Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

DNS Hacked / home IP changes from time to time


  • This topic is locked This topic is locked
15 replies to this topic

#1 matzy24

matzy24

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 19 May 2018 - 11:23 PM

Hello there!

 

I've had this issue for about 1 month now,

 

Whenever I leave my PC on overnight without touching it, Ill wake up in the morning and see that my IP has changed.

 

I use Windows 7 64 bit, I have tried multiple anti malwares/virus such as  Malwarebytes or Adwcleaner but found nothing wrong , and also changed my DNS to google's, but the issue keeps repeating himself and I fear for my personal data.

 

When I notice my IP change, my DNS seems to stay the same though (it's still set to google's). This also only happens on my PC, and not on my phone for example.

 

Here are some of the IPs that I have when I leave my PC on for an extended amount of time without touching it,

Please note that this only happens if I leave my PC untouched, and not if I am on my PC for lets say 10+hours.

 

192.119.166.61

213.109.79.255

 

 

Here is the FRST log:

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by Mathias (administrator) on MATHIAS-PC (20-05-2018 06:13:39)
Running from C:\Users\Mathias\Downloads
Loaded Profiles: Mathias (Available Profiles: Mathias)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\afwServ.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Tyrrrz) C:\Program Files\LightBulb\LightBulb.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6160\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.10047\Battle.net Helper.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.10047\Battle.net Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-01-28] (Greenshot)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [291568 2018-05-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3643712 2018-05-14] (Dropbox, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27831240 2018-03-13] (Skype Technologies S.A.)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-04-22] (Piriform Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Spotify Web Helper] => C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-05-13] (Spotify Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_pepper.exe [1366528 2018-04-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {18fd562b-3245-11e5-aa07-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f493c-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f498f-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {44342017-353d-11e5-a162-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {45750a67-3553-11e5-959a-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {64352006-dae1-11e5-859f-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {9c141150-14de-11e5-83b7-08606e7f7909} - J:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571c1-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571d8-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b455b6d7-0700-11e7-b3bf-08606e7f7909} - V:\SETUP.EXE
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {ecc179be-d186-11e6-9563-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f1182eda-b705-11e6-ae40-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f9b774da-35d5-11e5-ae33-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-18\...\Run: [Bitdefender Wallet Agent] => "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
HKU\S-1-5-18\...\Run: [Bitdefender Wallet] => "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
HKU\S-1-5-18\...\Run: [Bitdefender Agent de l'application Wallet] => "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LightBulb.lnk [2018-05-03]
ShortcutTarget: LightBulb.lnk -> C:\Program Files\LightBulb\LightBulb.exe (Tyrrrz)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{631AE80A-9154-44F5-89CE-7A97E69B34A2}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{C597395B-71F3-49E5-A652-C7FF8533FDDC}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{EBBF3FA7-C4F8-4F21-ABD0-FF9692E8FA3A}: [NameServer] 8.8.8.8,8.8.4.4
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {502199DC-5DEF-4BA3-9CB8-24786EDB4C6C} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-22] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-22] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-650800747-3769124233-4161216065-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2018-03-07] (Skype Technologies)
 
FireFox:
========
FF DefaultProfile: pundg3st.default
FF ProfilePath: C:\Users\Mathias\AppData\Roaming\Mozilla\Firefox\Profiles\pundg3st.default [2018-05-20]
FF HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Mathias\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-27] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-650800747-3769124233-4161216065-1000: @acestream.net/acestreamplugin,version=3.1.6 -> C:\Users\Mathias\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default [2018-05-20]
CHR Extension: (BetterTTV) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-11-20]
CHR Extension: (Docs) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (uBlock Origin) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-05-18]
CHR Extension: (Recherche Google) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (ReChat for Twitch™) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipplilmaapjjklilmmaccfemdmhkoacd [2016-03-03]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (AVG SafePrice) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2018-05-18]
CHR Extension: (Ace Script) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-09-11]
CHR Extension: (Seen It) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmajkegnjcjcjehiindhfldkfeoifeff [2017-01-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-14]
CHR Extension: (Gmail) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-24]
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.Z2JOFQOYF6JEMSHN5YQCJYEJGA - C:\Users\Mathias\AppData\Local\Google\Chrome\Application\chrome.exe
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2016-06-08] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe [381824 2013-01-24] (ASUSTeK Computer Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [318328 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [430032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe [7670672 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-24] ()
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-05-14] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-08] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53680 2018-02-05] (AnchorFree Inc.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-02-06] ()
S3 ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [160768 2011-05-27] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 PAExec; C:\Windows\PAExec.exe [189112 2016-11-30] (Power Admin LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-19] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\TunesGoRetro\DriverInstall.exe [115856 2016-03-21] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-01-03] (AnchorFree Inc.)
S3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [32088 2013-06-02] ()
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2016-06-08] ()
S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2016-06-13] (MCCI Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1725800 2018-02-02] (BitDefender)
R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [189032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdrivera.sys [220600 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\System32\drivers\avgbidsha.sys [192536 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\System32\drivers\avgbloga.sys [336848 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\System32\drivers\avgbuniva.sys [50776 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\System32\drivers\avgHwid.sys [39352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [151504 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\Windows\System32\DRIVERS\avgNetNd6.sys [29944 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgNetSec; C:\Windows\System32\drivers\avgNetSec.sys [632640 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [103744 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [78352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [1020112 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [452904 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\Windows\System32\drivers\avgStm.sys [198368 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [373944 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [248336 2017-11-15] (BitDefender S.R.L. Bucharest, ROMANIA)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2016-11-29] (Echobit, LLC)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [67736 2017-04-06] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-04-24] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [58816 2018-04-22] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Resplendence Software Projects Sp.)
S3 sxseftyu; no ImagePath
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-03-01] (Anchorfree Inc.)
S3 ALSysIO; \??\C:\Users\Mathias\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBAudioVMAUXVAIOMME; system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [X]
S3 VBAudioVMVAIOMME; system32\DRIVERS\vbaudio_vmvaio64_win7.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-20 06:13 - 2018-05-20 06:13 - 000029531 _____ C:\Users\Mathias\Downloads\FRST.txt
2018-05-20 06:11 - 2018-05-20 06:13 - 000000000 ____D C:\FRST
2018-05-20 06:09 - 2018-05-20 06:09 - 002413056 _____ (Farbar) C:\Users\Mathias\Downloads\FRST64.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 016592322 _____ (The qBittorrent project) C:\Users\Mathias\Downloads\qbittorrent_4.1.0_setup.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\Program Files (x86)\qBittorrent
2018-05-19 08:26 - 2018-05-19 08:26 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\76576150.sys
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\Users\Mathias\Desktop\mbar
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-05-19 08:24 - 2018-05-19 08:24 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Mathias\Downloads\mbar-1.10.3.1001.exe
2018-05-19 08:24 - 2018-05-19 08:24 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-05-19 08:21 - 2018-05-19 08:21 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Mathias\Downloads\rkill.exe
2018-05-19 08:21 - 2018-05-19 08:21 - 000002512 _____ C:\Users\Mathias\Desktop\Rkill.txt
2018-05-19 08:19 - 2018-05-19 08:20 - 000002879 _____ C:\Users\Mathias\Downloads\FSS.txt
2018-05-19 08:19 - 2018-05-19 08:19 - 000899584 _____ (Farbar) C:\Users\Mathias\Downloads\FSS.exe
2018-05-18 21:33 - 2018-05-19 15:36 - 000004162 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update
2018-05-18 21:33 - 2018-05-18 21:33 - 001020112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000632640 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetSec.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000452904 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000377584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2018-05-18 21:33 - 2018-05-18 21:33 - 000373944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000336848 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000220600 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000198368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000192536 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000189032 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000151504 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000103744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000078352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000050776 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000039352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000029944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetNd6.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000001833 _____ C:\Users\Public\Desktop\AVG Internet Security.lnk
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Windows\System32\Tasks\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Local\Avg
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Program Files\Common Files\AVG
2018-05-18 21:32 - 2018-05-18 23:58 - 000000000 ____D C:\ProgramData\AVG
2018-05-18 21:32 - 2018-05-18 21:32 - 000000000 ____D C:\Program Files\AVG
2018-05-18 21:27 - 2018-05-18 21:27 - 007391672 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Mathias\Downloads\avg_internet_security_setup.exe
2018-05-15 02:36 - 2018-05-15 02:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-05-14 13:45 - 2018-05-14 13:45 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-05-14 13:45 - 2018-05-14 13:45 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-05-14 13:45 - 2018-05-14 13:45 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-05-14 13:45 - 2018-05-14 13:45 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-05-10 06:01 - 2018-04-23 20:57 - 000396960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 20:02 - 000348832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 005583552 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:35 - 000708288 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-10 06:01 - 2018-04-23 02:35 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 000154816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-05-10 06:01 - 2018-04-23 02:35 - 000095424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-05-10 06:01 - 2018-04-23 02:12 - 004047040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-05-10 06:01 - 2018-04-23 02:12 - 003958464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:10 - 000631640 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-05-10 06:01 - 2018-04-23 02:07 - 001665336 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000876032 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000512512 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:44 - 001314064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000582144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:32 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-05-10 06:01 - 2018-04-23 01:32 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-05-10 06:01 - 2018-04-23 01:32 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-05-10 06:01 - 2018-04-23 01:31 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-05-10 06:01 - 2018-04-23 01:27 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-05-10 06:01 - 2018-04-23 01:25 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-05-10 06:01 - 2018-04-23 01:23 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-05-10 06:01 - 2018-04-23 01:23 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-05-10 06:01 - 2018-04-23 01:22 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 01:19 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-05-10 06:01 - 2018-04-23 01:18 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-22 10:04 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:53 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:53 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-05-10 06:01 - 2018-04-22 09:40 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:39 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-05-10 06:01 - 2018-04-22 09:38 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:37 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:32 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-10 06:01 - 2018-04-22 09:31 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 09:30 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-05-10 06:01 - 2018-04-22 09:27 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 09:26 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-05-10 06:01 - 2018-04-22 09:24 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:18 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-05-10 06:01 - 2018-04-22 09:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:15 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 09:08 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-05-10 06:01 - 2018-04-22 09:08 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 09:07 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:03 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-05-10 06:01 - 2018-04-22 09:03 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-05-10 06:01 - 2018-04-22 08:57 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 08:56 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-05-10 06:01 - 2018-04-22 08:55 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-05-10 06:01 - 2018-04-22 08:54 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 08:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-05-10 06:01 - 2018-04-22 08:48 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:46 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:45 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 08:40 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-05-10 06:01 - 2018-04-22 08:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 08:39 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 08:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 08:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-05-10 06:01 - 2018-04-22 08:33 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:31 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-10 06:01 - 2018-04-22 08:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:22 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-10 06:01 - 2018-04-22 08:08 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:04 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:03 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-10 06:01 - 2018-04-18 18:03 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 18:03 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:51 - 000523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 17:51 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:41 - 000016896 _____ (Microsoft Corporation) C:\Windows\hh.exe
2018-05-10 06:01 - 2018-04-18 17:35 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hh.exe
2018-05-10 06:01 - 2018-04-11 18:38 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:38 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-10 06:01 - 2018-04-10 21:45 - 000634272 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-10 06:01 - 2018-04-10 18:36 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2018-05-10 06:01 - 2018-04-10 18:36 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2018-05-10 06:01 - 2018-04-10 18:35 - 001735168 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:34 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:33 - 001241600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:32 - 000487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2018-05-10 06:01 - 2018-04-10 17:54 - 003226112 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-10 06:01 - 2018-04-10 17:48 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-05-10 06:01 - 2018-04-07 18:41 - 000371392 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-05-10 06:01 - 2018-03-19 00:16 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-05-10 06:01 - 2018-03-19 00:11 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-05-10 06:01 - 2018-03-14 19:16 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-05-10 06:01 - 2018-03-14 19:07 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:57 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 002651648 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 03:54 - 2018-05-09 04:13 - 000000000 ____D C:\Users\Mathias\Desktop\picss
2018-05-09 03:54 - 2018-05-09 03:54 - 000000000 ____D C:\Users\Mathias\Desktop\Pics
2018-05-03 23:04 - 2018-05-03 23:04 - 000000000 __SHD C:\82ace7d6-0197-474d-bf4b-a2043e72329b
2018-05-03 00:47 - 2018-05-03 00:47 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 002099590 _____ (Alexey 'Tyrrrz' Golub ) C:\Users\Mathias\Downloads\LightBulb-Installer.exe
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\Program Files\LightBulb
2018-05-03 00:41 - 2018-05-03 00:41 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-05-03 00:41 - 2018-04-22 09:00 - 000132392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-05-03 00:41 - 2018-03-02 04:04 - 000828216 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000960312 _____ C:\Windows\system32\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000683832 _____ C:\Windows\system32\vulkaninfo.exe
2018-05-03 00:41 - 2018-03-02 04:03 - 000575800 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\unknown
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-05-03 00:39 - 2018-04-23 22:15 - 038468128 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 030740744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 016967016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-05-03 00:39 - 2018-04-23 22:15 - 001417304 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 001091336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000627232 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000518176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003962816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003494816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001990592 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001561352 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001467992 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001215064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 000420192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 040346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 035250776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 031271048 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 025984920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 013725560 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 011271400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 001157208 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000904904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000544472 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000462648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000182784 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000164952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000159896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000142632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 017776640 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 015189168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-05-03 00:39 - 2018-04-22 13:05 - 000058816 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2018-05-03 00:39 - 2018-04-12 05:28 - 000226288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2018-05-03 00:39 - 2018-04-12 05:28 - 000046064 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2018-05-02 21:38 - 2017-10-11 03:05 - 000050624 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2018-05-02 16:43 - 2018-05-02 18:37 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\StardewValley
2018-05-02 16:40 - 2018-05-02 16:40 - 000000202 _____ C:\Users\Mathias\Desktop\Stardew Valley.url
2018-05-01 22:23 - 2018-05-01 22:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashReportClient
2018-04-22 22:02 - 2018-04-24 00:30 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-04-22 21:59 - 2018-04-22 21:59 - 000000099 _____ C:\Users\Mathias\Desktop\hosts.txt
2018-04-22 21:58 - 2018-04-22 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-04-22 21:58 - 2018-03-19 12:57 - 000076192 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-04-22 21:56 - 2018-04-22 21:56 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Obsidium
2018-04-22 21:41 - 2018-04-22 21:41 - 000000000 ____D C:\Windows\system32\Drivers\etc\BACKUP
2018-04-22 21:37 - 2018-04-22 21:37 - 000030612 _____ C:\ProgramData\agent.uninstall.1524425855.bdinstall.bin
2018-04-22 21:36 - 2018-04-22 21:36 - 000011801 _____ C:\Users\Mathias\Downloads\Malwarebytes Premium 3.4.5.2467 RePack by KpoJIuK x86 x64 [2018, MULTILANG +RUS] [rutracker-5542038].torrent
2018-04-22 21:27 - 2018-04-22 21:27 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2018-04-22 21:25 - 2018-04-22 21:28 - 000000000 ____D C:\ProgramData\HitmanPro
2018-04-22 21:24 - 2018-04-22 21:24 - 000007363 _____ C:\Users\Mathias\Downloads\HitmanPro 3.8.0 Build 292 RePack by Norton46 [2018, Multi + Rus] [rutracker-5508724].torrent
2018-04-22 18:21 - 2018-04-22 18:21 - 018946171 _____ (The qBittorrent project) C:\Users\Mathias\Downloads\qbittorrent_4.0.4_setup.exe
2018-04-22 18:14 - 2018-04-22 18:14 - 000000000 ____D C:\ProgramData\Sophos
2018-04-22 18:11 - 2018-04-22 18:11 - 000002759 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk
2018-04-22 18:11 - 2018-04-22 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2018-04-22 18:11 - 2018-04-22 18:11 - 000000000 ____D C:\Program Files (x86)\Sophos
2018-04-22 18:07 - 2018-04-22 18:08 - 000000000 ____D C:\AdwCleaner
2018-04-22 18:06 - 2018-04-22 18:06 - 000319024 _____ C:\active_protection.txt
2018-04-22 18:05 - 2018-04-22 18:05 - 000035800 _____ C:\url_setting_definitions.txt
2018-04-22 17:33 - 2018-04-22 17:33 - 000002414 _____ C:\Users\Mathias\Desktop\fixlist.txt
2018-04-22 17:29 - 2018-04-22 17:29 - 007256272 _____ (Malwarebytes) C:\Users\Mathias\Downloads\adwcleaner_7.1.0.0.exe
2018-04-22 17:23 - 2018-04-22 17:23 - 195958672 _____ (Sophos Limited) C:\Users\Mathias\Downloads\Sophos Virus Removal Tool.exe
2018-04-22 14:37 - 2018-05-19 15:39 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-04-22 14:36 - 2018-04-22 14:36 - 007319960 _____ (AVAST Software) C:\Users\Mathias\Downloads\avast_internet_security_setup_online.exe
2018-04-22 14:25 - 2018-04-22 14:25 - 000000000 ____D C:\Quarantine
2018-04-22 14:22 - 2018-04-22 17:36 - 000000000 ____D C:\Program Files\stinger
2018-04-22 14:22 - 2018-04-22 14:22 - 016142923 _____ C:\Users\Mathias\Downloads\stinger64-epo.zip
2018-04-22 14:22 - 2018-04-22 14:22 - 000000000 ____D C:\Program Files\McAfee
2018-04-22 14:19 - 2018-04-22 14:36 - 000463956 _____ C:\TDSSKiller.3.1.0.16_22.04.2018_14.19.23_log.txt
2018-04-22 14:19 - 2018-04-22 14:19 - 004944584 _____ (AO Kaspersky Lab) C:\Users\Mathias\Downloads\tdsskiller.exe
2018-04-20 12:26 - 2018-05-18 05:37 - 000050688 ___SH C:\Users\Mathias\Desktop\Thumbs.db
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-20 06:10 - 2014-03-26 02:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Battle.net
2018-05-20 05:56 - 2013-01-24 15:43 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Skype
2018-05-20 03:40 - 2016-07-18 03:03 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-05-20 03:35 - 2014-09-13 03:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Adobe
2018-05-20 03:29 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-20 03:29 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-20 03:26 - 2009-07-14 07:13 - 000786662 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-20 03:26 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-05-20 03:20 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-20 03:19 - 2016-09-03 03:31 - 000000910 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-05-20 03:19 - 2016-09-03 03:31 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-05-20 03:19 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-19 16:10 - 2016-11-29 16:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\qBittorrent
2018-05-19 15:25 - 2013-09-13 03:02 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\vlc
2018-05-19 02:34 - 2016-09-03 03:31 - 000003908 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-05-19 02:34 - 2016-09-03 03:31 - 000003656 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-05-19 02:16 - 2018-01-21 11:32 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\obs-studio
2018-05-18 09:45 - 2018-01-20 03:35 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Twitch
2018-05-18 05:48 - 2013-03-11 05:30 - 000002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-17 19:49 - 2015-02-21 16:59 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\uTorrent
2018-05-17 19:18 - 2013-05-25 19:24 - 000000000 ____D C:\ProgramData\Package Cache
2018-05-17 15:17 - 2013-05-14 21:09 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-05-17 10:16 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Spotify
2018-05-17 06:27 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\Spotify
2018-05-17 04:21 - 2013-03-11 05:29 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 04:21 - 2013-03-11 05:29 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-16 05:20 - 2015-02-06 13:01 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-16 05:19 - 2017-04-13 23:31 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-15 21:44 - 2014-12-11 21:40 - 000000931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2018-05-15 02:36 - 2016-09-03 03:31 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-05-14 00:12 - 2013-09-15 17:04 - 000778784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-05-12 16:59 - 2015-03-29 04:19 - 000000000 ____D C:\Users\Mathias\AppData\Local\Greenshot
2018-05-10 20:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-05-10 17:15 - 2018-01-04 15:04 - 000477424 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-10 06:04 - 2013-08-02 03:00 - 000000000 ____D C:\Windows\system32\MRT
2018-05-10 06:02 - 2017-10-12 03:03 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-05-10 06:01 - 2013-02-20 22:59 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-05-07 17:23 - 2014-01-20 19:59 - 000003793 _____ C:\Users\Mathias\Desktop\Info 2015.txt
2018-05-07 01:08 - 2018-01-19 03:50 - 000000000 ____D C:\ProgramData\Epic
2018-05-05 11:36 - 2015-11-05 00:10 - 000000000 ____D C:\Users\Mathias\AppData\Local\Blizzard Entertainment
2018-05-03 22:59 - 2016-03-03 01:06 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashDumps
2018-05-03 22:59 - 2013-08-09 04:30 - 000000000 ____D C:\Windows\Minidump
2018-05-03 08:56 - 2016-11-30 16:02 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:01 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-05-03 00:41 - 2013-01-24 13:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-05-03 00:40 - 2016-12-03 16:51 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\NVIDIA
2018-05-03 00:40 - 2016-11-30 16:04 - 000000000 ____D C:\Users\Mathias\AppData\Local\NVIDIA
2018-05-02 21:39 - 2017-09-07 01:13 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:39 - 2016-11-30 13:43 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2017-01-18 12:53 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 19:22 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\discord
2018-05-01 22:59 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Local\Discord
2018-04-26 02:39 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-04-24 21:07 - 2014-05-20 02:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\OBS
2018-04-23 22:18 - 2016-11-30 16:03 - 000551968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2018-04-23 22:17 - 2016-11-30 16:03 - 000457064 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2018-04-23 22:14 - 2017-03-25 15:57 - 023242144 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2018-04-23 22:14 - 2016-11-30 16:02 - 020264664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2018-04-23 22:14 - 2016-11-30 16:02 - 000505744 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2018-04-23 22:12 - 2017-11-09 05:32 - 019010192 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 015620248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 004583296 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 004040904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-04-23 15:58 - 2013-01-24 16:54 - 000000000 ____D C:\ProgramData\AVAST Software
2018-04-22 21:58 - 2013-01-25 20:59 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-04-22 21:29 - 2013-02-13 22:07 - 000000000 ____D C:\Users\Mathias\AppData\Local\ElevatedDiagnostics
2018-04-22 21:24 - 2016-11-29 16:33 - 000000000 ____D C:\Users\Mathias\AppData\Local\qBittorrent
2018-04-22 18:28 - 2018-03-21 16:50 - 000000000 ____D C:\Users\Mathias\Desktop\Japan
2018-04-22 18:23 - 2014-04-21 23:38 - 000098760 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-04-22 18:23 - 2013-11-23 23:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-04-22 18:23 - 2013-07-14 03:11 - 000000000 ____D C:\Program Files (x86)\Java
2018-04-22 18:00 - 2018-03-02 16:21 - 000002798 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-04-22 18:00 - 2018-02-01 15:27 - 000003466 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-Mathias-PC-Mathias
2018-04-22 18:00 - 2017-11-10 10:35 - 000004482 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-04-22 18:00 - 2017-02-25 22:58 - 000003118 _____ C:\Windows\System32\Tasks\{C6CBAA2E-5095-4D11-8E9B-5F341F07E056}
2018-04-22 18:00 - 2016-06-08 17:58 - 000003278 _____ C:\Windows\System32\Tasks\{8E8DBD9E-5D9B-465F-A49C-DBDF139F570D}
2018-04-22 18:00 - 2015-04-03 09:18 - 000003510 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Mathias-PC-Mathias
2018-04-22 18:00 - 2015-03-11 14:46 - 000003090 _____ C:\Windows\System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732}
2018-04-22 18:00 - 2014-02-07 15:06 - 000003250 _____ C:\Windows\System32\Tasks\{310FB062-3DA0-42A9-B307-27910647E3B3}
2018-04-22 18:00 - 2013-07-10 16:12 - 000003052 _____ C:\Windows\System32\Tasks\{020BA8F0-8070-4656-930A-0C31A6DB8C45}
2018-04-22 18:00 - 2013-05-14 20:31 - 000003204 _____ C:\Windows\System32\Tasks\{CE904E11-AABB-4820-B2CE-E05461E82B4D}
2018-04-22 18:00 - 2013-01-25 19:07 - 000003420 _____ C:\Windows\System32\Tasks\{CC3F5369-D12C-43ED-BA83-8E7042A684D1}
2018-04-22 17:52 - 2015-09-07 14:59 - 000000000 ____D C:\Program Files\CCleaner
2018-04-22 13:15 - 2015-05-14 10:34 - 000000000 ____D C:\Program Files (x86)\VyprVPN
2018-04-22 13:05 - 2016-11-30 16:02 - 000041598 _____ C:\Windows\system32\nvinfo.pb
2018-04-22 08:52 - 2016-11-30 16:03 - 005947328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 002612808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 001768008 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000634304 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000451144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000124200 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000082880 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2018-04-20 12:46 - 2015-03-07 00:27 - 000000000 ____D C:\Users\Mathias\Documents\Heroes of the Storm
 
