Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus and I don't know how to get it off Need Help!


  • This topic is locked This topic is locked
19 replies to this topic

#1 cameronreiff

cameronreiff

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 06 December 2017 - 12:19 AM

I was trying to download some porn, because i am an idiot. I clicked something and now i have a virus on my computer that is not allowing me to start any window processes. I think the virus is called sieudtnsvc, when i try to end the process on task manager i am denied access. I tried looking up a way to get it off but there was no information on this particular virus. I tried using malwarebytes, avast, and roguekiller none of those seemed to work. All i want to do is just enjoy playing my pc but i had to be stupid and try to download some porn. This is a serious post so dont think im trolling, i really need help on how to get this virus off of my computer. There is also this think named ighxmtc that pops up in task manager. there is also a thing called IAStorDataSvc (32 bit). please help me get this off of my computer i really need some help. 



BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 06 December 2017 - 07:53 AM

Hi cameronreiff :)

My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state.
  • As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens
  • As long as I'm assisting you on BleepingComputer, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you
  • The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system
  • If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry!
  • If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off
  • Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced
  • I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against BleepingComputer's rules
  • In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process
  • I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely gone
    This being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread
This being said, it's time to clean-up some malware, so let's get started, shall we? :)

Follow the instructions in the thread below. Make sure to download the MBAR version linked in it. Let me know if you're not able to launch it and run a scan.

https://forums.malwarebytes.com/topic/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes/

If you manage to run a scan, delete everything it finds, and then copy/paste the content of the mbar-log-DATE-(TIME).txt log that is located in the MBAR folder here after.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 06 December 2017 - 02:53 PM

Malwarebytes Anti-Rootkit BETA 1.10.3.1001

www.malwarebytes.org
 
Database version:
  main:    v2017.12.06.11
  rootkit: v2017.10.14.01
 
Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.18838
Cam :: CAMERON [administrator]
 
12/6/2017 11:07:20 AM
mbar-log-2017-12-06 (11-07-20).txt
 
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 198899
Time elapsed: 10 minute(s), 2 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 2
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\PrAmNP (Adware.Tuto4PC) -> Delete on reboot. [f172a97d8c1efd39f38f3f81c14009f7]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDISKMGR (Rootkit.Agent) -> Delete on reboot. [f073db4baa0057df7304fc4ce21e9d63]
 
Registry Values Detected: 1
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDISKMGR|ImagePath (Rootkit.Agent) -> Data: system32\drivers\wadgjn.sys -> Delete on reboot. [f073db4baa0057df7304fc4ce21e9d63]
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 1
c:\users\cam\appdata\local\igfxmtc (Trojan.SmartService) -> Delete on reboot. [4320a87e7139c472a1d509ee0bf72ed2]
 
Files Detected: 1
c:\users\cam\appdata\local\igfxmtc\igfxmtc.exe (Trojan.SmartService) -> Delete on reboot. [4320a87e7139c472a1d509ee0bf72ed2]
 
Physical Sectors Detected: 0
(No malicious items detected)
 
(end)
So i did the scan, and this is what was in the mbar log. I didn't know how to attach it so i just copied and pasted it in the reply. I hope this is what you were looking for. Thank you helping me with this problem that i have.


#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 06 December 2017 - 07:20 PM

Now, are you able to install and run a scan with Malwarebytes?

j1Bynr2.pngMalwarebytes - Clean Mode
  • Download and install the free version of Malwarebytes
    Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  • Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  • Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  • Let the scan run, the time required to complete the scan depends of your system and computer specs
  • Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
    • If it asks you to restart your computer to complete the removal, do so
  • Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 06 December 2017 - 07:54 PM

Malwarebytes
www.malwarebytes.com
 
-Log Details-
Scan Date: 12/6/17
Scan Time: 4:49 PM
Log File: 8cfae3b0-dae8-11e7-a3c9-4ccc6a6c0260.json
Administrator: Yes
 
-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.3428
License: Trial
 
-System Information-
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Cameron\Cam
 
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 244046
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 2 min, 17 sec
 
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
 
-Scan Details-
Process: 0
(No malicious items detected)
 
Module: 0
(No malicious items detected)
 
Registry Key: 0
(No malicious items detected)
 
Registry Value: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Data Stream: 0
(No malicious items detected)
 
Folder: 0
(No malicious items detected)
 
File: 1
PUP.Optional.ProxyGate, C:\USERS\CAM\APPDATA\LOCAL\UNINSTALLRO.EXE, Quarantined, [922], [375420],1.0.3428
 
Physical Sector: 0
(No malicious items detected)
 
 
(end)
 
This is what it found when i did the scan. Hopefully this is helpful and thank you for helping me 


#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 06 December 2017 - 08:09 PM

Looks good :) Now, let's do a sweep with RogueKiller and AdwCleaner.

RQKuhw1.pngRogueKiller
  • Download the right version of RogueKiller for your Windows version (32 or 64-bit)
  • Once done, move the executable file to your Desktop, right-click on it and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  • Wait for the scan to complete
  • On completion, the results will be displayed
  • Check every single entry (threat found), and click on the Remove Selected button
  • On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  • This will open the report in Notepad. Copy/paste its content in your next reply
zcMPezJ.pngAdwCleaner - Fix Mode
  • Download AdwCleaner and move it to your Desktop
  • Right-click on AdwCleaner.exe and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the EULA (I accept), then click on Scan
  • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all active processes
    V7SD4El.png
  • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
  • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply
Your next reply(ies) should therefore contain:
  • Copy/pasted RogueKiller clean log
  • Copy/pasted AdwCleaner clean log

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 06 December 2017 - 09:35 PM

ogueKiller V12.11.27.0 (x64) [Dec  4 2017] (Free) by Adlice Software
 
Operating System : Windows 8.1 (6.3.9600) 64 bits version
Started in : Normal mode
User : Cam [Administrator]
Started from : C:\Users\Cam\Desktop\RogueKiller_portable64.exe
Mode : Delete -- Date : 12/06/2017 18:08:41 (Duration : 00:17:05)
 
¤¤¤ Processes : 2 ¤¤¤
[Suspicious.Path] csdvext.exe(4208) -- C:\Users\Cam\AppData\Local\csdvext\csdvext.exe[x] -> Killed [TermThr]
[Suspicious.Path] ushnomk.exe(832) -- C:\Users\Cam\AppData\Local\csdvext\ushnomk.exe[x] -> Killed [TermProc]
 
¤¤¤ Registry : 0 ¤¤¤
 
¤¤¤ Tasks : 0 ¤¤¤
 
¤¤¤ Files : 0 ¤¤¤
 
¤¤¤ WMI : 0 ¤¤¤
 
¤¤¤ Hosts File : 0 ¤¤¤
 
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST1000DM003-1SB102 +++++
--- User ---
[MBR] 0086f36f0b7bc8b257f89fc226376c3d
[BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 300 MB
1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 616448 | Size: 99 MB
2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 819200 | Size: 128 MB
3 - Basic data partition | Offset (sectors): 1081344 | Size: 953341 MB
User = LL1 ... OK
User = LL2 ... OK
 
This is the roguekiller
 
# AdwCleaner 7.0.5.0 - Logfile created on Thu Dec 07 02:30:40 2017
# Updated on 2017/29/11 by Malwarebytes 
# Running on Windows 8.1 (X64)
# Mode: clean
 
***** [ Services ] *****
 
No malicious services deleted.
 
***** [ Folders ] *****
 
No malicious folders deleted.
 
