Solved PUM DNS detected

Joure

Joure

Posts: 26   +0
My connection's been slow for a while and finally got around to run RogueKiller. It detected a number of PUM DNS entries. One question I have is: Can this slow down my internet connections?

Anyway, I'll post the Rogue Killer report below.
(thanks in advance for taking your time to help !!!!)

RogueKiller V10.6.0.0 (x64) [Apr 17 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : admin [Administrator]
Started from : C:\Users\admin\Desktop\RogueKillerX64.exe
Mode : Scan -- Date : 04/26/2015 22:55:05

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 15 ¤¤¤
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Found
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> Found
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ATA WDC WD2002FAEX-0 SCSI Disk Device +++++
--- User ---
[MBR] 19fa5df04dce6473070f88c94d61e8c7
[BSP] dd956f2a7d4a84bf83a6ecceda293e4d : Empty|VT.Unknown MBR Code
Partition table:
0 - | Offset (sectors): 34 | Size: 128 MB
1 - | Offset (sectors): 264192 | Size: 100 MB
2 - | Offset (sectors): 468992 | Size: 478707 MB
3 - Basic data partition | Offset (sectors): 980860928 | Size: 1428792 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ATA ST2000DX001-1CM1 SCSI Disk Device +++++
--- User ---
[MBR] 0086f36f0b7bc8b257f89fc226376c3d
[BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - Basic data partition | Offset (sectors): 264192 | Size: 1907600 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_11012014_035342.log - RKreport_DEL_11012014_040216.log - RKreport_SCN_11012014_040945.log - RKreport_DEL_11012014_041304.log
RKreport_SCN_11012014_042722.log - RKreport_DEL_11012014_042752.log - RKreport_SCN_11012014_042933.log - RKreport_SCN_11012014_044027.log
RKreport_SCN_11012014_135942.log - RKreport_SCN_11012014_150842.log - RKreport_SCN_11032014_040520.log - RKreport_SCN_11042014_035118.log
 
Welcome aboard

Please, complete all steps listed here: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:
  • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
  • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
  • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
  • Never run more than one scan at a time.
  • Keep updating me regarding your computer behavior, good, or bad.
  • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
  • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
  • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
 
Step 1: I have Comodo Antivirus always running and always updated.
Step 2: Done
Step 3:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2015
Ran by admin (administrator) on ADMIN-PC on 27-04-2015 12:03:20
Running from C:\Users\admin\Desktop
Loaded Profiles: admin & UpdatusUser (Available profiles: admin & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Marvell) C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
() C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe
(AdTrustMedia) C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Epic Games, Inc.) E:\Program Files\Epic Games\Launcher\Engine\Binaries\Win64\EpicGamesLauncher.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1426136 2015-04-21] (COMODO)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-15] (Logitech Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-07] (Intel Corporation)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Sound Blaster X-Fi MB 3] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe [2104832 2013-01-30] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [MSUTray] => C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe [1213952 2012-06-13] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [PrivDogService] => C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe [662184 2014-06-17] (AdTrustMedia)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1284680 2014-01-17] (CANON INC.)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4886608 2015-04-05] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-06-17] (Google Inc.)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [MP3 Skype recorder] => C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [1544704 2014-12-27] ()
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\MountPoints2: D - D:\Run.exe
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\MountPoints2: {79d457cd-d290-11e4-a391-94de80a0cb0e} - G:\LaunchU3.exe -a
HKU\S-1-5-21-1780743532-3999283199-1341137972-1001\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-06-17] (Google Inc.)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1001\...\MountPoints2: D - D:\Run.exe
HKU\S-1-5-21-1780743532-3999283199-1341137972-1001\...\MountPoints2: {035b3746-d719-11e2-86be-806e6f6e6963} - D:\SETUP.EXE
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-02-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-26] (NVIDIA Corporation)
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-11]
ShortcutTarget: Dropbox.lnk -> C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1780743532-3999283199-1341137972-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://xin.msn.com/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-10-12] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-10-12] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-1780743532-3999283199-1341137972-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 218.186.2.16 218.186.2.6 202.156.1.16
Tcpip\..\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9}: [NameServer] 156.154.70.22,156.154.71.22

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-21] ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-12] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-12] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-21] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-08]
CHR Extension: (Google Drive) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-08]
CHR Extension: (YouTube) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-08]
CHR Extension: (Adblock Plus) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-12-08]
CHR Extension: (PrivDog) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja [2014-04-15]
CHR Extension: (Google Search) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-08]
CHR Extension: (Bookmark Manager) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Image Hover) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaacjelpfohbhlffbajgliongkdofkfg [2014-04-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-05]
CHR Extension: (Skype Click to Call) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-12-09]
CHR Extension: (Go away MDA - Bypass MDA blocked sites) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lledpflfnanamkogoclkgaggfdgoalok [2014-03-29]
CHR Extension: (Google Wallet) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-08]
CHR Extension: (Gmail) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-08]
CHR HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Users\admin\AppData\Local\AdTrustMedia\PrivDog\PrivDog_chrome.crx [2014-04-20]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
 
==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5020520 2015-04-05] (Emsisoft GmbH)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5540424 2015-04-21] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265816 2015-04-21] (COMODO)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-12-08] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-12-08] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [406016 2011-09-14] (Creative Technology Ltd) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2370240 2014-11-27] (Comodo Security Solutions, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MSUWebService; C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe [24645 2011-11-22] (Apache Software Foundation) [File not signed]
S3 Origin Client Service; E:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-21] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-29] ()
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20696 2015-04-02] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [797280 2015-04-02] (COMODO)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [490256 2013-01-23] (Intel Corporation)
R3 e1rexpress; C:\Windows\System32\DRIVERS\e1r62x64.sys [488784 2012-11-15] (Intel Corporation)
R1 epp64; C:\Windows\System32\DRIVERS\epp64.sys [135800 2015-04-05] (Emsisoft GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [442368 2013-03-19] (Intel(R) Corporation) [File not signed]
R3 Mv_Process; c:\windows\syswow64\mv_process.sys [14376 2011-11-22] ()
R1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] ()
R4 TotRec8; \??\C:\Windows\system32\drivers\TotRec8.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-27 12:03 - 2015-04-27 12:03 - 00028888 _____ () C:\Users\admin\Desktop\FRST.txt
2015-04-27 12:02 - 2015-04-27 12:03 - 00000000 ____D () C:\FRST
2015-04-27 12:00 - 2015-04-27 12:00 - 02101248 _____ (Farbar) C:\Users\admin\Desktop\FRST64.exe
2015-04-27 05:20 - 2015-04-27 05:20 - 00000000 ____D () C:\Users\admin\AppData\Local\UnrealEngineLauncher
2015-04-26 22:30 - 2015-04-26 22:33 - 20608088 _____ () C:\Users\admin\Desktop\RogueKillerX64.exe
2015-04-26 17:34 - 2015-04-26 19:11 - 00000000 ____D () C:\Users\admin\AppData\Local\Popcorn-Time
2015-04-26 17:33 - 2015-04-26 17:33 - 00002222 _____ () C:\Users\Public\Desktop\Popcorn Time Offical.lnk
2015-04-26 17:33 - 2015-04-26 17:33 - 00000000 ____D () C:\Users\admin\AppData\Local\Popcorn Time Offical
2015-04-26 17:33 - 2015-04-26 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time Offical
2015-04-26 17:32 - 2015-04-26 17:32 - 22642258 _____ (Popcorn Time Offical ) C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe
2015-04-26 17:15 - 2015-04-26 17:15 - 00000000 ____D () C:\Users\admin\AppData\Roaming\dvdcss
2015-04-26 17:14 - 2015-04-26 17:14 - 00831496 _____ (SysProgs.org) C:\Users\admin\Downloads\WinCDEmu-3.6.exe
2015-04-26 17:14 - 2015-04-26 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinCDEmu
2015-04-26 17:14 - 2015-04-26 17:14 - 00000000 ____D () C:\Program Files (x86)\WinCDEmu
2015-04-26 13:41 - 2015-04-26 13:41 - 18542134 _____ () C:\Users\admin\Desktop\fight.aiff
2015-04-26 13:39 - 2015-04-26 13:39 - 18542124 _____ () C:\Users\admin\Desktop\fightscene.wav
2015-04-26 13:36 - 2015-04-26 13:38 - 06708620 _____ () C:\Users\admin\Desktop\fightscene.flac
2015-04-26 13:28 - 2015-04-26 14:13 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Audacity
2015-04-26 13:28 - 2015-04-26 13:28 - 00000722 _____ () C:\Users\Public\Desktop\Audacity.lnk
2015-04-26 13:28 - 2015-04-26 13:28 - 00000722 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-04-26 13:26 - 2015-04-26 13:26 - 24210616 _____ (Audacity Team ) C:\Users\admin\Downloads\audacity-win-2.1.0.exe
2015-04-26 13:04 - 2015-04-26 13:04 - 03198976 _____ (Moo0) C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe
2015-04-26 12:51 - 2015-04-26 12:51 - 00000000 ____D () C:\Users\admin\AppData\Roaming\RHEng
2015-04-26 12:51 - 2015-04-26 12:51 - 00000000 ____D () C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2015-04-26 12:50 - 2015-04-26 12:51 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-04-26 12:48 - 2015-04-26 12:48 - 01709792 _____ (Disc Soft Ltd.) C:\Users\admin\Downloads\DTLiteInstaller.exe
2015-04-26 11:57 - 2015-04-26 11:57 - 05618960 _____ () C:\Users\admin\Downloads\tr83pe.exe
2015-04-26 05:14 - 2015-04-26 05:14 - 00130699 _____ () C:\Users\admin\Desktop\test.wma
2015-04-22 21:18 - 2015-04-22 21:18 - 01469322 _____ () C:\Users\admin\Desktop\metro_for_steam___3_9_1_by_boneyardbrew-d4u3kjv.zip
2015-04-22 21:03 - 2015-04-22 21:03 - 00067348 _____ () C:\Users\admin\Desktop\[BakaBT.180497v0] Rurouni Kenshin The Legend Ends.torrent
2015-04-22 21:02 - 2015-04-22 21:02 - 00067520 _____ () C:\Users\admin\Desktop\[BakaBT.180491v0] Rurouni Kenshin Kyoto Inferno.torrent
2015-04-22 21:01 - 2015-04-22 21:01 - 00027444 _____ () C:\Users\admin\Desktop\[BakaBT.170844v0] Rurouni Kenshin 1080p 2012.torrent
2015-04-22 20:55 - 2015-04-22 20:55 - 00016605 _____ () C:\Users\admin\Desktop\20698CF5D4184E219F93000DFCDB0481EC1B30EC.torrent
2015-04-15 11:03 - 2015-04-15 11:03 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 11:03 - 2015-04-15 11:03 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 11:03 - 2015-04-15 11:03 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 11:02 - 2015-04-15 11:02 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 11:02 - 2015-04-15 11:02 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 11:02 - 2015-03-13 12:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 11:02 - 2015-03-13 12:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 11:02 - 2015-03-13 11:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 11:02 - 2015-03-13 11:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 11:02 - 2015-03-04 12:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 11:02 - 2015-03-04 12:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 11:02 - 2015-03-04 12:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 11:02 - 2015-02-25 11:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-12 00:21 - 2015-04-12 00:21 - 00000000 ____D () C:\Users\admin\AppData\Local\openvr
2015-04-05 19:59 - 2015-04-05 19:59 - 00000000 ____D () C:\ProgramData\Emsisoft
2015-04-05 19:05 - 2015-04-27 12:03 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2015-04-05 19:05 - 2015-04-05 19:05 - 00135800 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp64.sys
2015-04-05 19:05 - 2015-04-05 19:05 - 00001095 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-04-05 19:05 - 2015-04-05 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-04-05 19:00 - 2015-04-05 19:02 - 166386960 _____ (Emsisoft Ltd. ) C:\Users\admin\Desktop\EmsisoftAntiMalwareSetup.exe
2015-04-05 04:33 - 2015-04-05 04:33 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 04:33 - 2015-04-05 04:33 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-04 04:38 - 2015-04-08 16:32 - 00000000 ____D () C:\Users\admin\Desktop\Concepts Agency
2015-04-03 17:02 - 2015-04-03 17:25 - 00886605 _____ () C:\Users\admin\Desktop\de_facility_layout.psd
2015-04-03 16:00 - 2015-04-21 17:14 - 00000000 ____D () C:\Users\admin\Desktop\MyFirstUE4Level
2015-04-03 01:41 - 2015-04-03 01:41 - 00000000 _____ () C:\Users\admin\Desktop\tuesdays and fridays.txt
2015-04-02 20:53 - 2015-04-02 21:13 - 00262188 _____ () C:\Users\admin\Desktop\cf_unionstation.tga
2015-04-02 20:53 - 2015-04-02 21:13 - 00087616 _____ () C:\Users\admin\Desktop\cf_unionstation.vtf
2015-04-02 20:50 - 2015-04-02 20:53 - 01398272 _____ () C:\Users\admin\Desktop\loadingscreen_map_cf_unionstation.vtf
2015-04-02 20:50 - 2015-04-02 20:52 - 04194348 _____ () C:\Users\admin\Desktop\loadingscreen_map_cf_unionstation.tga
2015-04-01 05:36 - 2015-04-01 05:36 - 00013833 _____ () C:\Users\admin\Desktop\[BakaBT.179859v0] [SubDESU-H] Idol Sister - 01 (852x480 x264 8bit AAC)[191E08AC].mp4.torrent
2015-04-01 05:34 - 2015-04-01 05:34 - 00013543 _____ () C:\Users\admin\Desktop\[BakaBT.180235v0] Nosewasure The Animation (SubDESU-H).torrent

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-27 12:03 - 2014-07-20 13:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-27 12:03 - 2013-12-08 17:05 - 00000512 _____ () C:\Windows\SysWOW64\za_mv_raid.ev
2015-04-27 12:03 - 2011-11-22 11:08 - 00162816 _____ () C:\Windows\SysWOW64\freqdb.db
2015-04-27 12:02 - 2013-12-16 02:05 - 93590992 _____ () C:\Windows\backend.log
2015-04-27 11:58 - 2013-12-09 01:29 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2015-04-27 11:55 - 2013-12-08 23:03 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-04-27 11:11 - 2013-06-17 14:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-27 08:18 - 2013-06-17 14:58 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6C28B760-34E2-4966-B77A-AE0FFBA1C245}
2015-04-27 07:25 - 2013-06-17 14:45 - 01556882 _____ () C:\Windows\WindowsUpdate.log
2015-04-27 05:20 - 2014-10-03 01:36 - 00000000 ____D () C:\ProgramData\Epic
2015-04-27 02:00 - 2013-12-09 01:42 - 00000000 ____D () C:\Users\admin\AppData\Local\Adobe
2015-04-27 00:55 - 2013-12-10 14:19 - 00000000 ___RD () C:\Users\admin\Dropbox
2015-04-26 22:34 - 2014-11-01 04:23 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-04-26 22:29 - 2014-11-01 03:49 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-04-26 21:28 - 2013-12-18 22:21 - 00000000 ____D () C:\Users\admin\AppData\Roaming\foobar2000
2015-04-26 17:32 - 2014-10-09 00:03 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc
2015-04-26 17:14 - 2011-06-05 04:14 - 00198480 _____ (SysProgs.org) C:\Windows\system32\Drivers\BazisVirtualCDBus.sys
2015-04-26 13:24 - 2014-11-08 21:07 - 00000000 ____D () C:\Users\admin\AppData\Roaming\uTorrent
2015-04-26 13:19 - 2014-04-15 11:58 - 00111846 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-04-26 13:11 - 2013-06-17 14:46 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-26 12:15 - 2009-07-14 12:45 - 00034544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-26 12:15 - 2009-07-14 12:45 - 00034544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-26 12:08 - 2013-12-10 14:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Dropbox
2015-04-26 12:06 - 2013-12-09 02:26 - 00000000 ____D () C:\Users\admin\AppData\Local\TSVNCache
2015-04-26 12:05 - 2014-03-25 02:13 - 00030007 _____ () C:\Windows\setupact.log
2015-04-26 12:05 - 2013-12-08 17:05 - 00054652 _____ () C:\Windows\SysWOW64\mvaccelerator.log
2015-04-26 12:05 - 2013-12-08 17:05 - 00000241 _____ () C:\Windows\SysWOW64\mvcli.ini
2015-04-26 12:05 - 2013-06-17 14:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-26 12:05 - 2009-07-14 13:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-25 22:35 - 2014-10-31 13:41 - 00000000 ____D () C:\Users\admin\AppData\Local\TGitCache
2015-04-25 13:02 - 2015-01-24 20:26 - 00000000 ____D () C:\Users\admin\AppData\Roaming\OBS
2015-04-24 15:23 - 2014-10-03 03:16 - 00000000 ____D () C:\Users\admin\Documents\Unreal Projects
2015-04-24 11:47 - 2013-12-10 14:17 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-23 14:19 - 2015-01-24 20:25 - 00000000 ____D () C:\Program Files\OBS
2015-04-23 12:35 - 2013-06-17 14:51 - 00069568 _____ () C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-23 12:20 - 2009-07-14 12:45 - 04969424 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-22 16:56 - 2013-12-16 18:13 - 00001456 _____ () C:\Users\admin\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-04-21 19:40 - 2014-10-25 15:37 - 00000000 ____D () C:\Users\admin\Documents\Visual Studio 2013
2015-04-21 12:50 - 2014-07-20 13:01 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-21 12:50 - 2014-07-20 13:01 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-21 12:50 - 2014-07-20 13:01 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-17 00:31 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 00:07 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\rescache
2015-04-16 17:13 - 2014-11-08 15:28 - 00000000 ____D () C:\Users\admin\AppData\Local\CrashDumps
2015-04-15 22:21 - 2014-12-11 13:01 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 22:21 - 2014-05-07 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 17:50 - 2013-06-17 14:48 - 00909612 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 17:50 - 2009-07-14 13:13 - 00909612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-15 17:49 - 2013-12-09 03:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 17:44 - 2013-06-17 15:18 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 17:19 - 2015-03-04 23:48 - 00000191 _____ () C:\Users\admin\Desktop\Where to bring my dad.txt
2015-04-14 02:48 - 2013-12-09 01:29 - 00000000 ____D () C:\ProgramData\Skype
2015-04-13 10:03 - 2013-12-22 03:21 - 00000000 ____D () C:\Users\admin\Desktop\TEMP FILES
2015-04-13 10:02 - 2015-02-27 20:52 - 00000000 ____D () C:\Users\admin\Desktop\Brushes
2015-04-10 21:31 - 2013-12-10 04:38 - 00000000 ____D () C:\HammerAutosave
2015-04-09 12:33 - 2014-02-05 00:51 - 00028846 _____ () C:\Windows\PFRO.log
2015-04-08 12:39 - 2013-12-08 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-04-08 12:39 - 2013-12-08 23:03 - 00000000 ____D () C:\Program Files\COMODO
2015-04-03 13:49 - 2014-10-03 03:15 - 00000000 ____D () C:\Users\admin\AppData\Local\UnrealEngine
2015-04-03 12:33 - 2009-07-14 13:08 - 00032626 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-02 01:49 - 2013-11-14 11:38 - 00797280 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00104608 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00045880 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00020696 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2015-04-02 01:48 - 2013-11-14 11:38 - 00041248 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2015-04-02 01:48 - 2013-09-24 10:53 - 00576848 _____ (COMODO) C:\Windows\system32\guard64.dll
2015-04-02 01:48 - 2013-09-24 10:53 - 00444472 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2015-04-02 01:47 - 2013-09-24 10:53 - 00358104 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2015-04-02 01:46 - 2013-09-24 10:53 - 00045784 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2015-04-02 01:45 - 2013-09-24 10:53 - 00288472 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2015-04-02 01:45 - 2013-09-24 10:53 - 00040664 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll
2015-03-30 02:19 - 2013-12-18 03:14 - 00016470 _____ () C:\Users\admin\Documents\Joure.ods
2015-03-28 17:59 - 2014-03-19 21:00 - 00000000 ____D () C:\Users\admin\Documents\Dropbox Backup
2015-03-28 14:40 - 2015-02-01 23:41 - 00000000 ____D () C:\Users\admin\Desktop\Weapon Scripts