==================== Files in the root of some directories =======
 
2016-11-22 07:38 - 2017-01-25 17:55 - 000003272 _____ () C:\Users\Mathias\AppData\Roaming\VoiceMeeterDefault.xml
2013-08-04 04:10 - 2016-05-26 21:36 - 000000600 _____ () C:\Users\Mathias\AppData\Local\PUTTY.RND
2015-11-19 09:18 - 2016-11-27 10:10 - 000007605 _____ () C:\Users\Mathias\AppData\Local\Resmon.ResmonCfg
2008-02-05 15:28 - 2008-02-05 15:28 - 000000051 _____ () C:\Users\Mathias\AppData\Local\setup.txt
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2018-05-18 07:37
 
==================== End of FRST.txt ============================Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by Mathias (administrator) on MATHIAS-PC (20-05-2018 06:13:39)
Running from C:\Users\Mathias\Downloads
Loaded Profiles: Mathias (Available Profiles: Mathias)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\afwServ.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Tyrrrz) C:\Program Files\LightBulb\LightBulb.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6160\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.10047\Battle.net Helper.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.10047\Battle.net Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-01-28] (Greenshot)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [291568 2018-05-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3643712 2018-05-14] (Dropbox, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27831240 2018-03-13] (Skype Technologies S.A.)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-04-22] (Piriform Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Spotify Web Helper] => C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-05-13] (Spotify Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_pepper.exe [1366528 2018-04-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {18fd562b-3245-11e5-aa07-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f493c-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f498f-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {44342017-353d-11e5-a162-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {45750a67-3553-11e5-959a-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {64352006-dae1-11e5-859f-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {9c141150-14de-11e5-83b7-08606e7f7909} - J:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571c1-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571d8-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b455b6d7-0700-11e7-b3bf-08606e7f7909} - V:\SETUP.EXE
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {ecc179be-d186-11e6-9563-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f1182eda-b705-11e6-ae40-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f9b774da-35d5-11e5-ae33-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-18\...\Run: [Bitdefender Wallet Agent] => "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
HKU\S-1-5-18\...\Run: [Bitdefender Wallet] => "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
HKU\S-1-5-18\...\Run: [Bitdefender Agent de l'application Wallet] => "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LightBulb.lnk [2018-05-03]
ShortcutTarget: LightBulb.lnk -> C:\Program Files\LightBulb\LightBulb.exe (Tyrrrz)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{631AE80A-9154-44F5-89CE-7A97E69B34A2}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{C597395B-71F3-49E5-A652-C7FF8533FDDC}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{EBBF3FA7-C4F8-4F21-ABD0-FF9692E8FA3A}: [NameServer] 8.8.8.8,8.8.4.4
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {502199DC-5DEF-4BA3-9CB8-24786EDB4C6C} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-22] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-22] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-650800747-3769124233-4161216065-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2018-03-07] (Skype Technologies)
 