***** [ Files ] *****
 
No malicious files deleted.
 
***** [ DLL ] *****
 
No malicious DLLs cleaned.
 
***** [ WMI ] *****
 
No malicious WMI cleaned.
 
***** [ Shortcuts ] *****
 
No malicious shortcuts cleaned.
 
***** [ Tasks ] *****
 
No malicious tasks deleted.
 
***** [ Registry ] *****
 
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d}
 
 
***** [ Firefox (and derivatives) ] *****
 
No malicious Firefox entries deleted.
 
***** [ Chromium (and derivatives) ] *****
 
No malicious Chromium entries deleted.
 
*************************
 
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
 
 
 
*************************
 
C:/AdwCleaner/AdwCleaner[C0].txt - [7315 B] - [2017/11/30 23:7:10]
C:/AdwCleaner/AdwCleaner[S0].txt - [8199 B] - [2017/11/30 23:6:36]
C:/AdwCleaner/AdwCleaner[S1].txt - [1330 B] - [2017/12/7 2:30:6]
 
 
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########
 
This is the Adwcleaner log.
 


#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 07 December 2017 - 12:39 PM

Good. Now follow the instructions below.

iO3R662.pngFarbar Recovery Scan Tool (FRST) - Scan mode
Follow the instructions below to download and execute a scan on your system with FRST, and provide the logs in your next reply.
  • Download the right version of FRST for your system:
  • Move the executable (FRST.exe or FRST64.exe) on your Desktop
  • Right-click on the executable and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the disclaimer by clicking on Yes, and FRST will then do a back-up of your Registry which should take a few seconds
  • Make sure the Addition.txt box is checked
  • Click on the Scan button
    KSJwAxg.png
  • On completion, two message box will open, saying that the results were saved to FRST.txt and Addition.txt, then open two Notepad files
  • Copy and paste the content of both FRST.txt and Addition.txt in your next reply

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 08 December 2017 - 05:37 PM

Hey sry for the late response

This the FRST.txt

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-12-2017
Ran by Cam (administrator) on CAMERON (08-12-2017 14:32:18)
Running from C:\Users\Cam\Desktop
Loaded Profiles: Cam (Available Profiles: Cam)
Platform: Windows 8.1 (Update) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
() C:\Windows\System32\sieudtnsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Users\Cam\AppData\Local\csdvext\csdvext.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
(NVIDIA Corporation) C:\Users\Cam\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google) C:\Users\Cam\AppData\Local\Google\Chrome\User Data\SwReporter\24.136.200\software_reporter_tool.exe
(Google) C:\Users\Cam\AppData\Local\Google\Chrome\User Data\SwReporter\24.136.200\software_reporter_tool.exe
(Google) C:\Users\Cam\AppData\Local\Google\Chrome\User Data\SwReporter\24.136.200\software_reporter_tool.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\Install\{0DA83A77-95A4-46A6-AB63-50AA456C01ED}\63.0.3239.84_62.0.3202.94_chrome_updater.exe
(Google Inc.) C:\Windows\Temp\CR_B30FA.tmp\setup.exe
(Google Inc.) C:\Windows\Temp\CR_B30FA.tmp\setup.exe
() C:\Users\Cam\AppData\Local\csdvext\ushnomk.exe
() C:\Users\Cam\AppData\Local\csdvext\ushnomk.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-30] (AVAST Software)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [Discord] => C:\ProgramData\SquirrelMachineInstalls\Discord.exe [52553728 2017-07-01] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [ycAutoLaunch_C0A6B0C696F3F5F20201E56B3E674208] => "C:\Users\Cam\AppData\Local\yc\Application\yc.exe" /prefetch:5
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-30] (Valve Corporation)
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3098952 2017-11-28] (Electronic Arts)
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [WallpaperEngine] => C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [1299432 2017-09-20] ()
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [uTorrent] => C:\Users\Cam\AppData\Roaming\uTorrent\uTorrent.exe [2150336 2017-08-01] (BitTorrent Inc.)
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5094080 2017-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\MountPoints2: {558ae33f-773e-11e7-8262-4ccc6a6c0260} - "D:\setup.exe" 
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\MountPoints2: {558af5fa-773e-11e7-8262-4ccc6a6c0260} - "F:\setup.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNDA3100v3 Genie.lnk [2017-06-26]
ShortcutTarget: NETGEAR WNDA3100v3 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNDA3100v3\WNDA3100v3.EXE (No File)
Startup: C:\Users\Cam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-08-02]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Cam\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
Startup: C:\Users\Cam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2017-11-29]
ShortcutTarget: Twitch.lnk -> C:\Users\Cam\AppData\Roaming\Twitch\Bin\Twitch.exe (Twitch Interactive, Inc.)
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{90250267-6F4C-44A9-97C6-08142B269494}: [DhcpNameServer] 192.168.1.254
 