==================== Files in the root of some directories =======

2014-12-01 15:15 - 2014-12-01 15:15 - 0000132 _____ () C:\Users\admin\AppData\Roaming\Adobe BMP Format CC Prefs
2013-12-10 18:00 - 2014-10-13 00:08 - 0000132 _____ () C:\Users\admin\AppData\Roaming\Adobe Targa Format CC Prefs
2013-12-16 18:13 - 2015-04-22 16:56 - 0001456 _____ () C:\Users\admin\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-02-22 17:08 - 2015-02-22 17:27 - 0005120 _____ () C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-30 03:09 - 2014-10-30 03:09 - 0000600 _____ () C:\Users\admin\AppData\Local\PUTTY.RND
2014-09-21 15:53 - 2014-09-21 15:53 - 0000754 _____ () C:\Users\admin\AppData\Local\recently-used.xbel

Some content of TEMP:
====================
C:\Users\admin\AppData\Local\Temp\dllnt_dump.dll
C:\Users\admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuhlhy5.dll
C:\Users\admin\AppData\Local\Temp\MSETUP4.EXE


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-24 16:28

==================== End Of Log ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2015
Ran by admin at 2015-04-27 12:04:11
Running from C:\Users\admin\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

admin (S-1-5-21-1780743532-3999283199-1341137972-1000 - Administrator - Enabled) => C:\Users\admin
Administrator (S-1-5-21-1780743532-3999283199-1341137972-500 - Administrator - Disabled)
Guest (S-1-5-21-1780743532-3999283199-1341137972-501 - Limited - Enabled)
UpdatusUser (S-1-5-21-1780743532-3999283199-1341137972-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: COMODO Antivirus (Enabled - Up to date) {F0BC89B2-8937-0933-021B-B17D981F2A71}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
AS: Comodo Defense+ (Enabled - Up to date) {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )
3DMark (HKLM-x32\...\Steam App 223850) (Version: - Futuremark)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
Afterfall InSanity Extended Edition (HKLM-x32\...\Steam App 224420) (Version: - Intoxicate Studios)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (HKLM-x32\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
BioShock (HKLM-x32\...\Steam App 7670) (Version: - 2K Boston)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)
Blender (HKLM\...\Blender) (Version: 2.72b - Blender Foundation)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Brothers - A Tale of Two Sons (HKLM-x32\...\Steam App 225080) (Version: - Starbreeze Studios AB)
Build Tools - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version: - Infinity Ward)
Canon CanoScan LiDE 220 On-screen Manual (HKLM-x32\...\Canon CanoScan LiDE 220 On-screen Manual) (Version: 7.7.1 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.11.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.2.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.4.0 - Canon Inc.)
CanoScan LiDE 220 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4811) (Version: 1.00 - Canon Inc.)
CDisplayEx 1.10.3 (HKLM\...\CDisplayEx_is1) (Version: - cdisplayex.com)
COMODO Antivirus (HKLM\...\{901D1D88-408D-48E5-80DD-CC3145BD8456}) (Version: 6.3.39949.2976 - COMODO Security Solutions Inc.)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 36.1.1.21 - Comodo)
Contagion (HKLM-x32\...\Steam App 238430) (Version: - Monochrome LLC)
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Crazybump (remove only) (HKLM-x32\...\Crazybump) (Version: - )
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)
Dear Esther (HKLM-x32\...\Steam App 203810) (Version: - thechineseroom & Robert Briscoe)
Deus Ex: Game of the Year Edition (HKLM-x32\...\Steam App 6910) (Version: - Ion Storm)
Deus Ex: Human Revolution - Director's Cut (HKLM-x32\...\Steam App 238010) (Version: - Eidos Montreal)
Dino D-Day (HKLM-x32\...\Steam App 70000) (Version: - 800 North and Digital Ranch)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Dropbox (HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Dropbox) (Version: 3.4.4 - Dropbox, Inc.)
Duke Nukem 3D: Megaton Edition (HKLM-x32\...\Steam App 225140) (Version: - 3D Realms)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)
Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Ezvid (HKLM-x32\...\{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1) (Version: 0982 - Ezvid, inc.)
F.E.A.R. 2: Project Origin (HKLM-x32\...\Steam App 16450) (Version: - Monolith)
Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version: - Bethesda Game Studios)
Fallout 3 Patch v1.5 (HKLM-x32\...\Updated Unofficial Fallout 3 Patch_is1) (Version: 1.5 - )
Fallout Mod Manager 0.13.21 (HKLM-x32\...\Generic Mod Manager_is1) (Version: - Q, Timeslip)
FEZ (HKLM-x32\...\Steam App 224760) (Version: - Polytron Corporation)
Final Hours of Tomb Raider (HKLM-x32\...\Steam App 233410) (Version: - Geoff Keighley)
foobar2000 v1.2.9 (HKLM-x32\...\foobar2000) (Version: 1.2.9 - Peter Pawlowski)
Free to Play (HKLM-x32\...\Steam App 245550) (Version: - Valve)
GCFScape 1.8.5 (HKLM\...\GCFScape_is1) (Version: - Ryan Gregg)
Git version 1.9.4-preview20140929 (HKLM-x32\...\Git_is1) (Version: 1.9.4-preview20140929 - The Git Development Community)
Gone Home (HKLM-x32\...\Steam App 232430) (Version: - The Fullbright Company)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GRID (HKLM-x32\...\Steam App 12750) (Version: - Codemasters Studios)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version: - Valve)
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve)
Hawken (HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Hawken) (Version: - Meteor Entertainment)
Home (HKLM-x32\...\Steam App 215670) (Version: - Benjamin Rivers)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.0.1.0 (HKLM\...\PROSetDX) (Version: 18.0.1.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)
Kentucky Route Zero (HKLM-x32\...\Steam App 231200) (Version: - Cardboard Computer)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Left 4 Dead 2 Authoring Tools (HKLM-x32\...\Steam App 563) (Version: - Valve)
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Marvell Storage Utility V4 (HKLM-x32\...\mvMSU) (Version: 4.1.0.2013 - Marvell)
Mass Effect (HKLM-x32\...\Steam App 17460) (Version: - BioWare)
Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version: - BioWare)
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version: - Electronic Arts)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version: - Electronic Arts)
METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version: - Kojima Productions)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - 4A Games)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 3 (HKLM-x32\...\{1ef771b4-b774-439e-a015-23dec292d9a4}) (Version: 12.0.30723.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
MirrorMoon EP (HKLM-x32\...\Steam App 231310) (Version: - Santa Ragione)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
MP3 Skype recorder (HKLM-x32\...\{78A8FADA-B8DF-4AA4-AED7-C91EE58EB7E9}) (Version: 4.6.1.0 - Alexander Nikiforov)
MPC-HC 1.7.7 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.7 - MPC-HC Team)
My Game Long Name (HKLM\...\UDK-4c9ce4ab-f210-44c0-97ae-ae18fd50fbf9) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-4e3a8a76-1a5a-428b-aa61-5c12a86714a5) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-b51a0caa-47c5-43ec-aca3-e86548fddf24) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-f9fd5995-079f-4482-b672-2aba7487c0f9) (Version: - Epic Games, Inc.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.1 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 306.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 306.23 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX (HKLM-x32\...\{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge 2 B13.0403.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PAC-MAN Championship Edition DX+ (HKLM-x32\...\Steam App 236450) (Version: - Mine Loader Software Co., Ltd.)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Popcorn Time Offical version 0.8.0.2 (HKLM-x32\...\{8F38178C-CFE2-476C-9DC8-F4203C2395FF}_is1) (Version: 0.8.0.2 - Popcorn Time Offical)
Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)
Portal 2 - The Final Hours (HKLM-x32\...\Steam App 104600) (Version: - Geoff Keighley)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
PrivDog (HKLM-x32\...\PrivDog) (Version: 2.2.0.14 - privdog.com)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Python Tools Redirection Template (x32 Version: 1.0 - Microsoft Corporation) Hidden
Quake Live (HKLM-x32\...\Quake Live) (Version: - id Software)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Race The Sun (HKLM-x32\...\Steam App 253030) (Version: - Flippfly LLC)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.23.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.23.0 - Renesas Electronics Corporation) Hidden
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version: - CAPCOM Co., Ltd.)
Resident Evil 6 / Biohazard 6 (HKLM-x32\...\Steam App 221040) (Version: - Capcom)
Resident Evil Revelations / Biohazard Revelations UE (HKLM-x32\...\Steam App 222480) (Version: - Capcom)
Shift 2 Unleashed (HKLM-x32\...\Steam App 47920) (Version: - Slightly Mad Studios)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version: - United Front Games)
Sound Blaster X-Fi MB3 (HKLM-x32\...\{3689CE39-3173-4952-B7AF-F1A9D6F9A288}) (Version: 1.00.01 - Creative Technology Limited)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve)
Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version: - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Source SDK Base 2013 Singleplayer (HKLM-x32\...\Steam App 243730) (Version: - )
SourceTree (HKLM-x32\...\SourceTree 1.6.8) (Version: 1.6.8 - Atlassian)
SourceTree (x32 Version: 1.6.8 - Atlassian) Hidden
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Strike Vector (HKLM-x32\...\Steam App 246700) (Version: - Ragequit Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version: - Capybara)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.3.7 - Electronic Arts)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Tomb Raider: Anniversary (HKLM-x32\...\Steam App 8000) (Version: - Crystal Dynamics)
Tomb Raider: Legend (HKLM-x32\...\Steam App 7000) (Version: - Crystal Dynamics)
Tomb Raider: Underworld (HKLM-x32\...\Steam App 8140) (Version: - Crystal Dynamics Inc.)
TortoiseGit 1.8.11.0 (64 bit) (HKLM\...\{56AB2BBB-7F02-4F4E-8FE2-8E83857E2E4B}) (Version: 1.8.11.0 - TortoiseGit)
TortoiseSVN 1.8.4.24972 (64 bit) (HKLM\...\{A2EFDE01-96B3-4E55-8834-81617ED6BCBE}) (Version: 1.8.24972 - TortoiseSVN)
Transformers: War for Cybertron (HKLM-x32\...\Steam App 42650) (Version: - High Moon Studios)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.10.1 - Tweaking.com)
TypeScript Power Tool (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden
Unreal Engine (HKLM\...\{C5027D29-72B6-45F1-95C7-AAB98C31F69D}) (Version: 1.1.12.0 - Epic Games, Inc.)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Urban Terror Beta 2.0 (HKLM-x32\...\Urban Terror Beta 2.0) (Version: - )
Urban Terror beta 2.6 (HKLM-x32\...\{DD373670-3BE4-48AA-BE81-B57371A9A5DE}) (Version: - )
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Visual Studio 2013 Update 3 (KB2829760) (HKLM-x32\...\{86438e3d-7f83-4dd2-94aa-047e7c3974cb}) (Version: 12.0.30723 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VS Update core components (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
VTFEdit 1.3.3 (HKLM\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 3.6 - Bazis)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Zombie Panic Source (HKLM-x32\...\Steam App 17500) (Version: - Zombie Panic Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll ()
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> E:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

25-04-2015 22:15:08 Scheduled Checkpoint
26-04-2015 17:14:25 Device Driver Package Install: SysProgs.org Storage controllers

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 10:34 - 2009-06-11 05:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0C8908EA-674F-48D2-BDCA-1710CD5A3874} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {236CE107-5E4F-400A-B474-689D349AF54D} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {3823C97F-D507-4CD7-9C4D-F924C742F7E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17] (Google Inc.)
Task: {3D596B38-E672-46F7-9240-7FB72CDB34AA} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3E5907A9-F9FC-46FC-AB3B-68BEA1526C08} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {532B794A-3F55-4AB5-A942-96589E1FF860} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17] (Google Inc.)
Task: {5A35809C-575D-40D2-96E8-628DB007B098} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {731272CC-2F97-45A3-95C6-B0E1A3B1A129} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {7F1996C9-8AEE-46D4-B087-1BFC20FE2F0B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {8F5966B7-1231-492F-95A7-50C00CFDC601} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {9534A205-FA6A-473F-80B3-9FC32DE132C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-21] (Adobe Systems Incorporated)
Task: {97BE7E72-1183-4E54-8C8A-A22703D814D8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A520176F-741D-44E7-9626-A0F6F8609946} - System32\Tasks\AdobeAAMUpdater-1.0-admin-PC-admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: {ACEAC37C-0B0D-49B5-A277-98799CBFD1B6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AFED6019-C8B1-462B-9014-55D3936ED407} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-04-04] (Microsoft Corporation)
Task: {BBFAC56D-BC96-45EB-93A5-A94D187F756B} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {DB190DBA-14BE-40EA-9847-487E87DE1E2A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {E88E7031-8D33-482F-BF35-24D9BA015F26} - System32\Tasks\{FFA51477-CFA3-4FAF-A5C0-CA57DE3D9724} => E:\Development\Git\Git-1.9.4-preview20140929.exe [2014-10-30] (The Git Development Community )
Task: {EFB56F9A-0D76-41F2-9128-5EAEEE7B3B23} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-04-21] (COMODO)
Task: {F4BB39DC-EDBB-4C1D-BE31-0176E5D5BAB9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-26] (Adobe Systems Incorporated)
Task: {FC1C347B-0C81-4213-9B07-FF500235B3A5} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-06-17 14:54 - 2013-01-18 23:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-11-08 03:16 - 2013-06-28 23:28 - 00084616 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-05-29 15:09 - 2014-05-29 15:09 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-11-24 13:37 - 2013-11-24 13:37 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-11-24 13:36 - 2013-11-24 13:36 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2014-08-22 16:06 - 2014-08-22 16:06 - 00792424 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
2014-08-22 16:06 - 2014-08-22 16:06 - 00087400 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll
2013-12-08 17:04 - 2013-01-25 11:08 - 00089600 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL
2013-12-08 17:04 - 2013-01-25 11:06 - 00328704 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-06-17 14:49 - 2013-03-19 21:25 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-08-08 04:23 - 2014-12-27 22:42 - 01544704 _____ () C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe
2012-06-13 10:34 - 2012-06-13 10:34 - 01213952 _____ () C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2014-10-08 13:34 - 2015-04-08 13:00 - 00001024 _____ () E:\Program Files\Epic Games\Launcher\Engine\Binaries\ThirdParty\ICU\icu4c-53_1\Win64\VS2013\icudt53.dll
2013-04-15 17:39 - 2015-01-09 06:02 - 00067808 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2011-11-22 10:48 - 2011-11-22 10:48 - 00073782 _____ () C:\Program Files (x86)\Marvell\storage\Apache2\bin\zlib1.dll
2013-11-25 17:31 - 2013-11-25 17:31 - 00462848 _____ () C:\Users\admin\AppData\Local\MP3 Skype recorder\Lame_enc.dll
2015-01-07 21:27 - 2015-01-07 21:27 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll
2013-11-24 12:48 - 2013-11-24 12:48 - 00065264 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2013-11-24 12:48 - 2013-11-24 12:48 - 00071408 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2014-08-22 15:51 - 2014-08-22 15:51 - 00592232 _____ () C:\Program Files\TortoiseGit\bin\libgit232_tgit.dll
2014-08-22 15:51 - 2014-08-22 15:51 - 00076648 _____ () C:\Program Files\TortoiseGit\bin\zlib132_tgit.dll
2013-06-17 14:49 - 2013-03-12 13:19 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-04-16 04:13 - 2015-04-14 05:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll
2015-04-16 04:13 - 2015-04-14 05:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll
2015-04-16 04:13 - 2015-04-14 05:55 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Program Files (x86)\Steam:com.dropbox.attributes
AlternateDataStreams: C:\Windows\unins000.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Lagarith.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutScreenCapturing.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutScreenCapturingFilter.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutVideoMixerFilter.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\Lagarith.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\BazisVirtualCDBus.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\epp64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssudbus.sys:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\1944_Moro_River_V1.heightmap.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\20698CF5D4184E219F93000DFCDB0481EC1B30EC.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\73_asia_korea.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\Contagion Hi-Res Screenshots:com.dropbox.attributes
AlternateDataStreams: C:\Users\admin\Desktop\cotv__special_weapons_by_prospass-d4adx0u.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\DaxHQGrungeSetA.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\EmsisoftAntiMalwareSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\fosynXK.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\FRST64.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\FRST64.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\GirlPower_2012.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\GS_SciFiHallway_Wip_1.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\joure_flyingship.fbx:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\joure_flyingship.fbx:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\jpg.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\mclaren_p1_by_gurnade-d5xwt4d.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\metal_scratches_free.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\metro_for_steam___3_9_1_by_boneyardbrew-d4u3kjv.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\Monochrome Inc - Joure Visser Contractor Agreement - Fully Executed.pdf:com.dropbox.attributes
AlternateDataStreams: C:\Users\admin\Desktop\new-counter-strike-global-offensive.png:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\player.png:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\player.psd:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\player.psd:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\retro-blue-abstract-design-1.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\RogueKillerX64.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\RogueKillerX64.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\ronin.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\s0nkite_Spiderman_pattern.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\scc_sample.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\steamworkshop_webupload_previewfile_417984813_preview.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\UMP-45-corporal-workshop.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.170844v0] Rurouni Kenshin 1080p 2012.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.179859v0] [SubDESU-H] Idol Sister - 01 (852x480 x264 8bit AAC)[191E08AC].mp4.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180235v0] Nosewasure The Animation (SubDESU-H).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180491v0] Rurouni Kenshin Kyoto Inferno.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180497v0] Rurouni Kenshin The Legend Ends.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\“Unbreakable”_-_Songs_of_the_28th_SEA_Games.mp3:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\audacity-win-2.1.0.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\audacity-win-2.1.0.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\DTLiteInstaller.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\DTLiteInstaller.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\ezvid0982d.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\ezvid0982d.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\FreeYouTubeDownloaderOC.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\FreeYouTubeDownloaderOC.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\FYTDSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\gcfscape185.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\gcfscape185.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\OBS_0_64b_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\OBS_0_64b_Installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\tr83pe.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\tr83pe.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\WinCDEmu-3.6.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\WinCDEmu-3.6.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.147167v0] Gundam Seed Destiny SE (Dual Audio).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.157232v2] Mobile Suit Gundam 00 Special Edition (1080p).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.162136v1] [Cman]_Mobile_Suit_Gundam_00_'A_wakening_of_the_Trailblazer'_[Blu-Ray_1080p][v2].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.162249v0] [EG]Gundam_Wing_Endless_Waltz_Special_Edition(1080p_FLAC).mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.178852v0] [SubDESU-H] Samurai Hormone The Animation - 01 (852x480 x264 AAC)[B34D9614].mp4.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.179321v0] [BBT-RMX] Mobile Suit Gundam The 08th MS Team - Miller's Report.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.180148v0] Toki_no_Tabibito_[H264,690p][Ondatry proti násilí & Nyadro].torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.180269v0] [m.3.3.w-Doki]_Friends_Mononoke_Shima_no_Naki_720p_[64606DAC].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[yibis]_One_Piece_673_[720p][CACDE0E7].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Documents\joure_flyingship.fbx:$CmdTcID
AlternateDataStreams: C:\Users\admin\Documents\joure_flyingship.fbx:$CmdZnID
AlternateDataStreams: C:\Users\admin\Documents\ufonts.com_din-regular.ttf:$CmdZnID