FireFox:
========
FF DefaultProfile: pundg3st.default
FF ProfilePath: C:\Users\Mathias\AppData\Roaming\Mozilla\Firefox\Profiles\pundg3st.default [2018-05-20]
FF HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Mathias\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-27] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-650800747-3769124233-4161216065-1000: @acestream.net/acestreamplugin,version=3.1.6 -> C:\Users\Mathias\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default [2018-05-20]
CHR Extension: (BetterTTV) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-11-20]
CHR Extension: (Docs) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (uBlock Origin) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-05-18]
CHR Extension: (Recherche Google) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (ReChat for Twitch™) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipplilmaapjjklilmmaccfemdmhkoacd [2016-03-03]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (AVG SafePrice) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2018-05-18]
CHR Extension: (Ace Script) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-09-11]
CHR Extension: (Seen It) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmajkegnjcjcjehiindhfldkfeoifeff [2017-01-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-14]
CHR Extension: (Gmail) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-24]
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.Z2JOFQOYF6JEMSHN5YQCJYEJGA - C:\Users\Mathias\AppData\Local\Google\Chrome\Application\chrome.exe
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2016-06-08] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe [381824 2013-01-24] (ASUSTeK Computer Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [318328 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [430032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe [7670672 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-24] ()
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-05-14] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-08] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53680 2018-02-05] (AnchorFree Inc.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-02-06] ()
S3 ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [160768 2011-05-27] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 PAExec; C:\Windows\PAExec.exe [189112 2016-11-30] (Power Admin LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-19] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\TunesGoRetro\DriverInstall.exe [115856 2016-03-21] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-01-03] (AnchorFree Inc.)
S3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [32088 2013-06-02] ()
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2016-06-08] ()
S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2016-06-13] (MCCI Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1725800 2018-02-02] (BitDefender)
R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [189032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdrivera.sys [220600 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\System32\drivers\avgbidsha.sys [192536 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\System32\drivers\avgbloga.sys [336848 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\System32\drivers\avgbuniva.sys [50776 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\System32\drivers\avgHwid.sys [39352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [151504 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\Windows\System32\DRIVERS\avgNetNd6.sys [29944 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgNetSec; C:\Windows\System32\drivers\avgNetSec.sys [632640 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [103744 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [78352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [1020112 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [452904 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\Windows\System32\drivers\avgStm.sys [198368 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [373944 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [248336 2017-11-15] (BitDefender S.R.L. Bucharest, ROMANIA)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2016-11-29] (Echobit, LLC)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [67736 2017-04-06] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-04-24] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [58816 2018-04-22] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Resplendence Software Projects Sp.)
S3 sxseftyu; no ImagePath
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-03-01] (Anchorfree Inc.)
S3 ALSysIO; \??\C:\Users\Mathias\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBAudioVMAUXVAIOMME; system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [X]
S3 VBAudioVMVAIOMME; system32\DRIVERS\vbaudio_vmvaio64_win7.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-20 06:13 - 2018-05-20 06:13 - 000029531 _____ C:\Users\Mathias\Downloads\FRST.txt
2018-05-20 06:11 - 2018-05-20 06:13 - 000000000 ____D C:\FRST
2018-05-20 06:09 - 2018-05-20 06:09 - 002413056 _____ (Farbar) C:\Users\Mathias\Downloads\FRST64.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 016592322 _____ (The qBittorrent project) C:\Users\Mathias\Downloads\qbittorrent_4.1.0_setup.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\Program Files (x86)\qBittorrent
2018-05-19 08:26 - 2018-05-19 08:26 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\76576150.sys
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\Users\Mathias\Desktop\mbar
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-05-19 08:24 - 2018-05-19 08:24 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Mathias\Downloads\mbar-1.10.3.1001.exe
2018-05-19 08:24 - 2018-05-19 08:24 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-05-19 08:21 - 2018-05-19 08:21 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Mathias\Downloads\rkill.exe
2018-05-19 08:21 - 2018-05-19 08:21 - 000002512 _____ C:\Users\Mathias\Desktop\Rkill.txt
2018-05-19 08:19 - 2018-05-19 08:20 - 000002879 _____ C:\Users\Mathias\Downloads\FSS.txt
2018-05-19 08:19 - 2018-05-19 08:19 - 000899584 _____ (Farbar) C:\Users\Mathias\Downloads\FSS.exe
2018-05-18 21:33 - 2018-05-19 15:36 - 000004162 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update
2018-05-18 21:33 - 2018-05-18 21:33 - 001020112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000632640 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetSec.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000452904 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000377584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2018-05-18 21:33 - 2018-05-18 21:33 - 000373944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000336848 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000220600 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000198368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000192536 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000189032 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000151504 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000103744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000078352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000050776 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000039352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000029944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetNd6.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000001833 _____ C:\Users\Public\Desktop\AVG Internet Security.lnk
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Windows\System32\Tasks\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Local\Avg
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Program Files\Common Files\AVG
2018-05-18 21:32 - 2018-05-18 23:58 - 000000000 ____D C:\ProgramData\AVG
2018-05-18 21:32 - 2018-05-18 21:32 - 000000000 ____D C:\Program Files\AVG
2018-05-18 21:27 - 2018-05-18 21:27 - 007391672 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Mathias\Downloads\avg_internet_security_setup.exe
2018-05-15 02:36 - 2018-05-15 02:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-05-14 13:45 - 2018-05-14 13:45 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-05-14 13:45 - 2018-05-14 13:45 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-05-14 13:45 - 2018-05-14 13:45 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-05-14 13:45 - 2018-05-14 13:45 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-05-10 06:01 - 2018-04-23 20:57 - 000396960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 20:02 - 000348832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 005583552 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:35 - 000708288 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-10 06:01 - 2018-04-23 02:35 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 000154816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-05-10 06:01 - 2018-04-23 02:35 - 000095424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-05-10 06:01 - 2018-04-23 02:12 - 004047040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-05-10 06:01 - 2018-04-23 02:12 - 003958464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:10 - 000631640 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-05-10 06:01 - 2018-04-23 02:07 - 001665336 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000876032 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000512512 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:44 - 001314064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000582144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:32 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-05-10 06:01 - 2018-04-23 01:32 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-05-10 06:01 - 2018-04-23 01:32 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-05-10 06:01 - 2018-04-23 01:31 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-05-10 06:01 - 2018-04-23 01:27 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-05-10 06:01 - 2018-04-23 01:25 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-05-10 06:01 - 2018-04-23 01:23 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-05-10 06:01 - 2018-04-23 01:23 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-05-10 06:01 - 2018-04-23 01:22 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 01:19 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-05-10 06:01 - 2018-04-23 01:18 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-22 10:04 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:53 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:53 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-05-10 06:01 - 2018-04-22 09:40 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:39 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-05-10 06:01 - 2018-04-22 09:38 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:37 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:32 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-10 06:01 - 2018-04-22 09:31 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 09:30 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-05-10 06:01 - 2018-04-22 09:27 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 09:26 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-05-10 06:01 - 2018-04-22 09:24 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:18 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-05-10 06:01 - 2018-04-22 09:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:15 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 09:08 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-05-10 06:01 - 2018-04-22 09:08 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 09:07 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:03 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-05-10 06:01 - 2018-04-22 09:03 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-05-10 06:01 - 2018-04-22 08:57 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 08:56 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-05-10 06:01 - 2018-04-22 08:55 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-05-10 06:01 - 2018-04-22 08:54 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 08:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-05-10 06:01 - 2018-04-22 08:48 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:46 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:45 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 08:40 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-05-10 06:01 - 2018-04-22 08:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 08:39 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 08:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 08:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-05-10 06:01 - 2018-04-22 08:33 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:31 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-10 06:01 - 2018-04-22 08:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:22 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-10 06:01 - 2018-04-22 08:08 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:04 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:03 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-10 06:01 - 2018-04-18 18:03 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 18:03 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:51 - 000523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 17:51 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:41 - 000016896 _____ (Microsoft Corporation) C:\Windows\hh.exe
2018-05-10 06:01 - 2018-04-18 17:35 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hh.exe
2018-05-10 06:01 - 2018-04-11 18:38 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:38 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-10 06:01 - 2018-04-10 21:45 - 000634272 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-10 06:01 - 2018-04-10 18:36 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2018-05-10 06:01 - 2018-04-10 18:36 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2018-05-10 06:01 - 2018-04-10 18:35 - 001735168 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:34 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:33 - 001241600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:32 - 000487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2018-05-10 06:01 - 2018-04-10 17:54 - 003226112 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-10 06:01 - 2018-04-10 17:48 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-05-10 06:01 - 2018-04-07 18:41 - 000371392 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-05-10 06:01 - 2018-03-19 00:16 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-05-10 06:01 - 2018-03-19 00:11 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-05-10 06:01 - 2018-03-14 19:16 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-05-10 06:01 - 2018-03-14 19:07 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:57 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 002651648 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 03:54 - 2018-05-09 04:13 - 000000000 ____D C:\Users\Mathias\Desktop\picss
2018-05-09 03:54 - 2018-05-09 03:54 - 000000000 ____D C:\Users\Mathias\Desktop\Pics
2018-05-03 23:04 - 2018-05-03 23:04 - 000000000 __SHD C:\82ace7d6-0197-474d-bf4b-a2043e72329b
2018-05-03 00:47 - 2018-05-03 00:47 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 002099590 _____ (Alexey 'Tyrrrz' Golub ) C:\Users\Mathias\Downloads\LightBulb-Installer.exe
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\Program Files\LightBulb
2018-05-03 00:41 - 2018-05-03 00:41 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-05-03 00:41 - 2018-04-22 09:00 - 000132392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-05-03 00:41 - 2018-03-02 04:04 - 000828216 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000960312 _____ C:\Windows\system32\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000683832 _____ C:\Windows\system32\vulkaninfo.exe
2018-05-03 00:41 - 2018-03-02 04:03 - 000575800 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\unknown
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-05-03 00:39 - 2018-04-23 22:15 - 038468128 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 030740744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 016967016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-05-03 00:39 - 2018-04-23 22:15 - 001417304 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 001091336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000627232 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000518176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003962816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003494816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001990592 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001561352 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001467992 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001215064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 000420192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 040346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 035250776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 031271048 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 025984920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 013725560 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 011271400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 001157208 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000904904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000544472 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000462648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000182784 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000164952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000159896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000142632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 017776640 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 015189168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-05-03 00:39 - 2018-04-22 13:05 - 000058816 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2018-05-03 00:39 - 2018-04-12 05:28 - 000226288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2018-05-03 00:39 - 2018-04-12 05:28 - 000046064 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2018-05-02 21:38 - 2017-10-11 03:05 - 000050624 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2018-05-02 16:43 - 2018-05-02 18:37 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\StardewValley
2018-05-02 16:40 - 2018-05-02 16:40 - 000000202 _____ C:\Users\Mathias\Desktop\Stardew Valley.url
2018-05-01 22:23 - 2018-05-01 22:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashReportClient
2018-04-22 22:02 - 2018-04-24 00:30 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-04-22 21:59 - 2018-04-22 21:59 - 000000099 _____ C:\Users\Mathias\Desktop\hosts.txt
2018-04-22 21:58 - 2018-04-22 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-04-22 21:58 - 2018-03-19 12:57 - 000076192 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-04-22 21:56 - 2018-04-22 21:56 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Obsidium
2018-04-22 21:41 - 2018-04-22 21:41 - 000000000 ____D C:\Windows\system32\Drivers\etc\BACKUP
2018-04-22 21:37 - 2018-04-22 21:37 - 000030612 _____ C:\ProgramData\agent.uninstall.1524425855.bdinstall.bin
2018-04-22 21:36 - 2018-04-22 21:36 - 000011801 _____ C:\Users\Mathias\Downloads\Malwarebytes Premium 3.4.5.2467 RePack by KpoJIuK x86 x64 [2018, MULTILANG +RUS] [rutracker-5542038].torrent
2018-04-22 21:27 - 2018-04-22 21:27 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2018-04-22 21:25 - 2018-04-22 21:28 - 000000000 ____D C:\ProgramData\HitmanPro
2018-04-22 21:24 - 2018-04-22 21:24 - 000007363 _____ C:\Users\Mathias\Downloads\HitmanPro 3.8.0 Build 292 RePack by Norton46 [2018, Multi + Rus] [rutracker-5508724].torrent
2018-04-22 18:21 - 2018-04-22 18:21 - 018946171 _____ (The qBittorrent project) C:\Users\Mathias\Downloads\qbittorrent_4.0.4_setup.exe
2018-04-22 18:14 - 2018-04-22 18:14 - 000000000 ____D C:\ProgramData\Sophos
2018-04-22 18:11 - 2018-04-22 18:11 - 000002759 _____ C:\Users\Public\Desktop\Sophos Virus Removal Tool.lnk
2018-04-22 18:11 - 2018-04-22 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2018-04-22 18:11 - 2018-04-22 18:11 - 000000000 ____D C:\Program Files (x86)\Sophos
2018-04-22 18:07 - 2018-04-22 18:08 - 000000000 ____D C:\AdwCleaner
2018-04-22 18:06 - 2018-04-22 18:06 - 000319024 _____ C:\active_protection.txt
2018-04-22 18:05 - 2018-04-22 18:05 - 000035800 _____ C:\url_setting_definitions.txt
2018-04-22 17:33 - 2018-04-22 17:33 - 000002414 _____ C:\Users\Mathias\Desktop\fixlist.txt
2018-04-22 17:29 - 2018-04-22 17:29 - 007256272 _____ (Malwarebytes) C:\Users\Mathias\Downloads\adwcleaner_7.1.0.0.exe
2018-04-22 17:23 - 2018-04-22 17:23 - 195958672 _____ (Sophos Limited) C:\Users\Mathias\Downloads\Sophos Virus Removal Tool.exe
2018-04-22 14:37 - 2018-05-19 15:39 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-04-22 14:36 - 2018-04-22 14:36 - 007319960 _____ (AVAST Software) C:\Users\Mathias\Downloads\avast_internet_security_setup_online.exe
2018-04-22 14:25 - 2018-04-22 14:25 - 000000000 ____D C:\Quarantine
2018-04-22 14:22 - 2018-04-22 17:36 - 000000000 ____D C:\Program Files\stinger
2018-04-22 14:22 - 2018-04-22 14:22 - 016142923 _____ C:\Users\Mathias\Downloads\stinger64-epo.zip
2018-04-22 14:22 - 2018-04-22 14:22 - 000000000 ____D C:\Program Files\McAfee
2018-04-22 14:19 - 2018-04-22 14:36 - 000463956 _____ C:\TDSSKiller.3.1.0.16_22.04.2018_14.19.23_log.txt
2018-04-22 14:19 - 2018-04-22 14:19 - 004944584 _____ (AO Kaspersky Lab) C:\Users\Mathias\Downloads\tdsskiller.exe
2018-04-20 12:26 - 2018-05-18 05:37 - 000050688 ___SH C:\Users\Mathias\Desktop\Thumbs.db
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-20 06:10 - 2014-03-26 02:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Battle.net
2018-05-20 05:56 - 2013-01-24 15:43 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Skype
2018-05-20 03:40 - 2016-07-18 03:03 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-05-20 03:35 - 2014-09-13 03:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Adobe
2018-05-20 03:29 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-20 03:29 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-20 03:26 - 2009-07-14 07:13 - 000786662 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-20 03:26 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-05-20 03:20 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-20 03:19 - 2016-09-03 03:31 - 000000910 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-05-20 03:19 - 2016-09-03 03:31 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-05-20 03:19 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-19 16:10 - 2016-11-29 16:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\qBittorrent
2018-05-19 15:25 - 2013-09-13 03:02 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\vlc
2018-05-19 02:34 - 2016-09-03 03:31 - 000003908 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-05-19 02:34 - 2016-09-03 03:31 - 000003656 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-05-19 02:16 - 2018-01-21 11:32 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\obs-studio
2018-05-18 09:45 - 2018-01-20 03:35 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Twitch
2018-05-18 05:48 - 2013-03-11 05:30 - 000002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-17 19:49 - 2015-02-21 16:59 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\uTorrent
2018-05-17 19:18 - 2013-05-25 19:24 - 000000000 ____D C:\ProgramData\Package Cache
2018-05-17 15:17 - 2013-05-14 21:09 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-05-17 10:16 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Spotify
2018-05-17 06:27 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\Spotify
2018-05-17 04:21 - 2013-03-11 05:29 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 04:21 - 2013-03-11 05:29 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-16 05:20 - 2015-02-06 13:01 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-16 05:19 - 2017-04-13 23:31 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-15 21:44 - 2014-12-11 21:40 - 000000931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2018-05-15 02:36 - 2016-09-03 03:31 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-05-14 00:12 - 2013-09-15 17:04 - 000778784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-05-12 16:59 - 2015-03-29 04:19 - 000000000 ____D C:\Users\Mathias\AppData\Local\Greenshot
2018-05-10 20:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-05-10 17:15 - 2018-01-04 15:04 - 000477424 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-10 06:04 - 2013-08-02 03:00 - 000000000 ____D C:\Windows\system32\MRT
2018-05-10 06:02 - 2017-10-12 03:03 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-05-10 06:01 - 2013-02-20 22:59 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-05-07 17:23 - 2014-01-20 19:59 - 000003793 _____ C:\Users\Mathias\Desktop\Info 2015.txt
2018-05-07 01:08 - 2018-01-19 03:50 - 000000000 ____D C:\ProgramData\Epic
2018-05-05 11:36 - 2015-11-05 00:10 - 000000000 ____D C:\Users\Mathias\AppData\Local\Blizzard Entertainment
2018-05-03 22:59 - 2016-03-03 01:06 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashDumps
2018-05-03 22:59 - 2013-08-09 04:30 - 000000000 ____D C:\Windows\Minidump
2018-05-03 08:56 - 2016-11-30 16:02 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:01 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-05-03 00:41 - 2013-01-24 13:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-05-03 00:40 - 2016-12-03 16:51 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\NVIDIA
2018-05-03 00:40 - 2016-11-30 16:04 - 000000000 ____D C:\Users\Mathias\AppData\Local\NVIDIA
2018-05-02 21:39 - 2017-09-07 01:13 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:39 - 2016-11-30 13:43 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2017-01-18 12:53 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 19:22 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\discord
2018-05-01 22:59 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Local\Discord
2018-04-26 02:39 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-04-24 21:07 - 2014-05-20 02:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\OBS
2018-04-23 22:18 - 2016-11-30 16:03 - 000551968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2018-04-23 22:17 - 2016-11-30 16:03 - 000457064 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2018-04-23 22:14 - 2017-03-25 15:57 - 023242144 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2018-04-23 22:14 - 2016-11-30 16:02 - 020264664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2018-04-23 22:14 - 2016-11-30 16:02 - 000505744 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2018-04-23 22:12 - 2017-11-09 05:32 - 019010192 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 015620248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 004583296 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-04-23 22:12 - 2016-11-30 16:02 - 004040904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-04-23 15:58 - 2013-01-24 16:54 - 000000000 ____D C:\ProgramData\AVAST Software
2018-04-22 21:58 - 2013-01-25 20:59 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-04-22 21:29 - 2013-02-13 22:07 - 000000000 ____D C:\Users\Mathias\AppData\Local\ElevatedDiagnostics
2018-04-22 21:24 - 2016-11-29 16:33 - 000000000 ____D C:\Users\Mathias\AppData\Local\qBittorrent
2018-04-22 18:28 - 2018-03-21 16:50 - 000000000 ____D C:\Users\Mathias\Desktop\Japan
2018-04-22 18:23 - 2014-04-21 23:38 - 000098760 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-04-22 18:23 - 2013-11-23 23:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-04-22 18:23 - 2013-07-14 03:11 - 000000000 ____D C:\Program Files (x86)\Java
2018-04-22 18:00 - 2018-03-02 16:21 - 000002798 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-04-22 18:00 - 2018-02-01 15:27 - 000003466 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-Mathias-PC-Mathias
2018-04-22 18:00 - 2017-11-10 10:35 - 000004482 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-04-22 18:00 - 2017-02-25 22:58 - 000003118 _____ C:\Windows\System32\Tasks\{C6CBAA2E-5095-4D11-8E9B-5F341F07E056}
2018-04-22 18:00 - 2016-06-08 17:58 - 000003278 _____ C:\Windows\System32\Tasks\{8E8DBD9E-5D9B-465F-A49C-DBDF139F570D}
2018-04-22 18:00 - 2015-04-03 09:18 - 000003510 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Mathias-PC-Mathias
2018-04-22 18:00 - 2015-03-11 14:46 - 000003090 _____ C:\Windows\System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732}
2018-04-22 18:00 - 2014-02-07 15:06 - 000003250 _____ C:\Windows\System32\Tasks\{310FB062-3DA0-42A9-B307-27910647E3B3}
2018-04-22 18:00 - 2013-07-10 16:12 - 000003052 _____ C:\Windows\System32\Tasks\{020BA8F0-8070-4656-930A-0C31A6DB8C45}
2018-04-22 18:00 - 2013-05-14 20:31 - 000003204 _____ C:\Windows\System32\Tasks\{CE904E11-AABB-4820-B2CE-E05461E82B4D}
2018-04-22 18:00 - 2013-01-25 19:07 - 000003420 _____ C:\Windows\System32\Tasks\{CC3F5369-D12C-43ED-BA83-8E7042A684D1}
2018-04-22 17:52 - 2015-09-07 14:59 - 000000000 ____D C:\Program Files\CCleaner
2018-04-22 13:15 - 2015-05-14 10:34 - 000000000 ____D C:\Program Files (x86)\VyprVPN
2018-04-22 13:05 - 2016-11-30 16:02 - 000041598 _____ C:\Windows\system32\nvinfo.pb
2018-04-22 08:52 - 2016-11-30 16:03 - 005947328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 002612808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 001768008 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000634304 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000451144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000124200 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2018-04-22 08:52 - 2016-11-30 16:03 - 000082880 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2018-04-20 12:46 - 2015-03-07 00:27 - 000000000 ____D C:\Users\Mathias\Documents\Heroes of the Storm
 
==================== Files in the root of some directories =======
 
2016-11-22 07:38 - 2017-01-25 17:55 - 000003272 _____ () C:\Users\Mathias\AppData\Roaming\VoiceMeeterDefault.xml
2013-08-04 04:10 - 2016-05-26 21:36 - 000000600 _____ () C:\Users\Mathias\AppData\Local\PUTTY.RND
2015-11-19 09:18 - 2016-11-27 10:10 - 000007605 _____ () C:\Users\Mathias\AppData\Local\Resmon.ResmonCfg
2008-02-05 15:28 - 2008-02-05 15:28 - 000000051 _____ () C:\Users\Mathias\AppData\Local\setup.txt
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2018-05-18 07:37
 
==================== End of FRST.txt ============================
 
 
Thanks a lot for looking into it!

Edited by matzy24, 20 May 2018 - 12:00 AM.


BC AdBot (Login to Remove)

 