Internet Explorer:
==================
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131430876055170176&GUID=2BE38638-BB1B-4CDB-AD3C-76C2D7E4F8A6
SearchScopes: HKU\S-1-5-21-4187166851-96581134-3385102870-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-4187166851-96581134-3385102870-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-30] (AVAST Software)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-26] (Oracle Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2017-08-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-30] (AVAST Software)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2017-08-02] (Oracle Corporation)
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-08-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2017-08-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default [2017-12-08]
CHR Extension: (Avast SafePrice) - C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-06]
CHR Extension: (Google Docs Offline) - C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-12-04]
CHR Extension: (Avast Online Security) - C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-11-30]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-30]
CHR Extension: (Chrome Media Router) - C:\Users\Cam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-30] (AVAST Software)
U2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-30] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2017-11-10] ()
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2289856 2017-07-03] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526376 2017-10-12] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-15] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-15] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460736 2017-11-15] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123104 2017-11-28] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3002728 2017-11-28] (Electronic Arts)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-30] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-30] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-30] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-30] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-30] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-30] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-30] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-30] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-30] (AVAST Software)
R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [139384 2016-05-05] (Rivet Networks, LLC.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-08-02] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-08-02] (Disc Soft Ltd)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [29272 2016-11-04] (Intel)
R3 KillerEth; C:\Windows\system32\DRIVERS\e2xw8x64.sys [162456 2016-02-12] (Qualcomm Atheros, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-11-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50624 2017-10-10] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-06-20] (NVIDIA Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [43920 2017-05-18] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 WNDA3100v3; C:\Windows\system32\DRIVERS\WNDA3100v3.sys [2222736 2014-12-08] (MediaTek Inc.)
S3 MBAMWebProtection; \SystemRoot\system32\DRIVERS\mwac.sys [X]
S3 udiskMgr; system32\drivers\swzcgj.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2017-12-08 14:32 - 2017-12-08 14:32 - 000017393 _____ C:\Users\Cam\Desktop\FRST.txt
2017-12-08 14:31 - 2017-12-08 14:32 - 000000000 ____D C:\FRST
2017-12-08 14:30 - 2017-12-08 14:30 - 002390528 _____ (Farbar) C:\Users\Cam\Downloads\FRST64.exe
2017-12-08 14:30 - 2017-12-08 14:30 - 002390528 _____ (Farbar) C:\Users\Cam\Desktop\FRST64.exe
2017-12-06 23:33 - 2017-12-06 23:33 - 924694971 _____ C:\Windows\MEMORY.DMP
2017-12-06 23:33 - 2017-12-06 23:33 - 000414248 _____ C:\Windows\Minidump\120617-18265-01.dmp
2017-12-06 23:33 - 2017-12-06 23:33 - 000000000 ____D C:\Windows\Minidump
2017-12-06 18:33 - 2017-12-06 18:33 - 008172032 _____ (Malwarebytes) C:\Users\Cam\Downloads\AdwCleaner (1).exe
2017-12-06 18:32 - 2017-12-06 18:32 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-12-06 18:30 - 2017-12-06 18:30 - 000142136 ____N C:\Windows\system32\Drivers\sbihknru.sys
2017-12-06 18:27 - 2017-12-06 18:27 - 008172032 _____ (Malwarebytes) C:\Users\Cam\Downloads\AdwCleaner.exe
2017-12-06 18:27 - 2017-12-06 18:27 - 008172032 _____ (Malwarebytes) C:\Users\Cam\Desktop\AdwCleaner.exe
2017-12-06 18:08 - 2017-12-06 18:07 - 026851912 _____ (Adlice Software) C:\Users\Cam\Desktop\RogueKiller_portable64.exe
2017-12-06 18:07 - 2017-12-06 18:07 - 026851912 _____ (Adlice Software) C:\Users\Cam\Downloads\RogueKiller_portable64.exe
2017-12-06 16:59 - 2017-11-20 12:32 - 000545440 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-12-06 16:47 - 2017-12-06 16:48 - 083316440 _____ (Malwarebytes ) C:\Users\Cam\Downloads\mb3-setup-1878.1878-3.3.1.2183.exe
2017-12-06 11:30 - 2017-12-06 11:30 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2017-12-06 11:30 - 2017-12-06 11:30 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-12-06 11:07 - 2017-12-06 11:07 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\74B5C4F9.sys
2017-12-06 11:05 - 2017-12-06 11:05 - 014161479 _____ C:\Users\Cam\Desktop\mbar-1.10.3.1001-nr (1).exe
2017-12-06 11:04 - 2017-12-06 11:05 - 014161479 _____ C:\Users\Cam\Downloads\mbar-1.10.3.1001-nr (1).exe
2017-12-05 17:19 - 2017-12-05 17:20 - 000000000 ____D C:\Users\Cam\AppData\Local\igfxmtc
2017-12-05 15:23 - 2017-12-05 15:23 - 000380928 _____ C:\Users\Cam\Downloads\dibfrn4v.exe
2017-12-05 15:21 - 2017-12-05 15:21 - 000000690 _____ C:\Users\Cam\Desktop\Windows 10 Update Assistant (2).lnk
2017-12-05 15:06 - 2017-12-05 15:06 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\52211414.sys
2017-12-05 15:05 - 2017-12-06 11:42 - 000000000 ____D C:\Users\Cam\Desktop\mbar
2017-12-05 15:03 - 2017-12-05 15:04 - 014161479 _____ C:\Users\Cam\Downloads\mbar-1.10.3.1001-nr.exe
2017-12-05 14:47 - 2017-12-05 14:47 - 006541184 _____ (Microsoft Corporation) C:\Users\Cam\Downloads\Windows10Upgrade24074 (1).exe
2017-12-05 14:32 - 2017-12-05 14:47 - 000000702 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 Update Assistant.lnk
2017-12-05 14:32 - 2017-12-05 14:47 - 000000690 _____ C:\Users\Cam\Desktop\Windows 10 Update Assistant.lnk
2017-12-05 14:32 - 2017-12-05 14:32 - 006541184 _____ (Microsoft Corporation) C:\Users\Cam\Downloads\Windows10Upgrade24074.exe
2017-12-04 20:22 - 2017-12-04 20:22 - 000000000 ____D C:\ProgramData\Twitch
2017-12-03 19:02 - 2014-04-15 16:35 - 000028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-12-03 19:02 - 2014-04-15 16:34 - 000029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-12-03 17:51 - 2017-12-03 17:51 - 000179675 _____ C:\Users\Cam\Downloads\502-Insect Success4.pdf
2017-12-01 10:54 - 2017-12-01 10:54 - 000000000 ____D C:\Users\Cam\AppData\Local\BANDAI NAMCO Entertainment
2017-12-01 10:52 - 2017-12-01 10:52 - 000001199 _____ C:\Users\Cam\Desktop\DRAGON BALL XENOVERSE 2.lnk
2017-12-01 10:52 - 2017-12-01 10:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DRAGON BALL XENOVERSE 2
2017-12-01 10:48 - 2017-12-01 10:52 - 000000000 ____D C:\Program Files (x86)\DRAGON BALL XENOVERSE 2
2017-11-30 19:10 - 2017-11-30 19:10 - 000002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-30 19:10 - 2017-11-30 19:10 - 000002275 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-11-30 15:25 - 2017-12-08 14:26 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-30 15:25 - 2017-11-30 15:25 - 078346672 _____ (Malwarebytes ) C:\Users\Cam\Downloads\mb3-setup-consumer-3.3.1.2183.exe
2017-11-30 15:25 - 2017-11-30 15:25 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-30 15:05 - 2017-12-06 18:30 - 000000000 ____D C:\AdwCleaner
2017-11-30 15:05 - 2017-11-30 15:05 - 008172032 _____ (Malwarebytes) C:\Users\Cam\Downloads\adwcleaner_7.0.5.0.exe
2017-11-30 13:47 - 2017-12-06 18:08 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-11-30 13:46 - 2017-11-30 14:52 - 000000000 ____D C:\ProgramData\RogueKiller
2017-11-30 13:46 - 2017-11-30 13:46 - 000000870 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-11-30 13:46 - 2017-11-30 13:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-11-30 13:46 - 2017-11-30 13:46 - 000000000 ____D C:\Program Files\RogueKiller
2017-11-30 13:45 - 2017-11-30 13:45 - 036146872 _____ (Adlice Software ) C:\Users\Cam\Downloads\RogueKiller_setup_ref3.exe
2017-11-30 11:04 - 2017-11-30 11:03 - 000183584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2017-11-30 11:03 - 2017-11-30 11:03 - 000365168 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-11-30 10:56 - 2017-12-06 22:33 - 000000000 ____D C:\Users\Cam\AppData\Local\wiapuml
2017-11-30 10:52 - 2017-12-08 14:32 - 000000000 ____D C:\Users\Cam\AppData\Local\csdvext
2017-11-30 10:51 - 2017-12-06 23:33 - 002884096 _____ C:\Windows\system32\sieudtnsvc.exe
2017-11-30 10:51 - 2017-11-30 12:17 - 000000000 ____D C:\Users\Cam\AppData\Local\umcipgnza
2017-11-30 10:51 - 2017-11-30 10:51 - 000000000 ____D C:\Windows\SysWOW64\lmmxhap
2017-11-30 10:51 - 2017-11-30 10:51 - 000000000 ____D C:\Windows\system32\lmmxhap
2017-11-30 10:50 - 2017-11-30 10:50 - 000021520 _____ C:\Windows\System32\Tasks\xDaCrf2YZgyQ
2017-11-30 10:50 - 2017-11-30 10:50 - 000000379 _____ C:\Users\Cam\Desktop\CD Drive - Shortcut.lnk
2017-11-30 10:48 - 2017-11-30 10:48 - 000000000 ____D C:\Users\Cam\Downloads\Sis Loves Me - Kara Faux - Sis On My Dick
2017-11-30 10:47 - 2017-11-30 10:47 - 000002900 _____ C:\Users\Cam\Downloads\Sis_Loves_Me_-_Kara_Faux_-_Sis_On_My_Dick.xht
2017-11-29 16:25 - 2017-11-29 16:25 - 000000000 ____D C:\Users\Cam\Documents\Curse
2017-11-29 16:21 - 2017-12-04 21:46 - 000000000 ____D C:\Users\Cam\AppData\Roaming\Twitch
2017-11-29 16:21 - 2017-11-29 16:21 - 000001001 _____ C:\Users\Cam\Desktop\Twitch.lnk