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 156.154.70.22 - 156.154.71.22

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: tvncontrol => "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{7CB3A99B-3EB7-49D1-88DF-199F27700E7C}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{DD30F675-FFA1-4675-90C2-14176B14EA2E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8CDF2189-5BE0-4F18-AE5D-6D36C3E02E96}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{97BFC478-CDFE-48EC-9A50-277DC494304C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{9893C85A-6ECF-4ED7-9982-0CB8FEE4F2FB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{7E96C66A-69AF-4A69-BDD8-561A19C07596}] => (Allow) C:\Program Files (x86)\marvell\storage\apache2\bin\httpd.exe
FirewallRules: [{A547C2F9-A7F8-42B9-9DD6-C388271F711A}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{13C6AA5B-63FB-4EC8-9710-3E2A975ABD5E}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{80EC69F3-3972-431F-B369-97DA7A7F66D7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{92A06144-02E2-49D0-A57D-93B3BCB97227}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{968EE526-3BA8-4636-A12C-6C8C8F689FE8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{7DA520BB-B09C-4F32-92BD-D3808CDA981C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{29BE4878-7666-468F-AFDF-72927A040486}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{5955047A-8881-47BD-A220-CC8E3EDF14BA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{2923585F-C37C-4AB4-9E7D-C3EDDA8F962B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{7B7C23EA-5AD5-4712-8CEC-8FBD9C66DE2C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{E12E47FB-33C9-4EB6-A3EC-6AC3E12CF7B5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{472F2739-4FBC-412B-A744-2435CEF84AB4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{600B3B58-31C2-4E4C-8FED-A6277618B80F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{455FB411-4446-4BE0-BA02-BFBC637C210E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{16ACE72D-E663-4127-9152-DD7725571E45}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{10E8B4EF-C627-4BC9-AFE3-58489E4247AE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\KentuckyRouteZero\KentuckyRouteZero.exe
FirewallRules: [{03018F96-1B92-49E5-9538-92494758C5BF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\KentuckyRouteZero\KentuckyRouteZero.exe
FirewallRules: [{67A2AB0A-1544-44CF-8DDA-2CFE39648B65}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Home\home-win-eng.exe
FirewallRules: [{7746E55F-1D09-4002-9C5E-B94044875A52}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Home\home-win-eng.exe
FirewallRules: [{EFFECDD6-4BA7-43D5-9F3F-042B63C5B3C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{531E0260-CD61-473B-A8A1-EAC76C608C69}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{694EE59D-929D-46FD-ABB2-B5AA2DF46F3D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{570FA7B2-1A8C-483C-A492-568DDA7B9433}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{F59256BC-D820-464A-A2B5-175C6C792026}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{2C3F6C7E-EE67-46D3-A38E-C643EAE44024}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{BBA78F4A-AE18-47EF-8DD0-27CAC36E235C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Gone Home\GoneHome.exe
FirewallRules: [{0E10CD20-1F65-45B8-9633-EEF466A99FE4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Gone Home\GoneHome.exe
FirewallRules: [{73094C45-9B66-4143-AA4C-61504FA3E51B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{23370E93-549C-4DAA-BBB6-F30EEA9C1C3B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{83DAA4FD-71FF-4EB4-9923-FEA002BB16CC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{4C53938B-7FA8-4426-B413-1980F14AA723}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{C0E093FA-A7B0-4B08-B8D8-DF9CA4E2F6FA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{C461AA2C-163D-4B6D-A218-DB3348E611C1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{B1A8C2DD-E428-44DA-89AA-F06524636410}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{FDCB8F8E-6D71-4FB9-909C-4002122DB875}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{B7D8F3C9-5513-45A7-B44B-DD973338CD4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{99844E75-0879-45A1-82A5-A6A415FEE20E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{3B278FA1-175A-4C56-9DC9-7A8CC62896A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9ECBE57D-A46D-4E84-8051-03C7FF8B8EA6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{54EFB596-B35F-48D9-9EDF-FE6ADBA4D548}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{C11DF764-AF55-4F78-9321-3B6372016F31}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{462354AF-636C-4E07-88E9-0686739F065A}] => (Allow) C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{3F0D338C-348B-4EE2-B368-9F3DD133EA7B}] => (Allow) C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{9CC79320-7257-4132-95BE-DB8A42C2D340}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{14ECF9B1-4F2A-45C0-9EF2-C9518A1C010C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{20AC28B4-7614-416C-85BA-EFC2BCA8253E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{D074002B-7AB1-435B-B131-CC50961EEF64}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{290E11CF-00C4-437C-BC9D-A5BC4C955F8E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{E870A08F-5582-4C47-AEDC-C3C31A8614F1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{9D9A8992-A3CE-49A9-9ECE-95B8C4F62E5C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{719F57BE-F5C8-47C3-9272-93FE738C5C54}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{97B3AA60-7F9A-48A0-B981-529D703F0246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AD599567-3C6E-43A8-997D-E114B028ADA8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{84627168-48FF-49AD-83A1-03C77E19560D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{B03982FF-9D2A-42C9-840A-510B7005D534}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{2A93E952-9388-487D-BEDB-7EB0B7C44450}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{0425DE23-A6B3-4E15-8FED-7591D47676D6}] => (Allow) E:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{F1C0914B-53A2-4C92-8636-D84B8884C99B}] => (Allow) E:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{8553D354-530F-4232-9189-CDB22267A8FA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{B6A9523B-E1E2-4905-8355-5DECE655693A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{BD463A80-B0F3-4806-9D80-CA295B4EEFD0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{9D896664-B451-4255-A74E-24126D1EC954}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{FF9EF349-0EC5-42AB-9595-EBDDFFA96FD2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [{8661CD0C-F2BE-4407-A90F-68A4C7A9F084}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [{09ECBE51-E1EE-4EDD-9072-1A78F41180B3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{8B07084F-A498-4B28-A4AD-95D8A423EE59}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{7F6E6CCC-743C-44C7-B15C-0E21BA6936C8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{83DF827E-691A-4B23-AC15-0C1C38397E14}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{9A0FF8A9-1433-4A4C-B9FE-A1FC2F98F980}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{060769F6-6445-4054-9455-7862B5D444B3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{2B8B4523-FAC1-4F57-9161-97138216C1D6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{767D9937-68AC-4B8E-B342-70DBE9C11C9A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [TCP Query User{3A214CFC-1C94-4E0D-8E53-8062F3E40FD7}E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe] => (Allow) E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
FirewallRules: [UDP Query User{BD70F296-8B80-479C-8E77-33B79ECBE74B}E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe] => (Allow) E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
FirewallRules: [{472B0D41-2E94-4A28-A248-D9049EF54EB0}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{CE8E7A60-E92C-4938-8CA2-12542A66C6B6}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{84B5CA7A-E955-460E-AAF7-32ADC0A192B8}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{9A4AC9EF-8382-4703-97AD-A3691C1BA0F2}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{E029EAF6-911D-4ACB-BC7B-7253082D28B7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{497CCC1E-B021-41B1-AEA8-467F007333F2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{81F9DE33-3E98-45E0-AC67-61333B7ADE95}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{03F34224-C5A1-4D89-B649-590219EB0355}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8AEE5683-4F3C-48C0-9EEA-9D7AA64F779C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Superbrothers Sword & Sworcery EP\swordandsworcery_pc.exe
FirewallRules: [{259C079F-F118-43D2-8487-679195CF9B4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Superbrothers Sword & Sworcery EP\swordandsworcery_pc.exe
FirewallRules: [{29A94132-8131-40E9-8A73-CDE595DC1401}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{DF509209-082B-4EF6-9F1B-728ECDEF176B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{8007ABA8-90C4-45DF-8DEB-BC2E7937510E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{D4392050-7A0E-43B9-A971-7EC3B0350CB7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{81059D85-8B33-4735-A714-F7E38119BD41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{C0C487EE-670D-4B9D-A838-DD20269049D3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{0315E908-122C-4D1E-92F7-AF6ECC0F58FF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{4BD7535B-B6E6-4CE6-A251-2DB83A130D81}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
 
FirewallRules: [{77A87D73-6317-46A9-9C6A-D7462E829A33}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{4C82FE59-6B83-489B-8045-DC65EA98DA1A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{6325E4C1-B44D-4FDF-8A14-0F6357B76C80}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{5032ADE4-8702-4BC1-A075-07116D220022}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{1F8FEC32-96CC-4507-88CC-C2F031B01501}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{6945CB0E-8799-484A-BD43-876EBE3A7432}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{40B206EA-BFD7-41DB-AFB9-A691E22BDDBE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{714289F6-81F5-4864-A77D-C81480EAA078}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{E761AB2F-9D77-455E-94E7-1C32705E8A67}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{1E07AF35-48E8-42C8-B3BD-4F185FF15E3A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{C0123A82-4B30-491A-9EC0-E3F29F1B7CB3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{6F95B717-D3D2-4C27-95BB-87E0E51653C9}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{D9E92B0B-D300-4610-B403-F2A608150084}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{D2354161-5766-4CEC-A364-E389135D5D01}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{DB67D39B-7658-43DE-8722-8C2A087FD328}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{711C6F27-8A4D-4D97-9FF2-5F14A4FE34FC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{CCFFD7CC-1838-4BEA-B334-9CBD337959F1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{33EB4E98-B571-4A58-BA37-820CE84A6A13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{A1516D7D-2264-4095-8B85-E829A7ED2E41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{531AA86B-8756-4B8C-89A7-6542DD681869}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{1F1980CF-4397-4B78-9D28-82584B29AEC3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{264C7810-1147-4A8D-8695-296E401FECFD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{E00DD1B1-01CE-4CF2-A6F7-96F392D9D863}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagionds.exe
FirewallRules: [{24FB00DD-FF54-409E-9407-1FD04017CCCA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagionds.exe
FirewallRules: [{97A32A62-75C6-44BA-84E2-0E533F431F38}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4E9575A6-D556-4AF6-923F-EC76657C5B80}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A3DEAC96-4108-4E17-9156-90FDFDA50A72}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{460DBE31-F811-4041-A5DB-7B60C0EB4B73}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{1CB6B997-2FF7-4D20-9640-DFE2D16E973C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{04210183-6D24-4CB7-B3F8-924833F935A8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4793E080-729C-4EC3-BDD9-8912C303300A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{9EEAB186-AE66-4ED5-97D4-3F469D84BAA0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{4824C4F1-60FD-4EDE-BFCC-734993A7B641}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 6\BH6.exe
FirewallRules: [{5F943D04-77FC-4F23-8218-EEF58E76C81B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 6\BH6.exe
FirewallRules: [{E7323C72-2181-4066-B59E-A2A865549A09}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{81177A1A-4D4D-4F82-A816-70E3C840F922}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{5C1ADB99-7439-442F-860B-3E8B767A30BA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{4A160E89-C626-4F3F-9889-B3FDF2AA5483}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{1CD1C5A4-49D3-42DE-8BCC-371E2D583103}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{E0B874A0-4732-4F22-A946-D7B0ABB1E895}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{9BBEDB45-4780-431E-ADA0-5FCE602A8028}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{DAAA1A8B-EA28-432E-9644-715DEB68A33A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{936DD4C0-8CD9-4D28-B75A-11BD45B46197}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\bin\SDKLauncher.exe
FirewallRules: [{AFA391EF-8F00-4A3F-824B-D15DF67A1D11}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\bin\SDKLauncher.exe
FirewallRules: [{549269AB-C3A9-418B-9410-F82A939C8181}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{F5124FEE-3720-4F1F-A8E2-ECA5529B4F43}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{51F04A72-49F1-425F-9A00-5FF90A607E84}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{C5EE151D-C72B-40F2-A718-8384F36FA2CC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{8E856403-7AAC-4AE9-9C25-7956EA2050ED}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{1C9E3163-030E-4891-A729-C370D8FA0027}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{8E61FFE5-75C2-43EE-BFE4-435DF63FA144}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{5738F63E-1AEE-43F4-A91B-B44E8D3953A1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{8EC79A4F-9E30-4B9B-B8EE-D336846DFF19}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Final Hours of Tomb Raider\The Final Hours of Tomb Raider.exe
FirewallRules: [{5BBFC547-75BD-404A-847E-FF1AFCD07385}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Final Hours of Tomb Raider\The Final Hours of Tomb Raider.exe
FirewallRules: [{2BC5A627-4FA9-40A1-8DAC-0977F6C01D76}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{0DE064EA-2DB9-44A9-A99B-DEBE75976929}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{38E17DAE-E1D0-42CF-8ECD-82244105D7FF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{0633CDE8-FB8F-41C0-B67B-68948116657E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{D20ABE68-DEB8-4C4C-A5EB-4C17B2936FC2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{B239033B-38C1-4BCF-ACC5-F3F26B962451}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{498C941F-B985-4F7F-9AF1-1641E6D0A2BC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Final Hours of Portal 2\TheFinalHoursOfPortal2.exe
FirewallRules: [{EA90444A-43B8-499E-9261-7E92687B5A9F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Final Hours of Portal 2\TheFinalHoursOfPortal2.exe
FirewallRules: [TCP Query User{F8C1CFDE-21FE-4028-97BE-3A0A3EC005BB}E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{7CC45CE8-8B90-42F8-A70D-C7B27E1BEEFD}E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{42E136FA-219C-4C6C-B970-5D248C59D3A7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dear Esther\dearesther.exe
FirewallRules: [{5B557D09-D174-4880-90D7-00ED96EF6407}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dear Esther\dearesther.exe
FirewallRules: [{3E88D070-DB73-4A66-B1B8-70185AB3DE7B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{D1E820C1-A5FC-46C4-A599-0B1C9D4746FE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{62CEF25D-1A1C-4213-A0BB-9451E1219AD7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{79006B4B-3A9E-49C3-8F58-4B3251877306}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{AE1196A1-97E1-4DB5-96BB-33E202D58371}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{E4280D7B-D2FD-4363-99BB-83C112B4C65E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{EB5AD017-21AE-49DF-8396-3DB4E2F21848}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{4B2F28C4-046B-4543-8747-6FC3C163F44D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{296A8E11-53B5-4D4F-928E-918951203EAC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{F074CADF-CCF4-4F04-91B5-512A6A6044A5}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{9468AC14-733B-493F-A535-B4A6C4415AD8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Need For Speed Shift 2\SHIFT2U.exe
FirewallRules: [{C815893D-AA42-438B-BFE0-C8F110F2C04C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Need For Speed Shift 2\SHIFT2U.exe
FirewallRules: [TCP Query User{58E77491-5657-415A-B590-1C995F55C481}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [UDP Query User{A58075EC-2935-4279-9444-21702D1867A7}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [TCP Query User{000AE437-A26C-4BE2-979A-D8E23C09F89F}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [UDP Query User{F8E8CB09-D41E-4649-81B0-69BA4311A9A7}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [{ACE02B3B-27E6-46DB-AF18-7C11C4A75640}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{022BBB61-3C96-4682-A8B7-C9FA5552AD9F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4845A7D7-AB67-47B3-AABF-D3D188BC039C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D03BE4ED-3092-4AA8-9B4A-63D50A7B816D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{08C49A91-069D-404B-A8D1-84C565ECF83D}] => (Allow) E:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{546B44C1-B6AE-437A-9116-6B013B4A0DB9}] => (Allow) E:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{0F69D6B0-3B29-4FA8-BDAC-0C908F1C3736}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{8B750923-DE9F-4724-82F6-F23543C4BEEC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{347370E6-20CD-4EF3-A3E5-0547A512DF8A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{B13D7CD9-DCB4-4E2E-8002-FAAEB95B4E07}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{9E8A92AB-6901-4EA4-A2D3-A26008D7EA80}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{BDC530F6-0086-416B-BA9C-27A6BFD17980}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{3F8CDE92-237E-4EAB-A701-E8EA72ACF78B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\FEAR2\FEAR2.exe
FirewallRules: [{6E0EC26C-8C9C-440C-9EAA-F2E535D0D6D8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\FEAR2\FEAR2.exe
FirewallRules: [{33AEE528-B650-436D-B2FA-20CF795B2EA6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\team fortress 2\hl2.exe
FirewallRules: [{9E997C6E-F53B-4C14-B210-8DF64F484978}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\team fortress 2\hl2.exe
FirewallRules: [{A3A71160-E3C0-49BB-A142-E76222095527}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{F8F07741-6333-44FB-8776-C4EBEE7D78D8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{7774B242-8EAA-4D0A-B279-0E6D7F6C3309}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{865985C3-4CD2-428E-9007-81E99FACCCFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{F5EA5FB9-1897-4F73-B3CB-D23CBADAB872}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday.exe
FirewallRules: [{710FB901-4245-472F-BB0E-8C168E4E38A3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday.exe
FirewallRules: [{EB6706B4-F205-48A7-9441-1A3210D3A7E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [{69F33DE9-7F89-485D-BDD0-FFC7471BB4AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [TCP Query User{8AFE7DE9-FE3B-4549-83A1-F2263FF7E75F}C:\program files\spideroak\spideroak.exe] => (Allow) C:\program files\spideroak\spideroak.exe
FirewallRules: [UDP Query User{4152DFF1-C36C-47E5-A950-A21EB78ED761}C:\program files\spideroak\spideroak.exe] => (Allow) C:\program files\spideroak\spideroak.exe
FirewallRules: [{1ECC29FC-AD8B-4BCE-A914-B70078FD182B}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D28E3EE3-2C8B-40DE-8EB2-1744342CAF9B}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61AC57EA-89EC-427F-A38A-222BFB58F4FB}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{19ED6544-5954-49E4-990C-F42A27DD106E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [TCP Query User{13A603A2-7701-4227-BB13-B3DBDB3AFF09}C:\users\admin\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\admin\appdata\local\id software\quakelive\quakelive.exe
FirewallRules: [UDP Query User{F8D58A0F-C96E-4223-B5EC-95BB9BA7F1B3}C:\users\admin\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\admin\appdata\local\id software\quakelive\quakelive.exe
FirewallRules: [TCP Query User{FC78EC03-58DE-4800-B878-741F41BF6CA8}C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe] => (Allow) C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe
FirewallRules: [UDP Query User{F7D63A68-1EE2-463B-9B62-F9F079AC17D3}C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe] => (Allow) C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe
FirewallRules: [{C3ACCA1D-9C7A-4E11-81CE-99C1E98CD771}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe
FirewallRules: [{01826522-D4B3-486E-80AC-73605407DF4A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe
FirewallRules: [{652F08EA-9032-4639-9AF2-BB3C749BDC70}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe
FirewallRules: [{DFB3B4F4-0208-421D-AAE3-FD2ADC6BACC1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe
FirewallRules: [TCP Query User{64E01818-3E0F-4F0A-8597-A6158C561A91}E:\program files (x86)\utorrent\utorrent.exe] => (Allow) E:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{EECE5C65-9DB4-4ECE-82D8-D27695444D91}E:\program files (x86)\utorrent\utorrent.exe] => (Allow) E:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [{5672D9DB-5F72-46AC-A337-EC7359323D1B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{B35FDC9D-B651-4EC9-8084-CCFB15AA826C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{1192E3DE-9C57-48E1-9EE8-5E5ABE363376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [{8F94A8FC-2021-468F-9D54-3E0FB9085A48}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [TCP Query User{A85FD3A2-46BC-449D-BA1B-51F164475AB5}E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{4E1DC5FA-D15B-4A10-8C5A-05CA531555BB}E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe
FirewallRules: [{6C9E92D7-15BE-4CD3-8352-D8A3256A6A34}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [{2952040A-B42F-4004-BE79-D6D667241F30}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [TCP Query User{F0E13060-7581-4808-B66A-8A1DFFFD830D}E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{2564B80F-D145-4E10-95C0-1581EA555E1A}E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [{0FB40D0F-EACB-4ED2-B852-8D894DCCB097}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\counter-strike source\hl2.exe
FirewallRules: [{21ABAAC3-14FB-446D-99EC-CA76ADB0D269}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\counter-strike source\hl2.exe
FirewallRules: [{60764F28-6957-4142-979E-FE7D0CC3D14D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\StrikeVector\Binaries\Win32\UDK.exe
FirewallRules: [{850AFE57-8AC1-4745-B2C4-1A33240BD419}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\StrikeVector\Binaries\Win32\UDK.exe
FirewallRules: [TCP Query User{5D00329B-1A6B-4065-B55D-530F56A95C9F}E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{6FFBCB7B-04E9-43E1-A542-8F8D6D0D429F}E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe
FirewallRules: [{2796443F-0770-464A-B0E2-D69F893B8E3A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Afterfall InSanity\Binaries\Win32\InSanity-Win32-Shipping.exe
FirewallRules: [{92C441AB-0575-4280-98D4-EF16DD7453EF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Afterfall InSanity\Binaries\Win32\InSanity-Win32-Shipping.exe
FirewallRules: [{A0FBB507-3451-49B9-87E2-6C8355028F09}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\WDExpress.exe
FirewallRules: [TCP Query User{D2240C86-3D72-4C09-BD72-5698DB838222}E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{A2A94DDD-D467-4C42-B207-BA607A9E4F41}E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [{981FDC35-E49C-47F3-A4B2-DA933FA60E59}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{D56F207F-5376-4639-B4F7-4D36E7771C16}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{D49CB5D4-B799-4E1D-BE18-FF8662269E41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{F674675F-14FD-474F-BE5D-04B216F3D487}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E3D52AE4-525E-41DE-93E5-FAF151B8327D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe
FirewallRules: [{40F79069-5471-4FDC-906B-84189D094BF7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe
FirewallRules: [{55D70BF8-B69E-4383-9DBD-5DDAE184AF2C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{B59856EE-2730-4BA3-A6A3-7706D01276A9}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{38D5C9D9-F929-4E5F-A825-88505B40D020}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{A6DBBA22-6142-4CFE-9337-CD00CDA05AAA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{DFD11C86-5677-40AC-9F74-5CB196614FD0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\MirrorMoonEP\MirrorMoonEP.exe
FirewallRules: [{0D89D298-C621-4B8E-8B77-0707155D90C5}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\MirrorMoonEP\MirrorMoonEP.exe
FirewallRules: [{181393F1-11AB-4D28-842A-552971023341}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{1A928F58-7FAA-4352-BEE3-2DE9D1CE4AB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{32B71ABF-6407-4C2D-AF05-1539373410FB}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{5D34C076-2F47-4E36-9A2B-86CF9C4E1D99}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{CA215864-E941-4252-9F99-611613185968}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{3D5A399C-92CC-4674-999F-A107C24DDCE6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{C5F0A863-E562-4C06-922D-ABF297E475A3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe
FirewallRules: [{BAA365E2-4144-4A3A-BB1F-B7C5BFF3F87B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe
FirewallRules: [TCP Query User{059D9639-EA80-43B0-8D79-52FE312E09BA}E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{F9F208C8-EDF9-482C-BDD7-EF702506272D}E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe
FirewallRules: [TCP Query User{339D9CBD-25E2-4C96-8291-BE5E629F6780}E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{B6FB4A1C-F8CE-478E-9ADD-7170C2DA6A8E}E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [TCP Query User{D910F1BF-E65E-483F-A5E7-5D64FABD22BD}C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe] => (Allow) C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe
FirewallRules: [UDP Query User{579443A7-538A-46CD-B1DE-ED9066214134}C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe] => (Allow) C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe
FirewallRules: [{08387549-513B-4A21-A16C-830A438ACE28}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{98A13DD3-F9EB-4878-A2D4-6C0774A6BD38}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{5E0B2291-DC1F-4637-B7DC-60420CB3698B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{AFDD4BA2-FD43-4C85-BBBB-F80043DB5979}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{FC13298F-AA2C-4A88-99C1-90955D35E1C2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{42BBF559-31B8-4868-8B6C-43F4108C6768}C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [UDP Query User{2B66BB28-93DD-4E91-9FC8-DA1FE57C86FA}C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [{3E704B44-BAF9-4F6E-AA6A-BC33111F3A1B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{E387293B-88BD-420C-A14E-0B3A5DE61956}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{599BC358-4C79-40FF-A4C1-68AFAEAF4257}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{D1844C4E-51E1-4B04-926B-8F308CABE94E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [TCP Query User{1026A22C-293F-4658-8D98-427EE202447F}C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [UDP Query User{D5F90C4B-C35F-4C01-874E-2C45D51245E1}C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [TCP Query User{63573C47-C001-45A0-8761-3808EA0B44E5}C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe] => (Allow) C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{B504980F-0B73-42C8-A65B-8EC73071FE75}C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe] => (Allow) C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
==================== Event log errors: =========================