#2 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 19 May 2018 - 11:30 PM

Here is the addition Addition log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by Mathias (20-05-2018 06:14:03)
Running from C:\Users\Mathias\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2013-01-24 11:08:06)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-650800747-3769124233-4161216065-500 - Administrator - Disabled)
Guest (S-1-5-21-650800747-3769124233-4161216065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-650800747-3769124233-4161216065-1003 - Limited - Enabled)
Mathias (S-1-5-21-650800747-3769124233-4161216065-1000 - Administrator - Enabled) => C:\Users\Mathias
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: AVG Antivirus (Enabled - Up to date) {C50510DE-367A-330C-FD5C-556ACFB11243}
AS: AVG Antivirus (Enabled - Up to date) {7E64F13A-1040-3C82-C7EC-6E18B43658FE}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Antivirus (Disabled) {FD3E91FB-7C15-3254-D603-FC5F31625538}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\uTorrent) (Version: 3.5.3.44396 - BitTorrent Inc.)
7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.00.631.5823 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.140 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.)
AIDA64 Extreme Edition v3.00 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.00 - FinalWire Ltd.)
Apple Application Support (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
AutoHotkey 1.1.24.03 (HKLM\...\AutoHotkey) (Version: 1.1.24.03 - Lexikos)
AVG Internet Security (HKLM-x32\...\AVG Antivirus) (Version: 18.4.3056 - AVG Technologies)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform)
CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\CopyTrans Suite) (Version: 4.006 - WindSolutions)
Core Temp 1.0 RC4 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
CPUID CPU-Z 1.65.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - ) <==== ATTENTION
Discord (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Discord) (Version: 0.0.301 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 397.31 - NVIDIA Corporation) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 49.4.69 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.75.1 - Dropbox, Inc.) Hidden
Epic Games Launcher (HKLM-x32\...\{57350A74-1CA4-48F2-861F-EDCB971D260C}) (Version: 1.1.137.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM-x32\...\{02A312B5-1542-47B6-BFE9-F51358C39E86}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-302 303 305 306 Series Printer Uninstall (HKLM\...\EPSON XP-302 303 305 306 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
f.lux (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Flux) (Version:  - f.lux Software LLC)
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.181 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Greenshot 1.2.9.129 (HKLM\...\Greenshot_is1) (Version: 1.2.9.129 - Greenshot)
Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
Gyazo 3.3.5 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Hotspot Shield 7.4.6 (HKLM-x32\...\{65ed84d7-2bc2-4663-9b41-4681aa85be92}) (Version: 7.4.6.10822 - AnchorFree Inc.)
Hotspot Shield 7.4.6 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925C1670D69}) (Version: 7.4.6.10822 - AnchorFree Inc.) Hidden
Hotspot Shield 7.4.6 (HKLM-x32\...\HotspotShield) (Version: 7.4.6 - AnchorFree Inc.) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Network Connections 17.3.63.0 (HKLM\...\PROSetDX) (Version: 17.3.63.0 - Intel)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LightBulb 1.6.3.6 (HKLM\...\{892F745F-A497-42ED-B503-8D74936D0BEB}_is1) (Version: 1.6.3.6 - Alexey 'Tyrrrz' Golub)
Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Power BI Desktop (x64) (HKLM\...\{FC7F3948-EF3C-4453-8249-D232F937831A}) (Version: 2.34.4372.501 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\SkyDriveSetup.exe) (Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 397.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 397.31 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
NVIDIA Graphics Driver 397.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 397.31 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.37.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.1.3 - OBS Project)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.0 (HKLM-x32\...\{B3B009FC-6909-4E00-9F43-FFB5CA93D606}) (Version: 4.10.9764 - Apache Software Foundation)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
qBittorrent 4.1.0 (HKLM-x32\...\qBittorrent) (Version: 4.1.0 - The qBittorrent project)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.104.1223.2016 - Realtek)
RivaTuner Statistics Server 6.5.1 (HKLM-x32\...\RTSS) (Version: 6.5.1 - Unwinder)
SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)
Skill Capped Uploader version 1.5 (HKLM\...\sc-js-uploader_is1) (Version: 1.5 - )
Skype™ 7.41 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.41.101 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.6.1 - Sophos Limited)
Spotify (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Spotify) (Version: 1.0.80.474.gef6b503e - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.93450 - TeamViewer)
TERA (HKLM-x32\...\{0FCDA0F8-F3E5-402E-B9B6-13CB2B01182B}) (Version: 42.06.03 - En Masse Entertainment)
The Witcher 3 ver. 1.31 (HKLM-x32\...\{BA64D1D2-44A9-492F-B0EA-0A05B784C570}_is1) (Version: 1.31 - *Let'sРlay*)
Twitch (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Vegas Pro 11.0 (HKLM-x32\...\{6AEFCA01-8DF1-11E1-A17B-F04DA23A5C58}) (Version: 11.0.682 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
WinZip 15.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BE}) (Version: 15.0.9302 - WinZip Computing, S.L. )
Wondershare Helper Compact 2.5.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.0 - Wondershare)
Wondershare TunesGo Retro ( Version 4.9.3 ) (HKLM-x32\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 4.9.3 - Wondershare)
Word Reader 6.24 (HKLM-x32\...\Word Reader 6.24) (Version:  - hxxp://www.word-reader.com/)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version:  - Blizzard Entertainment)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\FileSyncApi64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShA64.dll [2018-05-18] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ContextMenuHandlers1: [WinCDEmu] -> {D0E37FD2-F675-426F-B09A-2CF37BA46FD5} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers2: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.21.0.dll [2018-05-14] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-04-22] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShA64.dll [2018-05-18] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {14387264-A2E9-4210-AE96-DB4B4556EA86} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-04-22] (Piriform Ltd)
Task: {16077FE5-0E32-49DD-A767-477CAB19F7D4} - System32\Tasks\{CE904E11-AABB-4820-B2CE-E05461E82B4D} => C:\Windows\system32\pcalua.exe -a "C:\Users\Mathias\AppData\Local\Temp\wz17fc\Rise of Nations\Daemon Tools v3.4.7.exe" -d E:\BitTorrent <==== ATTENTION
Task: {233735C0-97C5-4897-9042-C87CE41CC651} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
Task: {336BA014-3FDB-462E-8CC1-75A24C249E2B} - System32\Tasks\AdobeGCInvoker-1.0-Mathias-PC-Mathias => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05] (Adobe Systems, Incorporated)
Task: {34128D4D-AD07-4DF2-8E4B-3E5A9D009851} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {3F2EFAA7-D8D6-49E5-9DC5-3248F30143F0} - System32\Tasks\AVG\Overseer => C:\Program Files\AVG\Antivirus\setup\overseer.exe [2018-05-18] (AVG Technologies CZ, s.r.o.)
Task: {4A57A346-C1D0-4B0D-8AE5-A021C24C6771} - System32\Tasks\Turnoff Computer => rundll32.exe powrprof.dll,SetSuspendState
Task: {4DEBB9F6-A403-4F53-A0F6-8AE6BB1197D4} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [2018-05-18] (AVG Technologies CZ, s.r.o.)
Task: {5742DDC0-71C9-4439-A830-C32CF4D38DD9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {613E1056-CDDA-4AA1-ACDD-8FB8117B2439} - System32\Tasks\{CC3F5369-D12C-43ED-BA83-8E7042A684D1} => C:\Windows\system32\pcalua.exe -a "E:\All downloads\Intel_Chipset_V9301021_XPWin7_8\Intel_Chipset_V9301021_XPWin7_8\Driver\Chipset\setup.exe" -d "E:\All downloads\Intel_Chipset_V9301021_XPWin7_8\Intel_Chipset_V9301021_XPWin7_8\Driver\Chipset\"
Task: {6EED42EE-D715-47DA-AB5F-FAC75993EB44} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-12-21] (Nota Inc.)
Task: {709C1D69-BD26-4D44-8269-91604AB8BA7D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
Task: {79C28F51-21A5-47A4-AE32-251838013349} - System32\Tasks\{C6CBAA2E-5095-4D11-8E9B-5F341F07E056} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\WellWeWeb\CheVolume\Uninstall.exe"
Task: {7E07C10F-2FC5-49C1-9D73-7FE686244B9B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {8727A65D-CF60-4561-855B-53F3BF40D13E} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-09-03] (Dropbox, Inc.)
Task: {8C2ABA42-7B29-4207-99EE-7C21393820EE} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {A1075FBE-1E28-4405-BA25-DC871BD4DE10} - System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.2.0.103/en/abandoninstall?page=tsMain
Task: {A2C3A31A-4CAB-44A5-A8ED-ECD311DA6633} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
Task: {A640D1D4-AD17-4C9E-8176-C397DC0DC336} - System32\Tasks\AdobeAAMUpdater-1.0-Mathias-PC-Mathias => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {ABBEC144-FDE6-4D3D-B2A8-F88A9B0F177B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-04-22] (Piriform Ltd)
Task: {AEF8DB34-3E76-4731-814C-70E5760ED4A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {B5C52281-9190-434C-8E2E-41B5ECD06FC5} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_140_pepper.exe [2018-04-14] (Adobe Systems Incorporated)
Task: {C46520B7-6291-433F-98F1-207B9E3C9335} - System32\Tasks\{310FB062-3DA0-42A9-B307-27910647E3B3} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {C7BA0863-8236-4270-8B9F-893E12F6FE89} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {C8EDA13B-2DAF-4638-8601-BDA79508A86F} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {D3474742-7925-48D4-B57C-BF8385FA1707} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {DF919C77-E36F-4D95-8A98-A4EEDDB3E462} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-09-03] (Dropbox, Inc.)
Task: {E7CB875F-58D7-4B22-A974-893D1B207030} - System32\Tasks\{8E8DBD9E-5D9B-465F-A49C-DBDF139F570D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\Temp\4\Setup.exe" -d "C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\Temp\4" -c -s <==== ATTENTION
Task: {EFED4BD8-398E-42A3-98C9-01971AD410DE} - System32\Tasks\{020BA8F0-8070-4656-930A-0C31A6DB8C45} => c:\program files\waterfox\waterfox.exe
Task: {F32E6EEC-E8B8-41F6-AD63-2F61F59F95B5} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {F38FCD6A-A24C-40A5-BE2A-768864C1601A} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-12-21] (Nota Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
ShortcutWithArgument: C:\Users\Mathias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\TwitchAlerts Stream Labels.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=kgmggmdngboajiakmbpdknfpdelbjbcg
ShortcutWithArgument: C:\Users\Mathias\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\TwitchAlerts Stream Labels.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=kgmggmdngboajiakmbpdknfpdelbjbcg
 
==================== Loaded Modules (Whitelisted) ==============
 
2010-01-21 01:40 - 2010-01-21 01:40 - 008794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2016-11-17 02:28 - 2016-11-17 02:28 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 001353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-06-01 11:42 - 2012-06-01 11:42 - 000920736 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2015-03-07 02:07 - 2015-03-07 02:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-10-20 05:29 - 2017-10-20 05:29 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-10-20 05:29 - 2017-10-20 05:29 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2013-02-06 08:10 - 2013-02-06 08:10 - 000351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-11-30 16:03 - 2017-10-11 03:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-08-18 16:26 - 2013-08-19 08:41 - 000076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2018-04-22 21:58 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000738032 _____ () c:\Program Files\AVG\Antivirus\x64\vaarclient.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 001067248 _____ () C:\Program Files\AVG\Antivirus\x64\ffl2.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000595696 _____ () c:\Program Files\AVG\Antivirus\x64\StreamBack.dll
2018-05-18 05:48 - 2018-05-15 05:13 - 004443992 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\libglesv2.dll
2018-05-18 05:48 - 2018-05-15 05:13 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\libegl.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000481008 _____ () C:\Program Files\AVG\Antivirus\streamback.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000886512 _____ () C:\Program Files\AVG\Antivirus\ffl2.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000925936 _____ () C:\Program Files\AVG\Antivirus\anen.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000983792 _____ () C:\Program Files\AVG\Antivirus\shepherdsync.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000520944 _____ () C:\Program Files\AVG\Antivirus\gui_cache.dll
2018-05-20 03:20 - 2018-05-20 03:20 - 005859568 _____ () C:\Program Files\AVG\Antivirus\defs\18051904\algo.dll
2013-01-24 13:30 - 2018-05-20 03:19 - 000033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2013-01-24 13:30 - 2010-06-29 04:58 - 000104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2017-09-26 22:22 - 2017-09-26 22:22 - 001984000 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2018-02-05 20:09 - 2018-02-05 20:09 - 000161200 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 067127976 _____ () C:\Program Files\AVG\Antivirus\libcef.dll
2016-11-30 16:03 - 2017-10-11 03:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-01-24 13:19 - 2012-06-25 10:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 001891672 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\ffmpeg.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 001937752 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\libglesv2.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 000095576 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\libegl.dll
2018-05-02 19:23 - 2018-05-10 05:06 - 009659736 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_voice\discord_voice.node
2018-05-02 19:23 - 2018-05-02 19:23 - 001530712 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_utils\discord_utils.node
2018-05-02 19:22 - 2018-05-02 19:22 - 000512856 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_erlpack\discord_erlpack.node
2018-05-02 19:22 - 2018-05-03 04:58 - 001578840 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_game_utils\discord_game_utils.node
2018-05-02 19:22 - 2018-05-10 05:06 - 001728344 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_overlay2\discord_overlay2.node
2018-05-02 19:22 - 2018-05-02 19:22 - 002722648 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_rpc\discord_rpc.node
2018-05-02 19:23 - 2018-05-02 19:23 - 001249112 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\discord_vigilante.node
2018-05-02 19:23 - 2018-05-02 19:23 - 002760536 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_contact_import\discord_contact_import.node
2018-04-26 02:36 - 2018-04-26 02:36 - 000540336 _____ () C:\Program Files (x86)\Battle.net\Battle.net.10047\ortp.dll
2018-04-26 02:36 - 2018-04-26 02:36 - 067966440 _____ () C:\Program Files (x86)\Battle.net\Battle.net.10047\libcef.dll
2018-04-26 02:36 - 2018-04-26 02:36 - 000133632 _____ () C:\Program Files (x86)\Battle.net\Battle.net.10047\libEGL.dll
2018-04-26 02:36 - 2018-04-26 02:36 - 003384832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.10047\libGLESv2.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 04:34 - 2018-04-22 22:04 - 000000128 _____ C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1 www.mefeedia.com
127.0.0.2 www.mefeedia.com
127.0.0.1 delivery.anchorfree.us/land.php
0.0.0.0 serius.mwbsys.com
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mathias\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CheVolume.lnk => C:\Windows\pss\CheVolume.lnk.CommonStartup
MSCONFIG\startupreg: ${_APP_NAME} => C:\Program Files (x86)\WellWeWeb\CheVolume\CheVolume.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: f.lux => "C:\Users\Mathias\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: Gyazo => C:\Program Files (x86)\Gyazo\GyStation.exe
MSCONFIG\startupreg: Hyperdesktop => C:\Users\Mathias\AppData\Roaming\Hyperdesktop\hyperdesktop.exe
MSCONFIG\startupreg: InstallerLauncher => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: LWS => F:\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: Mobile Partner => C:\Program Files (x86)\Parametres SFR 3G\Parametres SFR 3G
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{BE9496C8-48D4-400D-A63A-BF21EC3FA0C4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A842F7F7-E110-4473-8031-5551F6DE41AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{00502213-5A2A-41C1-8692-6C0A34245B73}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AC3C8DAA-CD2F-4FE2-A3AE-5637D8A72A47}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6F8A0AB1-8F12-481D-A013-EFF5B1368182}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{05F11423-1425-4673-B913-7ECDC1E7DB1C}] => (Allow) C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{DE95528A-88E8-4B05-9A50-C0D471F35AAC}] => (Block) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{1352D914-9E9F-479C-BE82-7B2732256FA3}C:\program files (x86)\skypenoproxy\phone\skype.exe] => (Block) C:\program files (x86)\skypenoproxy\phone\skype.exe
FirewallRules: [UDP Query User{6AB3E4F4-C58F-4DC2-9124-DFE0D9F1FB76}C:\program files (x86)\skypenoproxy\phone\skype.exe] => (Block) C:\program files (x86)\skypenoproxy\phone\skype.exe
FirewallRules: [{8D8E24A7-0A81-4F07-AF1B-723036D54256}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9A64AAF0-9684-4ACE-82C7-CB3C1A1695AF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3776CEED-F87D-403E-B68C-F8CA960106EC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{98B5282A-8DFD-455F-8A73-384B5B25E401}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{D7A308E2-73FA-4FF7-91FD-F342E4A29A83}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{D84CBA18-B897-42D6-B5C6-CE7BA79787DD}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{71CA673D-46CE-43F5-A65F-FDBB7F66B720}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{0741DD8A-3752-40FC-9D00-9F25FD970973}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{D58D7DDB-27F0-420D-BE68-E8BC90BE5DFE}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{9A5319C9-E018-4952-9205-B67F681BD004}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{59BC1BE9-0CE1-488F-84FC-F5A3D5D7157E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E110E686-1188-48C5-8719-695D06A17DAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0979364B-5AE2-4391-BBB9-25FE09826D31}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9D1DE897-4B27-400D-8C7C-2CC3D5605BDB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{F9820373-8438-4792-807F-E43AD8F199B0}] => (Allow) C:\Users\Mathias\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E6760D1A-18E0-4DC7-8799-07236E1607D4}] => (Allow) C:\Users\Mathias\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DAB8F8BA-8FCB-4FA1-A8A0-ABB9A09197F3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{303657C0-055F-4431-9D65-D5A2568AA440}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C0FDD298-0244-43A9-AA1C-FC3B94BBE1DF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6E9C0568-D1D1-400D-B727-31F0C6D57884}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6097FDA9-1F44-4009-AF3D-1C6397FED832}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8D6A9178-CB5C-4DD7-84E6-E1E33D5117C0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FB298977-4AAA-46E9-AFD9-66E491E14BC3}] => (Allow) C:\Program Files\Microsoft Power BI Desktop\bin\msmdsrv.exe
FirewallRules: [TCP Query User{19391A60-CD2B-4BE2-BFFB-CE5815CF75A8}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{9591A9CF-D6C6-4AA3-B966-973335AC7842}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [{6EF58F32-A858-4D0E-9618-4F8BD9983C0F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{4A0CE00B-4387-40BD-B09D-CC9382936970}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D035F177-CEA2-4748-AF09-38E8577B148C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{932A9355-5234-4485-91B1-92C69A4B0BC8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{85256230-B638-4CFD-BF77-51A71F9E71BF}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{5669C96D-42B6-4BED-8FA1-62BEC8215A72}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [TCP Query User{D0DE98BA-5F03-4310-8C37-D61443FE80FA}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{57D7DAE9-1ECE-411D-8F9F-A3A2AE5EE229}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6957D93B-1806-45D5-B7DB-7FD65C06FFC5}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E8F21D13-81A1-408D-A3ED-8999E5DFED92}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [{1F6B9EAE-D6F2-4282-B5F0-FF6D323052B7}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{89E8AE4A-F8DB-4410-900B-B2EC0967B464}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{EF0D26DC-AEA8-4AC6-AA21-0227E2EB76F0}F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{31763545-9729-479C-A16B-515E718B4718}F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [TCP Query User{E895567C-9A27-43DB-8E78-01D0D9939827}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{292D2322-0700-4F5A-94ED-40B7BED8E4C4}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{A7B2BC2F-7425-4BCA-8CEB-112A0755C2E5}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{37684714-0531-4DCF-BB13-7BF4FE442F37}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{1B58243E-81EF-42DE-9505-51B21866A2B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{C4E30917-0A13-4862-A37D-33115395BB6F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{13A0B7A2-CB96-48FF-A611-2716EAA92C92}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3AD20685-B55E-445F-B41F-779F4EACDBBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{96EEE74E-4F6D-4DB8-B8F1-14C91E022DC2}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{762A157A-2182-41C9-852C-FFE5B76A0C92}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{50F4E220-1DAC-477E-981D-A6B4842605F6}] => (Allow) F:\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{7C4EBFAC-77F5-4287-9381-EC9DC57612A0}] => (Allow) F:\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{BD688188-036E-4733-A365-DD457D6485D4}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{D31090FB-4CE8-4AF3-8A58-430E22E328CA}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{0CDED76E-712A-4116-9426-B62428D0A74E}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{AD39CEBB-9E33-4D75-BC37-5139FCF48905}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{12A2EEA7-516E-450B-931C-1D03EA378F4D}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{89C9E543-708B-4CF5-ABDA-13377D43CCD8}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{09688B58-4ED5-42B1-8C16-DB8420D9DF26}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{37CBB583-5A14-47C1-8811-D61F16B4EA54}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [TCP Query User{1D7BEDF3-11F4-465D-A20E-D29D83F8A233}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [UDP Query User{A4BE9ECF-5CEA-4AED-BBE0-B36E5FED570B}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [{6D0108B3-7C61-41C2-8750-8B810B08B4BB}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{EB6E68CE-8CC6-46BD-BC90-4FD4B16C4B2D}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{E8376D14-D589-4CE5-A935-341D7A551509}] => (Allow) F:\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{78AEB3FF-6B29-4721-B02F-ED90C8E64944}] => (Allow) F:\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [TCP Query User{48F991EE-559D-4E29-AA40-603B19B5A04A}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{86B24811-4635-4104-9F72-2DB605DDEC1C}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{2DA494AA-BF23-4011-8960-CAFA0D00F5D7}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{F5165BB7-31B3-482B-9CDF-863444569D69}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{F388DD53-0373-43D5-807E-92546116DBEC}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [UDP Query User{B6221588-E9B9-4376-BC21-9BAB9C31364A}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [TCP Query User{2758E2AD-E5BC-4884-BECF-23865D399F35}F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe] => (Allow) F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{6BBBE6AD-ECF1-4841-AB9A-73970CB9C5AE}F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe] => (Allow) F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{5305BEF7-9FA8-472A-9D59-049144403A17}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{96BBC4E1-DF05-46F0-87F1-618F43D3F302}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{D1A9AFD1-0DEE-4858-845D-5D01DF8CDEC1}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{3FF4D632-7A3E-4A5E-966F-A51525EF4DF8}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{0AAE51F1-506D-4F3B-94A0-35EA099DBC8C}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [UDP Query User{BBA3E7F3-A0EC-40E0-B27C-1DCA7A292B7C}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [{C3671A4B-B615-48BE-BD2C-AB6BB1749963}] => (Allow) F:\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{97ABB625-75F6-484B-B230-FAAB85E03143}] => (Allow) F:\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{984B7555-5299-4372-A1F7-9BD81599D895}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [TCP Query User{BA5B69FB-A4FB-403D-89AA-01FC995D646E}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{1EB36778-CEA6-4766-B441-D689D14EFA61}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [TCP Query User{1E06F4A4-002E-4BF4-A8B0-AE4F57579A54}F:\world of warcraft beta\utils\wowvoiceproxyt.exe] => (Allow) F:\world of warcraft beta\utils\wowvoiceproxyt.exe
FirewallRules: [UDP Query User{3A20AD6A-0D05-4054-B141-1877BDBE7EA5}F:\world of warcraft beta\utils\wowvoiceproxyt.exe] => (Allow) F:\world of warcraft beta\utils\wowvoiceproxyt.exe
FirewallRules: [{BF28DD60-3163-46FE-A2B8-8C6B534864A3}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{531C4F9E-1360-4183-A4DD-72ADFCCDD8CA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{61594806-F0CA-4F42-A07E-65BC6239F209}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BC13BC80-9A14-46DB-8223-4B393EEF72C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4B5523E4-1F6E-418B-A424-5B604E71B0F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3710B177-BA45-4C3F-8FD9-BBBBA2650753}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B067868C-A393-40A3-92E7-EFA55E1BB7A3}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{D49F7697-DF63-4E9F-B202-E724124B06D7}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
 