2017-11-29 16:21 - 2017-11-29 16:21 - 000000987 _____ C:\Users\Cam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch.lnk
2017-11-29 16:21 - 2017-11-29 16:21 - 000000000 ____D C:\Users\Cam\AppData\Roaming\Twitch Setup
2017-11-29 14:23 - 2017-11-29 14:23 - 109807200 _____ (Twitch Interactive, Inc.) C:\Users\Cam\Downloads\TwitchSetup_[plugin-Minecraft].exe
2017-11-29 11:43 - 2017-12-04 15:08 - 000000746 _____ C:\Users\Cam\Desktop\nativelog.txt
2017-11-21 19:07 - 2017-11-21 19:07 - 000000000 ____D C:\Windows\System32\Tasks\MEGA
2017-11-14 13:48 - 2017-10-17 11:11 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-14 13:48 - 2017-10-16 10:38 - 002013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-14 13:48 - 2017-10-14 05:04 - 001548624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-11-14 13:48 - 2017-10-14 00:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-14 13:48 - 2017-10-14 00:23 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-14 13:48 - 2017-10-14 00:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-14 13:48 - 2017-10-14 00:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-14 13:48 - 2017-10-14 00:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-14 13:48 - 2017-10-14 00:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-14 13:48 - 2017-10-13 23:36 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-11-14 13:48 - 2017-10-13 23:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-14 13:48 - 2017-10-13 23:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-14 13:48 - 2017-10-13 23:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-14 13:48 - 2017-10-13 23:30 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-14 13:48 - 2017-10-13 23:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-14 13:48 - 2017-10-13 23:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-14 13:48 - 2017-10-13 23:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-14 13:48 - 2017-10-13 23:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-14 13:48 - 2017-10-13 23:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-14 13:48 - 2017-10-13 23:05 - 015431680 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-14 13:48 - 2017-10-13 22:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-14 13:48 - 2017-10-13 22:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-14 13:48 - 2017-10-13 22:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-14 13:48 - 2017-10-13 22:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-14 13:48 - 2017-10-13 22:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-14 13:48 - 2017-10-13 22:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-14 13:48 - 2017-10-13 22:28 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-11-14 13:48 - 2017-10-13 22:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-14 13:48 - 2017-10-13 22:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-14 13:48 - 2017-10-13 22:24 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-14 13:48 - 2017-10-13 22:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-14 13:48 - 2017-10-13 22:14 - 013317632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-14 13:48 - 2017-10-13 22:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-14 13:48 - 2017-10-13 22:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-14 13:48 - 2017-10-13 22:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-14 13:48 - 2017-10-10 08:36 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-14 13:48 - 2017-10-10 07:38 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-14 13:48 - 2017-10-10 07:38 - 000425984 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
2017-11-14 13:48 - 2017-10-10 07:11 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-14 13:48 - 2017-10-10 07:08 - 000367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
2017-11-14 13:48 - 2017-10-04 23:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-11-14 13:48 - 2017-09-14 15:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-11-14 13:48 - 2017-09-08 09:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-11-14 13:48 - 2017-09-08 08:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-11-14 13:48 - 2017-09-07 19:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-11-14 13:48 - 2017-09-07 19:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-11-14 13:48 - 2017-09-07 13:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
2017-11-14 13:48 - 2017-09-07 11:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
2017-11-14 13:48 - 2017-09-07 09:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
2017-11-14 13:48 - 2017-09-07 09:20 - 000513456 _____ C:\Windows\system32\locale.nls
2017-11-14 13:48 - 2017-09-07 05:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-14 13:48 - 2017-09-07 05:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-14 13:48 - 2017-09-06 15:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-14 13:48 - 2017-09-06 13:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-14 13:48 - 2017-09-06 13:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-14 13:48 - 2017-09-06 06:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2017-11-14 13:48 - 2017-08-10 17:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-11-14 13:48 - 2017-08-10 17:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-11-14 13:48 - 2016-01-08 17:38 - 000091992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-14 13:48 - 2015-10-10 22:34 - 000027992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-14 13:48 - 2015-10-10 10:41 - 000037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-14 13:48 - 2015-10-10 10:41 - 000030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-13 19:12 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2017-11-13 19:12 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2017-11-13 19:12 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2017-11-13 19:12 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2017-11-13 19:12 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-11-13 19:12 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-11-13 19:12 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-11-13 19:12 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-11-13 19:12 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-11-13 19:12 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-11-13 19:12 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-11-13 19:12 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-11-13 19:12 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-11-13 19:12 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-11-13 19:12 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-11-13 19:12 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-11-13 19:12 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-11-13 19:12 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-11-13 19:12 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-11-13 19:12 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-11-13 19:12 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-11-13 19:12 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-11-13 19:12 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-11-13 19:12 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-11-13 19:12 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-11-13 19:12 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-11-13 19:12 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-11-13 19:12 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-11-13 19:12 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-11-13 19:12 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-11-13 19:12 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-11-13 19:12 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-11-13 19:12 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-11-13 19:12 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-11-13 19:12 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-11-13 19:12 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-11-13 19:12 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-11-13 19:12 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-11-13 19:12 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-11-13 19:12 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-11-13 19:12 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-11-13 19:12 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-11-13 19:12 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-11-13 19:12 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-11-13 19:12 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-11-13 19:12 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-11-13 19:12 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-11-13 19:12 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-11-13 19:12 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-11-13 19:12 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-11-13 19:12 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-11-13 19:12 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-11-13 19:12 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-11-13 19:12 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-11-13 19:12 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-11-13 19:12 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-11-13 19:12 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-11-13 19:12 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-11-13 19:12 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-11-13 19:12 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-11-13 19:12 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-11-13 19:12 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-11-13 19:12 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-11-13 19:12 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-11-13 19:12 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-11-13 