Application errors:
==================
Error: (04/27/2015 06:19:43 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/26/2015 00:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/26/2015 00:05:56 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName .

Error: (04/26/2015 07:18:03 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/25/2015 10:11:06 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/25/2015 00:49:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/25/2015 00:48:24 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName .

Error: (04/24/2015 04:31:46 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 11:38:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/24/2015 11:37:31 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 169.254.182.47 for ServerName .


System errors:
=============
Error: (04/26/2015 10:24:21 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Windows\System32\drivers\TrueSight.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (04/26/2015 00:08:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/26/2015 00:08:25 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (04/26/2015 11:04:57 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 20.

Error: (04/25/2015 00:50:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/25/2015 00:50:58 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (04/24/2015 11:39:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/24/2015 11:39:43 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (04/23/2015 00:22:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/23/2015 00:22:23 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (04/27/2015 06:19:43 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (04/26/2015 00:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/26/2015 00:05:56 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName

Error: (04/26/2015 07:18:03 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (04/25/2015 10:11:06 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (04/25/2015 00:49:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/25/2015 00:48:24 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName

Error: (04/24/2015 04:31:46 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (04/24/2015 11:38:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/24/2015 11:37:31 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 169.254.182.47 for ServerName


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 30%
Total physical RAM: 16271.83 MB
Available physical RAM: 11268.42 MB
Total Pagefile: 45254.99 MB
Available Pagefile: 38808.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:467.49 GB) (Free:230.14 GB) NTFS
Drive d: (BXJG_SCN) (CDROM) (Total:3.87 GB) (Free:0 GB) UDF
Drive e: (New Volume) (Fixed) (Total:1395.3 GB) (Free:688.5 GB) NTFS
Drive f: (New Volume) (Fixed) (Total:1862.89 GB) (Free:512.53 GB) NTFS
Drive v: (ABEJA.MAYA.PELICULA.BLURAY.2D+3D) (CDROM) (Total:44.04 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 1DDE34D6)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
 
redtarget.gif
Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

  • Close all the running programs
  • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
  • Otherwise just double-click on RogueKiller.exe
  • Pre-scan will start. Let it finish.
  • Click on SCAN button.
  • Wait until the Status box shows Scan Finished
  • Click on Delete.
  • Wait until the Status box shows Deleting Finished.
  • Click on Report and copy/paste the content of the Notepad into your next reply.
  • RKreport.txt could also be found on your desktop.
  • If more than one log is produced post all logs.
  • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

redtarget.gif
Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
NOTE. If you already have MBAM 2.0 installed scroll down.

  • Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
  • Click Finish.
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.


If you already have MBAM 2.0 installed:

  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.

How to get logs:
(Export log to save as txt)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the Scan Log which shows the Date and time of the scan just performed.
  • Click 'Export'.
  • Click 'Text file (*.txt)'
  • In the Save File dialog box which appears, click on Desktop.
  • In the File name: box type a name for your scan log.
  • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
  • Click Ok
  • Attach that saved log to your next reply.


(Copy to clipboard for pasting into forum replies or tickets)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the Scan Log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.

redtarget.gif
Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

redtarget.gif
Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
 
RogueKiller V10.6.1.0 (x64) [Apr 24 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : admin [Administrator]
Started from : C:\Users\admin\Desktop\RogueKillerX64.exe
Mode : Delete -- Date : 04/28/2015 16:12:23

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 13 ¤¤¤
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[VT.Unknown|PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9} | DhcpNameServer : 218.186.2.16 218.186.2.6 202.156.1.16 [SINGAPORE (SG)][-][SINGAPORE (SG)] -> Replaced ()
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> Not selected
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ATA WDC WD2002FAEX-0 SCSI Disk Device +++++
--- User ---
[MBR] 19fa5df04dce6473070f88c94d61e8c7
[BSP] dd956f2a7d4a84bf83a6ecceda293e4d : Empty|VT.Unknown MBR Code
Partition table:
0 - | Offset (sectors): 34 | Size: 128 MB
1 - | Offset (sectors): 264192 | Size: 100 MB
2 - | Offset (sectors): 468992 | Size: 478707 MB
3 - Basic data partition | Offset (sectors): 980860928 | Size: 1428792 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ATA ST2000DX001-1CM1 SCSI Disk Device +++++
--- User ---
[MBR] 0086f36f0b7bc8b257f89fc226376c3d
[BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - Basic data partition | Offset (sectors): 264192 | Size: 1907600 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_11012014_035342.log - RKreport_DEL_11012014_040216.log - RKreport_SCN_11012014_040945.log - RKreport_DEL_11012014_041304.log
RKreport_SCN_11012014_042722.log - RKreport_DEL_11012014_042752.log - RKreport_SCN_11012014_042933.log - RKreport_SCN_11012014_044027.log
RKreport_SCN_11012014_135942.log - RKreport_SCN_11012014_150842.log - RKreport_SCN_11032014_040520.log - RKreport_SCN_11042014_035118.log
RKreport_SCN_04262015_225505.log - RKreport_SCN_04282015_160337.log - RKreport_DEL_04282015_160517.log
 
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 28/4/2015
Scan Time: 4:16:53 PM
Logfile: mbam_log.txt
Administrator: Yes

Version: 2.01.6.1022
Malware Database: v2015.04.28.01
Rootkit Database: v2015.04.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: admin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 533700
Time Elapsed: 18 min, 32 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 5
PUP.Optional.ExpressFind.SID.A, C:\Users\admin\AppData\Roaming\How Inc\48E9BD2962FC41CC9E0BFBD95076434D\setup0318.exe, Quarantined, [3ab7373acfbbcc6a4f99b392dc2a966a],
PUP.OptionalExpressFind..A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_expressfind-a.akamaihd.net_0.localstorage, Quarantined, [fef3db96b0daf93d5b222c9b41c2be42],
PUP.OptionalExpressFind..A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_expressfind-a.akamaihd.net_0.localstorage-journal, Quarantined, [4ca578f9800a2511235a20a7c73c926e],
PUP.Optional.AZLyrics.A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [c32e8be6e6a4e650fd20716a36cdc040],
PUP.Optional.AZLyrics.A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [30c1ed840486e551b56885561be87789],

Physical Sectors: 0
(No malicious items detected)


(end)
 
# AdwCleaner v4.202 - Logfile created 28/04/2015 at 16:59:25
# Updated 23/04/2015 by Xplode
# Database : 2015-04-27.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : admin - ADMIN-PC
# Running from : C:\Users\admin\Desktop\adwcleaner_4.202.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AdTrustMedia
Folder Deleted : C:\Program Files (x86)\AdTrustMedia
Folder Deleted : C:\Users\admin\AppData\Local\Temp\10
Folder Deleted : C:\Program Files\AdTrustMedia
Folder Deleted : C:\Users\admin\AppData\Local\AdTrustMedia
Folder Deleted : C:\Users\admin\AppData\Roaming\RHEng
Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
Folder Deleted : C:\Users\admin\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
File Deleted : C:\Users\admin\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
File Deleted : C:\Users\admin\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage-journal
File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\cmaiofennmphjldldcpphcechfnnohja
Key Deleted : HKCU\Software\Local AppWizard-Generated Applications

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Google Chrome v42.0.2311.90

[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja

-\\ Comodo Dragon v36.1.1.21

[C:\Users\admin\AppData\Local\Comodo\Dragon\User Data\Default\Preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja

*************************

AdwCleaner[R0].txt - [2677 bytes] - [28/04/2015 16:57:18]
AdwCleaner[S0].txt - [2566 bytes] - [28/04/2015 16:59:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2625 bytes] ##########
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.5 (04.27.2015:1)
OS: Windows 7 Professional x64
Ran by admin on Tue 28/04/2015 at 17:20:43.64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\privdogservice



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\prefetch\GOOGLETOOLBARNOTIFIER.EXE-969E73DB.pf



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 28/04/2015 at 18:11:36.78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Please download ComboFix from Here, Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
  • Never rename Combofix unless instructed.
  • Close any open browsers.
  • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
  • Close any open browsers.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
  • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    If the connection is not there use restore point you created prior to running Combofix.
  • Double click on combofix.exe & follow the prompts.

  • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
    NOTE 2. If Combofix asks you to update the program, always do so.
  • When finished, it will produce a report for you.
  • Please post the "C:\ComboFix.txt"
**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: https://www.techspot.com/downloads/5514-appremover.html
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try the following...

Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

Restart computer in safe mode

  • Double-click on the Rkill desktop icon to run the tool.
  • If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • Do not reboot until instructed.
  • If the tool does not run from any of the links provided, please let me know.

When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
 
Rkill 2.7.0 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2015 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 04/29/2015 01:23:33 PM in x64 mode. (Safe Mode)
Windows Version: Windows 7 Professional Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* Base Filtering Engine (BFE) is not Running.
Startup Type set to: Automatic

* DHCP Client (Dhcp) is not Running.
Startup Type set to: Automatic

* DNS Client (Dnscache) is not Running.
Startup Type set to: Automatic

* COM+ Event System (EventSystem) is not Running.
Startup Type set to: Automatic

* Windows Firewall (MpsSvc) is not Running.
Startup Type set to: Automatic

* Network Connections (Netman) is not Running.
Startup Type set to: Manual

* Network Store Interface Service (nsi) is not Running.
Startup Type set to: Automatic

* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual

* Security Center (wscsvc) is not Running.
Startup Type set to: Automatic (Delayed Start)

* Windows Update (wuauserv) is not Running.
Startup Type set to: Automatic (Delayed Start)

* Ancillary Function Driver for Winsock (AFD) is not Running.
Startup Type set to: System

* Windows Firewall Authorization Driver (mpsdrv) is not Running.
Startup Type set to: Manual

* NetBT (NetBT) is not Running.
Startup Type set to: System

* NSI proxy service driver. (nsiproxy) is not Running.
Startup Type set to: System

* NetIO Legacy TDI Support Driver (tdx) is not Running.
Startup Type set to: System

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 04/29/2015 01:24:39 PM
Execution time: 0 hours(s), 1 minute(s), and 5 seconds(s)
 