==================== Restore Points =========================
 
18-05-2018 21:33:17 Device Driver Package Install: AVG Technologies Network Service
 
==================== Faulty Device Manager Devices =============
 
Name: HL-DT-ST DVDRAM GH22NS70 ATA Device
Description: CD-ROM Drive
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard CD-ROM drives)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/18/2018 06:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3993
 
Error: (05/18/2018 06:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3993
 
Error: (05/18/2018 06:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/18/2018 06:30:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2995
 
Error: (05/18/2018 06:30:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2995
 
Error: (05/18/2018 06:30:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/18/2018 06:30:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997
 
Error: (05/18/2018 06:30:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997
 
 
System errors:
=============
Error: (05/20/2018 03:19:58 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
Error: (05/20/2018 03:19:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
cdrom
 
Error: (05/19/2018 04:11:00 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.
 
Error: (05/19/2018 04:10:58 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} did not register with DCOM within the required timeout.
 
Error: (05/19/2018 09:24:14 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
Error: (05/19/2018 03:24:14 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
Error: (05/18/2018 11:24:50 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.
 
Error: (05/18/2018 11:24:50 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
 
Windows Defender:
===================================
Date: 2018-05-10 07:39:04.455
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{1F80CB91-AB6D-4C0B-866E-6DD9C7D77890}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2016-09-20 19:20:43.471
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{F01BF526-4C6A-4A38-B8DD-437EB385E30C}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2015-08-21 04:48:02.459
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{1153DDE4-9BBF-4E96-8F9A-E932054FED21}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2014-10-08 05:29:31.701
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{C4599BA7-420A-4281-BA3C-4682D0394A91}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2016-08-06 08:34:43.410
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.225.3258.0
Engine version:1.1.12902.0
 
Date: 2016-06-26 23:08:19.064
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.223.2531.0
Engine version:1.1.12805.0
 
Date: 2016-06-22 08:43:00.220
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.223.2255.0
Engine version:1.1.12805.0
 
Date: 2013-10-05 16:07:40.483
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified. 
Signature version:0.0.0.0
Engine version:0.0.0.0
 
Date: 2013-10-05 16:04:02.438
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified. 
Signature version:0.0.0.0
Engine version:0.0.0.0
 
CodeIntegrity:
===================================
 
Date: 2014-04-30 05:07:41.254
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.253
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.251
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.249
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.247
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.246
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-29 03:12:38.402
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-29 03:12:38.401
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 34%
Total physical RAM: 16328.4 MB
Available physical RAM: 10651.47 MB
Total Virtual: 32654.96 MB
Available Virtual: 26097.88 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:119.14 GB) (Free:24.23 GB) NTFS
Drive e: () (Fixed) (Total:931.51 GB) (Free:404.05 GB) NTFS
Drive f: (New Volume) (Fixed) (Total:446.52 GB) (Free:85.01 GB) NTFS
 
\\?\Volume{bd4993e9-669b-11e2-afc1-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: EE9D5AF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 5E5DFEEE)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=42)
 
========================================================
Disk: 2 (Protective MBR) (Size: 447.1 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 
Thanks a lot for your time :)

 

Edited by matzy24, 19 May 2018 - 11:31 PM.


#3 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 20 May 2018 - 08:28 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Unsigned copy of this program can be compromised and as infected your computer.
Remove this program in bold via the Control Panel > Programs > Programs and Features.
CPUID CPU-Z 1.65.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) <==== ATTENTION
===

Press the Windows key + r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
Toolbar: HKU\S-1-5-21-650800747-3769124233-4161216065-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
FF HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Mathias\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-650800747-3769124233-4161216065-1000: @acestream.net/acestreamplugin,version=3.1.6 -> C:\Users\Mathias\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (Ace Script) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-09-11]
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.Z2JOFQOYF6JEMSHN5YQCJYEJGA - C:\Users\Mathias\AppData\Local\Google\Chrome\Application\chrome.exe
S3 ALSysIO; \??\C:\Users\Mathias\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBAudioVMAUXVAIOMME; system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [X]
S3 VBAudioVMVAIOMME; system32\DRIVERS\vbaudio_vmvaio64_win7.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
Task: {A1075FBE-1E28-4405-BA25-DC871BD4DE10} - System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.2.0.103/en/abandoninstall?page=tsMain
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]

cmd: ipconfig /flushdns
cmd: IPCONFIG /release
cmd: IPCONFIG /renew

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png or the 3 vertical dots located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Restart Chrome.
<<<>>>
 

Please note that this only happens if I leave my PC untouched, and not if I am on my PC for lets say 10+hours.



192.119.166.61 <- This is a local IP set for your router.
213.109.79.255 <- This one is from the Russian Federation, if this is not your Internet Provider please run the follow tool.

--RogueKiller--
  • Download & SAVE to your Desktop Download RogueKiller
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or above, right-click the program file and select "Run as Administrator"
  • Accept the user agreements.
  • Execute the scan and wait until it has finished.
  • If a Windows opens to explain what [PUM's] are, read about it.
  • Click the RoguKiller icon on your taksbar to return to the report.
  • Click open the Report
  • Click Export TXT button
  • Save the file as ReportRogue.txt
  • Click the Remove button to delete the items in RED
  • Click Finish and close the program.
  • Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next.
=======

Please post the logs and let me know what problem persists.

#4 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 20 May 2018 - 09:49 AM

Hello Nasdaq, thanks a lot for your help so far. I've done all you asked, here are the log files:

 

-----------------------------------------

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by Mathias (20-05-2018 16:07:29) Run:1
Running from C:\Users\Mathias\Downloads
Loaded Profiles: Mathias (Available Profiles: Mathias)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
start
 
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
 
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
Toolbar: HKU\S-1-5-21-650800747-3769124233-4161216065-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
FF HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Mathias\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-650800747-3769124233-4161216065-1000: @acestream.net/acestreamplugin,version=3.1.6 -> C:\Users\Mathias\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (Ace Script) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-09-11]
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.Z2JOFQOYF6JEMSHN5YQCJYEJGA - C:\Users\Mathias\AppData\Local\Google\Chrome\Application\chrome.exe
S3 ALSysIO; \??\C:\Users\Mathias\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBAudioVMAUXVAIOMME; system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [X]
S3 VBAudioVMVAIOMME; system32\DRIVERS\vbaudio_vmvaio64_win7.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
Task: {A1075FBE-1E28-4405-BA25-DC871BD4DE10} - System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.2.0.103/en/abandoninstall?page=tsMain
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]
 
cmd: ipconfig /flushdns
cmd: IPCONFIG /release
cmd: IPCONFIG /renew
 
End
*****************
 
Restore point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe => Could not close process
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe => Could not close process
"HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => removed successfully
HKLM\Software\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => not found
"HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\Mozilla\Firefox\Extensions\\acewebextension_unlisted@acestream.org" => removed successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => removed successfully
"HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=3.1.6" => removed successfully
"C:\Users\Mathias\AppData\Roaming\ACEStream\player\npace_plugin.dll" => not found
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08] => Error: No automatic fix found for this entry.
CHR Extension: (Ace Script) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-09-11] => Error: No automatic fix found for this entry.
"HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo" => removed successfully
HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome.Z2JOFQOYF6JEMSHN5YQCJYEJGA\shell\open\command\\Default => value restored successfully
"HKLM\System\CurrentControlSet\Services\ALSysIO" => removed successfully
ALSysIO => service removed successfully
"HKLM\System\CurrentControlSet\Services\dbx" => removed successfully
dbx => service removed successfully
"HKLM\System\CurrentControlSet\Services\EagleX64" => removed successfully
EagleX64 => service removed successfully
"HKLM\System\CurrentControlSet\Services\Synth3dVsc" => removed successfully
Synth3dVsc => service removed successfully
"HKLM\System\CurrentControlSet\Services\tsusbhub" => removed successfully
tsusbhub => service removed successfully
"HKLM\System\CurrentControlSet\Services\VBAudioVMAUXVAIOMME" => removed successfully
VBAudioVMAUXVAIOMME => service removed successfully
"HKLM\System\CurrentControlSet\Services\VBAudioVMVAIOMME" => removed successfully
VBAudioVMVAIOMME => service removed successfully
"HKLM\System\CurrentControlSet\Services\VGPU" => removed successfully
VGPU => service removed successfully
"HKLM\System\CurrentControlSet\Services\xhunter1" => removed successfully
xhunter1 => service removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avg" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A1075FBE-1E28-4405-BA25-DC871BD4DE10}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A1075FBE-1E28-4405-BA25-DC871BD4DE10}" => removed successfully
C:\Windows\System32\Tasks\{DAB4018E-F4BB-47D7-8F81-D6918016A732} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DAB4018E-F4BB-47D7-8F81-D6918016A732}" => removed successfully
C:\Users\Public\AppData => ":CSM" ADS removed successfully
 
========= ipconfig /flushdns =========
 
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========= End of CMD: =========
 
 
========= IPCONFIG /release =========
 
 
Windows IP Configuration
 
No operation can be performed on Local Area Connection* 9 while it has its media disconnected.
 
========= End of CMD: =========
 
 
========= IPCONFIG /renew =========
 
 
Windows IP Configuration
 
No operation can be performed on Local Area Connection* 9 while it has its media disconnected.
 
========= End of CMD: =========
 
 
=========== EmptyTemp: ==========
 
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 28270250 B
Java, Flash, Steam htmlcache => 555675681 B
Windows/system/drivers => 11024458 B
Edge => 0 B
Chrome => 622651804 B
Firefox => 75064809 B
Opera => 0 B
 
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42354853 B
systemprofile32 => 70102 B
LocalService => 132244 B
NetworkService => 72034 B
Mathias => 221949643 B
 
RecycleBin => 0 B
EmptyTemp: => 1.5 GB temporary data Removed.
 
================================
 
 
The system needed a reboot.
 
==== End of Fixlog 16:07:52 ====
 
 
Here is the Roguekiller log:
 
RogueKiller V12.12.17.0 (x64) [May 14 2018] (Free) by Adlice Software
 
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Mathias [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Scan -- Date : 05/20/2018 16:24:10 (Duration : 00:17:43)
Switches : -refid
 
¤¤¤ Processes : 0 ¤¤¤
 
¤¤¤ Registry : 2 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {05F11423-1425-4673-B913-7ECDC1E7DB1C} : v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe|Name=Microsoft SkyDrive| [7] -> Found
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {05F11423-1425-4673-B913-7ECDC1E7DB1C} : v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe|Name=Microsoft SkyDrive| [7] -> Found
 
¤¤¤ Tasks : 0 ¤¤¤
 
¤¤¤ Files : 21 ¤¤¤
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41162\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41865\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.6_42094\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.8_42449\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.9_42923\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.9_42973\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.0_43580\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.0_43804\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.0_43916\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.0_44090\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.3_44358\utorrentie.exe -> Found
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.5.3_44396\utorrentie.exe -> Found
 
¤¤¤ WMI : 0 ¤¤¤
 
¤¤¤ Hosts File : 0 ¤¤¤
 
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: OCZ-VERTEX4 ATA Device +++++
--- User ---
[MBR] a1f0b9b4be0ddfb3e86b6ff66040de9b
[BSP] 146c5f7232189a15207603d3a0071dfa : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 122002 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
 
+++++ PhysicalDrive1: WDC WD1002FAEX-00Y9A0 ATA Device +++++
--- User ---
[MBR] 161b0501d0aa9403ce62f1cbb63157a1
[BSP] 7926f5f9e4ce4d92e613a855a58c3893 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] LINUX-SWP (0x42) [VISIBLE] Offset (sectors): 63 | Size: 953868 MB
User = LL1 ... OK
User = LL2 ... OK
 
+++++ PhysicalDrive2: D2CSTK251M11-0480 ATA Device +++++
--- User ---
[MBR] febe3b94eeff5454bf92d9d5be58c2b3
[BSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR Code
Partition table:
0 - EFI System Partition | Offset (sectors): 40 | Size: 200 MB
1 - Basic data partition | Offset (sectors): 411648 | Size: 457233 MB
2 - LDM metadata partition | Offset (sectors): 937440911 | Size: 1 MB
3 - Microsoft reserved partition | Offset (sectors): 937442959 | Size: 127 MB
User = LL1 ... OK
User = LL2 ... OK
 

Thanks a lot!


#5 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 20 May 2018 - 12:18 PM

Hi,

I would run the RogueKiller tool and delete all the PUP.uTorrentAds entries.

¤¤¤ Files : 21 ¤¤¤
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe -> Found
ect....
===

This IP looks stange to me.
213.109.79.255 <- This one is from the Russian Federation, if this is not your Internet Provider please run the follow tool.

Is it still around?

How is the computer running?

#6 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 20 May 2018 - 12:46 PM

Hey nasdaq,

 

I will delete the PUP entries.

 

My computerI/IP is fine, the weird part is that the IP only changes when I leave my PC on for a long time, that's why I'm afraid to be infected. But all tools I used dont seem to find anything malware/virus related.



#7 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 21 May 2018 - 05:54 AM



Hi,

If you were using a Static IP the number would not change.
I do not think you need it.

Check these pages.

https://kb.netgear.com/27476/How-to-set-a-static-IP-address-in-Windows

https://support.google.com/fiber/answer/3547208?hl=en

==

If all is well.

To learn more about how to protect yourself while on the internet read this little guide best security practices keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/


https://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
Simple and easy ways to keep your computer safe and secure on the Internet.
===

#8 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 26 May 2018 - 08:39 AM

Hello Nasdaq, I thought my issue resolved, but this morning as I woke up I found that my IP was changed again to 23.27.44.223

 

This got me really worried again, and I ran the farbar tool, so  perhaps you can find something different? Thanks  a lot for looking into it.