19:12 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-11-13 19:12 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-11-13 19:12 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-11-13 19:12 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-11-13 19:12 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-11-13 19:11 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-11-13 19:11 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-11-13 19:11 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-11-13 19:11 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-11-13 19:11 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-11-13 19:11 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-11-13 19:11 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-11-13 19:11 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-11-13 19:11 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-11-13 19:11 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-11-13 19:11 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-11-13 19:11 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2017-11-13 19:11 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-11-13 19:11 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-11-13 19:11 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-11-13 19:11 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-11-13 19:11 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-11-13 19:11 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-11-13 19:11 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-11-13 19:11 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-11-13 19:11 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-11-13 19:11 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-11-13 19:11 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-11-13 19:11 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-11-13 19:11 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-11-13 19:11 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-11-13 19:11 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-11-13 19:11 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-11-13 19:11 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-11-13 19:11 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-11-13 19:11 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-11-13 19:11 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-11-13 19:11 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-11-13 19:11 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-11-13 19:11 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-11-13 19:11 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-11-13 19:11 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-11-13 19:11 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-11-13 19:11 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-11-13 19:11 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-11-13 19:11 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-11-13 19:11 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-11-13 19:10 - 2017-12-06 11:03 - 000000000 ____D C:\GOG Games
2017-11-13 19:07 - 2017-11-13 19:07 - 000000000 ____D C:\Users\Cam\Desktop\dontstarve215025gog
2017-11-13 15:41 - 2017-12-06 11:03 - 000000000 ____D C:\Users\Cam\Documents\Klei
2017-11-13 15:28 - 2017-11-13 15:28 - 000000222 _____ C:\Users\Cam\Desktop\Don't Starve Together.url
2017-11-12 10:37 - 2017-11-12 10:37 - 000000000 ____D C:\Users\Cam\AppData\Local\Fallout4
2017-11-10 15:11 - 2017-11-10 15:11 - 000000222 _____ C:\Users\Cam\Desktop\Fallout 4.url
2017-11-09 13:35 - 2017-11-09 13:35 - 000000222 _____ C:\Users\Cam\Desktop\Besiege.url
2017-11-09 13:25 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2017-11-09 13:25 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2017-11-09 13:25 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2017-11-09 13:25 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-11-09 13:25 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-11-09 13:25 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-11-09 13:25 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-11-09 13:25 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-11-09 13:25 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2017-11-09 13:01 - 2017-11-09 13:24 - 000000000 ____D C:\Users\Cam\AppData\Roaming\SpinTires
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2017-12-08 14:30 - 2017-06-26 12:23 - 000003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4187166851-96581134-3385102870-1001
2017-12-08 14:27 - 2013-08-22 05:36 - 000000000 ____D C:\Windows\Inf
2017-12-08 14:25 - 2017-06-26 19:16 - 000000000 ____D C:\Users\Cam\AppData\Local\CrashDumps
2017-12-08 14:25 - 2017-06-25 23:23 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-12-08 14:25 - 2017-06-25 23:23 - 000001428 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-12-08 14:25 - 2017-06-25 23:23 - 000000000 ____D C:\Users\Cam\AppData\Local\NVIDIA Corporation
2017-12-08 14:25 - 2017-06-25 21:40 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-12-08 14:25 - 2017-06-25 21:40 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-08 14:25 - 2017-06-25 21:40 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-08 14:25 - 2017-06-25 21:40 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-12-08 14:24 - 2014-11-21 00:44 - 000877960 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-08 14:23 - 2017-06-25 22:59 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-12-08 14:22 - 2017-06-25 22:59 - 000000000 ____D C:\Program Files (x86)\Steam
2017-12-06 23:35 - 2017-06-26 12:17 - 000000000 ____D C:\Users\Cam
2017-12-06 23:33 - 2013-08-22 06:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-06 23:32 - 2017-06-25 21:29 - 000003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B9BEC1BA-EF47-462C-92A8-65AF8B64C55A}
2017-12-06 18:31 - 2013-08-22 05:25 - 010747904 _____ C:\Windows\system32\config\HARDWARE
2017-12-06 16:59 - 2013-08-22 05:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2017-12-05 14:32 - 2017-06-25 21:36 - 000000000 ____D C:\Windows10Upgrade
2017-12-04 12:32 - 2013-08-22 07:20 - 000000000 ____D C:\Windows\CbsTemp
2017-12-01 10:43 - 2017-08-02 09:41 - 000000000 ____D C:\Users\Cam\Documents\MEGAsync Downloads
2017-11-30 19:10 - 2017-06-25 22:33 - 000000000 ____D C:\Users\Cam\AppData\Local\Google
2017-11-30 19:10 - 2017-06-25 22:32 - 000000000 ____D C:\Users\Cam\AppData\Local\Deployment
2017-11-30 17:29 - 2013-08-22 07:36 - 000000000 ____D C:\Windows\AppReadiness
2017-11-30 14:14 - 2017-06-25 22:20 - 000000000 ____D C:\ProgramData\40b3d44b6025447b99bff25b48a7efa4
2017-11-30 12:16 - 2013-08-22 05:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-11-30 11:04 - 2017-06-25 22:59 - 000455376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 001026232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000455384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys.151206865996803
2017-11-30 11:03 - 2017-06-25 22:59 - 000364464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000203976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000198968 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000148288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-11-30 11:03 - 2017-06-25 22:59 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-11-30 11:03 - 2017-06-25 22:58 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-30 10:29 - 2013-08-22 07:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-30 10:21 - 2017-08-02 09:37 - 000000000 ____D C:\Users\Cam\AppData\Local\MEGAsync
2017-11-29 11:44 - 2017-06-26 11:17 - 004734880 _____ () C:\Users\Cam\Desktop\TechnicLauncher.exe
2017-11-29 11:43 - 2017-06-26 11:19 - 000000000 ____D C:\Users\Cam\AppData\Roaming\.technic
2017-11-28 17:17 - 2017-06-25 23:29 - 000000000 ____D C:\Users\Cam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-11-28 17:14 - 2017-06-28 17:18 - 000000000 ____D C:\Users\Cam\AppData\Roaming\Origin
2017-11-28 17:14 - 2017-06-28 17:18 - 000000000 ____D C:\Program Files (x86)\Origin Games
2017-11-28 17:12 - 2017-06-28 17:16 - 000000000 ____D C:\ProgramData\Origin
2017-11-28 17:11 - 2017-06-28 17:17 - 000000000 ____D C:\Program Files (x86)\Origin
2017-11-28 11:13 - 2013-08-22 07:36 - 000000000 ____D C:\Windows\rescache
2017-11-26 08:27 - 2017-06-27 17:37 - 000000000 ____D C:\Windows\system32\MRT
2017-11-26 08:24 - 2017-10-12 10:49 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-26 08:23 - 2017-06-27 17:37 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-21 19:03 - 2013-08-22 06:44 - 000337840 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-15 20:28 - 2017-07-06 18:25 - 000000000 ____D C:\Users\Cam\Documents\BeamNG.drive
2017-11-15 17:41 - 2017-06-25 23:23 - 002404800 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-11-15 17:41 - 2017-06-25 23:23 - 002070976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-11-15 17:41 - 2017-06-25 23:23 - 001309120 _____ (NVIDIA Corporation) C:\Windows\system32\NvRtmpStreamer64.dll
2017-11-15 17:41 - 2017-06-25 23:23 - 000186304 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-11-15 17:41 - 2017-06-25 23:23 - 000152512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-11-15 16:53 - 2017-06-25 23:23 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-11-14 15:45 - 2017-08-01 20:50 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 15:45 - 2013-08-22 07:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-14 15:45 - 2013-08-22 07:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-14 13:43 - 2017-06-25 22:54 - 000003330 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-14 13:43 - 2017-06-25 22:54 - 000003202 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-12 10:37 - 2017-06-29 11:08 - 000000000 ____D C:\Users\Cam\Documents\My Games
2017-11-09 08:47 - 2017-06-25 21:40 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
 
