I am not new to computers or virus, malware, and spyware removal but there is one persistent piece of...something that i cannot remove. I have malwarebytes, iobit malware, Hitman Pro,, Junkware Removal, Avast and like one or two other removal tools. I have run them all cleared about 400 spyware/malware that i was stupid and ended up getting. Now when i run them, they MIGHT find one PuP or nothing. I have run malwarebytes 2-3 times today alone and it hasn't found anything, i have run hitman and now malware adware cleaner and they have found nothing, but about 50-75% of the time, when i do a search via my address bar, or go to google.com and do a search on the main screen it does a quick redirect "extensions.citypage.today" and redirects to a bing search page. To the best of my knowledge, i have removed all extensions from all browsers on my computer, removed anything past the file extension for the shortcuts and run MANY virus, adware, malware and spyware things. I am at a total loss now.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018
Ran by James (administrator) on ATKINSON (18-03-2018 13:35:03)
Running from C:\Users\James\Downloads
Loaded Profiles: James (Available Profiles: James)
Platform: Windows 10 Pro Version 1709 16299.248 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(TOSHIBA CORPORATION) C:\Windows\System32\vskgborsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2e329e8610bbb375\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2e329e8610bbb375\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.3.1.204\WsAppService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2e329e8610bbb375\IntelCpHeciSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2e329e8610bbb375\igfxEM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1809.217.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Discord Inc.) C:\Users\James\AppData\Local\Discord\app-0.0.300\Discord.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Discord Inc.) C:\Users\James\AppData\Local\Discord\app-0.0.300\Discord.exe
(Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(Discord Inc.) C:\Users\James\AppData\Local\Discord\app-0.0.300\Discord.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Elgato Systems GmbH) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Elgato\SoundCapture\SoundCapture.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
() C:\Users\James\AppData\Local\avarnbi\avarnbi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.245_none_16ec1d963212a637\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
() C:\Users\James\AppData\Local\avarnbi\cwmidzk.exe
() C:\Users\James\AppData\Local\avarnbi\cwmidzk.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\James\AppData\Local\avarnbi\cwmidzk.exe
() C:\Users\James\AppData\Local\avarnbi\cwmidzk.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2018-03-14] (Realtek Semiconductor)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8027016 2016-11-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-19] (Logitech Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [245608 2018-03-06] (AVAST Software)
HKLM\...\Run: [Stream Deck] => C:\Program Files\Elgato\StreamDeck\StreamDeck.exe [5551976 2018-03-06] (Elgato Systems GmbH)
HKLM\...\Run: [Elgato Sound Capture] => C:\Program Files\Elgato\SoundCapture\SoundCapture.exe [1234944 2018-01-18] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [FireStormStartUpAutoRun] => C:\Program Files (x86)\ZotacFireStorm\FireStorm.exe [32494592 2016-10-12] (PC Partner Co.Ltd)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2409936 2018-02-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-06-15] (Autodesk, Inc.)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5484304 2018-01-30] (IObit)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596664 2017-08-30] (Razer Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [Discord] => C:\Users\James\AppData\Local\Discord\app-0.0.300\Discord.exe [57821176 2018-01-08] (Discord Inc.)
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [5345672 2017-12-21] (Nota Inc.)
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.)
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1206600 2018-02-18] ()
HKU\S-1-5-21-2940490528-2556188224-4051809522-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-13] (Piriform Ltd)
GroupPolicy: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254 207.91.5.20
Tcpip\..\Interfaces\{0c555957-f1c9-4c9e-8db8-f230046b955d}: [DhcpNameServer] 192.168.254.254 207.91.5.20
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2940490528-2556188224-4051809522-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-01-25] (IObit)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: No Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-18] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-18] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
FireFox:
========
FF DefaultProfile: 9cikxl13.default
FF ProfilePath: C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\9cikxl13.default [2018-03-18]
FF NetworkProxy: Mozilla\Firefox\Profiles\9cikxl13.default -> type", 0
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com_xpi => not found
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-02-14] (Adobe Systems)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-01-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-01-03] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-02-14] (Adobe Systems)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\secure_cert.js [2018-03-13]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Profile: C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default [2018-03-13]
CHR Extension: (Slides) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-11]
CHR Extension: (Docs) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-11]
CHR Extension: (Google Drive) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-27]
CHR Extension: (YouTube) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-27]
CHR Extension: (Adobe Acrobat) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-01-26]
CHR Extension: (Sheets) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-11]
CHR Extension: (Google Docs Offline) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-27]
CHR Extension: (AdBlock) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-03-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-26]
CHR Extension: (Gmail) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-27]
CHR Extension: (Chrome Media Router) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Backup Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-06]
CHR Profile: C:\Users\James\AppData\Local\Google\Chrome\User Data\Default [2018-03-18]
CHR Extension: (Google Drive) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-13]
CHR Extension: (YouTube) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-13]
CHR Extension: (Gmail) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-03-13]
CHR Extension: (Chrome Media Router) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-16]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
HKLM\SYSTEM\CurrentControlSet\Services\kgbsa <==== ATTENTION (Rootkit!)
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1353208 2017-06-15] (Autodesk Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-02-14] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7556704 2018-03-06] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [303728 2018-03-06] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5708808 2018-03-08] ()
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-08] (EasyAntiCheat Ltd)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFSrv.exe [2127632 2018-01-29] (IObit)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel® Corporation)
R2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206096 2018-01-25] (IObit)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21296 2017-11-10] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [177440 2016-09-15] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-19] (Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-03] (Malwarebytes)
S3 mi-raysat_3dsmax2017_64; C:\Program Files\Autodesk\3ds Max 2017\raysat_3dsmax2017_64server.exe [86016 2011-09-15] () [File not signed]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32384 2016-10-03] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2159424 2018-03-05] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3028808 2018-03-05] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1452360 2018-02-18] (Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-12-21] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [142432 2017-11-09] (Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-01-28] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-01-28] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.1.204\WsAppService.exe [437392 2016-11-16] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-09-08] ()
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196648 2018-03-06] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-03-06] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-03-06] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-03-06] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-03-06] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [215320 2018-03-06] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-03-06] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [146656 2018-03-06] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110328 2018-03-06] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84368 2018-03-06] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1026696 2018-03-06] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-03-06] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-03-06] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380528 2018-03-06] (AVAST Software)
S3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [1832880 2018-03-17] ()
R3 CY3014.X64; C:\WINDOWS\system32\DRIVERS\CY3014.X64.SYS [3599568 2018-02-14] ()
R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d65x64.sys [555592 2018-03-14] (Intel Corporation)
R3 ElgatoVAD; C:\WINDOWS\system32\DRIVERS\ElgatoVAD.sys [39208 2017-07-11] (Elgato Systems GmbH)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [76200 2018-01-18] ()
S3 EuMusDesignVirtualAudioCableWdm_lcs; C:\WINDOWS\system32\DRIVERS\vaclcskd.sys [66016 2010-04-08] (Eugene V. Muzychenko)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-03-14] (REALiX)
R1 IMFCameraProtect; C:\WINDOWS\system32\drivers\IMFCameraProtect.sys [44096 2017-04-06] (IObit.com)
R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFDownProtect.sys [39288 2017-03-08] (IObit.com)
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win10_amd64\IMFFilter.sys [40440 2017-02-17] (IObit)
R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFForceDelete.sys [34080 2017-06-23] (IObit.com)
R1 IMFMBRProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFMBRProtect.sys [39368 2018-01-02] (IObit.com)
R1 IMFSafeBox; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFSafeBox.sys [58544 2018-01-28] (IObit.com)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [39904 2017-06-06] (IObit.com)
R3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegProcessFilter.sys [40328 2018-01-10] (IObit.com)
R3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45192 2017-10-19] (Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-10-19] (Logitech Inc.)
