-07-22 19:20 - 2017-07-25 18:39 - 000000000 ____D C:\Program Files (x86)\ReiBoot
  368. 2017-07-22 19:19 - 2017-07-22 19:19 - 010097208 _____ C:\Users\mike\Downloads\reiboot.exe
  369. 2017-07-22 15:48 - 2017-07-22 17:10 - 000000000 ____D C:\Users\mike\Downloads\NBA.2K16-CODEX
  370. 2017-07-22 15:22 - 2017-07-22 15:22 - 000000000 ____D C:\Users\mike\AppData\Roaming\Apple Computer
  371. 2017-07-22 15:22 - 2017-07-22 15:22 - 000000000 ____D C:\Users\mike\AppData\Local\Apple Computer
  372. 2017-07-22 15:22 - 2017-07-22 15:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  373. 2017-07-22 15:21 - 2017-07-22 15:22 - 000000000 ____D C:\Program Files\iTunes
  374. 2017-07-22 15:21 - 2017-07-22 15:21 - 000000000 ____D C:\ProgramData\Apple Computer
  375. 2017-07-22 15:21 - 2017-07-22 15:21 - 000000000 ____D C:\Program Files\iPod
  376. 2017-07-22 15:19 - 2017-07-22 15:19 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  377. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
  378. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\Users\mike\AppData\Local\Apple
  379. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\Program Files\Common Files\Apple
  380. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\Program Files\Bonjour
  381. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\Program Files (x86)\Bonjour
  382. 2017-07-22 15:19 - 2017-07-22 15:19 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
  383. 2017-07-22 15:18 - 2017-07-22 15:19 - 000000000 ____D C:\ProgramData\Apple
  384. 2017-07-22 15:16 - 2017-07-22 15:18 - 261024072 _____ (Apple Inc.) C:\Users\mike\Downloads\iTunes64Setup.exe
  385. 2017-07-17 19:49 - 2017-07-17 19:49 - 000000000 ____D C:\Users\mike\AppData\Local\Visicom Media
  386. 2017-07-17 19:48 - 2017-07-25 18:40 - 000000000 ____D C:\Program Files (x86)\ManyCam
  387. 2017-07-17 19:47 - 2017-07-17 19:47 - 000606120 _____ (Visicom Media inc.) C:\Users\mike\Downloads\ManyCamWebInstaller.exe
  388.  
  389. ==================== One Month Modified files and folders ========
  390.  
  391. (If an entry is included in the fixlist, the file/folder will be moved.)
  392.  
  393. 2017-08-11 01:00 - 2017-06-11 09:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
  394. 2017-08-11 00:13 - 2017-06-10 19:03 - 000000000 ____D C:\Users\mike\AppData\Local\ClassicShell
  395. 2017-08-11 00:11 - 2017-06-11 17:16 - 000000000 ____D C:\Users\mike\AppData\Local\ElevatedDiagnostics
  396. 2017-08-11 00:10 - 2017-06-11 09:50 - 000000000 ____D C:\Program Files (x86)\Steam
  397. 2017-08-11 00:08 - 2017-06-11 20:04 - 000000000 ____D C:\Program Files (x86)\VulkanRT
  398. 2017-08-11 00:08 - 2017-06-10 19:02 - 000000000 ____D C:\Program Files (x86)\Intel
  399. 2017-08-11 00:08 - 2017-06-10 19:02 - 000000000 ____D C:\Intel
  400. 2017-08-11 00:07 - 2017-06-13 12:49 - 000000000 ____D C:\Users\mike\AppData\Local\SquirrelTemp
  401. 2017-08-10 23:52 - 2017-06-19 18:53 - 000000000 ____D C:\Users\mike\AppData\Roaming\Electrum
  402. 2017-08-10 23:44 - 2017-07-05 00:05 - 000000000 ____D C:\Users\mike\AppData\Local\Adobe
  403. 2017-08-10 23:44 - 2017-06-12 14:38 - 000000000 ____D C:\ProgramData\NVIDIA
  404. 2017-08-09 02:12 - 2017-06-16 14:06 - 000000000 ____D C:\Users\mike\Desktop\tools
  405. 2017-08-09 01:18 - 2017-06-11 09:30 - 000000000 ____D C:\Users\mike
  406. 2017-08-08 20:25 - 2017-06-13 12:50 - 000000000 ____D C:\Users\mike\AppData\Roaming\discord
  407. 2017-08-08 20:24 - 2017-06-13 12:49 - 000000000 ____D C:\Users\mike\AppData\Local\Discord
  408. 2017-08-07 18:18 - 2017-06-11 09:50 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  409. 2017-08-06 17:16 - 2017-06-10 20:49 - 000000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
  410. 2017-08-03 19:31 - 2017-06-13 09:42 - 000000000 ____D C:\Users\mike\AppData\Local\NVIDIA Corporation
  411. 2017-08-02 00:42 - 2017-06-16 14:06 - 000000000 ____D C:\Users\mike\Desktop\games
  412. 2017-08-01 15:02 - 2017-06-11 09:36 - 001265816 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  413. 2017-08-01 15:01 - 2017-03-18 17:01 - 000000000 ____D C:\WINDOWS\INF
  414. 2017-08-01 14:59 - 2017-06-12 14:40 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  415. 2017-08-01 14:59 - 2017-06-12 14:40 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  416. 2017-08-01 14:59 - 2017-06-12 14:40 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  417. 2017-08-01 14:59 - 2017-06-12 14:39 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  418. 2017-08-01 14:59 - 2017-06-12 14:39 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  419. 2017-08-01 14:59 - 2017-06-12 14:39 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  420. 2017-08-01 14:59 - 2017-06-12 14:39 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  421. 2017-08-01 14:59 - 2017-06-12 14:39 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