==================== Files in the root of some directories =======
 
2017-06-26 06:39 - 2017-06-26 06:41 - 000000000 _____ () C:\Users\Cam\AppData\Local\Driver_LOM_8171Present.flag
 
Some files in TEMP:
====================
2017-11-30 13:46 - 2017-09-14 11:30 - 001737600 _____ (Microsoft Corporation) C:\Users\Cam\AppData\Local\Temp\dllnt_dump.dll
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
C:\Windows\system32\drivers\sbihknru.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
 
LastRegBack: 2017-11-28 10:36
 
==================== End of FRST.txt ============================
 
 
 
 
 
This is the Addition.txt
 
 
Windows 8.1 (Update) (X64) (2017-06-26 20:17:29)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-4187166851-96581134-3385102870-500 - Administrator - Disabled)
Cam (S-1-5-21-4187166851-96581134-3385102870-1001 - Administrator - Enabled) => C:\Users\Cam
Guest (S-1-5-21-4187166851-96581134-3385102870-501 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.51.22728 - Electronic Arts)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0275 - Disc Soft Ltd)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Discord (HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
DRAGON BALL XENOVERSE 2 (HKLM-x32\...\DRAGON BALL XENOVERSE 2_is1) (Version:  - )
Epic Games Launcher (HKLM-x32\...\{F7118EF5-320C-4340-99F4-25F970B428A3}) (Version: 1.1.125.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ForceBindIP (HKLM-x32\...\ForceBindIP) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)
Intel® USB 3.0 Host Controller Adaptation Driver (HKLM\...\{9472AEE5-5D4D-4329-8BD8-B282FD33B8E0}) (Version: 2.0.0.11 - Intel Corporation)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Killer E240x Drivers (HKLM\...\{FFFFB9A2-2A17-4CD7-B2EA-0E76F6095708}) (Version: 1.1.65.1138 - Rivet Networks) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
NETGEAR WNDA3100v3 (HKLM-x32\...\{60C50FCC-545B-4D5D-B0D1-4A773143BCE7}) (Version: 1.0.0.10 - NETGEAR) Hidden
NETGEAR WNDA3100v3 Genie (HKLM-x32\...\InstallShield_{60C50FCC-545B-4D5D-B0D1-4A773143BCE7}) (Version: 1.0.0.10 - NETGEAR)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.11.0.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.11.0.73 - NVIDIA Corporation)
NVIDIA Graphics Driver 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA Miracast Virtual Audio 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 388.13 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.6.6235 - Electronic Arts, Inc.)
Roblox Player for Cam (HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - Roblox Corporation)
RogueKiller version 12.11.26.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.26.0 - Adlice Software)
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Twitch (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 27.0 - Ubisoft)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22256 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-30] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-30] (AVAST Software)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-30] (AVAST Software)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-21] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-30] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (Alexander Roshal)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {176EA6FC-722C-49DB-AEFC-5659C5BC4530} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-15] (NVIDIA Corporation)
Task: {1E362252-642C-43BF-9BBC-BA22012D4221} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-25] (Google Inc.)
Task: {28D1C1B0-A927-4C9E-A857-A3F306AA078E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
Task: {396CED45-B6BE-4F4A-B56E-407D26E48523} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)
Task: {7168B914-5273-4328-80D8-EFFB261CB2A5} - System32\Tasks\xDaCrf2YZgyQ => xdacrf2yzgyq.exe
Task: {73CE63CE-9908-486C-8498-65807D1843B9} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-11-15] (NVIDIA Corporation)
Task: {7A40B4A0-BF83-403F-B8D1-DC738073446B} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-4187166851-96581134-3385102870-1001 => C:\Users\Cam\AppData\Local\MEGAsync\MEGAupdater.exe [2017-11-30] (Mega Limited)
Task: {8263BDF4-B573-46F0-A87A-333D66278142} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-11-15] (NVIDIA Corporation)
Task: {86036098-ABC8-4C79-BE98-2E3C1FFDAC70} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-11-15] (NVIDIA Corporation)
Task: {89AA9C72-E7BC-4E84-B647-CE6CC8B80135} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-06] (AVAST Software)
Task: {940DB386-687B-48E1-8354-7783FD46814B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-15] (NVIDIA Corporation)
Task: {A4941A99-D97C-4304-9324-CC0866DC47D8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-15] (NVIDIA Corporation)
Task: {A51F1ECB-CA75-4E9D-845E-3B3CAD3B9560} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-30] (AVAST Software)
Task: {CEEFD5F0-014C-461F-A666-6723DED00AB4} - System32\Tasks\SafeZone scheduled Autoupdate 1498460403 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {D21591B8-F9AD-4F02-872D-E05AC2E0434D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-15] (NVIDIA Corporation)
Task: {DFBA1F44-B819-4EAC-87DE-EF5DBB103FAE} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-15] (NVIDIA Corporation)
Task: {F15D9D93-1BEF-4C5D-9133-24C1C1DB49E6} - \{7D0F0A47-087A-0B0F-7911-080A0F7A1104} -> No File <==== ATTENTION
Task: {FE5DF44A-E600-48F0-A5A8-2045903218E1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-25] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-02-03 13:00 - 2015-02-03 13:00 - 000027648 _____ () C:\Windows\System32\sdp1ml6.dll
2017-06-07 12:09 - 2017-11-21 19:07 - 000598528 _____ () C:\Users\Cam\AppData\Local\MEGAsync\ShellExtX64.dll
2017-06-25 23:23 - 2017-11-15 17:41 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-11-30 11:03 - 2017-11-30 11:03 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2017-11-30 19:10 - 2017-11-10 01:57 - 004135768 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\libglesv2.dll
2017-11-30 19:10 - 2017-11-10 01:57 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\libegl.dll
2017-06-25 23:23 - 2017-11-15 17:41 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-06-25 23:23 - 2017-11-15 17:40 - 066906560 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-06-25 23:23 - 2017-11-15 17:40 - 003118016 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libglesv2.dll
2017-06-25 23:23 - 2017-11-15 17:40 - 000094656 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libegl.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 05:25 - 2017-06-25 22:20 - 000001688 _____ C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1 wemsofts.com
127.0.0.1 bongadoom.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 internalcampaigntargets.com
127.0.0.1 bongadoom.com
127.0.0.1 getthefilenow.com
127.0.0.1 bigpicturepop.com
127.0.0.1 wizzcaster.com
127.0.0.1 bestoffersfortoday.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 agent.wizztrakys.com
127.0.0.1 csdimonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 titiaredh.com
127.0.0.1 wepcdisplaysystem.com
127.0.0.1 wepcanalyticsystem.com
127.0.0.1 healthydownload.com
127.0.0.1 leading2download.com
127.0.0.1 dwl0.wizzlabs.com
127.0.0.1 dwl1.wizzlabs.com
127.0.0.1 installpixel.com
127.0.0.1 burningcube.ru
127.0.0.1 mess1.wizzmonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 dl.smashdl.com
127.0.0.1 downloadmyhost.com
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Cam\Pictures\wallpaper-tumblr-smoking-wallpapers-smoke-desktop-image.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
HKLM\...\StartupApproved\StartupFolder: => "NETGEAR WNDA3100v3 Genie.lnk"
HKLM\...\StartupApproved\Run: => "AvastUI.exe"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Discord"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "ycAutoLaunch_C0A6B0C696F3F5F20201E56B3E674208"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "WallpaperEngine"
HKU\S-1-5-21-4187166851-96581134-3385102870-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{D9B23005-C379-45C5-882C-C3F0B5DF839F}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [{F69A2033-C727-4306-8825-277413A73172}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714C6B2E-BCD2-4DC8-BFAE-DAD763CBB004}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D99F1541-A24E-4535-A2B9-5E30BFF6BC89}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5B73AF8B-C991-49FE-867F-1FD7C4B1C415}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F761CEE9-F8EF-4647-B611-F5E32042E016}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{2DB65466-592F-4E4F-988E-60FAA4825825}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{1233FD1F-AEE0-4D2B-969A-AD594A635829}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{AC04BD06-5A3D-46F5-BEA9-20869333B406}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FE9E86A3-26F2-48EF-997A-6673FB8FE800}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6EE55817-4E72-42E4-BE1B-F2E988176B89}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{2727151F-4D12-4AEE-898A-127A224F433C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [TCP Query User{E73B6184-1898-468F-89BB-A9609F79087F}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [UDP Query User{006EB4D0-AE83-492C-9AB8-4765BE993F17}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [TCP Query User{2E7437FF-9049-4060-BAAF-B423C799768B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9BFA6FE2-9296-41BD-A91C-091952380EBA}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{59E96FD9-5138-4415-8B0D-A56B82C5B623}C:\program files\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_131\bin\javaw.exe