R3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2017-10-19] (Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193248 2018-03-13] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [109800 2018-03-18] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [45960 2018-03-18] (Malwarebytes)
R1 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-03-13] (Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [101600 2018-03-16] (Malwarebytes)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5601d21ccd639df9\nvlddmkm.sys [17486096 2018-01-05] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [58680 2018-01-10] (NVIDIA Corporation)
R3 Phosgene; C:\WINDOWS\system32\DRIVERS\Phosgene.sys [34136 2015-09-02] (Adoriasoft LLC)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\regfilter.sys [52728 2018-01-25] (IObit.com)
S3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
S3 rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [48840 2015-08-13] (Razer Inc)
S3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [259584 2017-09-29] (Microsoft Corporation)
R3 Trufos; C:\WINDOWS\System32\DRIVERS\TRUFOS.sys [520032 2016-12-05] (BitDefender S.R.L.)
S3 VBAudioVACMME; C:\WINDOWS\system32\DRIVERS\vbaudio_cable64_win7.sys [41192 2017-02-02] (Windows ® Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-01-28] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [288848 2018-01-28] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-01-28] (Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [37344 2017-04-25] (Wellbia.com Co., Ltd.)
R3 hlorvy; system32\drivers\oruybe.sys [X]
S4 vugmtxr; System32\drivers\wmbexrpd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-18 13:28 - 2018-03-18 13:28 - 000000000 ____D C:\Users\James\AppData\Local\exsobgp
2018-03-18 13:27 - 2018-03-18 13:28 - 008222496 _____ (Malwarebytes) C:\Users\James\Downloads\AdwCleaner (1).exe
2018-03-18 13:26 - 2018-03-18 13:26 - 000045960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2018-03-18 13:25 - 2018-03-18 13:25 - 000142672 ____N C:\WINDOWS\system32\Drivers\wehbehko.sys
2018-03-18 13:20 - 2018-03-18 13:21 - 008222496 _____ (Malwarebytes) C:\Users\James\Downloads\AdwCleaner.exe
2018-03-18 13:14 - 2018-03-18 13:14 - 000000222 _____ C:\Users\James\Desktop\Warhammer Vermintide 2.url
2018-03-18 13:11 - 2018-03-18 13:37 - 000029839 _____ C:\Users\James\Downloads\FRST.txt
2018-03-18 13:11 - 2018-03-18 13:12 - 000092020 _____ C:\Users\James\Downloads\Addition.txt
2018-03-18 13:11 - 2018-03-18 13:11 - 000000000 ___DC C:\FRST
2018-03-18 13:10 - 2018-03-18 13:10 - 002403328 _____ (Farbar) C:\Users\James\Downloads\FRST64.exe
2018-03-18 13:02 - 2018-03-18 13:02 - 000078300 _____ C:\Users\James\Downloads\it328_project_management_documents.xlsx
2018-03-18 12:57 - 2018-03-18 12:57 - 000031687 _____ C:\Users\James\Downloads\Report Card for James Atkinson.pdf
2018-03-17 09:59 - 2018-03-17 09:59 - 001291706 _____ C:\Users\James\Downloads\ThirdPerson_FBX.zip
2018-03-17 09:59 - 2018-03-17 09:59 - 000000000 ____D C:\Users\James\Downloads\ThirdPerson_FBX_v48
2018-03-17 00:48 - 2018-03-17 00:48 - 000001691 _____ C:\Users\James\Desktop\EasyAntiCheat_Setup.exe - Shortcut.lnk
2018-03-16 23:46 - 2018-03-16 23:46 - 000000000 ____D C:\Users\James\AppData\Local\pcsmwkt
2018-03-16 20:45 - 2018-03-16 20:45 - 000000000 ____D C:\Users\James\AppData\Local\lsdhvcu
2018-03-16 20:42 - 2018-03-16 20:42 - 000001956 _____ C:\WINDOWS\system32\.crusader
2018-03-16 20:36 - 2018-03-17 23:44 - 000055232 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2018-03-16 20:36 - 2018-03-16 20:42 - 000000000 ____D C:\ProgramData\HitmanPro
2018-03-16 20:36 - 2018-03-16 20:36 - 000001966 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2018-03-16 20:36 - 2018-03-16 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2018-03-16 20:36 - 2018-03-16 20:36 - 000000000 ____D C:\Program Files\HitmanPro
2018-03-16 20:32 - 2018-03-16 20:32 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-16 20:32 - 2018-03-16 20:32 - 000002336 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-03-16 20:32 - 2018-03-16 20:32 - 000000000 ____D C:\Program Files (x86)\Google
2018-03-16 20:24 - 2018-03-16 20:25 - 000000246 _____ C:\Users\James\Desktop\New Text Document.txt
2018-03-16 18:17 - 2018-03-16 18:17 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2018-03-16 16:22 - 2018-03-16 16:22 - 000001173 _____ C:\Users\Public\Desktop\Sound Capture.lnk
2018-03-16 16:22 - 2018-03-16 16:22 - 000001165 _____ C:\Users\Public\Desktop\Game Capture HD.lnk
2018-03-16 16:22 - 2018-03-16 16:22 - 000000000 ____D C:\Program Files (x86)\Elgato
2018-03-16 16:21 - 2018-03-16 16:22 - 184000512 _____ C:\Users\James\Downloads\GameCaptureSetup_3.70.8.3008_x64 (1).msi
2018-03-16 09:18 - 2018-03-16 09:18 - 000171158 _____ C:\Users\James\Documents\cc_20180316_091833.reg
2018-03-16 09:11 - 2018-03-16 09:11 - 000000000 ____D C:\Users\James\AppData\Local\exewuma
2018-03-15 17:11 - 2018-03-15 17:11 - 000000000 ____D C:\Users\James\AppData\Local\wmilxuz
2018-03-15 16:04 - 2018-03-15 16:04 - 015333512 _____ (Piriform Ltd) C:\Users\James\Downloads\ccsetup541.exe
2018-03-15 16:02 - 2018-03-15 16:02 - 000000000 ____D C:\Users\James\AppData\Local\nvskzcb
2018-03-15 15:59 - 2018-03-15 15:59 - 026194416 _____ (Razer USA Ltd) C:\Users\James\Downloads\Razer_Synapse_Installer_v2.21.00.830 (3).exe
2018-03-15 15:47 - 2018-03-17 23:54 - 000000000 ____D C:\ProgramData\ProductData
2018-03-15 15:37 - 2018-03-15 15:37 - 000001202 _____ C:\Users\James\Desktop\JRT.txt
2018-03-15 15:29 - 2018-03-15 15:29 - 001790024 _____ (Malwarebytes) C:\Users\James\Downloads\JRT.exe
2018-03-15 15:26 - 2018-03-15 15:26 - 000000000 ____D C:\Users\James\AppData\Local\rtczhwi
2018-03-15 15:25 - 2018-03-15 17:10 - 000000000 ____D C:\Program Files (x86)\Razer
2018-03-15 15:25 - 2018-03-15 15:25 - 000000000 ____D C:\ProgramData\Razer
2018-03-15 14:23 - 2018-03-16 18:03 - 000000000 ____D C:\Users\James\Desktop\aoc
2018-03-14 13:49 - 2018-03-14 13:49 - 000000000 ____D C:\Users\James\AppData\Local\upkxdma
2018-03-14 13:45 - 2018-03-15 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2018-03-14 13:31 - 2018-03-14 13:31 - 000000000 ____D C:\Users\James\AppData\Local\nvostwd
2018-03-14 13:28 - 2018-03-14 13:28 - 000000571 _____ C:\Users\James\Downloads\DeviceDiagnostic.diagcab
2018-03-14 09:48 - 2018-03-14 09:48 - 000000000 ____D C:\Users\James\AppData\Local\raikhvx
2018-03-14 09:46 - 2018-03-14 09:46 - 000000000 ____D C:\Users\James\AppData\Local\iabozdl