  422. 2017-08-01 14:59 - 2017-06-12 14:34 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
  423. 2017-08-01 14:59 - 2017-06-12 14:29 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
  424. 2017-08-01 14:59 - 2017-06-11 20:40 - 000000000 ____D C:\Program Files\NVIDIA Corporation
  425. 2017-08-01 14:51 - 2017-06-11 09:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
  426. 2017-08-01 14:47 - 2017-06-26 16:36 - 000000000 ____D C:\Users\mike\AppData\Roaming\qBittorrent
  427. 2017-07-30 17:43 - 2017-06-11 09:51 - 000000000 ____D C:\ProgramData\Package Cache
  428. 2017-07-30 17:43 - 2013-08-22 11:36 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
  429. 2017-07-30 17:39 - 2017-06-11 09:50 - 000000000 ____D C:\Program Files\WinRAR
  430. 2017-07-29 14:48 - 2017-06-13 10:12 - 000000000 ____D C:\Users\mike\AppData\Roaming\.minecraft
  431. 2017-07-26 13:09 - 2017-06-12 14:40 - 001922496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
  432. 2017-07-26 13:09 - 2017-06-12 14:40 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
  433. 2017-07-26 13:09 - 2017-06-12 14:40 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
  434. 2017-07-26 13:09 - 2017-06-12 14:40 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
  435. 2017-07-26 13:09 - 2017-06-12 14:40 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
  436. 2017-07-26 13:09 - 2017-06-12 14:37 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
  437. 2017-07-26 13:09 - 2017-06-12 14:37 - 000048064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
  438. 2017-07-26 09:40 - 2017-06-12 14:39 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
  439. 2017-07-26 09:36 - 2017-06-12 14:38 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
  440. 2017-07-25 18:42 - 2017-06-11 09:26 - 000221848 _____ C:\WINDOWS\system32\FNTCACHE.DAT
  441. 2017-07-25 18:41 - 2017-03-18 07:40 - 000524288 _____ C:\WINDOWS\system32\config\BBI
  442. 2017-07-23 17:39 - 2017-06-12 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  443. 2017-07-23 17:31 - 2017-06-11 09:48 - 000000000 ____D C:\ProgramData\Oracle
  444. 2017-07-23 17:31 - 2017-06-11 09:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  445. 2017-07-23 17:31 - 2017-06-11 09:48 - 000000000 ____D C:\Program Files (x86)\Java
  446. 2017-07-23 17:30 - 2017-06-11 09:48 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
  447. 2017-07-22 14:11 - 2017-06-10 18:57 - 000000000 ____D C:\Users\mike\AppData\Roaming\Skype
  448. 2017-07-17 19:12 - 2017-07-05 00:05 - 000000000 ____D C:\Users\mike\AppData\Roaming\InternetOff
  449. 2017-07-17 18:59 - 2017-03-18 17:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
  450.  
  451. ==================== Files in the root of some directories =======
  452.  
  453. 2017-07-11 18:25 - 2017-07-11 18:25 - 000001456 _____ () C:\Users\mike\AppData\Local\Adobe Save for Web 13.0 Prefs
  454. 2017-06-10 21:37 - 2017-06-10 21:37 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
  455.  
  456. ==================== Bamital & volsnap ======================
  457.  
  458. (There is no automatic fix for files that do not pass verification.)
  459.  
  460. C:\WINDOWS\system32\winlogon.exe => File is digitally signed
  461. C:\WINDOWS\system32\wininit.exe => File is digitally signed
  462. C:\WINDOWS\explorer.exe => File is digitally signed
  463. C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
  464. C:\WINDOWS\system32\svchost.exe => File is digitally signed
  465. C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
  466. C:\WINDOWS\system32\services.exe => File is digitally signed
  467. C:\WINDOWS\system32\User32.dll => File is digitally signed
  468. C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
  469. C:\WINDOWS\system32\userinit.exe => File is digitally signed
  470. C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
  471. C:\WINDOWS\system32\rpcss.dll => File is digitally signed
  472. C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
  473. C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
  474. C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
  475.  
  476. LastRegBack: 2017-07-31 11:20
  477.  
  478. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!