FRST LOG:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by Mathias (administrator) on MATHIAS-PC (26-05-2018 15:23:25)
Running from C:\Users\Mathias\Downloads
Loaded Profiles: Mathias (Available Profiles: Mathias)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\afwServ.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Tyrrrz) C:\Program Files\LightBulb\LightBulb.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\Discord.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\x64\hydra.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Mathias\Downloads\FSS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-01-28] (Greenshot)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems, Incorporated)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [291568 2018-05-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3643712 2018-05-21] (Dropbox, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27831240 2018-03-13] (Skype Technologies S.A.)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-04-22] (Piriform Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Run: [Spotify Web Helper] => C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe [782736 2018-05-13] (Spotify Ltd)
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {18fd562b-3245-11e5-aa07-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f493c-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {242f498f-2f06-11e5-b3b8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {44342017-353d-11e5-a162-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {45750a67-3553-11e5-959a-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {64352006-dae1-11e5-859f-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {9c141150-14de-11e5-83b7-08606e7f7909} - J:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571c1-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b15571d8-d986-11e5-a0c8-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {b455b6d7-0700-11e7-b3bf-08606e7f7909} - V:\SETUP.EXE
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {ecc179be-d186-11e6-9563-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f1182eda-b705-11e6-ae40-08606e7f7909} - V:\setup.exe
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\MountPoints2: {f9b774da-35d5-11e5-ae33-08606e7f7909} - J:\AutoRun.exe
HKU\S-1-5-18\...\Run: [Bitdefender Wallet Agent] => "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe"
HKU\S-1-5-18\...\Run: [Bitdefender Wallet] => "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard
HKU\S-1-5-18\...\Run: [Bitdefender Agent de l'application Wallet] => "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LightBulb.lnk [2018-05-03]
ShortcutTarget: LightBulb.lnk -> C:\Program Files\LightBulb\LightBulb.exe (Tyrrrz)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{631AE80A-9154-44F5-89CE-7A97E69B34A2}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{C597395B-71F3-49E5-A652-C7FF8533FDDC}: [DhcpNameServer] 192.168.100.1 192.168.100.1
Tcpip\..\Interfaces\{EBBF3FA7-C4F8-4F21-ABD0-FF9692E8FA3A}: [NameServer] 8.8.8.8,8.8.4.4
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> DefaultScope {502199DC-5DEF-4BA3-9CB8-24786EDB4C6C} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-22] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-22] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2018-03-07] (Skype Technologies)
 
FireFox:
========
FF DefaultProfile: pundg3st.default
FF ProfilePath: C:\Users\Mathias\AppData\Roaming\Mozilla\Firefox\Profiles\pundg3st.default [2018-05-21]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-27] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-04-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> E:\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default [2018-05-26]
CHR Extension: (BetterTTV) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-11-20]
CHR Extension: (Docs) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (uBlock Origin) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-05-26]
CHR Extension: (Google Search) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-01]
CHR Extension: (Google Docs Offline) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (AdBlock) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-05-24]
CHR Extension: (ReChat for Twitch™) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipplilmaapjjklilmmaccfemdmhkoacd [2016-03-03]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2016-12-08]
CHR Extension: (AVG SafePrice) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2018-05-18]
CHR Extension: (Seen It) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmajkegnjcjcjehiindhfldkfeoifeff [2017-01-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-14]
CHR Extension: (Gmail) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mathias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-24]
CHR HKU\S-1-5-21-650800747-3769124233-4161216065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2016-06-08] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.17\AsusFanControlService.exe [381824 2013-01-24] (ASUSTeK Computer Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [318328 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [430032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\x64\aswidsagenta.exe [7670672 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-24] ()
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-09-03] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-05-21] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-08] (EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53680 2018-02-05] (AnchorFree Inc.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-02-06] ()
S3 ICCS; C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [160768 2011-05-27] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 PAExec; C:\Windows\PAExec.exe [189112 2016-11-30] (Power Admin LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-19] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\TunesGoRetro\DriverInstall.exe [115856 2016-03-21] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-01-03] (AnchorFree Inc.)
S3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [32088 2013-06-02] ()
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2016-06-08] ()
S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2016-06-13] (MCCI Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1725800 2018-02-02] (BitDefender)
R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [189032 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdrivera.sys [220600 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\System32\drivers\avgbidsha.sys [192536 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\System32\drivers\avgbloga.sys [336848 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\System32\drivers\avgbuniva.sys [50776 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\System32\drivers\avgHwid.sys [39352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [151504 2018-05-18] (AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\Windows\System32\DRIVERS\avgNetNd6.sys [29944 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgNetSec; C:\Windows\System32\drivers\avgNetSec.sys [632640 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [103744 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [78352 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [1020112 2018-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [452904 2018-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\Windows\System32\drivers\avgStm.sys [198368 2018-05-18] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [373944 2018-05-18] (AVG Technologies CZ, s.r.o.)
S3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [248336 2017-11-15] (BitDefender S.R.L. Bucharest, ROMANIA)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2016-11-29] (Echobit, LLC)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [67736 2017-04-06] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\Windows\System32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-05-26] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [58816 2018-04-22] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Resplendence Software Projects Sp.)
S3 sxseftyu; no ImagePath
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-03-01] (Anchorfree Inc.)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-26 15:21 - 2018-05-26 15:21 - 000000000 ___HD C:\Users\Public\Documents\AdobeGC
2018-05-24 20:38 - 2018-05-24 20:38 - 000000000 ____D C:\Users\Mathias\AppData\LocalLow\UX GameJam 2018
2018-05-24 20:37 - 2018-05-24 20:37 - 000000000 ____D C:\Users\Mathias\Desktop\Yawn
2018-05-24 20:35 - 2018-05-24 20:36 - 109400662 _____ C:\Users\Mathias\Downloads\Yawn.zip
2018-05-24 12:13 - 2018-05-24 18:33 - 000000000 ____D C:\Users\Mathias\Downloads\Build
2018-05-22 22:14 - 2018-05-26 06:09 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-05-22 19:43 - 2018-05-22 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-05-22 16:43 - 2018-05-22 16:43 - 000000000 ____D C:\Users\Mathias\AppData\Local\ESET
2018-05-22 16:21 - 2018-05-22 16:21 - 004279416 _____ (ESET) C:\Users\Mathias\Downloads\eset_internet_security_live_installer.exe
2018-05-21 19:06 - 2018-05-21 19:06 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-05-21 19:06 - 2018-05-21 19:06 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-05-21 19:06 - 2018-05-21 19:06 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-05-21 19:06 - 2018-05-21 19:06 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-05-20 16:24 - 2018-05-21 09:42 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2018-05-20 16:23 - 2018-05-20 16:50 - 000000000 ____D C:\ProgramData\RogueKiller
2018-05-20 16:23 - 2018-05-20 16:23 - 000000858 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2018-05-20 16:23 - 2018-05-20 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2018-05-20 16:23 - 2018-05-20 16:23 - 000000000 ____D C:\Program Files\RogueKiller
2018-05-20 16:16 - 2018-05-20 16:16 - 036678264 _____ (Adlice Software ) C:\Users\Mathias\Downloads\RogueKiller_setup_ref3 (1).exe
2018-05-20 16:07 - 2018-05-20 16:07 - 000008837 _____ C:\Users\Mathias\Downloads\Fixlog.txt
2018-05-20 16:06 - 2018-05-20 16:06 - 036678264 _____ (Adlice Software ) C:\Users\Mathias\Downloads\RogueKiller_setup_ref3.exe
2018-05-20 07:34 - 2018-05-20 07:34 - 000047357 _____ C:\Users\Mathias\Downloads\twitch-messages-24119405.zip
2018-05-20 06:14 - 2018-05-20 06:14 - 000067210 _____ C:\Users\Mathias\Downloads\Addition.txt
2018-05-20 06:13 - 2018-05-26 15:23 - 000027035 _____ C:\Users\Mathias\Downloads\FRST.txt
2018-05-20 06:11 - 2018-05-26 15:23 - 000000000 ____D C:\FRST
2018-05-20 06:09 - 2018-05-20 06:09 - 002413056 _____ (Farbar) C:\Users\Mathias\Downloads\FRST64.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 016592322 _____ (The qBittorrent project) C:\Users\Mathias\Downloads\qbittorrent_4.1.0_setup.exe
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2018-05-19 08:41 - 2018-05-19 08:41 - 000000000 ____D C:\Program Files (x86)\qBittorrent
2018-05-19 08:26 - 2018-05-19 08:26 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\76576150.sys
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\Users\Mathias\Desktop\mbar
2018-05-19 08:24 - 2018-05-19 08:37 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-05-19 08:24 - 2018-05-19 08:24 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Mathias\Downloads\mbar-1.10.3.1001.exe
2018-05-19 08:24 - 2018-05-19 08:24 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-05-19 08:21 - 2018-05-19 08:21 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Mathias\Downloads\rkill.exe
2018-05-19 08:21 - 2018-05-19 08:21 - 000002512 _____ C:\Users\Mathias\Desktop\Rkill.txt
2018-05-19 08:19 - 2018-05-26 15:22 - 000001256 _____ C:\Users\Mathias\Downloads\FSS.txt
2018-05-19 08:19 - 2018-05-19 08:19 - 000899584 _____ (Farbar) C:\Users\Mathias\Downloads\FSS.exe
2018-05-18 21:33 - 2018-05-23 08:57 - 000004162 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update
2018-05-18 21:33 - 2018-05-18 21:33 - 001020112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000632640 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetSec.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000452904 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000377584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2018-05-18 21:33 - 2018-05-18 21:33 - 000373944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000336848 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000220600 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000198368 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000192536 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000189032 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000151504 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000103744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000078352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000050776 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000039352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000029944 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetNd6.sys
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Windows\System32\Tasks\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Users\Mathias\AppData\Local\Avg
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2018-05-18 21:33 - 2018-05-18 21:33 - 000000000 ____D C:\Program Files\Common Files\AVG
2018-05-18 21:32 - 2018-05-18 23:58 - 000000000 ____D C:\ProgramData\AVG
2018-05-18 21:32 - 2018-05-18 21:32 - 000000000 ____D C:\Program Files\AVG
2018-05-18 21:27 - 2018-05-18 21:27 - 007391672 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Mathias\Downloads\avg_internet_security_setup.exe
2018-05-10 06:01 - 2018-04-23 20:57 - 000396960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 20:02 - 000348832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 005583552 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:35 - 000708288 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-10 06:01 - 2018-04-23 02:35 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-05-10 06:01 - 2018-04-23 02:35 - 000154816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-05-10 06:01 - 2018-04-23 02:35 - 000095424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-05-10 06:01 - 2018-04-23 02:12 - 004047040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-05-10 06:01 - 2018-04-23 02:12 - 003958464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-05-10 06:01 - 2018-04-23 02:10 - 000631640 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-05-10 06:01 - 2018-04-23 02:07 - 001665336 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000876032 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000512512 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 02:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:44 - 001314064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-05-10 06:01 - 2018-04-23 01:41 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000582144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:32 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-05-10 06:01 - 2018-04-23 01:32 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-05-10 06:01 - 2018-04-23 01:32 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-05-10 06:01 - 2018-04-23 01:31 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-05-10 06:01 - 2018-04-23 01:28 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-05-10 06:01 - 2018-04-23 01:27 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-05-10 06:01 - 2018-04-23 01:25 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-05-10 06:01 - 2018-04-23 01:24 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-05-10 06:01 - 2018-04-23 01:23 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-05-10 06:01 - 2018-04-23 01:23 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-05-10 06:01 - 2018-04-23 01:22 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-05-10 06:01 - 2018-04-23 01:19 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-05-10 06:01 - 2018-04-23 01:19 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-05-10 06:01 - 2018-04-23 01:18 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-10 06:01 - 2018-04-23 01:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-10 06:01 - 2018-04-22 10:04 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:53 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:53 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-05-10 06:01 - 2018-04-22 09:40 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:39 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:38 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-05-10 06:01 - 2018-04-22 09:38 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:37 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:32 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-10 06:01 - 2018-04-22 09:31 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 09:30 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-05-10 06:01 - 2018-04-22 09:27 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-10 06:01 - 2018-04-22 09:26 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 09:26 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-05-10 06:01 - 2018-04-22 09:24 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-10 06:01 - 2018-04-22 09:18 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-05-10 06:01 - 2018-04-22 09:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-05-10 06:01 - 2018-04-22 09:15 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 09:08 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-05-10 06:01 - 2018-04-22 09:08 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 09:07 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 09:04 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-05-10 06:01 - 2018-04-22 09:03 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-05-10 06:01 - 2018-04-22 09:03 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 09:02 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-10 06:01 - 2018-04-22 09:00 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-05-10 06:01 - 2018-04-22 08:57 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-05-10 06:01 - 2018-04-22 08:56 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-05-10 06:01 - 2018-04-22 08:55 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-05-10 06:01 - 2018-04-22 08:54 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-10 06:01 - 2018-04-22 08:53 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-05-10 06:01 - 2018-04-22 08:51 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:49 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-05-10 06:01 - 2018-04-22 08:48 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:46 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:46 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:45 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-05-10 06:01 - 2018-04-22 08:40 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-05-10 06:01 - 2018-04-22 08:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-05-10 06:01 - 2018-04-22 08:39 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-05-10 06:01 - 2018-04-22 08:37 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-05-10 06:01 - 2018-04-22 08:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-05-10 06:01 - 2018-04-22 08:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-05-10 06:01 - 2018-04-22 08:33 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:31 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-10 06:01 - 2018-04-22 08:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-10 06:01 - 2018-04-22 08:27 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-10 06:01 - 2018-04-22 08:26 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-10 06:01 - 2018-04-22 08:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-05-10 06:01 - 2018-04-22 08:22 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:11 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-10 06:01 - 2018-04-22 08:08 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-10 06:01 - 2018-04-22 08:04 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-10 06:01 - 2018-04-22 08:03 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-10 06:01 - 2018-04-18 18:03 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 18:03 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:51 - 000523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-10 06:01 - 2018-04-18 17:51 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhsetup.dll
2018-05-10 06:01 - 2018-04-18 17:41 - 000016896 _____ (Microsoft Corporation) C:\Windows\hh.exe
2018-05-10 06:01 - 2018-04-18 17:35 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hh.exe
2018-05-10 06:01 - 2018-04-11 18:38 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:38 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-10 06:01 - 2018-04-11 18:36 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-10 06:01 - 2018-04-10 21:45 - 000634272 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-10 06:01 - 2018-04-10 18:36 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2018-05-10 06:01 - 2018-04-10 18:36 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2018-05-10 06:01 - 2018-04-10 18:35 - 001735168 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:34 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:33 - 001241600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-10 06:01 - 2018-04-10 18:32 - 000487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-10 06:01 - 2018-04-10 18:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2018-05-10 06:01 - 2018-04-10 17:54 - 003226112 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-10 06:01 - 2018-04-10 17:48 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-10 06:01 - 2018-04-10 17:47 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-05-10 06:01 - 2018-04-07 18:41 - 000371392 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-05-10 06:01 - 2018-03-19 00:16 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-05-10 06:01 - 2018-03-19 00:11 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-05-10 06:01 - 2018-03-14 19:16 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-05-10 06:01 - 2018-03-14 19:12 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-05-10 06:01 - 2018-03-14 19:07 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-05-10 06:01 - 2018-03-14 18:57 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:57 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 002651648 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-05-10 06:01 - 2018-03-14 18:53 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-05-10 06:01 - 2018-03-14 18:52 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-05-10 06:01 - 2018-03-14 18:52 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-05-09 03:54 - 2018-05-09 04:13 - 000000000 ____D C:\Users\Mathias\Desktop\picss
2018-05-09 03:54 - 2018-05-09 03:54 - 000000000 ____D C:\Users\Mathias\Desktop\Pics
2018-05-03 23:04 - 2018-05-03 23:04 - 000000000 __SHD C:\82ace7d6-0197-474d-bf4b-a2043e72329b
2018-05-03 00:47 - 2018-05-03 00:47 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 002099590 _____ (Alexey 'Tyrrrz' Golub ) C:\Users\Mathias\Downloads\LightBulb-Installer.exe
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightBulb
2018-05-03 00:46 - 2018-05-03 00:46 - 000000000 ____D C:\Program Files\LightBulb
2018-05-03 00:41 - 2018-05-03 00:41 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-05-03 00:41 - 2018-04-22 09:00 - 000132392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-05-03 00:41 - 2018-03-02 04:04 - 000828216 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000960312 _____ C:\Windows\system32\vulkan-1.dll
2018-05-03 00:41 - 2018-03-02 04:03 - 000683832 _____ C:\Windows\system32\vulkaninfo.exe
2018-05-03 00:41 - 2018-03-02 04:03 - 000575800 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\unknown
2018-05-03 00:40 - 2018-05-03 00:40 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-05-03 00:39 - 2018-04-23 22:15 - 038468128 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 030740744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 016967016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-05-03 00:39 - 2018-04-23 22:15 - 001417304 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 001091336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000627232 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:15 - 000518176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003962816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 003494816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001990592 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001561352 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001467992 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439731.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 001215064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-05-03 00:39 - 2018-04-23 22:14 - 000420192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 040346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 035250776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 031271048 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 025984920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 013725560 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 011271400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 001157208 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000904904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000544472 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000462648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000182784 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000164952 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000159896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-05-03 00:39 - 2018-04-23 22:13 - 000142632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 017776640 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-05-03 00:39 - 2018-04-23 22:12 - 015189168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-05-03 00:39 - 2018-04-22 13:05 - 000058816 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2018-05-03 00:39 - 2018-04-22 13:05 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2018-05-03 00:39 - 2018-04-12 05:28 - 000226288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2018-05-03 00:39 - 2018-04-12 05:28 - 000046064 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2018-05-02 21:38 - 2017-10-11 03:05 - 000050624 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2018-05-02 16:43 - 2018-05-02 18:37 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\StardewValley
2018-05-01 22:23 - 2018-05-01 22:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashReportClient
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-05-26 15:22 - 2013-09-13 03:02 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\vlc
2018-05-26 15:21 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-26 15:21 - 2013-01-24 15:43 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Skype
2018-05-26 06:20 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-26 06:20 - 2009-07-14 06:45 - 000017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-26 06:19 - 2014-09-13 03:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Adobe
2018-05-26 06:14 - 2009-07-14 07:13 - 000786662 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-26 06:14 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-05-26 06:09 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-25 13:42 - 2014-03-26 02:20 - 000000000 ____D C:\Users\Mathias\AppData\Local\Battle.net
2018-05-25 10:32 - 2016-07-18 03:03 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-05-24 20:30 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Local\Spotify
2018-05-24 17:37 - 2016-12-16 11:23 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Spotify
2018-05-23 10:22 - 2013-02-13 22:07 - 000000000 ____D C:\Users\Mathias\AppData\Local\ElevatedDiagnostics
2018-05-22 22:03 - 2018-01-21 11:32 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\obs-studio
2018-05-22 19:43 - 2016-09-03 03:31 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-05-22 16:21 - 2016-11-29 16:33 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\qBittorrent
2018-05-22 10:20 - 2015-04-23 14:54 - 000000000 ____D C:\Users\Mathias\Desktop\CV
2018-05-21 12:46 - 2018-04-20 12:26 - 000070144 ___SH C:\Users\Mathias\Desktop\Thumbs.db
2018-05-21 10:26 - 2015-02-21 16:59 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\uTorrent
2018-05-20 16:10 - 2017-11-10 10:35 - 000004482 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-05-20 16:10 - 2013-01-24 15:51 - 000804864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-05-20 16:10 - 2013-01-24 15:51 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-05-20 16:10 - 2013-01-24 15:51 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-05-20 16:10 - 2013-01-24 15:51 - 000000000 ____D C:\Windows\system32\Macromed
2018-05-20 16:07 - 2015-03-31 21:34 - 000000000 ____D C:\Users\Mathias\AppData\LocalLow\Temp
2018-05-20 16:07 - 2013-05-14 21:09 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-05-20 03:19 - 2016-09-03 03:31 - 000000910 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-05-20 03:19 - 2016-09-03 03:31 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-05-19 15:39 - 2018-04-22 14:37 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-05-19 02:34 - 2016-09-03 03:31 - 000003908 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-05-19 02:34 - 2016-09-03 03:31 - 000003656 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-05-18 09:45 - 2018-01-20 03:35 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\Twitch
2018-05-18 05:48 - 2013-03-11 05:30 - 000002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-17 19:18 - 2013-05-25 19:24 - 000000000 ____D C:\ProgramData\Package Cache
2018-05-17 04:21 - 2013-03-11 05:29 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 04:21 - 2013-03-11 05:29 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-16 05:20 - 2015-02-06 13:01 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-16 05:19 - 2017-04-13 23:31 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-15 21:44 - 2014-12-11 21:40 - 000000931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2018-05-14 00:12 - 2013-09-15 17:04 - 000778784 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-05-12 16:59 - 2015-03-29 04:19 - 000000000 ____D C:\Users\Mathias\AppData\Local\Greenshot
2018-05-10 20:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-05-10 17:15 - 2018-01-04 15:04 - 000477424 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-10 06:04 - 2013-08-02 03:00 - 000000000 ____D C:\Windows\system32\MRT
2018-05-10 06:02 - 2017-10-12 03:03 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-05-10 06:01 - 2013-02-20 22:59 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-05-07 17:23 - 2014-01-20 19:59 - 000003793 _____ C:\Users\Mathias\Desktop\Info 2015.txt
2018-05-07 01:08 - 2018-01-19 03:50 - 000000000 ____D C:\ProgramData\Epic
2018-05-05 11:36 - 2015-11-05 00:10 - 000000000 ____D C:\Users\Mathias\AppData\Local\Blizzard Entertainment
2018-05-03 22:59 - 2016-03-03 01:06 - 000000000 ____D C:\Users\Mathias\AppData\Local\CrashDumps
2018-05-03 22:59 - 2013-08-09 04:30 - 000000000 ____D C:\Windows\Minidump
2018-05-03 08:56 - 2016-11-30 16:02 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-05-03 00:41 - 2016-11-30 16:01 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-05-03 00:41 - 2013-01-24 13:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-05-03 00:40 - 2016-12-03 16:51 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\NVIDIA
2018-05-03 00:40 - 2016-11-30 16:04 - 000000000 ____D C:\Users\Mathias\AppData\Local\NVIDIA
2018-05-02 21:39 - 2017-09-07 01:13 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:39 - 2016-11-30 13:43 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2017-01-18 12:53 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 21:38 - 2016-11-30 13:43 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-02 19:22 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Roaming\discord
2018-05-01 22:59 - 2016-05-25 16:45 - 000000000 ____D C:\Users\Mathias\AppData\Local\Discord
2018-04-26 02:39 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
 