ComboFix 15-04-28.01 - admin 29/04/2015 13:35:37.1.8 - x64 MINIMAL
Microsoft Windows 7 Professional 6.1.7601.1.1252.65.1033.18.16272.14802 [GMT 8:00]
Running from: c:\users\admin\Desktop\your_name.exe
AV: COMODO Antivirus *Disabled/Updated* {F0BC89B2-8937-0933-021B-B17D981F2A71}
AV: Emsisoft Anti-Malware *Enabled/Updated* {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
SP: Comodo Defense+ *Enabled/Updated* {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}
SP: Emsisoft Anti-Malware *Enabled/Updated* {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\tmpD45E.tmp
c:\windows\SysWow64\tmpD51A.tmp
.
.
((((((((((((((((((((((((( Files Created from 2015-03-28 to 2015-04-29 )))))))))))))))))))))))))))))))
.
.
2015-04-29 05:41 . 2015-04-29 05:41 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2015-04-29 05:41 . 2015-04-29 05:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-04-28 14:35 . 2015-04-28 14:35 -------- d-----w- c:\users\admin\AppData\Local\UnrealEngineLauncher
2015-04-28 08:57 . 2015-04-28 08:59 -------- d-----w- C:\AdwCleaner
2015-04-27 04:02 . 2015-04-27 04:04 -------- d-----w- C:\FRST
2015-04-26 09:34 . 2015-04-28 08:52 -------- d-----w- c:\users\admin\AppData\Local\Popcorn-Time
2015-04-26 09:33 . 2015-04-26 09:33 -------- d-----w- c:\users\admin\AppData\Local\Popcorn Time Offical
2015-04-26 09:15 . 2015-04-26 09:15 -------- d-----w- c:\users\admin\AppData\Roaming\dvdcss
2015-04-26 09:14 . 2015-04-26 09:14 -------- d-----w- c:\program files (x86)\WinCDEmu
2015-04-26 05:28 . 2015-04-28 19:47 -------- d-----w- c:\users\admin\AppData\Roaming\Audacity
2015-04-26 04:51 . 2015-04-26 04:51 -------- d-----w- c:\users\admin\AppData\Roaming\DAEMON Tools Lite
2015-04-26 04:50 . 2015-04-26 04:51 -------- d-----w- c:\programdata\DAEMON Tools Lite
2015-04-15 03:02 . 2015-02-25 03:18 754688 ----a-w- c:\windows\system32\drivers\http.sys
2015-04-11 16:21 . 2015-04-11 16:21 -------- d-----w- c:\users\admin\AppData\Local\openvr
2015-04-05 11:59 . 2015-04-05 11:59 -------- d-----w- c:\programdata\Emsisoft
2015-04-05 11:05 . 2015-04-05 11:05 135800 ----a-w- c:\windows\system32\drivers\epp64.sys
2015-04-05 11:05 . 2015-04-29 05:21 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware
2015-04-04 20:33 . 2015-04-04 20:33 -------- d-s---w- c:\windows\system32\GWX
2015-04-04 20:33 . 2015-04-04 20:33 -------- d-s---w- c:\windows\SysWow64\GWX
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-04-29 05:29 . 2014-11-03 18:33 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-04-28 12:04 . 2014-10-31 20:23 37624 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-04-26 09:14 . 2011-06-04 20:14 198480 ----a-w- c:\windows\system32\drivers\BazisVirtualCDBus.sys
2015-04-21 04:50 . 2014-07-20 05:01 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-04-21 04:50 . 2014-07-20 05:01 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-04-15 09:44 . 2013-06-17 07:18 128913832 ----a-w- c:\windows\system32\MRT.exe
2015-04-15 03:03 . 2015-04-15 03:03 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-04-14 01:37 . 2014-11-03 18:15 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-14 01:37 . 2014-11-03 18:15 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-14 01:37 . 2014-11-03 18:15 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-01 17:49 . 2013-09-24 02:54 104608 ----a-w- c:\windows\system32\drivers\inspect.sys
2015-04-01 17:49 . 2013-09-24 02:54 45880 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2015-04-01 17:49 . 2013-11-14 03:38 797280 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2015-04-01 17:49 . 2013-09-24 02:54 20696 ----a-w- c:\windows\system32\drivers\cmderd.sys
2015-04-01 17:48 . 2013-11-14 03:38 41248 ----a-w- c:\windows\system32\cmdcsr.dll
2015-04-01 17:48 . 2013-09-24 02:53 444472 ----a-w- c:\windows\SysWow64\guard32.dll
2015-04-01 17:48 . 2013-09-24 02:53 576848 ----a-w- c:\windows\system32\guard64.dll
2015-04-01 17:47 . 2013-09-24 02:53 358104 ----a-w- c:\windows\system32\cmdvrt64.dll
2015-04-01 17:46 . 2013-09-24 02:53 45784 ----a-w- c:\windows\system32\cmdkbd64.dll
2015-04-01 17:45 . 2013-09-24 02:53 288472 ----a-w- c:\windows\SysWow64\cmdvrt32.dll
2015-04-01 17:45 . 2013-09-24 02:53 40664 ----a-w- c:\windows\SysWow64\cmdkbd32.dll
2015-03-11 13:40 . 2015-03-11 13:40 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-03-11 13:40 . 2015-03-11 13:40 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-03-11 13:40 . 2015-03-11 13:40 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-11 13:40 . 2015-03-11 13:40 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-03-11 13:40 . 2015-03-11 13:40 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-03-11 13:40 . 2015-03-11 13:40 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-03-11 13:40 . 2015-03-11 13:40 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-03-11 13:40 . 2015-03-11 13:40 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-03-11 13:40 . 2015-03-11 13:40 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-03-11 13:40 . 2015-03-11 13:40 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-03-11 13:40 . 2015-03-11 13:40 842240 ----a-w- c:\windows\system32\blackbox.dll
2015-03-11 13:40 . 2015-03-11 13:40 744960 ----a-w- c:\windows\SysWow64\blackbox.dll
2015-03-11 13:40 . 2015-03-11 13:40 1202176 ----a-w- c:\windows\system32\drmv2clt.dll
2015-03-11 13:40 . 2015-03-11 13:40 988160 ----a-w- c:\windows\SysWow64\drmv2clt.dll
2015-03-11 13:40 . 2015-03-11 13:40 782848 ----a-w- c:\windows\system32\wmdrmsdk.dll
2015-03-11 13:40 . 2015-03-11 13:40 617984 ----a-w- c:\windows\SysWow64\wmdrmsdk.dll
2015-03-11 13:40 . 2015-03-11 13:40 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2015-03-11 13:40 . 2015-03-11 13:40 14632960 ----a-w- c:\windows\system32\wmp.dll
2015-03-11 13:40 . 2015-03-11 13:40 663552 ----a-w- c:\windows\system32\drivers\PEAuth.sys
2015-03-11 13:40 . 2015-03-11 13:40 631808 ----a-w- c:\windows\system32\evr.dll
2015-03-11 13:40 . 2015-03-11 13:40 497664 ----a-w- c:\windows\system32\drmmgrtn.dll
2015-03-11 13:40 . 2015-03-11 13:40 406016 ----a-w- c:\windows\SysWow64\drmmgrtn.dll
2015-03-11 13:40 . 2015-03-11 13:40 1574400 ----a-w- c:\windows\system32\quartz.dll
2015-03-11 13:40 . 2015-03-11 13:40 1480192 ----a-w- c:\windows\system32\crypt32.dll
2015-03-11 13:40 . 2015-03-11 13:40 1174528 ----a-w- c:\windows\SysWow64\crypt32.dll
2015-03-11 13:40 . 2015-03-11 13:40 1069056 ----a-w- c:\windows\system32\cryptui.dll
2015-03-11 13:40 . 2015-03-11 13:40 94656 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2015-03-11 13:40 . 2015-03-11 13:40 82432 ----a-w- c:\windows\system32\cryptsp.dll
2015-03-11 13:40 . 2015-03-11 13:40 81408 ----a-w- c:\windows\SysWow64\cryptsp.dll
2015-03-11 13:40 . 2015-03-11 13:40 641024 ----a-w- c:\windows\system32\msscp.dll
2015-03-11 13:40 . 2015-03-11 13:40 616360 ----a-w- c:\windows\system32\winresume.efi
2015-03-11 13:40 . 2015-03-11 13:40 532176 ----a-w- c:\windows\system32\winresume.exe
2015-03-11 13:40 . 2015-03-11 13:40 489984 ----a-w- c:\windows\SysWow64\evr.dll
2015-03-11 13:40 . 2015-03-11 13:40 432128 ----a-w- c:\windows\system32\mfplat.dll
2015-03-11 13:40 . 2015-03-11 13:40 4121600 ----a-w- c:\windows\system32\mf.dll
2015-03-11 13:40 . 2015-03-11 13:40 354816 ----a-w- c:\windows\SysWow64\mfplat.dll
2015-03-11 13:40 . 2015-03-11 13:40 188416 ----a-w- c:\windows\system32\pcasvc.dll
2015-03-11 13:40 . 2015-03-11 13:40 1329664 ----a-w- c:\windows\SysWow64\quartz.dll
2015-03-11 13:40 . 2015-03-11 13:40 1005056 ----a-w- c:\windows\SysWow64\cryptui.dll
2015-03-11 13:40 . 2015-03-11 13:40 693176 ----a-w- c:\windows\system32\winload.efi
2015-03-11 13:40 . 2015-03-11 13:40 680960 ----a-w- c:\windows\system32\audiosrv.dll
2015-03-11 13:40 . 2015-03-11 13:40 619056 ----a-w- c:\windows\system32\winload.exe
2015-03-11 13:40 . 2015-03-11 13:40 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2015-03-11 13:40 . 2015-03-11 13:40 504320 ----a-w- c:\windows\SysWow64\msscp.dll
2015-03-11 13:40 . 2015-03-11 13:40 457400 ----a-w- c:\windows\system32\ci.dll
2015-03-11 13:40 . 2015-03-11 13:40 325632 ----a-w- c:\windows\system32\msnetobj.dll
2015-03-11 13:40 . 2015-03-11 13:40 32256 ----a-w- c:\windows\system32\appidsvc.dll
2015-03-11 13:40 . 2015-03-11 13:40 229376 ----a-w- c:\windows\system32\wintrust.dll
2015-03-11 13:40 . 2015-03-11 13:40 179200 ----a-w- c:\windows\SysWow64\wintrust.dll
2015-03-11 13:40 . 2015-03-11 13:40 140288 ----a-w- c:\windows\system32\cryptnet.dll
2015-03-11 13:40 . 2015-03-11 13:40 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2015-03-11 13:40 . 2015-03-11 13:40 61440 ----a-w- c:\windows\system32\drivers\appid.sys
2015-03-11 13:40 . 2015-03-11 13:40 55808 ----a-w- c:\windows\system32\rrinstaller.exe
2015-03-11 13:40 . 2015-03-11 13:40 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe
2015-03-11 13:40 . 2015-03-11 13:40 500224 ----a-w- c:\windows\system32\AUDIOKSE.dll
2015-03-11 13:40 . 2015-03-11 13:40 442880 ----a-w- c:\windows\SysWow64\AUDIOKSE.dll
2015-03-11 13:40 . 2015-03-11 13:40 440832 ----a-w- c:\windows\system32\AudioEng.dll
2015-03-11 13:40 . 2015-03-11 13:40 374784 ----a-w- c:\windows\SysWow64\AudioEng.dll
2015-03-11 13:40 . 2015-03-11 13:40 37376 ----a-w- c:\windows\system32\pcadm.dll
2015-03-11 13:40 . 2015-03-11 13:40 371712 ----a-w- c:\windows\system32\qdvd.dll
2015-03-11 13:40 . 2015-03-11 13:40 296448 ----a-w- c:\windows\system32\AudioSes.dll
2015-03-11 13:40 . 2015-03-11 13:40 265216 ----a-w- c:\windows\SysWow64\msnetobj.dll
2015-03-11 13:40 . 2015-03-11 13:40 187904 ----a-w- c:\windows\system32\cryptsvc.dll
2015-03-11 13:40 . 2015-03-11 13:40 146944 ----a-w- c:\windows\system32\appidpolicyconverter.exe
2015-03-11 13:40 . 2015-03-11 13:40 143872 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2015-03-11 13:40 . 2015-03-11 13:40 126464 ----a-w- c:\windows\system32\audiodg.exe
2015-03-11 13:40 . 2015-03-11 13:40 9728 ----a-w- c:\windows\system32\pcalua.exe
2015-03-11 13:40 . 2015-03-11 13:40 58880 ----a-w- c:\windows\system32\appidapi.dll
2015-03-11 13:40 . 2015-03-11 13:40 50688 ----a-w- c:\windows\SysWow64\appidapi.dll
2015-03-11 13:40 . 2015-03-11 13:40 24576 ----a-w- c:\windows\system32\mfpmp.exe
2015-03-11 13:40 . 2015-03-11 13:40 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe
2015-03-11 13:40 . 2015-03-11 13:40 206848 ----a-w- c:\windows\system32\mfps.dll
2015-03-11 13:40 . 2015-03-11 13:40 195584 ----a-w- c:\windows\SysWow64\AudioSes.dll
2015-03-11 13:40 . 2015-03-11 13:40 11264 ----a-w- c:\windows\system32\pcawrk.exe
2015-03-11 13:40 . 2015-03-11 13:40 11264 ----a-w- c:\windows\system32\msmmsp.dll
2015-03-11 13:40 . 2015-03-11 13:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll
2015-03-11 13:40 . 2015-03-11 13:40 63488 ----a-w- c:\windows\system32\setbcdlocale.dll
2015-03-11 13:40 . 2015-03-11 13:40 284672 ----a-w- c:\windows\system32\EncDump.dll
2015-03-11 13:40 . 2015-03-11 13:40 17920 ----a-w- c:\windows\system32\appidcertstorecheck.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 221184]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2013-06-17 39408]
"MP3 Skype recorder"="c:\users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe" [2014-12-27 1544704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-03-06 291128]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-16 81920]
"Sound Blaster X-Fi MB 3"="c:\program files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe" [2013-01-30 2104832]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"MSUTray"="c:\program files (x86)\Marvell\storage\tray\MarvellTray.exe" [2012-06-13 1213952]
"Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2015-01-07 2694320]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-06 766208]
"RUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe" [2011-09-20 115048]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
"CanonQuickMenu"="c:\program files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" [2014-01-17 1284680]
"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe" [2015-04-05 4886608]
.
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-4-14 43376600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux8"=wdmaud.drv
.
R1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]
R1 epp64;epp64;c:\windows\system32\DRIVERS\epp64.sys;c:\windows\SYSNATIVE\DRIVERS\epp64.sys [x]
R1 UsbCharger;UsbCharger;c:\windows\system32\DRIVERS\UsbCharger.sys;c:\windows\SYSNATIVE\DRIVERS\UsbCharger.sys [x]
R2 a2AntiMalware;Emsisoft Protection Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DragonUpdater;COMODO Dragon Update Service;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
R2 Marvell Storage Management;Marvell Storage Management Service;c:\program files (x86)\Marvell\storage\svc\mvraidsvc.exe;c:\program files (x86)\Marvell\storage\svc\mvraidsvc.exe [x]
R2 MBAMScheduler;MBAMScheduler;e:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;e:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;e:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;e:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 MSUWebService;MSU Web Service;c:\program files (x86)\Marvell\storage\Apache2\bin\httpd.exe;c:\program files (x86)\Marvell\storage\Apache2\bin\httpd.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 cmdvirth;COMODO Virtual Service Manager;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 e1dexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver D;c:\windows\system32\DRIVERS\e1d62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1d62x64.sys [x]
R3 e1rexpress;Intel(R) PCI Express Network Connection Driver R;c:\windows\system32\DRIVERS\e1r62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1r62x64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
R3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
R3 Mv_Process;Marvell process notification.;c:\windows\syswow64\mv_process.sys;c:\windows\syswow64\mv_process.sys [x]
R3 Origin Client Service;Origin Client Service;e:\program files (x86)\Origin\OriginClientService.exe;e:\program files (x86)\Origin\OriginClientService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VsEtwService120;Visual Studio ETW Event Collection Service;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 mv91cons;Marvell 91xx Config Device Driver;c:\windows\system32\DRIVERS\mv91cons.sys;c:\windows\SYSNATIVE\DRIVERS\mv91cons.sys [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]
S3 BazisVirtualCDBus;WinCDEmu Virtual Bus Driver;c:\windows\system32\DRIVERS\BazisVirtualCDBus.sys;c:\windows\SYSNATIVE\DRIVERS\BazisVirtualCDBus.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
 
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-04-15 20:12 988488 ----a-w- c:\program files (x86)\Google\Chrome\Application\42.0.2311.90\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-04-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-20 04:50]
.
2015-04-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17 06:46]
.
2015-04-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17 06:46]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-12-19 07:57 1039008 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-12-19 07:57 1039008 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-12-19 07:57 1039008 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 02:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04 164760 ----a-w- c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-02-26 13423688]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-01-31 36352]
"MBCfg64"="c:\windows\system32\MBCfg64.dll" [2013-01-25 29696]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cistray.exe" [2015-04-21 1426136]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-09-19 557768]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2013-11-14 8292120]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2014-01-24 391128]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2014-01-24 771544]
"Persistence"="c:\windows\system32\igfxpers.exe" [2014-01-24 770520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 218.186.2.16 218.186.2.6 202.156.1.16
TCP: Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37}: NameServer = 156.154.70.22,156.154.71.22
TCP: Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9}: NameServer = 156.154.70.22,156.154.71.22
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run-PrivDogService - c:\program files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe
SafeBoot-MBAMSwissArmy
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-PrivDog - c:\program files (x86)\AdTrustMedia\PrivDog\UninstallTrustedAds.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\COMODO\CIS\Installer\Sym_Cam\CIS]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\cmdAgent\Mode\Configurations]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\cmdAgent\Mode\Data]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\cmdAgent\Mode\Options]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\Software\COMODO\Cam]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\Software\COMODO\Firewall Pro]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
Completion time: 2015-04-29 13:43:05
ComboFix-quarantined-files.txt 2015-04-29 05:43
.
Pre-Run: 255,403,626,496 bytes free
Post-Run: 268,649,582,592 bytes free
.
- - End Of File - - 7E6974B7BE62E42061417C82C0FAEF49
5FB38429D5D77768867C76DCBDB35194
 
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Make sure you checkmark Addition.txt box.
  • Press Scan button.
  • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2015
Ran by admin (administrator) on ADMIN-PC on 30-04-2015 12:08:38
Running from C:\Users\admin\Desktop
Loaded Profiles: admin (Available profiles: admin & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Marvell) C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe
(Malwarebytes Corporation) E:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) E:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) E:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe
(Dropbox, Inc.) C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Creative Technology Ltd.) C:\Program Files (x86)\Creative\ShareDLL\CADI\NotiMan.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1426136 2015-04-21] (COMODO)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-15] (Logitech Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291128 2013-03-07] (Intel Corporation)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Sound Blaster X-Fi MB 3] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB3\Sound Blaster X-Fi MB3\SBXFIMB3.exe [2104832 2013-01-30] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [MSUTray] => C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe [1213952 2012-06-13] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1284680 2014-01-17] (CANON INC.)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4886608 2015-04-05] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-06-17] (Google Inc.)
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Run: [MP3 Skype recorder] => C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [1544704 2014-12-27] ()
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [245872 2013-02-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-26] (NVIDIA Corporation)
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-11]
ShortcutTarget: Dropbox.lnk -> C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] ()
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-10-12] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-10-12] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-03] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-03] (Google Inc.)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} http://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} http://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 218.186.2.16 218.186.2.6 202.156.1.16
Tcpip\..\Interfaces\{A5DB3347-DC4B-43C1-B89D-DC81028EFD37}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{ED09AA28-524D-4204-B1AA-76C804D90DB9}: [NameServer] 156.154.70.22,156.154.71.22