2018-03-14 09:45 - 2018-03-14 09:46 - 026194416 _____ (Razer USA Ltd) C:\Users\James\Downloads\Razer_Synapse_Installer_v2.21.00.830 (2).exe
2018-03-14 09:12 - 2018-03-14 09:12 - 000000000 ____D C:\Users\James\Desktop\Streamlab
2018-03-14 09:11 - 2018-03-14 09:11 - 000001443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2018-03-14 09:11 - 2018-03-14 09:11 - 000001431 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2018-03-14 09:11 - 2018-03-14 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2018-03-14 09:08 - 2018-03-14 09:08 - 072520704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2018-03-14 09:08 - 2018-03-14 09:08 - 013831786 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2018-03-14 09:08 - 2018-03-14 09:08 - 007172904 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 007096184 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 006264632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 005346992 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 003677152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2018-03-14 09:08 - 2018-03-14 09:08 - 003299816 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 003205120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 003135776 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 003122648 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 002922976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 002444680 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 002190976 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001965808 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001959592 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001780616 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001591056 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001544248 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001508928 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001435136 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001382232 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001372384 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001348160 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001337632 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001259720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001159176 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 001016920 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000984904 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000965016 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000877424 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000873456 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000868168 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000866632 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000852128 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000743960 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000737960 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000727432 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000708304 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000691672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000680544 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000604792 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000526272 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000504296 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000467152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000447712 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000445392 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000441264 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000416496 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000406448 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000387304 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000381400 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000378376 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000366112 _____ (Windows ® Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000362048 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000360336 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000341144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000327448 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000321704 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000310416 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000272712 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000258856 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000253896 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000253856 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000252864 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000231912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000221960 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000214824 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000209528 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000203832 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000190928 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000179592 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000158688 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000154352 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000151784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000134192 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000118584 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000110976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000105304 _____ C:\WINDOWS\system32\audioLibVc.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000100336 _____ (Intel Corporation) C:\WINDOWS\system32\NicInstD.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000090912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000088648 _____ (Intel Corporation) C:\WINDOWS\system32\e1dmsg.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000088336 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000088312 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000084608 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000083616 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000075536 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2018-03-14 09:08 - 2018-03-14 09:08 - 000003130 _____ C:\WINDOWS\system32\e1d65x64.din
2018-03-14 09:08 - 2018-03-14 09:08 - 000000000 ____D C:\WINDOWS\system32\DAX3