FirewallRules: [UDP Query User{32EDDF37-E1BC-49A9-82C0-71BC4F9FC626}C:\program files\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_131\bin\javaw.exe
FirewallRules: [{F94D705B-E69F-4824-A65F-3FAD97D58CF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{FAED379E-A5DA-4FA1-82EE-C68BA262C584}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{4621E8B9-4236-4D46-94CC-BEAB7D7DA56D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{955ED817-5E1E-4104-91AD-226FB4CA48E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{BF53A046-2CC4-451C-A61E-E73950F4C738}C:\program files (x86)\steam\steamapps\common\rising storm 2\binaries\win64\vngame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\rising storm 2\binaries\win64\vngame.exe
FirewallRules: [UDP Query User{3614F79B-AE8B-403C-B260-2206882574EA}C:\program files (x86)\steam\steamapps\common\rising storm 2\binaries\win64\vngame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\rising storm 2\binaries\win64\vngame.exe
FirewallRules: [TCP Query User{676414AF-863F-43F6-A96C-8367342779FF}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{65325729-8858-49F9-B486-FE3CBE4B35B6}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [{141267B2-CDA0-415F-843B-942AAF44852F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [{5396562E-EB11-4498-970E-DF5CA934113C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe
FirewallRules: [TCP Query User{89A3F7B3-882B-4082-BD69-8A58DC799D91}C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [UDP Query User{B1C99A8D-58A3-4DCE-85C6-8AA92E524E7D}C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe
FirewallRules: [{8E15E31C-36C4-4830-843F-9611BDB365E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{9EA714AF-E052-460E-964F-4609359E073D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{8244CF69-661A-4962-B652-D17CA38646AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{5CE46093-7EA0-4F45-9C8D-06A5474E48CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{EDEEE53D-6DC4-456A-A252-BBA1E53E034F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer End Times Vermintide\launcher\launcher.exe
FirewallRules: [{FA415FBE-1191-43D1-BBD9-F6D052FF7FFB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer End Times Vermintide\launcher\launcher.exe
FirewallRules: [{1359B793-4CC7-4566-AF5B-4C1CFF39FAE3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe
FirewallRules: [{C11BEA25-587C-401E-80D2-FEA6D4E7A8E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe
FirewallRules: [TCP Query User{3F6AA122-B1F3-400A-B1F9-B31A25FF9B6D}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [UDP Query User{AC9F8FB6-BC61-4111-89D3-ED13381CC362}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [{A46C6769-AC7C-463C-BFF0-5CD1DF5DFFF6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F13Game\EAC_Launcher.exe
FirewallRules: [{BD17006F-9BA9-4C54-8464-287FF76CA98D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F13Game\EAC_Launcher.exe
FirewallRules: [{B625D06F-9D7C-4EC2-ABCD-391C2D571750}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.609_0\SZBrowser.exe
FirewallRules: [{817B9BCF-6AB8-4EDB-BE8A-8E85C1D4EB21}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe
FirewallRules: [{ED4EB4BE-DC0E-4612-B736-2AED788C9335}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe
FirewallRules: [{335EC753-4735-4BAE-8E26-9B7955A72424}] => (Allow) C:\Users\Cam\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C82CF938-7878-4404-B07F-F6D430B5710A}] => (Allow) C:\Users\Cam\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{010467B5-EE74-4E19-B164-98B9D009E58F}C:\gog games\dying light\dyinglightgame.exe] => (Allow) C:\gog games\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{EC4CED21-E78C-4C9B-A83B-2CE3E1BE6F61}C:\gog games\dying light\dyinglightgame.exe] => (Allow) C:\gog games\dying light\dyinglightgame.exe
FirewallRules: [{FC537891-0763-43FB-B5D5-DDBCBD52B78E}] => (Allow) C:\GOG Games\Dying Light\DyingLightGame.exe
FirewallRules: [{3DED498B-4936-4F16-881B-27D30ACDFE51}] => (Allow) C:\GOG Games\Dying Light\DyingLightGame.exe
FirewallRules: [TCP Query User{C19334F1-4E8A-4739-9363-C807C224493C}C:\program files\dying light\dyinglightgame.exe] => (Allow) C:\program files\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{5E4B28F8-A474-4928-A828-07D8A22ABC25}C:\program files\dying light\dyinglightgame.exe] => (Allow) C:\program files\dying light\dyinglightgame.exe
FirewallRules: [{8E63E616-ED21-4608-AFCD-17AA9D6A93BD}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{99D73E39-5C33-4D52-98B3-E5013037E258}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{1372E9D8-241E-4F28-8F5E-761607E570ED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{C1F30149-AAE2-4FF4-ACDA-5A08AB9EDA2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A2EDA88E-8BB0-43F2-8B98-A865D80D7C65}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9249DAB1-D4E9-4151-BD50-1068AE407E25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Escapists 2\TheEscapists2.exe
FirewallRules: [{9C771D06-2178-4EC9-96CA-C3730E34FE25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Escapists 2\TheEscapists2.exe
FirewallRules: [{2C795BEC-153D-463C-A35E-47DCABC60EEC}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{9166C437-8327-4322-8D10-9273B399691F}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
FirewallRules: [{558167A4-D390-4596-BC03-7CC1E5B6DDC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{13D9D858-6EEC-4A85-A7BD-4796DF81B8C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [TCP Query User{C3C503A0-E759-42EA-BB44-F9FC9293A2F5}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{D3F0165F-DD06-4392-9C01-7464D97437C3}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{FC04C720-14CB-443B-942F-F08E102FFB57}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{BD68FF2E-EDB3-44FB-BA58-BC403E3DECBF}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [{B0F8DF0A-C5B6-4788-A99F-A4779E73B000}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{E873BA4D-B3E8-4695-846A-6398E1206FB4}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{FB779F61-ED2F-42BA-B957-07335D212248}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{7B30F9BC-02E0-4AB4-BA93-1B947B94430D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [TCP Query User{940DFCD8-E75B-4E43-ADD4-47688F297F93}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{D4905FB6-4C70-48C1-9076-D40A486B12D5}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{9EE408B1-F006-4E62-8AB1-547A97F29820}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{20BF117C-F254-4ABC-A7F4-27FDD9FA1105}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{AB045EE1-2249-4F12-B6D9-D6E49AED8E38}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{E556D7F3-E66B-47B8-B7A8-141685E95751}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BC5ACF26-0813-4181-9BD1-00FAFED1D5DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{C42F42BE-D03B-4295-B3B4-7EC9569FE0E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{BF2F8D9A-DBEA-4526-B844-234B609974E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{913C495A-7478-407A-AE4F-1AE7D2DA179D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{35D9E903-804E-47ED-9F78-935EC89921F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{82799B1A-C11B-4E58-B2B0-6A1662B032F3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E62A38AA-218F-4B16-A927-F830EB3FF364}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{3F3620CB-93EF-449D-B4CF-E55DAED2D204}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{E3B20FFE-A5AA-47EA-9CEF-15FF4206C097}C:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => (Allow) C:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{75F3A7B1-279D-48C8-BAFA-6FA8B22AAD49}C:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe] => (Allow) C:\program files (x86)\wolfenstein the new order\wolfneworder_x64.exe
FirewallRules: [{83335914-E7D8-4B16-8853-43E9A69F8FCF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Besiege\Besiege.exe
FirewallRules: [{C8F0B3E1-4B83-4C6D-AC77-84C15D9EEE56}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Besiege\Besiege.exe
FirewallRules: [{613CF4AD-1EB3-4228-B8F0-9EAD5A82F5CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{A60A10B3-F09F-4B88-9860-D30D3ABC2B21}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [TCP Query User{FF77437C-4480-4382-9879-19B46F185F3C}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [UDP Query User{F4F6B00B-D98A-4727-A311-31FB3857D075}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [{08522202-08CE-4307-BC4F-8B3716D20F09}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8771BB5E-551F-4672-8E20-D70AAA85694B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [{6E6AB929-C0B0-4EA6-8E0D-0B9F665F6B36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera\Binaries\UDKLift.exe
FirewallRules: [TCP Query User{C0AA71AF-DA67-4139-91D1-197F66423B4E}C:\users\cam\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\cam\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{56788B70-B774-405D-86A8-D00EDED7DF44}C:\users\cam\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\cam\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{63E8FDBD-D102-463E-AF83-63F1CAF5F933}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{26E7916A-B50E-428E-B3EC-FB4511BE20DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{03D7944D-FCE7-48DC-AC9D-F0E14A28C625}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
 