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-21] ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-12] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-12] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-21] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-08]
CHR Extension: (Google Drive) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-08]
CHR Extension: (YouTube) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-08]
CHR Extension: (Adblock Plus) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-12-08]
CHR Extension: (Google Search) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-08]
CHR Extension: (Bookmark Manager) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Image Hover) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaacjelpfohbhlffbajgliongkdofkfg [2014-04-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-05]
CHR Extension: (Skype Click to Call) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-12-09]
CHR Extension: (Go away MDA - Bypass MDA blocked sites) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lledpflfnanamkogoclkgaggfdgoalok [2014-03-29]
CHR Extension: (Google Wallet) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-08]
CHR Extension: (Gmail) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-08]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5020520 2015-04-05] (Emsisoft GmbH)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5540424 2015-04-21] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265816 2015-04-21] (COMODO)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-12-08] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-12-08] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [406016 2011-09-14] (Creative Technology Ltd) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2370240 2014-11-27] (Comodo Security Solutions, Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 MBAMScheduler; E:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; E:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MSUWebService; C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe [24645 2011-11-22] (Apache Software Foundation) [File not signed]
S3 Origin Client Service; E:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-21] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-29] ()
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20696 2015-04-02] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [797280 2015-04-02] (COMODO)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [490256 2013-01-23] (Intel Corporation)
R3 e1rexpress; C:\Windows\System32\DRIVERS\e1r62x64.sys [488784 2012-11-15] (Intel Corporation)
R1 epp64; C:\Windows\System32\DRIVERS\epp64.sys [135800 2015-04-05] (Emsisoft GmbH)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [442368 2013-03-19] (Intel(R) Corporation) [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 Mv_Process; c:\windows\syswow64\mv_process.sys [14376 2011-11-22] ()
R1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21072 2013-03-27] ()
S3 catchme; \??\C:\your_name\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-30 11:43 - 2003-06-12 23:25 - 00007062 _____ () C:\Windows\SysWOW64\audiopid.vxd
2015-04-29 20:29 - 2015-04-29 20:29 - 00000000 ____D () C:\Users\admin\AppData\Local\UnrealEngineLauncher
2015-04-29 13:43 - 2015-04-29 13:43 - 00042914 _____ () C:\ComboFix.txt
2015-04-29 13:34 - 2011-06-26 14:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-04-29 13:34 - 2010-11-08 01:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-04-29 13:34 - 2009-04-20 12:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-04-29 13:34 - 2000-08-31 08:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-04-29 13:34 - 2000-08-31 08:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-04-29 13:34 - 2000-08-31 08:00 - 00098816 _____ () C:\Windows\sed.exe
2015-04-29 13:34 - 2000-08-31 08:00 - 00080412 _____ () C:\Windows\grep.exe
2015-04-29 13:34 - 2000-08-31 08:00 - 00068096 _____ () C:\Windows\zip.exe
2015-04-29 13:25 - 2015-04-29 13:43 - 00000000 ____D () C:\Qoobox
2015-04-29 13:25 - 2015-04-29 13:42 - 00000000 ____D () C:\Windows\erdnt
2015-04-29 13:23 - 2015-04-29 13:24 - 00004856 _____ () C:\Users\admin\Desktop\Rkill.txt
2015-04-29 13:12 - 2015-04-29 13:12 - 01943800 _____ (Bleeping Computer, LLC) C:\Users\admin\Desktop\rkill.exe
2015-04-29 13:11 - 2015-04-29 13:11 - 05619691 ____R (Swearware) C:\Users\admin\Desktop\your_name.exe
2015-04-28 17:15 - 2015-04-28 17:16 - 02715845 _____ (Thisisu) C:\Users\admin\Desktop\JRT.exe
2015-04-28 16:57 - 2015-04-28 16:59 - 00000000 ____D () C:\AdwCleaner
2015-04-28 16:56 - 2015-04-28 16:56 - 02224640 _____ () C:\Users\admin\Desktop\adwcleaner_4.202.exe
2015-04-28 16:15 - 2015-04-28 16:15 - 00000791 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-28 16:13 - 2015-04-28 16:14 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\admin\Desktop\mbam-setup-2.1.6.1022.exe
2015-04-28 15:52 - 2015-04-28 15:53 - 20594776 _____ () C:\Users\admin\Desktop\RogueKillerX64.exe
2015-04-28 04:39 - 2015-04-28 04:15 - 607879932 _____ () C:\Users\admin\Desktop\unbreakable.mp4
2015-04-27 12:04 - 2015-04-27 12:04 - 00125506 _____ () C:\Users\admin\Desktop\Addition.txt
2015-04-27 12:03 - 2015-04-30 12:08 - 00028565 _____ () C:\Users\admin\Desktop\FRST.txt
2015-04-27 12:02 - 2015-04-30 12:08 - 00000000 ____D () C:\FRST
2015-04-27 12:00 - 2015-04-27 12:00 - 02101248 _____ (Farbar) C:\Users\admin\Desktop\FRST64.exe
2015-04-26 17:34 - 2015-04-28 16:52 - 00000000 ____D () C:\Users\admin\AppData\Local\Popcorn-Time
2015-04-26 17:33 - 2015-04-26 17:33 - 00002222 _____ () C:\Users\Public\Desktop\Popcorn Time Offical.lnk
2015-04-26 17:33 - 2015-04-26 17:33 - 00000000 ____D () C:\Users\admin\AppData\Local\Popcorn Time Offical
2015-04-26 17:33 - 2015-04-26 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time Offical
2015-04-26 17:32 - 2015-04-26 17:32 - 22642258 _____ (Popcorn Time Offical ) C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe
2015-04-26 17:15 - 2015-04-26 17:15 - 00000000 ____D () C:\Users\admin\AppData\Roaming\dvdcss
2015-04-26 17:14 - 2015-04-26 17:14 - 00831496 _____ (SysProgs.org) C:\Users\admin\Downloads\WinCDEmu-3.6.exe
2015-04-26 17:14 - 2015-04-26 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinCDEmu
2015-04-26 17:14 - 2015-04-26 17:14 - 00000000 ____D () C:\Program Files (x86)\WinCDEmu
2015-04-26 13:41 - 2015-04-28 03:20 - 21099574 _____ () C:\Users\admin\Desktop\fight.aiff
2015-04-26 13:39 - 2015-04-26 13:39 - 18542124 _____ () C:\Users\admin\Desktop\fightscene.wav
2015-04-26 13:36 - 2015-04-26 13:38 - 06708620 _____ () C:\Users\admin\Desktop\fightscene.flac
2015-04-26 13:28 - 2015-04-29 03:47 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Audacity
2015-04-26 13:28 - 2015-04-26 13:28 - 00000722 _____ () C:\Users\Public\Desktop\Audacity.lnk
2015-04-26 13:28 - 2015-04-26 13:28 - 00000722 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-04-26 13:26 - 2015-04-26 13:26 - 24210616 _____ (Audacity Team ) C:\Users\admin\Downloads\audacity-win-2.1.0.exe
2015-04-26 13:04 - 2015-04-26 13:04 - 03198976 _____ (Moo0) C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe
2015-04-26 12:51 - 2015-04-26 12:51 - 00000000 ____D () C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
2015-04-26 12:50 - 2015-04-26 12:51 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-04-26 12:48 - 2015-04-26 12:48 - 01709792 _____ (Disc Soft Ltd.) C:\Users\admin\Downloads\DTLiteInstaller.exe
2015-04-26 11:57 - 2015-04-26 11:57 - 05618960 _____ () C:\Users\admin\Downloads\tr83pe.exe
2015-04-26 05:14 - 2015-04-26 05:14 - 00130699 _____ () C:\Users\admin\Desktop\test.wma
2015-04-22 21:18 - 2015-04-22 21:18 - 01469322 _____ () C:\Users\admin\Desktop\metro_for_steam___3_9_1_by_boneyardbrew-d4u3kjv.zip
2015-04-22 21:03 - 2015-04-22 21:03 - 00067348 _____ () C:\Users\admin\Desktop\[BakaBT.180497v0] Rurouni Kenshin The Legend Ends.torrent
2015-04-22 21:02 - 2015-04-22 21:02 - 00067520 _____ () C:\Users\admin\Desktop\[BakaBT.180491v0] Rurouni Kenshin Kyoto Inferno.torrent
2015-04-22 21:01 - 2015-04-22 21:01 - 00027444 _____ () C:\Users\admin\Desktop\[BakaBT.170844v0] Rurouni Kenshin 1080p 2012.torrent
2015-04-22 20:55 - 2015-04-22 20:55 - 00016605 _____ () C:\Users\admin\Desktop\20698CF5D4184E219F93000DFCDB0481EC1B30EC.torrent
2015-04-15 11:03 - 2015-04-15 11:03 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 11:03 - 2015-04-15 11:03 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 11:03 - 2015-04-15 11:03 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 11:03 - 2015-04-15 11:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 11:02 - 2015-04-15 11:02 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 11:02 - 2015-04-15 11:02 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 11:02 - 2015-04-15 11:02 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 11:02 - 2015-04-15 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 11:02 - 2015-03-13 12:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 11:02 - 2015-03-13 12:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 11:02 - 2015-03-13 11:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 11:02 - 2015-03-13 11:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 11:02 - 2015-03-04 12:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 11:02 - 2015-03-04 12:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 11:02 - 2015-03-04 12:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 11:02 - 2015-02-25 11:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-12 00:21 - 2015-04-12 00:21 - 00000000 ____D () C:\Users\admin\AppData\Local\openvr
2015-04-05 19:59 - 2015-04-05 19:59 - 00000000 ____D () C:\ProgramData\Emsisoft
2015-04-05 19:05 - 2015-04-30 11:43 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2015-04-05 19:05 - 2015-04-05 19:05 - 00135800 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp64.sys
2015-04-05 19:05 - 2015-04-05 19:05 - 00001095 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-04-05 19:05 - 2015-04-05 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-04-05 19:00 - 2015-04-05 19:02 - 166386960 _____ (Emsisoft Ltd. ) C:\Users\admin\Desktop\EmsisoftAntiMalwareSetup.exe
2015-04-05 04:33 - 2015-04-05 04:33 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 04:33 - 2015-04-05 04:33 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-04 04:38 - 2015-04-08 16:32 - 00000000 ____D () C:\Users\admin\Desktop\Concepts Agency
2015-04-03 17:02 - 2015-04-03 17:25 - 00886605 _____ () C:\Users\admin\Desktop\de_facility_layout.psd
2015-04-03 16:00 - 2015-04-21 17:14 - 00000000 ____D () C:\Users\admin\Desktop\MyFirstUE4Level
2015-04-03 01:41 - 2015-04-03 01:41 - 00000000 _____ () C:\Users\admin\Desktop\tuesdays and fridays.txt
2015-04-02 20:53 - 2015-04-02 21:13 - 00262188 _____ () C:\Users\admin\Desktop\cf_unionstation.tga
2015-04-02 20:53 - 2015-04-02 21:13 - 00087616 _____ () C:\Users\admin\Desktop\cf_unionstation.vtf
2015-04-02 20:50 - 2015-04-02 20:53 - 01398272 _____ () C:\Users\admin\Desktop\loadingscreen_map_cf_unionstation.vtf
2015-04-02 20:50 - 2015-04-02 20:52 - 04194348 _____ () C:\Users\admin\Desktop\loadingscreen_map_cf_unionstation.tga
2015-04-01 05:36 - 2015-04-01 05:36 - 00013833 _____ () C:\Users\admin\Desktop\[BakaBT.179859v0] [SubDESU-H] Idol Sister - 01 (852x480 x264 8bit AAC)[191E08AC].mp4.torrent
2015-04-01 05:34 - 2015-04-01 05:34 - 00013543 _____ () C:\Users\admin\Desktop\[BakaBT.180235v0] Nosewasure The Animation (SubDESU-H).torrent

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-30 12:08 - 2013-12-09 01:29 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2015-04-30 12:08 - 2013-12-08 17:05 - 00000512 _____ () C:\Windows\SysWOW64\za_mv_raid.ev
2015-04-30 12:08 - 2011-11-22 11:08 - 00165888 _____ () C:\Windows\SysWOW64\freqdb.db
2015-04-30 12:07 - 2013-12-16 02:05 - 94104256 _____ () C:\Windows\backend.log
2015-04-30 12:03 - 2014-07-20 13:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-30 11:56 - 2014-11-04 02:33 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-30 11:45 - 2009-07-14 12:45 - 00034544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-30 11:45 - 2009-07-14 12:45 - 00034544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-30 11:42 - 2013-12-08 17:03 - 00000000 ____D () C:\Program Files (x86)\Creative
2015-04-30 11:40 - 2013-12-10 14:19 - 00000000 ___RD () C:\Users\admin\Dropbox
2015-04-30 11:40 - 2013-12-10 14:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Dropbox
2015-04-30 11:40 - 2013-06-17 14:58 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{6C28B760-34E2-4966-B77A-AE0FFBA1C245}
2015-04-30 11:40 - 2013-06-17 14:45 - 01656667 _____ () C:\Windows\WindowsUpdate.log
2015-04-30 11:38 - 2013-12-09 02:26 - 00000000 ____D () C:\Users\admin\AppData\Local\TSVNCache
2015-04-30 11:38 - 2013-06-17 14:46 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-30 11:36 - 2014-03-25 02:13 - 00030567 _____ () C:\Windows\setupact.log
2015-04-30 11:36 - 2013-12-08 17:05 - 00055692 _____ () C:\Windows\SysWOW64\mvaccelerator.log
2015-04-30 11:36 - 2013-12-08 17:05 - 00000241 _____ () C:\Windows\SysWOW64\mvcli.ini
2015-04-30 11:36 - 2013-06-17 14:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-30 11:36 - 2009-07-14 13:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-30 05:19 - 2014-10-31 13:41 - 00000000 ____D () C:\Users\admin\AppData\Local\TGitCache
2015-04-30 05:11 - 2013-06-17 14:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-30 02:00 - 2013-12-09 01:42 - 00000000 ____D () C:\Users\admin\AppData\Local\Adobe
2015-04-29 20:29 - 2014-10-03 01:36 - 00000000 ____D () C:\ProgramData\Epic
2015-04-29 18:35 - 2013-12-18 22:21 - 00000000 ____D () C:\Users\admin\AppData\Roaming\foobar2000
2015-04-29 13:44 - 2014-02-05 00:51 - 00033320 _____ () C:\Windows\PFRO.log
2015-04-29 13:42 - 2009-07-14 10:34 - 00000215 _____ () C:\Windows\system.ini
2015-04-29 13:13 - 2014-04-15 11:58 - 01138912 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-04-29 12:55 - 2013-12-08 23:03 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-04-29 12:53 - 2013-12-10 04:38 - 00000000 ____D () C:\HammerAutosave
2015-04-28 20:04 - 2014-11-01 04:23 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-04-28 16:43 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\Resources
2015-04-28 16:15 - 2014-11-04 02:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-28 14:17 - 2015-03-04 23:48 - 00000215 _____ () C:\Users\admin\Desktop\Where to bring my dad.txt
2015-04-26 22:29 - 2014-11-01 03:49 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-04-26 17:32 - 2014-10-09 00:03 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc
2015-04-26 17:14 - 2011-06-05 04:14 - 00198480 _____ (SysProgs.org) C:\Windows\system32\Drivers\BazisVirtualCDBus.sys
2015-04-26 13:24 - 2014-11-08 21:07 - 00000000 ____D () C:\Users\admin\AppData\Roaming\uTorrent
2015-04-25 13:02 - 2015-01-24 20:26 - 00000000 ____D () C:\Users\admin\AppData\Roaming\OBS
2015-04-24 15:23 - 2014-10-03 03:16 - 00000000 ____D () C:\Users\admin\Documents\Unreal Projects
2015-04-24 11:47 - 2013-12-10 14:17 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-04-23 14:19 - 2015-01-24 20:25 - 00000000 ____D () C:\Program Files\OBS
2015-04-23 12:35 - 2013-06-17 14:51 - 00069568 _____ () C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-23 12:20 - 2009-07-14 12:45 - 04969424 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-22 16:56 - 2013-12-16 18:13 - 00001456 _____ () C:\Users\admin\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-04-21 19:40 - 2014-10-25 15:37 - 00000000 ____D () C:\Users\admin\Documents\Visual Studio 2013
2015-04-21 12:50 - 2014-07-20 13:01 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-21 12:50 - 2014-07-20 13:01 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-21 12:50 - 2014-07-20 13:01 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-17 00:31 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 00:07 - 2009-07-14 11:20 - 00000000 ____D () C:\Windows\rescache
2015-04-16 17:13 - 2014-11-08 15:28 - 00000000 ____D () C:\Users\admin\AppData\Local\CrashDumps
2015-04-15 22:21 - 2014-12-11 13:01 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-15 22:21 - 2014-05-07 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 17:50 - 2013-06-17 14:48 - 00909612 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 17:50 - 2009-07-14 13:13 - 00909612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-15 17:49 - 2013-12-09 03:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 17:44 - 2013-06-17 15:18 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-14 09:37 - 2014-11-04 02:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-14 09:37 - 2014-11-04 02:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-14 09:37 - 2014-11-04 02:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-14 02:48 - 2013-12-09 01:29 - 00000000 ____D () C:\ProgramData\Skype
2015-04-13 10:03 - 2013-12-22 03:21 - 00000000 ____D () C:\Users\admin\Desktop\TEMP FILES
2015-04-13 10:02 - 2015-02-27 20:52 - 00000000 ____D () C:\Users\admin\Desktop\Brushes
2015-04-08 12:39 - 2013-12-08 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-04-08 12:39 - 2013-12-08 23:03 - 00000000 ____D () C:\Program Files\COMODO
2015-04-03 13:49 - 2014-10-03 03:15 - 00000000 ____D () C:\Users\admin\AppData\Local\UnrealEngine
2015-04-03 12:33 - 2009-07-14 13:08 - 00032626 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-02 01:49 - 2013-11-14 11:38 - 00797280 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00104608 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00045880 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2015-04-02 01:49 - 2013-09-24 10:54 - 00020696 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2015-04-02 01:48 - 2013-11-14 11:38 - 00041248 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2015-04-02 01:48 - 2013-09-24 10:53 - 00576848 _____ (COMODO) C:\Windows\system32\guard64.dll
2015-04-02 01:48 - 2013-09-24 10:53 - 00444472 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2015-04-02 01:47 - 2013-09-24 10:53 - 00358104 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2015-04-02 01:46 - 2013-09-24 10:53 - 00045784 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2015-04-02 01:45 - 2013-09-24 10:53 - 00288472 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2015-04-02 01:45 - 2013-09-24 10:53 - 00040664 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll

==================== Files in the root of some directories =======

2014-12-01 15:15 - 2014-12-01 15:15 - 0000132 _____ () C:\Users\admin\AppData\Roaming\Adobe BMP Format CC Prefs
2013-12-10 18:00 - 2014-10-13 00:08 - 0000132 _____ () C:\Users\admin\AppData\Roaming\Adobe Targa Format CC Prefs
2013-12-16 18:13 - 2015-04-22 16:56 - 0001456 _____ () C:\Users\admin\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-02-22 17:08 - 2015-02-22 17:27 - 0005120 _____ () C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-30 03:09 - 2014-10-30 03:09 - 0000600 _____ () C:\Users\admin\AppData\Local\PUTTY.RND
2014-09-21 15:53 - 2014-09-21 15:53 - 0000754 _____ () C:\Users\admin\AppData\Local\recently-used.xbel

Some content of TEMP:
====================
C:\Users\admin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeg97mq.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-24 16:28

==================== End Of Log ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2015
Ran by admin at 2015-04-30 12:08:56
Running from C:\Users\admin\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