2018-03-14 09:07 - 2018-03-14 09:08 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-03-14 09:07 - 2018-03-14 09:07 - 000808944 _____ (Intel® Corporation) C:\WINDOWS\system32\Drivers\IntcDAud.sys
2018-03-14 09:06 - 2018-03-14 09:06 - 010919784 _____ C:\WINDOWS\SysWOW64\LogiDPP.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 010919784 _____ C:\WINDOWS\system32\LogiDPP.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 004758176 _____ (Logitech Inc.) C:\WINDOWS\system32\Drivers\lvuvc64.sys
2018-03-14 09:06 - 2018-03-14 09:06 - 000768288 _____ (Logitech Inc.) C:\WINDOWS\system32\LVUI64.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000560416 _____ (Logitech Inc.) C:\WINDOWS\system32\LVUIRC64.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000542568 _____ (Logitech Inc.) C:\WINDOWS\SysWOW64\LVUI2.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000538472 _____ (Logitech Inc.) C:\WINDOWS\SysWOW64\LVUI2RC.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000336232 _____ C:\WINDOWS\SysWOW64\DevManagerCore.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000336232 _____ C:\WINDOWS\system32\DevManagerCore.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000305000 _____ (Logitech Inc.) C:\WINDOWS\SysWOW64\lvcodec2.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000266828 _____ C:\WINDOWS\system32\Drivers\LVAFT.cfg
2018-03-14 09:06 - 2018-03-14 09:06 - 000262432 _____ (Logitech Inc.) C:\WINDOWS\system32\lvco1380853.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000175392 _____ (Logitech Inc.) C:\WINDOWS\system32\lvcod64.dll
2018-03-14 09:06 - 2018-03-14 09:06 - 000103272 _____ C:\WINDOWS\SysWOW64\LogiDPPApp.exe
2018-03-14 09:06 - 2018-03-14 09:06 - 000103272 _____ C:\WINDOWS\system32\LogiDPPApp.exe
2018-03-14 09:06 - 2018-03-14 09:06 - 000029494 _____ C:\WINDOWS\system32\lvcoin64.ini
2018-03-14 09:06 - 2018-03-14 09:06 - 000000000 ____D C:\Program Files\Common Files\logishrd
2018-03-14 09:05 - 2018-03-14 13:26 - 000002355 _____ C:\Users\Public\Desktop\Driver Booster 5.lnk
2018-03-14 09:05 - 2018-03-14 09:05 - 000027552 _____ (REALiX) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2018-03-14 09:05 - 2018-03-14 09:05 - 000000000 ____D C:\WINDOWS\IObit
2018-03-14 09:05 - 2018-03-14 09:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
2018-03-14 01:26 - 2018-03-18 13:24 - 000000000 ____D C:\Users\James\AppData\Roaming\IObit
2018-03-14 01:26 - 2018-03-14 09:05 - 000000000 ____D C:\Users\James\AppData\LocalLow\IObit
2018-03-14 01:26 - 2018-03-14 01:26 - 000001250 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2018-03-14 01:26 - 2018-03-14 01:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2018-03-14 01:26 - 2018-03-14 01:26 - 000000000 ____D C:\ProgramData\BDLogging
2018-03-14 01:26 - 2017-04-06 10:23 - 000044096 _____ (IObit.com) C:\WINDOWS\system32\Drivers\IMFCameraProtect.sys
2018-03-14 01:26 - 2016-12-05 15:32 - 000520032 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys
2018-03-14 01:25 - 2018-03-14 09:11 - 000000000 ____D C:\ProgramData\IObit
2018-03-14 01:25 - 2018-03-14 09:11 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-14 01:25 - 2018-03-14 01:25 - 040337336 _____ (IObit ) C:\Users\James\Downloads\IObit-Malware-Fighter-Setup-beta.exe
2018-03-14 01:25 - 2018-03-14 01:25 - 000000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2018-03-14 01:19 - 2018-03-14 01:19 - 000000000 ____D C:\Users\James\AppData\Local\psibtwd
2018-03-14 01:00 - 2018-03-14 01:00 - 026190216 _____ (Razer USA Ltd) C:\Users\James\Downloads\Razer_Synapse_Installer_v2.21.18.115.exe
2018-03-14 00:58 - 2018-03-14 00:58 - 026194416 _____ (Razer USA Ltd) C:\Users\James\Downloads\Razer_Synapse_Installer_v2.21.00.830 (1).exe
2018-03-14 00:54 - 2018-03-14 00:54 - 004197032 _____ C:\Users\James\Downloads\RazerSynapseInstaller_DT_V1.0.67.89 (1).exe
2018-03-14 00:07 - 2018-03-14 00:07 - 000000000 ____D C:\Users\James\AppData\Roaming\Synapse3
2018-03-14 00:04 - 2018-03-14 00:04 - 004197032 _____ C:\Users\James\Downloads\RazerSynapseInstaller_DT_V1.0.67.89.exe
2018-03-13 23:52 - 2018-03-13 23:52 - 026194416 _____ (Razer USA Ltd) C:\Users\James\Downloads\Razer_Synapse_Installer_v2.21.00.830.exe
2018-03-13 23:32 - 2018-03-13 23:32 - 000000000 ____D C:\Users\James\AppData\Local\remtunl
2018-03-13 23:12 - 2018-03-13 23:13 - 184000512 _____ C:\Users\James\Downloads\GameCaptureSetup_3.70.8.3008_x64.msi
2018-03-13 22:38 - 2018-03-13 22:38 - 000221662 _____ C:\Users\James\Downloads\MicrosoftProgram_Install_and_Uninstall.meta.diagcab
2018-03-13 22:31 - 2018-03-13 22:31 - 000022572 _____ C:\Users\James\Downloads\WhoLockMe200.zip
2018-03-13 22:31 - 2009-02-16 03:04 - 000036864 _____ (Bitmind / Pygmy Productions) C:\Users\James\Downloads\WhoLockMe.dll
2018-03-13 22:31 - 2009-02-16 03:02 - 000043008 _____ (Bitmind / Pygmy Productions ) C:\Users\James\Downloads\WhoLockMe.exe
2018-03-13 22:31 - 2009-02-16 03:01 - 000000393 _____ C:\Users\James\Downloads\Install.txt
2018-03-13 22:31 - 2002-06-28 11:06 - 000000030 _____ C:\Users\James\Downloads\Uninstall.bat
2018-03-13 22:31 - 2002-06-28 11:06 - 000000027 _____ C:\Users\James\Downloads\Install.bat
2018-03-13 22:24 - 2018-03-13 23:30 - 000000000 ____D C:\Users\James\AppData\Local\DELETE MEEEEEEE
2018-03-13 22:21 - 2018-03-13 22:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
2018-03-13 22:21 - 2018-03-13 22:28 - 000000000 ____D C:\Users\James\AppData\Roaming\Wise Uninstaller
2018-03-13 22:21 - 2018-03-13 22:21 - 003310600 _____ (WiseCleaner.com ) C:\Users\James\Downloads\WPUSetup.exe
2018-03-13 22:21 - 2018-03-13 22:21 - 000000000 ____D C:\Program Files (x86)\Wise
2018-03-13 22:12 - 2018-03-13 22:12 - 000000000 ____D C:\Users\James\AppData\Local\lshzkru
2018-03-13 22:05 - 2018-03-13 22:05 - 000000000 ____D C:\Users\James\AppData\Local\coktuix
2018-03-13 22:01 - 2018-03-13 22:01 - 000000000 ____D C:\Users\James\AppData\Local\cwebnuz
2018-03-13 21:54 - 2018-03-13 21:54 - 000000000 ____D C:\Users\James\AppData\Local\upkalcv
2018-03-13 21:51 - 2018-03-13 21:51 - 000000000 ____D C:\Users\James\AppData\Local\csihnmx
2018-03-13 21:43 - 2018-03-13 21:43 - 000000000 ____D C:\Users\James\AppData\Local\lsdenao
2018-03-13 21:35 - 2018-03-13 21:35 - 000000000 ____D C:\Users\James\AppData\Local\exhbavt
2018-03-13 21:17 - 2018-03-13 21:17 - 000000000 ____D C:\Users\James\AppData\Local\svhxwku
2018-03-13 21:01 - 2018-03-13 21:01 - 000000000 ____D C:\Users\James\AppData\Local\remhnot
2018-03-13 20:56 - 2018-03-13 20:56 - 000000000 ____D C:\Users\James\AppData\Local\seitnzw