==================== Files in the root of some directories =======
 
2016-11-22 07:38 - 2017-01-25 17:55 - 000003272 _____ () C:\Users\Mathias\AppData\Roaming\VoiceMeeterDefault.xml
2013-08-04 04:10 - 2016-05-26 21:36 - 000000600 _____ () C:\Users\Mathias\AppData\Local\PUTTY.RND
2015-11-19 09:18 - 2016-11-27 10:10 - 000007605 _____ () C:\Users\Mathias\AppData\Local\Resmon.ResmonCfg
2008-02-05 15:28 - 2008-02-05 15:28 - 000000051 _____ () C:\Users\Mathias\AppData\Local\setup.txt
 
Some files in TEMP:
====================
2018-05-20 16:23 - 2018-04-23 02:07 - 001665336 _____ (Microsoft Corporation) C:\Users\Mathias\AppData\Local\Temp\dllnt_dump.dll
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2018-05-18 07:37
 
==================== End of FRST.txt ============================


#9 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 26 May 2018 - 08:40 AM

Here is the Addition Log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by Mathias (26-05-2018 15:23:51)
Running from C:\Users\Mathias\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2013-01-24 11:08:06)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-650800747-3769124233-4161216065-500 - Administrator - Disabled)
Guest (S-1-5-21-650800747-3769124233-4161216065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-650800747-3769124233-4161216065-1003 - Limited - Enabled)
Mathias (S-1-5-21-650800747-3769124233-4161216065-1000 - Administrator - Enabled) => C:\Users\Mathias
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: AVG Antivirus (Enabled - Up to date) {C50510DE-367A-330C-FD5C-556ACFB11243}
AS: AVG Antivirus (Enabled - Up to date) {7E64F13A-1040-3C82-C7EC-6E18B43658FE}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Antivirus (Enabled) {FD3E91FB-7C15-3254-D603-FC5F31625538}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\uTorrent) (Version: 3.5.3.44396 - BitTorrent Inc.)
7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.00.631.5823 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.171 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.)
AIDA64 Extreme Edition v3.00 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.00 - FinalWire Ltd.)
Apple Application Support (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
AutoHotkey 1.1.24.03 (HKLM\...\AutoHotkey) (Version: 1.1.24.03 - Lexikos)
AVG Internet Security (HKLM-x32\...\AVG Antivirus) (Version: 18.4.3056 - AVG Technologies)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform)
CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\CopyTrans Suite) (Version: 4.006 - WindSolutions)
Core Temp 1.0 RC4 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Discord (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Discord) (Version: 0.0.301 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 397.31 - NVIDIA Corporation) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 50.4.71 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.75.1 - Dropbox, Inc.) Hidden
Epic Games Launcher (HKLM-x32\...\{57350A74-1CA4-48F2-861F-EDCB971D260C}) (Version: 1.1.137.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM-x32\...\{02A312B5-1542-47B6-BFE9-F51358C39E86}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-302 303 305 306 Series Printer Uninstall (HKLM\...\EPSON XP-302 303 305 306 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
f.lux (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Flux) (Version:  - f.lux Software LLC)
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.181 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Greenshot 1.2.9.129 (HKLM\...\Greenshot_is1) (Version: 1.2.9.129 - Greenshot)
Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
Gyazo 3.3.5 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Hotspot Shield 7.4.6 (HKLM-x32\...\{65ed84d7-2bc2-4663-9b41-4681aa85be92}) (Version: 7.4.6.10822 - AnchorFree Inc.)
Hotspot Shield 7.4.6 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925C1670D69}) (Version: 7.4.6.10822 - AnchorFree Inc.) Hidden
Hotspot Shield 7.4.6 (HKLM-x32\...\HotspotShield) (Version: 7.4.6 - AnchorFree Inc.) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Network Connections 17.3.63.0 (HKLM\...\PROSetDX) (Version: 17.3.63.0 - Intel)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LightBulb 1.6.3.6 (HKLM\...\{892F745F-A497-42ED-B503-8D74936D0BEB}_is1) (Version: 1.6.3.6 - Alexey 'Tyrrrz' Golub)
Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Power BI Desktop (x64) (HKLM\...\{FC7F3948-EF3C-4453-8249-D232F937831A}) (Version: 2.34.4372.501 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\SkyDriveSetup.exe) (Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 397.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 397.31 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
NVIDIA Graphics Driver 397.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 397.31 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.37.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.1.3 - OBS Project)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.0 (HKLM-x32\...\{B3B009FC-6909-4E00-9F43-FFB5CA93D606}) (Version: 4.10.9764 - Apache Software Foundation)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
qBittorrent 4.1.0 (HKLM-x32\...\qBittorrent) (Version: 4.1.0 - The qBittorrent project)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.104.1223.2016 - Realtek)
RivaTuner Statistics Server 6.5.1 (HKLM-x32\...\RTSS) (Version: 6.5.1 - Unwinder)
RogueKiller version 12.12.17.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.12.17.0 - Adlice Software)
SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)
Skill Capped Uploader version 1.5 (HKLM\...\sc-js-uploader_is1) (Version: 1.5 - )
Skype™ 7.41 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.41.101 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.6.1 - Sophos Limited)
Spotify (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\Spotify) (Version: 1.0.80.474.gef6b503e - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.93450 - TeamViewer)
TERA (HKLM-x32\...\{0FCDA0F8-F3E5-402E-B9B6-13CB2B01182B}) (Version: 42.06.03 - En Masse Entertainment)
The Witcher 3 ver. 1.31 (HKLM-x32\...\{BA64D1D2-44A9-492F-B0EA-0A05B784C570}_is1) (Version: 1.31 - *Let'sРlay*)
Twitch (HKU\S-1-5-21-650800747-3769124233-4161216065-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Vegas Pro 11.0 (HKLM-x32\...\{6AEFCA01-8DF1-11E1-A17B-F04DA23A5C58}) (Version: 11.0.682 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
WinZip 15.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BE}) (Version: 15.0.9302 - WinZip Computing, S.L. )
Wondershare Helper Compact 2.5.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.0 - Wondershare)
Wondershare TunesGo Retro ( Version 4.9.3 ) (HKLM-x32\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 4.9.3 - Wondershare)
Word Reader 6.24 (HKLM-x32\...\Word Reader 6.24) (Version:  - hxxp://www.word-reader.com/)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version:  - Blizzard Entertainment)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-650800747-3769124233-4161216065-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\FileSyncApi64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShA64.dll [2018-05-18] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers1: [WinCDEmu] -> {D0E37FD2-F675-426F-B09A-2CF37BA46FD5} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers2: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-04-22] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShA64.dll [2018-05-18] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {14387264-A2E9-4210-AE96-DB4B4556EA86} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-04-22] (Piriform Ltd)
Task: {16077FE5-0E32-49DD-A767-477CAB19F7D4} - System32\Tasks\{CE904E11-AABB-4820-B2CE-E05461E82B4D} => C:\Windows\system32\pcalua.exe -a "C:\Users\Mathias\AppData\Local\Temp\wz17fc\Rise of Nations\Daemon Tools v3.4.7.exe" -d E:\BitTorrent <==== ATTENTION
Task: {233735C0-97C5-4897-9042-C87CE41CC651} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
Task: {336BA014-3FDB-462E-8CC1-75A24C249E2B} - System32\Tasks\AdobeGCInvoker-1.0-Mathias-PC-Mathias => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05] (Adobe Systems, Incorporated)
Task: {34128D4D-AD07-4DF2-8E4B-3E5A9D009851} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {3F2EFAA7-D8D6-49E5-9DC5-3248F30143F0} - System32\Tasks\AVG\Overseer => C:\Program Files\AVG\Antivirus\setup\overseer.exe [2018-05-18] (AVG Technologies CZ, s.r.o.)
Task: {4A57A346-C1D0-4B0D-8AE5-A021C24C6771} - System32\Tasks\Turnoff Computer => rundll32.exe powrprof.dll,SetSuspendState
Task: {4DEBB9F6-A403-4F53-A0F6-8AE6BB1197D4} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [2018-05-18] (AVG Technologies CZ, s.r.o.)
Task: {5742DDC0-71C9-4439-A830-C32CF4D38DD9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {613E1056-CDDA-4AA1-ACDD-8FB8117B2439} - System32\Tasks\{CC3F5369-D12C-43ED-BA83-8E7042A684D1} => C:\Windows\system32\pcalua.exe -a "E:\All downloads\Intel_Chipset_V9301021_XPWin7_8\Intel_Chipset_V9301021_XPWin7_8\Driver\Chipset\setup.exe" -d "E:\All downloads\Intel_Chipset_V9301021_XPWin7_8\Intel_Chipset_V9301021_XPWin7_8\Driver\Chipset\"
Task: {6EED42EE-D715-47DA-AB5F-FAC75993EB44} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-12-21] (Nota Inc.)
Task: {709C1D69-BD26-4D44-8269-91604AB8BA7D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
Task: {79C28F51-21A5-47A4-AE32-251838013349} - System32\Tasks\{C6CBAA2E-5095-4D11-8E9B-5F341F07E056} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\WellWeWeb\CheVolume\Uninstall.exe"
Task: {7E07C10F-2FC5-49C1-9D73-7FE686244B9B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {8727A65D-CF60-4561-855B-53F3BF40D13E} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-09-03] (Dropbox, Inc.)
Task: {8C2ABA42-7B29-4207-99EE-7C21393820EE} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {A2C3A31A-4CAB-44A5-A8ED-ECD311DA6633} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
Task: {A640D1D4-AD17-4C9E-8176-C397DC0DC336} - System32\Tasks\AdobeAAMUpdater-1.0-Mathias-PC-Mathias => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {ABBEC144-FDE6-4D3D-B2A8-F88A9B0F177B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-04-22] (Piriform Ltd)
Task: {AEF8DB34-3E76-4731-814C-70E5760ED4A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {B5C52281-9190-434C-8E2E-41B5ECD06FC5} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_171_pepper.exe [2018-05-20] (Adobe Systems Incorporated)
Task: {C46520B7-6291-433F-98F1-207B9E3C9335} - System32\Tasks\{310FB062-3DA0-42A9-B307-27910647E3B3} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {C7BA0863-8236-4270-8B9F-893E12F6FE89} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {C8EDA13B-2DAF-4638-8601-BDA79508A86F} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {D3474742-7925-48D4-B57C-BF8385FA1707} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {DF919C77-E36F-4D95-8A98-A4EEDDB3E462} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-09-03] (Dropbox, Inc.)
Task: {E7CB875F-58D7-4B22-A974-893D1B207030} - System32\Tasks\{8E8DBD9E-5D9B-465F-A49C-DBDF139F570D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\Temp\4\Setup.exe" -d "C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\Temp\4" -c -s <==== ATTENTION
Task: {EFED4BD8-398E-42A3-98C9-01971AD410DE} - System32\Tasks\{020BA8F0-8070-4656-930A-0C31A6DB8C45} => c:\program files\waterfox\waterfox.exe
Task: {F32E6EEC-E8B8-41F6-AD63-2F61F59F95B5} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {F38FCD6A-A24C-40A5-BE2A-768864C1601A} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-12-21] (Nota Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
ShortcutWithArgument: C:\Users\Mathias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\TwitchAlerts Stream Labels.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=kgmggmdngboajiakmbpdknfpdelbjbcg
ShortcutWithArgument: C:\Users\Mathias\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\TwitchAlerts Stream Labels.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=kgmggmdngboajiakmbpdknfpdelbjbcg
 