admin (S-1-5-21-1780743532-3999283199-1341137972-1000 - Administrator - Enabled) => C:\Users\admin
Administrator (S-1-5-21-1780743532-3999283199-1341137972-500 - Administrator - Disabled)
Guest (S-1-5-21-1780743532-3999283199-1341137972-501 - Limited - Enabled)
UpdatusUser (S-1-5-21-1780743532-3999283199-1341137972-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: COMODO Antivirus (Enabled - Up to date) {F0BC89B2-8937-0933-021B-B17D981F2A71}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
AS: Comodo Defense+ (Enabled - Up to date) {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )
3DMark (HKLM-x32\...\Steam App 223850) (Version: - Futuremark)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
Afterfall InSanity Extended Edition (HKLM-x32\...\Steam App 224420) (Version: - Intoxicate Studios)
Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version: - Spicy Horse Games)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (HKLM-x32\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
BioShock (HKLM-x32\...\Steam App 7670) (Version: - 2K Boston)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)
Blender (HKLM\...\Blender) (Version: 2.72b - Blender Foundation)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Brothers - A Tale of Two Sons (HKLM-x32\...\Steam App 225080) (Version: - Starbreeze Studios AB)
Build Tools - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.30723 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version: - Infinity Ward)
Canon CanoScan LiDE 220 On-screen Manual (HKLM-x32\...\Canon CanoScan LiDE 220 On-screen Manual) (Version: 7.7.1 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.11.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.2.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.4.0 - Canon Inc.)
CanoScan LiDE 220 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4811) (Version: 1.00 - Canon Inc.)
CDisplayEx 1.10.3 (HKLM\...\CDisplayEx_is1) (Version: - cdisplayex.com)
COMODO Antivirus (HKLM\...\{901D1D88-408D-48E5-80DD-CC3145BD8456}) (Version: 6.3.39949.2976 - COMODO Security Solutions Inc.)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 36.1.1.21 - Comodo)
Contagion (HKLM-x32\...\Steam App 238430) (Version: - Monochrome LLC)
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version: - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Crazybump (remove only) (HKLM-x32\...\Crazybump) (Version: - )
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)
Dear Esther (HKLM-x32\...\Steam App 203810) (Version: - thechineseroom & Robert Briscoe)
Deus Ex: Game of the Year Edition (HKLM-x32\...\Steam App 6910) (Version: - Ion Storm)
Deus Ex: Human Revolution - Director's Cut (HKLM-x32\...\Steam App 238010) (Version: - Eidos Montreal)
Dino D-Day (HKLM-x32\...\Steam App 70000) (Version: - 800 North and Digital Ranch)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
Dropbox (HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Dropbox) (Version: 3.4.4 - Dropbox, Inc.)
Duke Nukem 3D: Megaton Edition (HKLM-x32\...\Steam App 225140) (Version: - 3D Realms)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)
Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Ezvid (HKLM-x32\...\{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1) (Version: 0982 - Ezvid, inc.)
F.E.A.R. 2: Project Origin (HKLM-x32\...\Steam App 16450) (Version: - Monolith)
Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version: - Bethesda Game Studios)
Fallout 3 Patch v1.5 (HKLM-x32\...\Updated Unofficial Fallout 3 Patch_is1) (Version: 1.5 - )
Fallout Mod Manager 0.13.21 (HKLM-x32\...\Generic Mod Manager_is1) (Version: - Q, Timeslip)
FEZ (HKLM-x32\...\Steam App 224760) (Version: - Polytron Corporation)
Final Hours of Tomb Raider (HKLM-x32\...\Steam App 233410) (Version: - Geoff Keighley)
foobar2000 v1.2.9 (HKLM-x32\...\foobar2000) (Version: 1.2.9 - Peter Pawlowski)
Free to Play (HKLM-x32\...\Steam App 245550) (Version: - Valve)
GCFScape 1.8.5 (HKLM\...\GCFScape_is1) (Version: - Ryan Gregg)
Git version 1.9.4-preview20140929 (HKLM-x32\...\Git_is1) (Version: 1.9.4-preview20140929 - The Git Development Community)
Gone Home (HKLM-x32\...\Steam App 232430) (Version: - The Fullbright Company)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GRID (HKLM-x32\...\Steam App 12750) (Version: - Codemasters Studios)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version: - Valve)
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve)
Hawken (HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\...\Hawken) (Version: - Meteor Entertainment)
Home (HKLM-x32\...\Steam App 215670) (Version: - Benjamin Rivers)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.0.1.0 (HKLM\...\PROSetDX) (Version: 18.0.1.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle)
Kentucky Route Zero (HKLM-x32\...\Steam App 231200) (Version: - Cardboard Computer)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Left 4 Dead 2 Authoring Tools (HKLM-x32\...\Steam App 563) (Version: - Valve)
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Marvell Storage Utility V4 (HKLM-x32\...\mvMSU) (Version: 4.1.0.2013 - Marvell)
Mass Effect (HKLM-x32\...\Steam App 17460) (Version: - BioWare)
Mass Effect 2 (HKLM-x32\...\Steam App 24980) (Version: - BioWare)
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version: - Electronic Arts)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version: - Electronic Arts)
METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version: - Kojima Productions)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - 4A Games)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 3 (HKLM-x32\...\{1ef771b4-b774-439e-a015-23dec292d9a4}) (Version: 12.0.30723.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
MirrorMoon EP (HKLM-x32\...\Steam App 231310) (Version: - Santa Ragione)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
MP3 Skype recorder (HKLM-x32\...\{78A8FADA-B8DF-4AA4-AED7-C91EE58EB7E9}) (Version: 4.6.1.0 - Alexander Nikiforov)
MPC-HC 1.7.7 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.7 - MPC-HC Team)
My Game Long Name (HKLM\...\UDK-4c9ce4ab-f210-44c0-97ae-ae18fd50fbf9) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-4e3a8a76-1a5a-428b-aa61-5c12a86714a5) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-b51a0caa-47c5-43ec-aca3-e86548fddf24) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-f9fd5995-079f-4482-b672-2aba7487c0f9) (Version: - Epic Games, Inc.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.1 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 306.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 306.23 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX (HKLM-x32\...\{3282FBE1-35FC-48D8-98CA-115A5EF1F9B4}) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
ON_OFF Charge 2 B13.0403.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge 2 B13.0403.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge B13.0403.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PAC-MAN Championship Edition DX+ (HKLM-x32\...\Steam App 236450) (Version: - Mine Loader Software Co., Ltd.)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Popcorn Time Offical version 0.8.0.2 (HKLM-x32\...\{8F38178C-CFE2-476C-9DC8-F4203C2395FF}_is1) (Version: 0.8.0.2 - Popcorn Time Offical)
Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)
Portal 2 - The Final Hours (HKLM-x32\...\Steam App 104600) (Version: - Geoff Keighley)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
PrivDog (HKLM-x32\...\PrivDog) (Version: 2.2.0.14 - privdog.com)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Python Tools Redirection Template (x32 Version: 1.0 - Microsoft Corporation) Hidden
Quake Live (HKLM-x32\...\Quake Live) (Version: - id Software)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Race The Sun (HKLM-x32\...\Steam App 253030) (Version: - Flippfly LLC)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.23.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.23.0 - Renesas Electronics Corporation) Hidden
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version: - CAPCOM Co., Ltd.)
Resident Evil 6 / Biohazard 6 (HKLM-x32\...\Steam App 221040) (Version: - Capcom)
Resident Evil Revelations / Biohazard Revelations UE (HKLM-x32\...\Steam App 222480) (Version: - Capcom)
Shift 2 Unleashed (HKLM-x32\...\Steam App 47920) (Version: - Slightly Mad Studios)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sleeping Dogs™ (HKLM-x32\...\Steam App 202170) (Version: - United Front Games)
Sound Blaster X-Fi MB3 (HKLM-x32\...\{3689CE39-3173-4952-B7AF-F1A9D6F9A288}) (Version: 1.00.01 - Creative Technology Limited)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve)
Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version: - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Source SDK Base 2013 Singleplayer (HKLM-x32\...\Steam App 243730) (Version: - )
SourceTree (HKLM-x32\...\SourceTree 1.6.8) (Version: 1.6.8 - Atlassian)
SourceTree (x32 Version: 1.6.8 - Atlassian) Hidden
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Strike Vector (HKLM-x32\...\Steam App 246700) (Version: - Ragequit Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version: - Capybara)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.3.7 - Electronic Arts)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Tomb Raider: Anniversary (HKLM-x32\...\Steam App 8000) (Version: - Crystal Dynamics)
Tomb Raider: Legend (HKLM-x32\...\Steam App 7000) (Version: - Crystal Dynamics)
Tomb Raider: Underworld (HKLM-x32\...\Steam App 8140) (Version: - Crystal Dynamics Inc.)
TortoiseGit 1.8.11.0 (64 bit) (HKLM\...\{56AB2BBB-7F02-4F4E-8FE2-8E83857E2E4B}) (Version: 1.8.11.0 - TortoiseGit)
TortoiseSVN 1.8.4.24972 (64 bit) (HKLM\...\{A2EFDE01-96B3-4E55-8834-81617ED6BCBE}) (Version: 1.8.24972 - TortoiseSVN)
Transformers: War for Cybertron (HKLM-x32\...\Steam App 42650) (Version: - High Moon Studios)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.10.1 - Tweaking.com)
TypeScript Power Tool (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.3.1 - Microsoft Corporation) Hidden
Unreal Engine (HKLM\...\{C5027D29-72B6-45F1-95C7-AAB98C31F69D}) (Version: 1.1.12.0 - Epic Games, Inc.)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Urban Terror Beta 2.0 (HKLM-x32\...\Urban Terror Beta 2.0) (Version: - )
Urban Terror beta 2.6 (HKLM-x32\...\{DD373670-3BE4-48AA-BE81-B57371A9A5DE}) (Version: - )
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Visual Studio 2013 Update 3 (KB2829760) (HKLM-x32\...\{86438e3d-7f83-4dd2-94aa-047e7c3974cb}) (Version: 12.0.30723 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VS Update core components (x32 Version: 12.0.30723 - Microsoft Corporation) Hidden
VTFEdit 1.3.3 (HKLM\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 3.6 - Bazis)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Zombie Panic Source (HKLM-x32\...\Steam App 17500) (Version: - Zombie Panic Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll ()
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> E:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1780743532-3999283199-1341137972-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 
==================== Restore Points =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 10:34 - 2015-04-29 13:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0C8908EA-674F-48D2-BDCA-1710CD5A3874} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {236CE107-5E4F-400A-B474-689D349AF54D} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {3823C97F-D507-4CD7-9C4D-F924C742F7E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17] (Google Inc.)
Task: {3D596B38-E672-46F7-9240-7FB72CDB34AA} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3E5907A9-F9FC-46FC-AB3B-68BEA1526C08} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {532B794A-3F55-4AB5-A942-96589E1FF860} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-17] (Google Inc.)
Task: {5A35809C-575D-40D2-96E8-628DB007B098} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {731272CC-2F97-45A3-95C6-B0E1A3B1A129} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {7F1996C9-8AEE-46D4-B087-1BFC20FE2F0B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {8F5966B7-1231-492F-95A7-50C00CFDC601} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-04-21] (COMODO)
Task: {9534A205-FA6A-473F-80B3-9FC32DE132C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-21] (Adobe Systems Incorporated)
Task: {97BE7E72-1183-4E54-8C8A-A22703D814D8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A520176F-741D-44E7-9626-A0F6F8609946} - System32\Tasks\AdobeAAMUpdater-1.0-admin-PC-admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: {ACEAC37C-0B0D-49B5-A277-98799CBFD1B6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AFED6019-C8B1-462B-9014-55D3936ED407} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-04-04] (Microsoft Corporation)
Task: {BBFAC56D-BC96-45EB-93A5-A94D187F756B} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {DB190DBA-14BE-40EA-9847-487E87DE1E2A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-04] (Microsoft Corporation)
Task: {E88E7031-8D33-482F-BF35-24D9BA015F26} - System32\Tasks\{FFA51477-CFA3-4FAF-A5C0-CA57DE3D9724} => E:\Development\Git\Git-1.9.4-preview20140929.exe [2014-10-30] (The Git Development Community )
Task: {EFB56F9A-0D76-41F2-9128-5EAEEE7B3B23} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-04-21] (COMODO)
Task: {F4BB39DC-EDBB-4C1D-BE31-0176E5D5BAB9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-26] (Adobe Systems Incorporated)
Task: {FC1C347B-0C81-4213-9B07-FF500235B3A5} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-06-17 14:54 - 2013-01-18 23:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-11-08 03:16 - 2013-06-28 23:28 - 00084616 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-05-29 15:09 - 2014-05-29 15:09 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-11-24 13:37 - 2013-11-24 13:37 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-11-24 13:36 - 2013-11-24 13:36 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2014-08-22 16:06 - 2014-08-22 16:06 - 00792424 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
2014-08-22 16:06 - 2014-08-22 16:06 - 00087400 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll
2013-12-08 17:04 - 2013-01-25 11:08 - 00089600 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL
2013-12-08 17:04 - 2013-01-25 11:06 - 00328704 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-06-17 14:49 - 2013-03-19 21:25 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-08-08 04:23 - 2014-12-27 22:42 - 01544704 _____ () C:\Users\admin\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe
2012-06-13 10:34 - 2012-06-13 10:34 - 01213952 _____ () C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2013-04-15 17:39 - 2015-01-09 06:02 - 00067808 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Program Files (x86)\Steam:com.dropbox.attributes
AlternateDataStreams: C:\Windows\unins000.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepdu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\aitstatic.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidcertstorecheck.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidpolicyconverter.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appidsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiodg.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ci.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\conhost.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\EncDump.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwcollector.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwcollectorres.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieetwproxystub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iernonce.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\iesetup.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ieUnatt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\JavaScriptCollectionAgent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Lagarith.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\lsass.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\mshtmlmedia.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msmmsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\MsSpellCheckingFacility.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\nlasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcadm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcaevts.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcalua.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcasvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\pcawrk.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\perftrack.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\powertracker.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\profsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\rstrui.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\schannel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\setbcdlocale.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\smss.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\srcore.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\sspisrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\TSWbPrxy.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\win32k.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winload.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.efi:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winresume.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WinSetupUI.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\winsrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wow64win.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wu.upgrade.ps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuauclt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuaueng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wucltux.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wups2.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\adtschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\apisetschema.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\appidapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\atmlib.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioEng.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AUDIOKSE.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\AudioSes.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\auditpol.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutScreenCapturing.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutScreenCapturingFilter.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\BytescoutVideoMixerFilter.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\credssp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptnet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptsvc.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\cryptui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dciman32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmmgrtn.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxmasf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieetwproxystub.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iernonce.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\iesetup.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ieUnatt.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\instnm.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\Lagarith.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\lpk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mferror.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfplat.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfpmp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msaudite.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msdxm.ocx:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\mshtmlmedia.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msobjs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msscp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\msxml3r.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ncsi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\nlaapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\rrinstaller.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\schannel.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\secur32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\setup16.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\spwmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\srclient.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\sspicli.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\TSpkg.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\ubpm.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\user.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WindowsCodecs.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmp.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\WMPhoto.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wmploc.DLL:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wow32.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapi.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuapp.exe:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wudriver.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wups.dll:$CmdTcID
AlternateDataStreams: C:\Windows\SysWOW64\wuwebv.dll:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\appid.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\BazisVirtualCDBus.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\epp64.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\PEAuth.sys:$CmdTcID
AlternateDataStreams: C:\Windows\system32\Drivers\ssudbus.sys:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\1944_Moro_River_V1.heightmap.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\20698CF5D4184E219F93000DFCDB0481EC1B30EC.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\73_asia_korea.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\adwcleaner_4.202.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\adwcleaner_4.202.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\Contagion Hi-Res Screenshots:com.dropbox.attributes
AlternateDataStreams: C:\Users\admin\Desktop\cotv__special_weapons_by_prospass-d4adx0u.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\DaxHQGrungeSetA.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\EmsisoftAntiMalwareSetup.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\fosynXK.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\FRST64.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\FRST64.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\GirlPower_2012.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\GS_SciFiHallway_Wip_1.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\joure_flyingship.fbx:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\joure_flyingship.fbx:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\jpg.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\JRT.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\JRT.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\mbam-setup-2.1.6.1022.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\mclaren_p1_by_gurnade-d5xwt4d.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\metal_scratches_free.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\metro_for_steam___3_9_1_by_boneyardbrew-d4u3kjv.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\Monochrome Inc - Joure Visser Contractor Agreement - Fully Executed.pdf:com.dropbox.attributes
AlternateDataStreams: C:\Users\admin\Desktop\new-counter-strike-global-offensive.png:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\player.png:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\player.psd:$CmdTcID
AlternateDataStreams: C:\Users\admin\Desktop\player.psd:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\retro-blue-abstract-design-1.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\rkill.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\RogueKillerX64.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\ronin.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\s0nkite_Spiderman_pattern.zip:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\scc_sample.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\steamworkshop_webupload_previewfile_417984813_preview.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\UMP-45-corporal-workshop.jpg:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\your_name.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.170844v0] Rurouni Kenshin 1080p 2012.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.179859v0] [SubDESU-H] Idol Sister - 01 (852x480 x264 8bit AAC)[191E08AC].mp4.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180235v0] Nosewasure The Animation (SubDESU-H).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180491v0] Rurouni Kenshin Kyoto Inferno.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\[BakaBT.180497v0] Rurouni Kenshin The Legend Ends.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Desktop\“Unbreakable”_-_Songs_of_the_28th_SEA_Games.mp3:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\audacity-win-2.1.0.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\audacity-win-2.1.0.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\DTLiteInstaller.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\DTLiteInstaller.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\ezvid0982d.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\ezvid0982d.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\FreeYouTubeDownloaderOC.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\FreeYouTubeDownloaderOC.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\FYTDSetup.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\gcfscape185.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\gcfscape185.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\Moo0_VoiceRecorder_v1.43_Installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\OBS_0_64b_Installer.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\OBS_0_64b_Installer.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\popcorn-time-0.8.0.2-setup.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\tr83pe.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\tr83pe.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\WinCDEmu-3.6.exe:$CmdTcID
AlternateDataStreams: C:\Users\admin\Downloads\WinCDEmu-3.6.exe:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.147167v0] Gundam Seed Destiny SE (Dual Audio).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.157232v2] Mobile Suit Gundam 00 Special Edition (1080p).torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.162136v1] [Cman]_Mobile_Suit_Gundam_00_'A_wakening_of_the_Trailblazer'_[Blu-Ray_1080p][v2].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.162249v0] [EG]Gundam_Wing_Endless_Waltz_Special_Edition(1080p_FLAC).mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.178852v0] [SubDESU-H] Samurai Hormone The Animation - 01 (852x480 x264 AAC)[B34D9614].mp4.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.179321v0] [BBT-RMX] Mobile Suit Gundam The 08th MS Team - Miller's Report.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.180148v0] Toki_no_Tabibito_[H264,690p][Ondatry proti násilí & Nyadro].torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[BakaBT.180269v0] [m.3.3.w-Doki]_Friends_Mononoke_Shima_no_Naki_720p_[64606DAC].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Downloads\[yibis]_One_Piece_673_[720p][CACDE0E7].mkv.torrent:$CmdZnID
AlternateDataStreams: C:\Users\admin\Documents\joure_flyingship.fbx:$CmdTcID
AlternateDataStreams: C:\Users\admin\Documents\joure_flyingship.fbx:$CmdZnID
AlternateDataStreams: C:\Users\admin\Documents\ufonts.com_din-regular.ttf:$CmdZnID

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1780743532-3999283199-1341137972-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 156.154.70.22 - 156.154.71.22