2018-03-13 20:52 - 2018-03-13 20:52 - 000000000 ____D C:\Users\James\AppData\Local\vdnhort
2018-03-13 20:41 - 2018-03-13 20:41 - 000000000 ____D C:\Users\James\AppData\Local\sbadtuc
2018-03-13 20:37 - 2018-03-13 20:37 - 000167034 _____ C:\Users\James\Desktop\fileassassin-setup-1.06.exe
2018-03-13 20:37 - 2018-03-13 20:37 - 000001128 _____ C:\Users\Public\Desktop\FileASSASSIN.lnk
2018-03-13 20:37 - 2018-03-13 20:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN
2018-03-13 20:37 - 2018-03-13 20:37 - 000000000 ____D C:\Program Files (x86)\FileASSASSIN
2018-03-13 20:33 - 2018-03-13 20:33 - 000000000 ____D C:\Users\James\AppData\Local\tinhblr
2018-03-13 20:28 - 2018-03-16 16:15 - 000101600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2018-03-13 20:27 - 2018-03-18 13:25 - 000000000 ___DC C:\AdwCleaner
2018-03-13 20:26 - 2018-03-13 20:26 - 000000000 ____D C:\Users\James\AppData\Local\dtkzcwb
2018-03-13 20:17 - 2018-03-13 20:17 - 000000000 ____D C:\Users\James\AppData\Local\csivgzp
2018-03-13 20:15 - 2018-03-13 20:15 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-03-13 20:15 - 2018-03-13 20:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-03-13 20:15 - 2018-01-18 09:03 - 000076200 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2018-03-13 20:14 - 2018-03-13 20:14 - 000000000 ____D C:\Users\James\AppData\Local\rtizhno
2018-03-13 20:00 - 2018-03-13 20:00 - 000000000 ____D C:\Users\James\AppData\Local\snalmcu
2018-03-13 19:59 - 2018-03-18 13:26 - 000109800 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2018-03-13 19:59 - 2018-03-13 21:53 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-03-13 19:59 - 2018-03-13 21:53 - 000193248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-03-13 19:51 - 2018-03-13 19:51 - 000000000 ____D C:\Users\James\AppData\Local\reauixb
2018-03-13 19:50 - 2018-03-13 19:50 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7FA755DF.sys
2018-03-13 19:47 - 2018-03-13 19:47 - 000000000 ____D C:\Users\James\AppData\Local\useclig
2018-03-13 19:42 - 2018-03-13 19:42 - 000000000 ____D C:\Users\James\AppData\Local\avktrwg
2018-03-13 19:41 - 2018-03-13 22:04 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-03-13 19:40 - 2018-03-13 19:40 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\13FE4E4B.sys
2018-03-13 19:40 - 2018-03-13 19:40 - 000000000 ____D C:\WINDOWS\pss
2018-03-13 19:37 - 2018-03-13 19:37 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\501C4C5E.sys
2018-03-13 19:36 - 2018-03-13 19:36 - 000000000 ____D C:\Users\James\AppData\Local\mbopakd
2018-03-13 19:35 - 2018-03-13 19:35 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\0E464A67.sys
2018-03-13 19:33 - 2018-03-13 19:33 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\737B494E.sys
2018-03-13 19:29 - 2018-03-13 19:29 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5F7745AF.sys
2018-03-13 19:26 - 2018-03-13 19:26 - 000000000 ____D C:\Users\James\AppData\Local\iabotxw
2018-03-13 19:25 - 2018-03-13 19:25 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\165C430E.sys
2018-03-13 19:12 - 2018-03-13 19:13 - 000061324 ____C C:\TDSSKiller.3.1.0.16_13.03.2018_19.12.20_log.txt
2018-03-13 18:38 - 2018-03-13 18:38 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5E901E86.sys
2018-03-13 18:38 - 2018-03-13 18:38 - 000000000 ____D C:\Users\James\AppData\Local\csahxpz
2018-03-13 18:22 - 2018-03-13 18:22 - 000000000 ____D C:\Users\James\AppData\Local\spckeio
2018-03-13 18:21 - 2018-03-13 18:21 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\4C431212.sys
2018-03-13 18:08 - 2018-03-13 18:08 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5B200833.sys
2018-03-13 17:46 - 2018-03-13 17:46 - 000250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\545876BC.sys
2018-03-13 17:46 - 2018-03-13 17:46 - 000000000 ____D C:\Users\James\AppData\Local\avkcglo
2018-03-13 17:45 - 2018-03-13 20:32 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2018-03-13 17:42 - 2018-03-15 11:30 - 000000000 ____D C:\Users\James\AppData\Local\sbditrw
2018-03-13 17:39 - 2018-03-18 13:34 - 000000000 ____D C:\Users\James\AppData\Local\avarnbi
2018-03-13 17:39 - 2018-03-13 17:39 - 000000000 ____D C:\Users\James\AppData\Local\snidmcw
2018-03-13 17:38 - 2018-03-18 13:25 - 002888704 _____ (TOSHIBA CORPORATION) C:\WINDOWS\system32\vskgborsvc.exe
2018-03-13 17:38 - 2018-03-13 17:38 - 000000000 ____D C:\WINDOWS\SysWOW64\avdmtru
2018-03-13 17:38 - 2018-03-13 17:38 - 000000000 ____D C:\WINDOWS\system32\avdmtru
2018-03-13 17:38 - 2018-03-13 17:38 - 000000000 ____D C:\Users\James\AppData\Roaming\et
2018-03-13 17:34 - 2018-03-13 17:34 - 000003970 _____ C:\WINDOWS\System32\Tasks\injectors invades
2018-03-13 17:34 - 2018-03-13 17:34 - 000003936 _____ C:\WINDOWS\System32\Tasks\sparklers
2018-03-13 17:34 - 2018-03-13 17:34 - 000003846 _____ C:\WINDOWS\System32\Tasks\gainjectors invadesinjectors invades
2018-03-13 17:34 - 2018-03-13 17:34 - 000003796 _____ C:\WINDOWS\System32\Tasks\gasparklerssparklers
2018-03-13 17:34 - 2018-03-13 17:34 - 000000012 _____ C:\WINDOWS\b44418343
2018-03-13 06:18 - 2018-03-13 06:18 - 000041223 _____ C:\WINDOWS\uninstaller.dat
2018-03-13 06:18 - 2018-03-13 06:18 - 000014040 _____ C:\WINDOWS\system32\Drivers\2477cb13558fac6fbeb75bee702d6a38.sys
2018-03-12 09:55 - 2018-03-12 09:55 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6
2018-03-12 09:55 - 2018-03-12 09:55 - 000000000 ____D C:\Users\James\AppData\Local\Package Cache
2018-03-11 22:06 - 2018-03-11 22:06 - 000000000 ____D C:\Users\James\.idlerc
2018-03-11 22:06 - 2018-03-11 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
2018-03-11 22:05 - 2018-03-11 22:08 - 000000000 ___DC C:\Python27
2018-03-10 12:53 - 2018-03-10 21:28 - 000000000 ____D C:\Users\James\Desktop\Sea Pics
2018-03-09 20:23 - 2018-03-09 20:23 - 000000000 ____D C:\Users\James\Documents\Holotech
2018-03-09 20:22 - 2018-03-09 20:22 - 000002817 _____ C:\WINDOWS\unins000.dat
2018-03-09 20:22 - 2018-03-09 20:21 - 001193161 _____ C:\WINDOWS\unins000.exe
2018-03-09 20:22 - 2015-09-02 08:28 - 000034136 _____ (Adoriasoft LLC) C:\WINDOWS\system32\Drivers\Phosgene.sys
2018-03-09 19:40 - 2018-03-09 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2018-03-09 19:36 - 2018-03-09 19:36 - 000000000 ____D C:\Program Files (x86)\directx
2018-03-09 19:22 - 2018-03-09 19:22 - 000000222 _____ C:\Users\James\Desktop\FaceRig.url
2018-03-08 18:06 - 2018-03-08 18:06 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2018-03-07 20:15 - 2018-03-17 11:34 - 000000000 ____D C:\Users\James\Desktop\Twitch Pics