==================== Restore Points =========================
 
 
==================== Faulty Device Manager Devices =============
 
Name: PCI Memory Controller
Description: PCI Memory Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: SM Bus Controller
Description: SM Bus Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: PCI Data Acquisition and Signal Processing Controller
Description: PCI Data Acquisition and Signal Processing Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: Base System Device
Description: Base System Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: Microsoft PS/2 Mouse
Description: Microsoft PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (12/08/2017 02:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: OAWrapper.exe, version: 37.1.1.0, time stamp: 0x5a1d7cd6
Faulting module name: KERNELBASE.dll, version: 6.3.9600.18821, time stamp: 0x59ba8666
Exception code: 0xc0000142
Fault offset: 0x0009d4c2
Faulting process id: 0x18c
Faulting application start time: 0x01d37073775a4320
Faulting application path: C:\Users\Cam\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe
Faulting module path: KERNELBASE.dll
Report Id: b5873c38-dc66-11e7-827c-4ccc6a6c0260
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/08/2017 02:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: conhost.exe, version: 6.3.9600.17415, time stamp: 0x5450410b
Faulting module name: KERNELBASE.dll, version: 6.3.9600.18821, time stamp: 0x59ba86db
Exception code: 0xc0000142
Fault offset: 0x00000000000ece70
Faulting process id: 0xc2c
Faulting application start time: 0x01d37073775bcacb
Faulting application path: C:\Windows\system32\conhost.exe
Faulting module path: KERNELBASE.dll
Report Id: b50b4f26-dc66-11e7-827c-4ccc6a6c0260
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/08/2017 02:25:33 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=fe1c3238-432a-43a1-8e25-97e7d1ef10f3;NotificationInterval=1440;Trigger=TimerEvent
 
Error: (12/08/2017 02:24:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mpcmdrun.exe, version: 4.10.209.0, time stamp: 0x582a94a8
Faulting module name: KERNELBASE.dll, version: 6.3.9600.18821, time stamp: 0x59ba86db
Exception code: 0xc0000142
Fault offset: 0x00000000000ece70
Faulting process id: 0xebc
Faulting application start time: 0x01d3707313155308
Faulting application path: C:\Program Files\Windows Defender\mpcmdrun.exe
Faulting module path: KERNELBASE.dll
Report Id: 7edb0e7e-dc66-11e7-827c-4ccc6a6c0260
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/08/2017 02:22:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: conhost.exe, version: 6.3.9600.17415, time stamp: 0x5450410b
Faulting module name: KERNELBASE.dll, version: 6.3.9600.18821, time stamp: 0x59ba86db
Exception code: 0xc0000142
Fault offset: 0x00000000000ece70
Faulting process id: 0xe78
Faulting application start time: 0x01d370731316daa6
Faulting application path: C:\Windows\system32\conhost.exe
Faulting module path: KERNELBASE.dll
Report Id: 52970224-dc66-11e7-827c-4ccc6a6c0260
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (12/06/2017 09:59:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SystemSettings.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 16e4
 
Start Time: 01d36f1ff6eac809
 
Termination Time: 4294967295
 
Application Path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
 
Report Id: 3ef2d773-db13-11e7-827c-4ccc6a6c0260
 
Faulting package full name: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy
 
Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel
 
Error: (12/06/2017 09:56:27 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=fe1c3238-432a-43a1-8e25-97e7d1ef10f3;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (12/06/2017 09:56:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=fe1c3238-432a-43a1-8e25-97e7d1ef10f3;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
 
Error: (12/06/2017 09:55:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Cameron)
Description: Activation of app windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
 
Error: (12/06/2017 09:55:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Cameron)
Description: App windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel did not launch within its allotted time.
 
 
System errors:
=============
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
Error: (12/08/2017 02:34:55 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk0\DR0.
 
 
CodeIntegrity:
===================================
  Date: 2017-11-30 10:51:33.421
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.363
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.305
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.247
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.185
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.128
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.068
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:33.010
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:32.953
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2017-11-30 10:51:32.895
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 22%
Total physical RAM: 16344.59 MB
Available physical RAM: 12680.25 MB
Total Virtual: 32728.59 MB
Available Virtual: 28980.84 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:931 GB) (Free:252.22 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================


#10 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 08 December 2017 - 06:16 PM

And one more question if this doesnt work, is there some way i can just fully restart without any virus at all, but i do have faith in you and that you can help me. like could i just wipe everything off of my computer and then restart would it clear all viruses off. Or could i like buy and bigger storage and just replace the hdd that is in my computer right now, like take it out and put a bigger one in



#11 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 08 December 2017 - 09:43 PM

It's possible, yes. I can assist you with that if needed. As long as you have an installatation media, you can reinstall Windows as many times as you wish. No need to buy a new hard drive or else.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#12 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 09 December 2017 - 01:30 AM

Ok cool because to be honest i really just wanna completely start over from scratch just because my computer just feels slow when i know it can perform better. But i cant do it right now because i dont have windows, I was borrowing my friends windows 8.1 key but he needed it back so mine is currently deactivated, and I do not have any money to purchase my own key. And windows keeps asking me to activate it and I cant. I think it ends in thirty days but I am not really sure.



#13 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 09 December 2017 - 09:49 AM

You can run Windows without a product key (though it is illegal according to their EULA/ToS), and some features will not work as long as the product isn't activated.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#14 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,483 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:09 AM

Posted 12 December 2017 - 08:33 PM

Hi cameronreiff,

Are you still with me?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#15 cameronreiff

cameronreiff
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 13 December 2017 - 09:06 PM

Yes im still with you just waiting for tomorrow when i get paid so i can buy a copy of windows and then fully restart my computer with a fresh windows.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users