==================== Loaded Modules (Whitelisted) ==============
 
2016-11-17 02:28 - 2016-11-17 02:28 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 001353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-06-01 11:42 - 2012-06-01 11:42 - 000920736 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2015-03-07 02:07 - 2015-03-07 02:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-10-20 05:29 - 2017-10-20 05:29 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-10-20 05:29 - 2017-10-20 05:29 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2013-02-06 08:10 - 2013-02-06 08:10 - 000351824 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-11-30 16:03 - 2017-10-11 03:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-08-18 16:26 - 2013-08-19 08:41 - 000076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2018-04-22 21:58 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000738032 _____ () c:\Program Files\AVG\Antivirus\x64\vaarclient.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 001067248 _____ () C:\Program Files\AVG\Antivirus\x64\ffl2.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000595696 _____ () c:\Program Files\AVG\Antivirus\x64\StreamBack.dll
2018-02-05 20:09 - 2018-02-05 20:09 - 000360880 _____ () C:\Program Files (x86)\Hotspot Shield\bin\x64\CrashRpt1403.dll
2018-02-05 20:09 - 2018-02-05 20:09 - 000444336 _____ () C:\Program Files (x86)\Hotspot Shield\bin\x64\PktMgrLib.dll
2018-05-18 05:48 - 2018-05-15 05:13 - 004443992 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\libglesv2.dll
2018-05-18 05:48 - 2018-05-15 05:13 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\libegl.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000481008 _____ () C:\Program Files\AVG\Antivirus\streamback.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000886512 _____ () C:\Program Files\AVG\Antivirus\ffl2.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000925936 _____ () C:\Program Files\AVG\Antivirus\anen.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000983792 _____ () C:\Program Files\AVG\Antivirus\shepherdsync.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 000520944 _____ () C:\Program Files\AVG\Antivirus\gui_cache.dll
2018-05-26 06:09 - 2018-05-26 06:09 - 005782256 _____ () C:\Program Files\AVG\Antivirus\defs\18052504\algo.dll
2018-05-26 15:22 - 2018-05-26 15:22 - 005782768 _____ () C:\Program Files\AVG\Antivirus\defs\18052604\algo.dll
2013-01-24 13:30 - 2018-05-26 06:09 - 000033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2013-01-24 13:30 - 2010-06-29 04:58 - 000104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2017-09-26 22:22 - 2017-09-26 22:22 - 001984000 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2018-05-18 21:33 - 2018-05-18 21:33 - 067127976 _____ () C:\Program Files\AVG\Antivirus\libcef.dll
2018-02-05 20:09 - 2018-02-05 20:09 - 000161200 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2016-11-30 16:03 - 2017-10-11 03:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-01-24 13:19 - 2012-06-25 10:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 001891672 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\ffmpeg.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 001937752 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\libglesv2.dll
2018-05-01 22:59 - 2018-04-30 23:01 - 000095576 _____ () C:\Users\Mathias\AppData\Local\Discord\app-0.0.301\libegl.dll
2018-05-02 19:23 - 2018-05-23 14:53 - 009820504 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_voice\discord_voice.node
2018-05-02 19:23 - 2018-05-02 19:23 - 001530712 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_utils\discord_utils.node
2018-05-02 19:22 - 2018-05-02 19:22 - 000512856 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_erlpack\discord_erlpack.node
2018-05-02 19:22 - 2018-05-03 04:58 - 001578840 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_game_utils\discord_game_utils.node
2018-05-02 19:22 - 2018-05-10 05:06 - 001728344 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_overlay2\discord_overlay2.node
2018-05-02 19:22 - 2018-05-02 19:22 - 002722648 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_rpc\discord_rpc.node
2018-05-02 19:23 - 2018-05-02 19:23 - 002760536 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_contact_import\discord_contact_import.node
2018-05-02 19:23 - 2018-05-02 19:23 - 001249112 _____ () \\?\C:\Users\Mathias\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\discord_vigilante.node
2016-08-12 11:35 - 2016-08-12 11:35 - 040523480 _____ () C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\libcef.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 04:34 - 2018-04-22 22:04 - 000000128 _____ C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1 www.mefeedia.com
127.0.0.2 www.mefeedia.com
127.0.0.1 delivery.anchorfree.us/land.php
0.0.0.0 serius.mwbsys.com
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-650800747-3769124233-4161216065-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mathias\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CheVolume.lnk => C:\Windows\pss\CheVolume.lnk.CommonStartup
MSCONFIG\startupreg: ${_APP_NAME} => C:\Program Files (x86)\WellWeWeb\CheVolume\CheVolume.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: f.lux => "C:\Users\Mathias\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: Gyazo => C:\Program Files (x86)\Gyazo\GyStation.exe
MSCONFIG\startupreg: Hyperdesktop => C:\Users\Mathias\AppData\Roaming\Hyperdesktop\hyperdesktop.exe
MSCONFIG\startupreg: InstallerLauncher => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: LWS => F:\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: Mobile Partner => C:\Program Files (x86)\Parametres SFR 3G\Parametres SFR 3G
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Mathias\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{BE9496C8-48D4-400D-A63A-BF21EC3FA0C4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A842F7F7-E110-4473-8031-5551F6DE41AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{00502213-5A2A-41C1-8692-6C0A34245B73}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AC3C8DAA-CD2F-4FE2-A3AE-5637D8A72A47}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6F8A0AB1-8F12-481D-A013-EFF5B1368182}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{05F11423-1425-4673-B913-7ECDC1E7DB1C}] => (Allow) C:\Users\Mathias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{DE95528A-88E8-4B05-9A50-C0D471F35AAC}] => (Block) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{1352D914-9E9F-479C-BE82-7B2732256FA3}C:\program files (x86)\skypenoproxy\phone\skype.exe] => (Block) C:\program files (x86)\skypenoproxy\phone\skype.exe
FirewallRules: [UDP Query User{6AB3E4F4-C58F-4DC2-9124-DFE0D9F1FB76}C:\program files (x86)\skypenoproxy\phone\skype.exe] => (Block) C:\program files (x86)\skypenoproxy\phone\skype.exe
FirewallRules: [{8D8E24A7-0A81-4F07-AF1B-723036D54256}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9A64AAF0-9684-4ACE-82C7-CB3C1A1695AF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3776CEED-F87D-403E-B68C-F8CA960106EC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{98B5282A-8DFD-455F-8A73-384B5B25E401}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{D7A308E2-73FA-4FF7-91FD-F342E4A29A83}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{D84CBA18-B897-42D6-B5C6-CE7BA79787DD}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{71CA673D-46CE-43F5-A65F-FDBB7F66B720}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{0741DD8A-3752-40FC-9D00-9F25FD970973}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{D58D7DDB-27F0-420D-BE68-E8BC90BE5DFE}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{9A5319C9-E018-4952-9205-B67F681BD004}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{59BC1BE9-0CE1-488F-84FC-F5A3D5D7157E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E110E686-1188-48C5-8719-695D06A17DAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0979364B-5AE2-4391-BBB9-25FE09826D31}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9D1DE897-4B27-400D-8C7C-2CC3D5605BDB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{F9820373-8438-4792-807F-E43AD8F199B0}] => (Allow) C:\Users\Mathias\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E6760D1A-18E0-4DC7-8799-07236E1607D4}] => (Allow) C:\Users\Mathias\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DAB8F8BA-8FCB-4FA1-A8A0-ABB9A09197F3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{303657C0-055F-4431-9D65-D5A2568AA440}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C0FDD298-0244-43A9-AA1C-FC3B94BBE1DF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6E9C0568-D1D1-400D-B727-31F0C6D57884}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6097FDA9-1F44-4009-AF3D-1C6397FED832}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8D6A9178-CB5C-4DD7-84E6-E1E33D5117C0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FB298977-4AAA-46E9-AFD9-66E491E14BC3}] => (Allow) C:\Program Files\Microsoft Power BI Desktop\bin\msmdsrv.exe
FirewallRules: [TCP Query User{19391A60-CD2B-4BE2-BFFB-CE5815CF75A8}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{9591A9CF-D6C6-4AA3-B966-973335AC7842}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [{6EF58F32-A858-4D0E-9618-4F8BD9983C0F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{4A0CE00B-4387-40BD-B09D-CC9382936970}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D035F177-CEA2-4748-AF09-38E8577B148C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{932A9355-5234-4485-91B1-92C69A4B0BC8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{85256230-B638-4CFD-BF77-51A71F9E71BF}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{5669C96D-42B6-4BED-8FA1-62BEC8215A72}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [TCP Query User{D0DE98BA-5F03-4310-8C37-D61443FE80FA}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{57D7DAE9-1ECE-411D-8F9F-A3A2AE5EE229}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{6957D93B-1806-45D5-B7DB-7FD65C06FFC5}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E8F21D13-81A1-408D-A3ED-8999E5DFED92}C:\users\mathias\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mathias\appdata\roaming\spotify\spotify.exe
FirewallRules: [{1F6B9EAE-D6F2-4282-B5F0-FF6D323052B7}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{89E8AE4A-F8DB-4410-900B-B2EC0967B464}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{EF0D26DC-AEA8-4AC6-AA21-0227E2EB76F0}F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{31763545-9729-479C-A16B-515E718B4718}F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) F:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [TCP Query User{E895567C-9A27-43DB-8E78-01D0D9939827}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{292D2322-0700-4F5A-94ED-40B7BED8E4C4}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{A7B2BC2F-7425-4BCA-8CEB-112A0755C2E5}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{37684714-0531-4DCF-BB13-7BF4FE442F37}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{1B58243E-81EF-42DE-9505-51B21866A2B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{C4E30917-0A13-4862-A37D-33115395BB6F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{13A0B7A2-CB96-48FF-A611-2716EAA92C92}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3AD20685-B55E-445F-B41F-779F4EACDBBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{96EEE74E-4F6D-4DB8-B8F1-14C91E022DC2}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{762A157A-2182-41C9-852C-FFE5B76A0C92}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{50F4E220-1DAC-477E-981D-A6B4842605F6}] => (Allow) F:\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{7C4EBFAC-77F5-4287-9381-EC9DC57612A0}] => (Allow) F:\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{BD688188-036E-4733-A365-DD457D6485D4}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{D31090FB-4CE8-4AF3-8A58-430E22E328CA}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{0CDED76E-712A-4116-9426-B62428D0A74E}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{AD39CEBB-9E33-4D75-BC37-5139FCF48905}] => (Allow) F:\Tera\TERA-Launcher.exe
FirewallRules: [{12A2EEA7-516E-450B-931C-1D03EA378F4D}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{89C9E543-708B-4CF5-ABDA-13377D43CCD8}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{09688B58-4ED5-42B1-8C16-DB8420D9DF26}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [{37CBB583-5A14-47C1-8811-D61F16B4EA54}] => (Allow) F:\Tera\Client\TL.exe
FirewallRules: [TCP Query User{1D7BEDF3-11F4-465D-A20E-D29D83F8A233}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [UDP Query User{A4BE9ECF-5CEA-4AED-BBE0-B36E5FED570B}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [{6D0108B3-7C61-41C2-8750-8B810B08B4BB}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{EB6E68CE-8CC6-46BD-BC90-4FD4B16C4B2D}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{E8376D14-D589-4CE5-A935-341D7A551509}] => (Allow) F:\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [{78AEB3FF-6B29-4721-B02F-ED90C8E64944}] => (Allow) F:\Steam\steamapps\common\RecRoom\Recroom_Release.exe
FirewallRules: [TCP Query User{48F991EE-559D-4E29-AA40-603B19B5A04A}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{86B24811-4635-4104-9F72-2DB605DDEC1C}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{2DA494AA-BF23-4011-8960-CAFA0D00F5D7}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{F5165BB7-31B3-482B-9CDF-863444569D69}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{F388DD53-0373-43D5-807E-92546116DBEC}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [UDP Query User{B6221588-E9B9-4376-BC21-9BAB9C31364A}C:\program files (x86)\battle.net\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.exe
FirewallRules: [TCP Query User{2758E2AD-E5BC-4884-BECF-23865D399F35}F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe] => (Allow) F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{6BBBE6AD-ECF1-4841-AB9A-73970CB9C5AE}F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe] => (Allow) F:\Epic Games\Launcher\Portal\Binaries\Win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{5305BEF7-9FA8-472A-9D59-049144403A17}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{96BBC4E1-DF05-46F0-87F1-618F43D3F302}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{D1A9AFD1-0DEE-4858-845D-5D01DF8CDEC1}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{3FF4D632-7A3E-4A5E-966F-A51525EF4DF8}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{0AAE51F1-506D-4F3B-94A0-35EA099DBC8C}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [UDP Query User{BBA3E7F3-A0EC-40E0-B27C-1DCA7A292B7C}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [{C3671A4B-B615-48BE-BD2C-AB6BB1749963}] => (Allow) F:\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{97ABB625-75F6-484B-B230-FAAB85E03143}] => (Allow) F:\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{984B7555-5299-4372-A1F7-9BD81599D895}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [TCP Query User{BA5B69FB-A4FB-403D-89AA-01FC995D646E}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{1EB36778-CEA6-4766-B441-D689D14EFA61}F:\overwatch\overwatch.exe] => (Allow) F:\overwatch\overwatch.exe
FirewallRules: [TCP Query User{1E06F4A4-002E-4BF4-A8B0-AE4F57579A54}F:\world of warcraft beta\utils\wowvoiceproxyt.exe] => (Allow) F:\world of warcraft beta\utils\wowvoiceproxyt.exe
FirewallRules: [UDP Query User{3A20AD6A-0D05-4054-B141-1877BDBE7EA5}F:\world of warcraft beta\utils\wowvoiceproxyt.exe] => (Allow) F:\world of warcraft beta\utils\wowvoiceproxyt.exe
FirewallRules: [{531C4F9E-1360-4183-A4DD-72ADFCCDD8CA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{61594806-F0CA-4F42-A07E-65BC6239F209}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BC13BC80-9A14-46DB-8223-4B393EEF72C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4B5523E4-1F6E-418B-A424-5B604E71B0F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{3710B177-BA45-4C3F-8FD9-BBBBA2650753}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B067868C-A393-40A3-92E7-EFA55E1BB7A3}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{D49F7697-DF63-4E9F-B202-E724124B06D7}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
FirewallRules: [{796D5BF6-2C80-4BA3-AAF3-576D62B7891F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
 
==================== Restore Points =========================
 
23-05-2018 10:22:18 Scheduled Checkpoint
 
==================== Faulty Device Manager Devices =============
 
Name: HL-DT-ST DVDRAM GH22NS70 ATA Device
Description: CD-ROM Drive
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard CD-ROM drives)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (05/26/2018 09:06:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 999
 
Error: (05/26/2018 09:06:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 999
 
Error: (05/26/2018 09:06:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/26/2018 07:36:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 998
 
Error: (05/26/2018 07:36:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 998
 
Error: (05/26/2018 07:36:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/25/2018 03:32:13 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1997
 
Error: (05/25/2018 03:32:13 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1997
 
 
System errors:
=============
Error: (05/26/2018 06:09:07 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
Error: (05/26/2018 06:09:04 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
cdrom
 
Error: (05/25/2018 05:53:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.
 
Error: (05/25/2018 05:53:09 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} did not register with DCOM within the required timeout.
 
Error: (05/25/2018 04:48:24 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
Error: (05/25/2018 04:48:21 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
cdrom
 
Error: (05/25/2018 01:48:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.
 
Error: (05/25/2018 10:28:06 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.
 
 
Windows Defender:
===================================
Date: 2018-05-10 07:39:04.455
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{1F80CB91-AB6D-4C0B-866E-6DD9C7D77890}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2016-09-20 19:20:43.471
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{F01BF526-4C6A-4A38-B8DD-437EB385E30C}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2015-08-21 04:48:02.459
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{1153DDE4-9BBF-4E96-8F9A-E932054FED21}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2014-10-08 05:29:31.701
Description: 
Windows Defender scan has been stopped before completion.
Scan ID:{C4599BA7-420A-4281-BA3C-4682D0394A91}
Scan Type:AntiSpyware
Scan Parameters:Quick Scan
 
Date: 2016-08-06 08:34:43.410
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.225.3258.0
Engine version:1.1.12902.0
 
Date: 2016-06-26 23:08:19.064
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.223.2531.0
Engine version:1.1.12805.0
 
Date: 2016-06-22 08:43:00.220
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x8050800d
Error description:Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 
Signature version:1.223.2255.0
Engine version:1.1.12805.0
 
Date: 2013-10-05 16:07:40.483
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified. 
Signature version:0.0.0.0
Engine version:0.0.0.0
 
Date: 2013-10-05 16:04:02.438
Description: 
Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signatures Attempted:Current
Error Code:0x80070002
Error description:The system cannot find the file specified. 
Signature version:0.0.0.0
Engine version:0.0.0.0
 
CodeIntegrity:
===================================
 
Date: 2014-04-30 05:07:41.254
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.253
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.251
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.249
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.247
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-30 05:07:41.246
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-29 03:12:38.402
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
Date: 2014-04-29 03:12:38.401
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 23%
Total physical RAM: 16328.4 MB
Available physical RAM: 12456.98 MB
Total Virtual: 32654.96 MB
Available Virtual: 28218.31 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:119.14 GB) (Free:27.79 GB) NTFS
Drive e: () (Fixed) (Total:931.51 GB) (Free:404.24 GB) NTFS
Drive f: (New Volume) (Fixed) (Total:446.52 GB) (Free:85.4 GB) NTFS
 
\\?\Volume{bd4993e9-669b-11e2-afc1-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: EE9D5AF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 5E5DFEEE)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=42)
 
========================================================
Disk: 2 (Protective MBR) (Size: 447.1 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================


#10 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 26 May 2018 - 01:05 PM

Hi,

I thought my issue resolved, but this morning as I woke up I found that my IP was changed again to 23.27.44.223

That IP address belongs to EGIHosting in California
Check it out.
https://www.ip-tracker.org/locator/ip-lookup.php?ip=23.27.44.223

Is this your Internet Provider?

Are you still using the this VPN
C:\Program Files (x86)\VyprVPN

What are the issues with this computer?

#11 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 26 May 2018 - 06:05 PM

My internet provider is in France, it is not my IP.

 

And no I havent used VyprVPN in a while.

 

My computer has no real issue, other than the fact my IP changes to other IPs outside of my country.



#12 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 27 May 2018 - 06:08 AM

Hi,

Reset your router. It may be compromised.

How to Reset a Router Back to the Factory Default Settings
http://www.ehow.com/how_2110924_reset-back-factory-default-settings.html

Then, please reconfigure it back to your preferred setting.. Below is the list of default username and password, should you don't know it ;)

http://www.routerpasswords.com/
http://www.phenoelit-us.org/dpl/dpl.html
===

Reset for Linksys, Netgear, D-Link and Belkin Routers
http://www.techsupportforum.com/2763-reset-for-linksys-netgear-d-link-and-belkin-routers/

====
How to tell if my Wireless is secure.
http://www.ehow.com/how_6775466_tell-wireless-secure_.html

#13 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 28 May 2018 - 12:20 PM

Thanks, I now reseted my router fully, hopefully that will solve it.

 

This issue is very very weird, because it only happens on my PC and not the other PC/phones of my home.

 

Also the IP seems to get changed everytime my computer goes to "sleep mode".



#14 nasdaq

nasdaq

  • Malware Response Team
  • 39,578 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:18 AM

Posted 28 May 2018 - 12:55 PM

Hi,

Run the RogueKiller tool and delete all these files
[PUP.uTorrentAds][File] C:\Users\Mathias\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe -> Found
Restart the computer normally.

Change to sleep mode to Hibernate.
https://support.microsoft.com/en-ca/help/13770/windows-shut-down-sleep-hibernate-your-pc

#15 matzy24

matzy24
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:18 AM

Posted 30 May 2018 - 07:02 AM

Hello Nasdaq, hope you are doing good.

 

I did the tasks above.

 

 

I have a feeling that this is the malware that I may be having : https://en.wikipedia.org/wiki/VPNFilter

 

Sounds like I could be affected by that, since it's also a russian originated virus and I had IPs linked to Russia.

 

They recommend to factory reset the Router in order to wipe it of the router.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users