2018-03-07 15:44 - 2018-03-16 16:24 - 000000000 ____D C:\Users\James\AppData\Roaming\Elgato
2018-03-07 15:44 - 2018-03-16 16:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elgato
2018-03-07 15:44 - 2018-03-16 16:22 - 000000000 ____D C:\Program Files\Elgato
2018-03-07 15:44 - 2018-03-07 15:44 - 000001145 _____ C:\Users\Public\Desktop\Stream Deck.lnk
2018-03-07 15:44 - 2018-03-07 15:44 - 000000000 ____D C:\ProgramData\Elgato
2018-03-07 15:44 - 2018-03-07 15:44 - 000000000 ____D C:\Program Files (x86)\OBS Studio - FTL
2018-03-07 15:26 - 2018-03-13 22:25 - 000000000 ____D C:\Users\James\AppData\Local\xulrunner
2018-03-07 08:35 - 2018-03-06 00:05 - 000380768 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-03-05 18:07 - 2018-03-05 18:07 - 000000000 ____D C:\Users\James\AppData\LocalLow\Zoink Games
2018-03-05 18:06 - 2018-03-05 18:06 - 000001159 _____ C:\Users\Public\Desktop\Fe.lnk
2018-03-05 18:06 - 2018-03-05 18:06 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2018-03-05 18:06 - 2018-03-05 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fe
2018-03-05 18:06 - 2018-03-05 18:06 - 000000000 ____D C:\ProgramData\Electronic Arts
2018-03-05 18:02 - 2018-03-05 18:02 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-03-05 18:01 - 2018-03-12 18:51 - 000000000 ____D C:\Program Files (x86)\Origin
2018-03-05 18:01 - 2018-03-08 01:47 - 000000000 ____D C:\Users\James\AppData\Roaming\Origin
2018-03-05 18:01 - 2018-03-05 18:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2018-03-05 18:00 - 2018-03-08 01:47 - 000000000 ____D C:\ProgramData\Origin
2018-03-05 18:00 - 2018-03-05 18:02 - 000000000 ____D C:\Users\James\AppData\Local\Origin
2018-03-05 18:00 - 2018-03-05 18:00 - 000000000 ____D C:\Users\James\.Origin
2018-03-04 12:47 - 2018-03-04 12:47 - 000001032 _____ C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adobe Connect.lnk
2018-03-03 12:08 - 2018-03-03 12:09 - 000000000 ___DC C:\DeepBot - Twitch Streamer Assistant
2018-03-03 12:08 - 2018-03-03 12:08 - 000000827 _____ C:\Users\Public\Desktop\DeepBot.lnk
2018-03-03 12:08 - 2018-03-03 12:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeepBot
2018-03-03 12:07 - 2018-03-03 12:08 - 000000000 ____D C:\Users\James\AppData\Roaming\DeepBot.tv
2018-03-01 09:44 - 2018-03-01 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch Test
2018-02-25 13:22 - 2018-02-25 13:22 - 000001453 _____ C:\Users\James\AppData\Local\recently-used.xbel
2018-02-25 13:14 - 2018-02-25 13:22 - 000000000 ____D C:\Users\James\AppData\Local\gtk-2.0
2018-02-25 13:08 - 2018-02-25 13:44 - 000000000 ____D C:\Users\James\.gimp-2.8
2018-02-25 13:08 - 2018-02-25 13:08 - 000000000 ____D C:\Users\James\AppData\Local\gegl-0.2
2018-02-25 13:08 - 2018-02-25 13:08 - 000000000 ____D C:\Users\James\AppData\Local\fontconfig
2018-02-25 13:06 - 2018-02-25 13:06 - 000000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2018-02-25 13:06 - 2018-02-25 13:06 - 000000000 ____D C:\Program Files\GIMP 2
2018-02-23 15:24 - 2018-02-23 15:24 - 000000000 ____D C:\Users\James\AppData\LocalLow\Gamers4Gamers Team
2018-02-23 14:30 - 2018-02-23 14:30 - 000000222 _____ C:\Users\James\Desktop\Escape The Pacific.url
2018-02-22 23:38 - 2018-02-22 23:38 - 000000000 ____D C:\Users\James\AppData\Roaming\MonoDevelop-Unity-5.0
2018-02-22 23:38 - 2018-02-22 23:38 - 000000000 ____D C:\Users\James\AppData\Local\MonoDevelop-Unity-5.0
2018-02-22 23:16 - 2018-02-25 14:03 - 000000000 ____D C:\Users\James\Documents\TestProject
2018-02-22 17:34 - 2018-02-22 17:34 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-02-22 13:11 - 2018-02-22 23:16 - 000000000 ____D C:\Users\James\AppData\LocalLow\DefaultCompany
2018-02-21 11:30 - 2018-02-20 10:28 - 000000232 ___SH C:\Users\Public\Libraries.ini
2018-02-21 09:53 - 2018-02-21 09:54 - 000000000 ____D C:\Users\James\AppData\Roaming\Notepad++
2018-02-21 09:53 - 2018-02-21 09:53 - 000001092 _____ C:\Users\Public\Desktop\Notepad++.lnk
2018-02-21 09:53 - 2018-02-21 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2018-02-21 09:53 - 2018-02-21 09:53 - 000000000 ____D C:\Program Files (x86)\Notepad++
2018-02-21 09:33 - 2018-02-21 09:53 - 000000000 ____D C:\Program Files\Notepad++
2018-02-21 09:33 - 2018-02-21 09:51 - 000000000 ____D C:\Users\James\AppData\Local\Notepad++
2018-02-19 00:42 - 2018-02-19 00:42 - 000001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2018.lnk
2018-02-18 23:43 - 2018-03-18 13:24 - 000000000 ____D C:\Users\James\AppData\Roaming\slobs-client
2018-02-18 23:43 - 2018-02-18 23:43 - 000001976 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Streamlabs OBS.lnk
2018-02-18 23:43 - 2018-02-18 23:43 - 000001964 _____ C:\Users\Public\Desktop\Streamlabs OBS.lnk
2018-02-18 23:43 - 2018-02-18 23:43 - 000000000 ____D C:\ProgramData\Streamlabs OBS
2018-02-18 23:42 - 2018-03-16 16:10 - 000000000 ____D C:\Program Files\Streamlabs OBS
2018-02-17 21:53 - 2018-02-19 00:20 - 000000000 ____D C:\Users\James\AppData\Roaming\streamlabels
2018-02-17 21:53 - 2018-02-17 21:53 - 000002437 _____ C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StreamLabels.lnk
2018-02-17 03:11 - 2018-03-17 21:51 - 000099840 ___SH C:\Users\James\Desktop\Thumbs.db
2018-02-16 16:04 - 2018-02-16 17:10 - 000000000 ____D C:\Users\James\Documents\Shared
2018-02-16 15:52 - 2018-02-16 16:04 - 000000000 ___DC C:\Shared
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-18 13:35 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-03-18 13:35 - 2017-09-29 09:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-03-18 13:32 - 2017-02-10 22:49 - 000000000 ____D C:\Users\James\AppData\Local\CrashDumps
2018-03-18 13:31 - 2017-12-21 21:30 - 001927538 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-03-18 13:27 - 2018-01-07 16:31 - 000000000 ____D C:\ProgramData\Logishrd
2018-03-18 13:27 - 2017-04-29 17:31 - 000000000 ____D C:\Program Files (x86)\Steam
2018-03-18 13:26 - 2017-06-08 22:15 - 000000000 ____D C:\ProgramData\NVIDIA
2018-03-18 13:26 - 2017-01-27 21:21 - 000000000 __SHD C:\Users\James\IntelGraphicsProfiles
2018-03-18 13:25 - 2017-12-21 21:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-03-18 13:25 - 2017-09-29 04:45 - 023592960 _____ C:\WINDOWS\system32\config\HARDWARE
2018-03-18 13:25 - 2017-09-29 04:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-03-18 13:24 - 2017-01-27 19:59 - 000000000 ____D C:\Users\James\AppData\Local\Battle.net
2018-03-18 12:21 - 2017-01-27 16:24 - 000000000 ____D C:\Users\James\AppData\Local\Adobe
2018-03-18 12:15 - 2017-03-20 19:23 - 000000000 ____D C:\Users\James\AppData\Roaming\vlc
2018-03-18 11:58 - 2017-12-21 21:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-03-18 08:44 - 2017-03-18 17:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-03-17 20:56 - 2018-01-01 16:07 - 000000000 ____D C:\Users\James\AppData\Local\PlaceholderTileLogoFolder
2018-03-17 20:36 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-03-17 20:31 - 2017-12-21 21:22 - 000000000 ____D C:\Users\James\AppData\Local\Packages
2018-03-17 19:23 - 2017-09-29 09:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-03-17 12:16 - 2017-04-28 18:14 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm
2018-03-17 11:43 - 2017-01-27 19:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-03-17 09:58 - 2017-03-12 15:09 - 000000000 ____D C:\Users\James\Documents\Unreal Projects
2018-03-16 23:32 - 2017-08-13 12:52 - 000002307 _____ C:\Users\James\Desktop\Innkeeper.lnk
2018-03-16 23:32 - 2017-08-13 12:52 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Innkeeper
2018-03-16 23:32 - 2017-08-13 12:52 - 000000000 ____D C:\Users\James\AppData\Local\Innkeeper
2018-03-16 23:32 - 2017-01-27 23:57 - 000000000 ____D C:\Users\James\AppData\Local\SquirrelTemp
2018-03-16 21:23 - 2017-01-28 11:40 - 000000000 ____D C:\Program Files (x86)\Overwatch
2018-03-16 20:43 - 2017-12-21 21:20 - 000433520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-03-16 20:42 - 2017-03-20 19:36 - 000000000 ____D C:\Users\James\AppData\Local\61023390585382fd6c7a1fc4e14e4af9
2018-03-16 20:34 - 2018-01-21 22:02 - 000000000 ____D C:\Users\James\AppData\LocalLow\Mozilla
2018-03-16 20:34 - 2018-01-21 22:02 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-03-16 20:32 - 2017-12-21 21:26 - 000003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-03-16 20:32 - 2017-12-21 21:26 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-03-16 20:24 - 2017-01-29 13:01 - 000000000 ____D C:\Users\James\AppData\Roaming\obs-studio
2018-03-16 16:22 - 2017-09-29 09:44 - 000000000 ____D C:\WINDOWS\INF
2018-03-15 15:50 - 2018-01-22 23:08 - 000000000 ____D C:\Program Files (x86)\GtkSharp
2018-03-15 15:19 - 2017-01-27 21:20 - 000000000 ____D C:\Users\James\AppData\Local\Razer
2018-03-14 13:25 - 2016-09-06 18:59 - 000206496 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2018-03-14 09:08 - 2017-06-08 22:14 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-03-14 09:08 - 2017-06-08 22:14 - 000000000 ____D C:\WINDOWS\system32\DAX2
2018-03-14 09:08 - 2017-01-28 08:21 - 000555592 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\e1d65x64.sys
2018-03-14 09:08 - 2017-01-28 08:20 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2018-03-14 09:08 - 2017-01-28 08:19 - 005995944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2018-03-14 09:08 - 2017-01-28 08:19 - 003561920 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2018-03-14 09:08 - 2017-01-28 08:19 - 003509192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2018-03-14 09:08 - 2017-01-28 08:19 - 003410832 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2018-03-14 09:08 - 2017-01-28 08:19 - 000192976 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2018-03-14 09:08 - 2017-01-28 08:19 - 000023688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2018-03-14 09:06 - 2017-01-27 16:22 - 000905736 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2018-03-14 02:02 - 2017-01-27 22:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2018-03-13 22:40 - 2017-01-27 22:32 - 000000000 ____D C:\Users\James\AppData\Local\ElevatedDiagnostics
2018-03-13 22:32 - 2017-05-24 06:52 - 000007601 _____ C:\Users\James\AppData\Local\resmon.resmoncfg
2018-03-13 21:41 - 2017-12-21 21:21 - 000000000 ____D C:\Users\James
2018-03-13 20:15 - 2017-03-20 19:38 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-03-13 18:46 - 2017-03-05 16:29 - 000000000 ___RD C:\Users\James\Creative Cloud Files
2018-03-13 10:31 - 2018-02-05 13:14 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2018-03-13 10:31 - 2018-02-02 13:53 - 000002714 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-ATKINSON-James
2018-03-13 10:31 - 2017-12-21 21:26 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-03-13 09:48 - 2017-02-02 15:30 - 000000000 ____D C:\ProgramData\Package Cache
2018-03-13 09:47 - 2017-10-13 19:20 - 000000877 _____ C:\Users\Public\Desktop\Battlestate Games Launcher.lnk
2018-03-13 09:47 - 2017-10-13 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlestate Games
2018-03-08 18:06 - 2017-02-23 19:01 - 000000000 ____D C:\Users\James\AppData\Roaming\EasyAntiCheat
2018-03-08 02:24 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-03-08 02:05 - 2017-01-27 23:57 - 000000000 ____D C:\Users\James\AppData\Roaming\discord
2018-03-07 08:36 - 2018-02-05 11:11 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-03-07 08:36 - 2018-02-05 11:11 - 000001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2018-03-07 08:36 - 2018-02-05 11:11 - 000001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-03-07 08:36 - 2017-06-06 12:40 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2018-03-06 17:44 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-03-06 17:37 - 2017-06-29 18:16 - 000000294 _____ C:\WINDOWS\Tasks\{61023390-5853-82FD-6C7A-1FC4E14E4AF9}.job
2018-03-06 17:36 - 2018-01-26 18:46 - 000003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-03-06 17:36 - 2017-12-21 21:26 - 000003824 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-03-06 17:36 - 2017-12-21 21:26 - 000003458 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000003356 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3C2489C4-3B20-4018-ADC8-DC4302210AA7}
2018-03-06 17:36 - 2017-12-21 21:26 - 000003304 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task
2018-03-06 17:36 - 2017-12-21 21:26 - 000003236 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000003178 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2018-03-06 17:36 - 2017-12-21 21:26 - 000003152 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-03-06 17:36 - 2017-12-21 21:26 - 000003044 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000003016 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002974 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002920 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2940490528-2556188224-4051809522-1001
2018-03-06 17:36 - 2017-12-21 21:26 - 000002898 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002846 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002820 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-ATKINSON-James
2018-03-06 17:36 - 2017-12-21 21:26 - 000002804 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002766 _____ C:\WINDOWS\System32\Tasks\{61023390-5853-82FD-6C7A-1FC4E14E4AF9}
2018-03-06 17:36 - 2017-12-21 21:26 - 000002712 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachineDaily
2018-03-06 17:36 - 2017-12-21 21:26 - 000002594 _____ C:\WINDOWS\System32\Tasks\SamsungMagician
2018-03-06 17:36 - 2017-12-21 21:26 - 000002572 _____ C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine
2018-03-06 17:36 - 2017-12-21 21:26 - 000002316 _____ C:\WINDOWS\System32\Tasks\{3ACAFE6F-850C-41DF-9B33-088704E3CFD7}
2018-03-06 00:05 - 2018-02-05 11:11 - 001026696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000460520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000380528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000343752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000227504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000215320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000205976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000199440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000196648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000146656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000110328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000084368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000057680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2018-03-06 00:05 - 2018-02-05 11:11 - 000046968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-03-06 00:03 - 2018-01-21 22:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-04 14:31 - 2018-02-10 23:27 - 000000000 ____D C:\Users\James\Documents\Visual Studio 2017
2018-03-04 12:47 - 2017-01-28 08:00 - 000000000 ____D C:\Users\James\AppData\Roaming\Adobe
2018-03-04 01:28 - 2017-01-28 08:17 - 000000000 ____D C:\Users\James\AppData\Local\Comms
2018-02-26 23:37 - 2018-01-21 22:02 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-26 18:03 - 2018-01-26 18:46 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-02-25 13:14 - 2017-04-30 12:56 - 000000000 ____D C:\Users\James\.thumbnails
2018-02-22 23:16 - 2018-01-22 23:32 - 000000000 ____D C:\ProgramData\Unity
2018-02-22 13:11 - 2018-01-22 23:32 - 000000000 ____D C:\Users\James\AppData\Roaming\Unity
2018-02-22 13:11 - 2018-01-22 23:32 - 000000000 ____D C:\Users\James\AppData\LocalLow\Unity
2018-02-21 13:51 - 2018-02-15 17:22 - 000000000 ____D C:\Users\James\AppData\Roaming\CC
2018-02-21 11:26 - 2017-03-05 16:41 - 000000000 ____D C:\Users\James\AppData\Local\UnrealEngine
2018-02-19 21:14 - 2018-01-21 22:02 - 000000000 ____D C:\Users\James\AppData\Local\Mozilla
2018-02-19 19:39 - 2017-08-18 07:38 - 000000000 ____D C:\Program Files (x86)\Overwolf
2018-02-19 01:16 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\rescache
2018-02-19 00:42 - 2017-03-05 16:27 - 000000000 ____D C:\Program Files\Adobe
2018-02-19 00:39 - 2017-05-19 19:31 - 000000000 __RHD C:\Users\James\chaosbubba63@gmail.com Creative Cloud Files
2018-02-19 00:38 - 2017-12-17 22:34 - 000001302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2018-02-19 00:38 - 2017-12-17 22:34 - 000001290 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2018-02-19 00:37 - 2017-09-29 09:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-02-19 00:31 - 2017-12-21 21:27 - 000000000 ___RD C:\Users\James\3D Objects
2018-02-19 00:31 - 2017-01-28 08:00 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-02-19 00:30 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\TextInput
2018-02-19 00:30 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-02-19 00:30 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-02-19 00:30 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-02-19 00:30 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-02-19 00:29 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-02-19 00:24 - 2017-01-27 16:24 - 000000000 ____D C:\Program Files (x86)\Adobe
2018-02-17 21:02 - 2017-02-18 10:08 - 000000000 ____D C:\Users\James\Desktop\Pics
2018-02-16 08:22 - 2017-09-29 09:46 - 000000000 ___RD C:\WINDOWS\PrintDialog
==================== Files in the root of some directories =======
2017-03-05 16:29 - 2017-06-25 20:37 - 000000033 _____ () C:\Users\James\AppData\Roaming\AdobeWLCMCache.dat
2017-01-31 18:19 - 2017-05-22 15:44 - 000003973 _____ () C:\Users\James\AppData\Roaming\VoiceMeeterDefault.xml
2017-06-30 01:16 - 2017-12-19 01:16 - 000000436 _____ () C:\Users\James\AppData\Roaming\WB.CFG
2017-06-11 12:39 - 2017-08-28 21:04 - 000001456 _____ () C:\Users\James\AppData\Local\Adobe Save for Web 13.0 Prefs
2017-12-18 10:16 - 2017-12-19 01:16 - 000000052 _____ () C:\Users\James\AppData\Local\fdb94zxvtr
2017-12-13 09:16 - 2017-12-13 09:16 - 000000052 _____ () C:\Users\James\AppData\Local\NHBvvvvvvv
2018-02-25 13:22 - 2018-02-25 13:22 - 000001453 _____ () C:\Users\James\AppData\Local\recently-used.xbel
2017-05-24 06:52 - 2018-03-13 22:32 - 000007601 _____ () C:\Users\James\AppData\Local\resmon.resmoncfg
2017-02-17 17:18 - 2016-11-23 09:37 - 000000570 _____ () C:\Users\James\AppData\Local\TroubleshooterConfig.json
Files to move or delete:
====================
C:\Windows\Tasks\{61023390-5853-82FD-6C7A-1FC4E14E4AF9}.job
Some files in TEMP:
====================
2018-03-14 19:36 - 2018-03-17 19:55 - 000000000 _____ () C:\Users\James\AppData\Local\Temp\00e481b5e22dbe1f649fcddd505d3eb7.dll
2018-03-15 16:46 - 2018-03-17 19:55 - 000000017 _____ () C:\Users\James\AppData\Local\Temp\a2831f811ebd7aeaf562391d8c4fa776.dll
2018-03-14 19:37 - 2018-03-14 19:37 - 000000017 _____ () C:\Users\James\AppData\Local\Temp\f9ac2b58a2d2a15ad95395819d560aaf.dll
2018-03-13 19:57 - 2018-03-13 19:56 - 069445584 _____ (Malwarebytes ) C:\Users\James\AppData\Local\Temp\mb3-setup-consumer-3.4.4.2398-1.0.322-1.0.4326.exe
2018-03-14 00:54 - 2018-03-14 00:54 - 000018256 _____ (Razer Inc.) C:\Users\James\AppData\Local\Temp\RazerInstallerCleaner.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
C:\WINDOWS\system32\drivers\wehbehko.sys -> Access Denied <======= ATTENTION
LastRegBack: 2018-03-16 09:29
==================== End of FRST.txt ============================
The attatched file is a quick video of the redirect. It doesn't just happen when i search what i did, it is all searches