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: tvncontrol => "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{7CB3A99B-3EB7-49D1-88DF-199F27700E7C}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{DD30F675-FFA1-4675-90C2-14176B14EA2E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8CDF2189-5BE0-4F18-AE5D-6D36C3E02E96}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{97BFC478-CDFE-48EC-9A50-277DC494304C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{9893C85A-6ECF-4ED7-9982-0CB8FEE4F2FB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{7E96C66A-69AF-4A69-BDD8-561A19C07596}] => (Allow) C:\Program Files (x86)\marvell\storage\apache2\bin\httpd.exe
FirewallRules: [{A547C2F9-A7F8-42B9-9DD6-C388271F711A}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{13C6AA5B-63FB-4EC8-9710-3E2A975ABD5E}] => (Allow) E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{80EC69F3-3972-431F-B369-97DA7A7F66D7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{92A06144-02E2-49D0-A57D-93B3BCB97227}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{968EE526-3BA8-4636-A12C-6C8C8F689FE8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{7DA520BB-B09C-4F32-92BD-D3808CDA981C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{29BE4878-7666-468F-AFDF-72927A040486}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{5955047A-8881-47BD-A220-CC8E3EDF14BA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{2923585F-C37C-4AB4-9E7D-C3EDDA8F962B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{7B7C23EA-5AD5-4712-8CEC-8FBD9C66DE2C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{E12E47FB-33C9-4EB6-A3EC-6AC3E12CF7B5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{472F2739-4FBC-412B-A744-2435CEF84AB4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{600B3B58-31C2-4E4C-8FED-A6277618B80F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SleepingDogs\HKShip.exe
FirewallRules: [{455FB411-4446-4BE0-BA02-BFBC637C210E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{16ACE72D-E663-4127-9152-DD7725571E45}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{10E8B4EF-C627-4BC9-AFE3-58489E4247AE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\KentuckyRouteZero\KentuckyRouteZero.exe
FirewallRules: [{03018F96-1B92-49E5-9538-92494758C5BF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\KentuckyRouteZero\KentuckyRouteZero.exe
FirewallRules: [{67A2AB0A-1544-44CF-8DDA-2CFE39648B65}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Home\home-win-eng.exe
FirewallRules: [{7746E55F-1D09-4002-9C5E-B94044875A52}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Home\home-win-eng.exe
FirewallRules: [{EFFECDD6-4BA7-43D5-9F3F-042B63C5B3C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{531E0260-CD61-473B-A8A1-EAC76C608C69}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe
FirewallRules: [{694EE59D-929D-46FD-ABB2-B5AA2DF46F3D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{570FA7B2-1A8C-483C-A492-568DDA7B9433}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{F59256BC-D820-464A-A2B5-175C6C792026}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{2C3F6C7E-EE67-46D3-A38E-C643EAE44024}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{BBA78F4A-AE18-47EF-8DD0-27CAC36E235C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Gone Home\GoneHome.exe
FirewallRules: [{0E10CD20-1F65-45B8-9633-EEF466A99FE4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Gone Home\GoneHome.exe
FirewallRules: [{73094C45-9B66-4143-AA4C-61504FA3E51B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{23370E93-549C-4DAA-BBB6-F30EEA9C1C3B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{83DAA4FD-71FF-4EB4-9923-FEA002BB16CC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{4C53938B-7FA8-4426-B413-1980F14AA723}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{C0E093FA-A7B0-4B08-B8D8-DF9CA4E2F6FA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{C461AA2C-163D-4B6D-A218-DB3348E611C1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{B1A8C2DD-E428-44DA-89AA-F06524636410}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{FDCB8F8E-6D71-4FB9-909C-4002122DB875}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{B7D8F3C9-5513-45A7-B44B-DD973338CD4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{99844E75-0879-45A1-82A5-A6A415FEE20E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{3B278FA1-175A-4C56-9DC9-7A8CC62896A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9ECBE57D-A46D-4E84-8051-03C7FF8B8EA6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{54EFB596-B35F-48D9-9EDF-FE6ADBA4D548}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{C11DF764-AF55-4F78-9321-3B6372016F31}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{462354AF-636C-4E07-88E9-0686739F065A}] => (Allow) C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{3F0D338C-348B-4EE2-B368-9F3DD133EA7B}] => (Allow) C:\Users\admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{9CC79320-7257-4132-95BE-DB8A42C2D340}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{14ECF9B1-4F2A-45C0-9EF2-C9518A1C010C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{20AC28B4-7614-416C-85BA-EFC2BCA8253E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{D074002B-7AB1-435B-B131-CC50961EEF64}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{290E11CF-00C4-437C-BC9D-A5BC4C955F8E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{E870A08F-5582-4C47-AEDC-C3C31A8614F1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{9D9A8992-A3CE-49A9-9ECE-95B8C4F62E5C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{719F57BE-F5C8-47C3-9272-93FE738C5C54}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{97B3AA60-7F9A-48A0-B981-529D703F0246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AD599567-3C6E-43A8-997D-E114B028ADA8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{84627168-48FF-49AD-83A1-03C77E19560D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{B03982FF-9D2A-42C9-840A-510B7005D534}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{2A93E952-9388-487D-BEDB-7EB0B7C44450}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{0425DE23-A6B3-4E15-8FED-7591D47676D6}] => (Allow) E:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{F1C0914B-53A2-4C92-8636-D84B8884C99B}] => (Allow) E:\Program Files (x86)\Crazybump\CrazyBump.exe
FirewallRules: [{8553D354-530F-4232-9189-CDB22267A8FA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{B6A9523B-E1E2-4905-8355-5DECE655693A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{BD463A80-B0F3-4806-9D80-CA295B4EEFD0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{9D896664-B451-4255-A74E-24126D1EC954}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{FF9EF349-0EC5-42AB-9595-EBDDFFA96FD2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [{8661CD0C-F2BE-4407-A90F-68A4C7A9F084}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Underworld\tru.exe
FirewallRules: [{09ECBE51-E1EE-4EDD-9072-1A78F41180B3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{8B07084F-A498-4B28-A4AD-95D8A423EE59}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{7F6E6CCC-743C-44C7-B15C-0E21BA6936C8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{83DF827E-691A-4B23-AC15-0C1C38397E14}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Anniversary\tra.exe
FirewallRules: [{9A0FF8A9-1433-4A4C-B9FE-A1FC2F98F980}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{060769F6-6445-4054-9455-7862B5D444B3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{2B8B4523-FAC1-4F57-9161-97138216C1D6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [{767D9937-68AC-4B8E-B342-70DBE9C11C9A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Tomb Raider Legend\trl.exe
FirewallRules: [TCP Query User{3A214CFC-1C94-4E0D-8E53-8062F3E40FD7}E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe] => (Allow) E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
FirewallRules: [UDP Query User{BD70F296-8B80-479C-8E77-33B79ECBE74B}E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe] => (Allow) E:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
FirewallRules: [{472B0D41-2E94-4A28-A248-D9049EF54EB0}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{CE8E7A60-E92C-4938-8CA2-12542A66C6B6}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{84B5CA7A-E955-460E-AAF7-32ADC0A192B8}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{9A4AC9EF-8382-4703-97AD-A3691C1BA0F2}] => (Allow) C:\Program Files\TortoiseSVN\bin\TortoiseIDiff.exe
FirewallRules: [{E029EAF6-911D-4ACB-BC7B-7253082D28B7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{497CCC1E-B021-41B1-AEA8-467F007333F2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{81F9DE33-3E98-45E0-AC67-61333B7ADE95}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{03F34224-C5A1-4D89-B649-590219EB0355}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8AEE5683-4F3C-48C0-9EEA-9D7AA64F779C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Superbrothers Sword & Sworcery EP\swordandsworcery_pc.exe
FirewallRules: [{259C079F-F118-43D2-8487-679195CF9B4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Superbrothers Sword & Sworcery EP\swordandsworcery_pc.exe
FirewallRules: [{29A94132-8131-40E9-8A73-CDE595DC1401}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{DF509209-082B-4EF6-9F1B-728ECDEF176B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Bioshock\Builds\Release\Bioshock.exe
FirewallRules: [{8007ABA8-90C4-45DF-8DEB-BC2E7937510E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{D4392050-7A0E-43B9-A971-7EC3B0350CB7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{81059D85-8B33-4735-A714-F7E38119BD41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{C0C487EE-670D-4B9D-A838-DD20269049D3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{0315E908-122C-4D1E-92F7-AF6ECC0F58FF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{4BD7535B-B6E6-4CE6-A251-2DB83A130D81}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{77A87D73-6317-46A9-9C6A-D7462E829A33}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{4C82FE59-6B83-489B-8045-DC65EA98DA1A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\Benchmark.bat
FirewallRules: [{6325E4C1-B44D-4FDF-8A14-0F6357B76C80}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{5032ADE4-8702-4BC1-A075-07116D220022}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{1F8FEC32-96CC-4507-88CC-C2F031B01501}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{6945CB0E-8799-484A-BD43-876EBE3A7432}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{40B206EA-BFD7-41DB-AFB9-A691E22BDDBE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{714289F6-81F5-4864-A77D-C81480EAA078}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{E761AB2F-9D77-455E-94E7-1C32705E8A67}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{1E07AF35-48E8-42C8-B3BD-4F185FF15E3A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{C0123A82-4B30-491A-9EC0-E3F29F1B7CB3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{6F95B717-D3D2-4C27-95BB-87E0E51653C9}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{D9E92B0B-D300-4610-B403-F2A608150084}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{D2354161-5766-4CEC-A364-E389135D5D01}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{DB67D39B-7658-43DE-8722-8C2A087FD328}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{711C6F27-8A4D-4D97-9FF2-5F14A4FE34FC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{CCFFD7CC-1838-4BEA-B334-9CBD337959F1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{33EB4E98-B571-4A58-BA37-820CE84A6A13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{A1516D7D-2264-4095-8B85-E829A7ED2E41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{531AA86B-8756-4B8C-89A7-6542DD681869}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{1F1980CF-4397-4B78-9D28-82584B29AEC3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{264C7810-1147-4A8D-8695-296E401FECFD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{E00DD1B1-01CE-4CF2-A6F7-96F392D9D863}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagionds.exe
FirewallRules: [{24FB00DD-FF54-409E-9407-1FD04017CCCA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagionds.exe
FirewallRules: [{97A32A62-75C6-44BA-84E2-0E533F431F38}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4E9575A6-D556-4AF6-923F-EC76657C5B80}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A3DEAC96-4108-4E17-9156-90FDFDA50A72}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{460DBE31-F811-4041-A5DB-7B60C0EB4B73}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{1CB6B997-2FF7-4D20-9640-DFE2D16E973C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{04210183-6D24-4CB7-B3F8-924833F935A8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4793E080-729C-4EC3-BDD9-8912C303300A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{9EEAB186-AE66-4ED5-97D4-3F469D84BAA0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alice Madness Returns\Binaries\Win32\AliceMadnessReturns.exe
FirewallRules: [{4824C4F1-60FD-4EDE-BFCC-734993A7B641}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 6\BH6.exe
FirewallRules: [{5F943D04-77FC-4F23-8218-EEF58E76C81B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil 6\BH6.exe
FirewallRules: [{E7323C72-2181-4066-B59E-A2A865549A09}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{81177A1A-4D4D-4F82-A816-70E3C840F922}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{5C1ADB99-7439-442F-860B-3E8B767A30BA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{4A160E89-C626-4F3F-9889-B3FDF2AA5483}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Grid\grid.exe
FirewallRules: [{1CD1C5A4-49D3-42DE-8BCC-371E2D583103}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{E0B874A0-4732-4F22-A946-D7B0ABB1E895}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{9BBEDB45-4780-431E-ADA0-5FCE602A8028}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{DAAA1A8B-EA28-432E-9644-715DEB68A33A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{936DD4C0-8CD9-4D28-B75A-11BD45B46197}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\bin\SDKLauncher.exe
FirewallRules: [{AFA391EF-8F00-4A3F-824B-D15DF67A1D11}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\bin\SDKLauncher.exe
FirewallRules: [{549269AB-C3A9-418B-9410-F82A939C8181}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{F5124FEE-3720-4F1F-A8E2-ECA5529B4F43}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{51F04A72-49F1-425F-9A00-5FF90A607E84}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{C5EE151D-C72B-40F2-A718-8384F36FA2CC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{8E856403-7AAC-4AE9-9C25-7956EA2050ED}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{1C9E3163-030E-4891-A729-C370D8FA0027}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe
FirewallRules: [{8E61FFE5-75C2-43EE-BFE4-435DF63FA144}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{5738F63E-1AEE-43F4-A91B-B44E8D3953A1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{8EC79A4F-9E30-4B9B-B8EE-D336846DFF19}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Final Hours of Tomb Raider\The Final Hours of Tomb Raider.exe
FirewallRules: [{5BBFC547-75BD-404A-847E-FF1AFCD07385}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Final Hours of Tomb Raider\The Final Hours of Tomb Raider.exe
FirewallRules: [{2BC5A627-4FA9-40A1-8DAC-0977F6C01D76}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{0DE064EA-2DB9-44A9-A99B-DEBE75976929}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{38E17DAE-E1D0-42CF-8ECD-82244105D7FF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{0633CDE8-FB8F-41C0-B67B-68948116657E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{D20ABE68-DEB8-4C4C-A5EB-4C17B2936FC2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{B239033B-38C1-4BCF-ACC5-F3F26B962451}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{498C941F-B985-4F7F-9AF1-1641E6D0A2BC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Final Hours of Portal 2\TheFinalHoursOfPortal2.exe
FirewallRules: [{EA90444A-43B8-499E-9261-7E92687B5A9F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Final Hours of Portal 2\TheFinalHoursOfPortal2.exe
FirewallRules: [TCP Query User{F8C1CFDE-21FE-4028-97BE-3A0A3EC005BB}E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{7CC45CE8-8B90-42F8-A70D-C7B27E1BEEFD}E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{42E136FA-219C-4C6C-B970-5D248C59D3A7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dear Esther\dearesther.exe
FirewallRules: [{5B557D09-D174-4880-90D7-00ED96EF6407}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dear Esther\dearesther.exe
FirewallRules: [{3E88D070-DB73-4A66-B1B8-70185AB3DE7B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{D1E820C1-A5FC-46C4-A599-0B1C9D4746FE}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{62CEF25D-1A1C-4213-A0BB-9451E1219AD7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{79006B4B-3A9E-49C3-8F58-4B3251877306}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{AE1196A1-97E1-4DB5-96BB-33E202D58371}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{E4280D7B-D2FD-4363-99BB-83C112B4C65E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{EB5AD017-21AE-49DF-8396-3DB4E2F21848}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{4B2F28C4-046B-4543-8747-6FC3C163F44D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Mass Effect 2\MassEffect2Launcher.exe
FirewallRules: [{296A8E11-53B5-4D4F-928E-918951203EAC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{F074CADF-CCF4-4F04-91B5-512A6A6044A5}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{9468AC14-733B-493F-A535-B4A6C4415AD8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Need For Speed Shift 2\SHIFT2U.exe
FirewallRules: [{C815893D-AA42-438B-BFE0-C8F110F2C04C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Need For Speed Shift 2\SHIFT2U.exe
FirewallRules: [TCP Query User{58E77491-5657-415A-B590-1C995F55C481}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [UDP Query User{A58075EC-2935-4279-9444-21702D1867A7}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [TCP Query User{000AE437-A26C-4BE2-979A-D8E23C09F89F}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [UDP Query User{F8E8CB09-D41E-4649-81B0-69BA4311A9A7}E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\contagionsvn\contagion.exe
FirewallRules: [{ACE02B3B-27E6-46DB-AF18-7C11C4A75640}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{022BBB61-3C96-4682-A8B7-C9FA5552AD9F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4845A7D7-AB67-47B3-AABF-D3D188BC039C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D03BE4ED-3092-4AA8-9B4A-63D50A7B816D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{08C49A91-069D-404B-A8D1-84C565ECF83D}] => (Allow) E:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{546B44C1-B6AE-437A-9116-6B013B4A0DB9}] => (Allow) E:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{0F69D6B0-3B29-4FA8-BDAC-0C908F1C3736}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{8B750923-DE9F-4724-82F6-F23543C4BEEC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{347370E6-20CD-4EF3-A3E5-0547A512DF8A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{B13D7CD9-DCB4-4E2E-8002-FAAEB95B4E07}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{9E8A92AB-6901-4EA4-A2D3-A26008D7EA80}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{BDC530F6-0086-416B-BA9C-27A6BFD17980}] => (Allow) E:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{3F8CDE92-237E-4EAB-A701-E8EA72ACF78B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\FEAR2\FEAR2.exe
FirewallRules: [{6E0EC26C-8C9C-440C-9EAA-F2E535D0D6D8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\FEAR2\FEAR2.exe
FirewallRules: [{33AEE528-B650-436D-B2FA-20CF795B2EA6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\team fortress 2\hl2.exe
FirewallRules: [{9E997C6E-F53B-4C14-B210-8DF64F484978}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\team fortress 2\hl2.exe
FirewallRules: [{A3A71160-E3C0-49BB-A142-E76222095527}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{F8F07741-6333-44FB-8776-C4EBEE7D78D8}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{7774B242-8EAA-4D0A-B279-0E6D7F6C3309}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{865985C3-4CD2-428E-9007-81E99FACCCFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{F5EA5FB9-1897-4F73-B3CB-D23CBADAB872}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday.exe
FirewallRules: [{710FB901-4245-472F-BB0E-8C168E4E38A3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dino D-Day\dinodday.exe
FirewallRules: [{EB6706B4-F205-48A7-9441-1A3210D3A7E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [{69F33DE9-7F89-485D-BDD0-FFC7471BB4AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [TCP Query User{8AFE7DE9-FE3B-4549-83A1-F2263FF7E75F}C:\program files\spideroak\spideroak.exe] => (Allow) C:\program files\spideroak\spideroak.exe
FirewallRules: [UDP Query User{4152DFF1-C36C-47E5-A950-A21EB78ED761}C:\program files\spideroak\spideroak.exe] => (Allow) C:\program files\spideroak\spideroak.exe
FirewallRules: [{1ECC29FC-AD8B-4BCE-A914-B70078FD182B}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D28E3EE3-2C8B-40DE-8EB2-1744342CAF9B}] => (Allow) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61AC57EA-89EC-427F-A38A-222BFB58F4FB}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{19ED6544-5954-49E4-990C-F42A27DD106E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [TCP Query User{13A603A2-7701-4227-BB13-B3DBDB3AFF09}C:\users\admin\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\admin\appdata\local\id software\quakelive\quakelive.exe
FirewallRules: [UDP Query User{F8D58A0F-C96E-4223-B5EC-95BB9BA7F1B3}C:\users\admin\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\admin\appdata\local\id software\quakelive\quakelive.exe
FirewallRules: [TCP Query User{FC78EC03-58DE-4800-B878-741F41BF6CA8}C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe] => (Allow) C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe
FirewallRules: [UDP Query User{F7D63A68-1EE2-463B-9B62-F9F079AC17D3}C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe] => (Allow) C:\program files (x86)\quake iii arena (complete)\ioquake3.x86.exe
FirewallRules: [{C3ACCA1D-9C7A-4E11-81CE-99C1E98CD771}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe
FirewallRules: [{01826522-D4B3-486E-80AC-73605407DF4A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe
FirewallRules: [{652F08EA-9032-4639-9AF2-BB3C749BDC70}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe
FirewallRules: [{DFB3B4F4-0208-421D-AAE3-FD2ADC6BACC1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe
FirewallRules: [TCP Query User{64E01818-3E0F-4F0A-8597-A6158C561A91}E:\program files (x86)\utorrent\utorrent.exe] => (Allow) E:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{EECE5C65-9DB4-4ECE-82D8-D27695444D91}E:\program files (x86)\utorrent\utorrent.exe] => (Allow) E:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [{5672D9DB-5F72-46AC-A337-EC7359323D1B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{B35FDC9D-B651-4EC9-8084-CCFB15AA826C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{1192E3DE-9C57-48E1-9EE8-5E5ABE363376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [{8F94A8FC-2021-468F-9D54-3E0FB9085A48}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [TCP Query User{A85FD3A2-46BC-449D-BA1B-51F164475AB5}E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{4E1DC5FA-D15B-4A10-8C5A-05CA531555BB}E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\win64\ue4editor.exe
FirewallRules: [{6C9E92D7-15BE-4CD3-8352-D8A3256A6A34}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [{2952040A-B42F-4004-BE79-D6D667241F30}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [TCP Query User{F0E13060-7581-4808-B66A-8A1DFFFD830D}E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{2564B80F-D145-4E10-95C0-1581EA555E1A}E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.4\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [{0FB40D0F-EACB-4ED2-B852-8D894DCCB097}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\counter-strike source\hl2.exe
FirewallRules: [{21ABAAC3-14FB-446D-99EC-CA76ADB0D269}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\counter-strike source\hl2.exe
FirewallRules: [{60764F28-6957-4142-979E-FE7D0CC3D14D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\StrikeVector\Binaries\Win32\UDK.exe
FirewallRules: [{850AFE57-8AC1-4745-B2C4-1A33240BD419}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\StrikeVector\Binaries\Win32\UDK.exe
FirewallRules: [TCP Query User{5D00329B-1A6B-4065-B55D-530F56A95C9F}E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{6FFBCB7B-04E9-43E1-A542-8F8D6D0D429F}E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\win64\ue4editor.exe
FirewallRules: [{2796443F-0770-464A-B0E2-D69F893B8E3A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Afterfall InSanity\Binaries\Win32\InSanity-Win32-Shipping.exe
FirewallRules: [{92C441AB-0575-4280-98D4-EF16DD7453EF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Afterfall InSanity\Binaries\Win32\InSanity-Win32-Shipping.exe
FirewallRules: [{A0FBB507-3451-49B9-87E2-6C8355028F09}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\WDExpress.exe
FirewallRules: [TCP Query User{D2240C86-3D72-4C09-BD72-5698DB838222}E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{A2A94DDD-D467-4C42-B207-BA607A9E4F41}E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.5\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [{981FDC35-E49C-47F3-A4B2-DA933FA60E59}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{D56F207F-5376-4639-B4F7-4D36E7771C16}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{D49CB5D4-B799-4E1D-BE18-FF8662269E41}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{F674675F-14FD-474F-BE5D-04B216F3D487}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E3D52AE4-525E-41DE-93E5-FAF151B8327D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe
FirewallRules: [{40F79069-5471-4FDC-906B-84189D094BF7}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe
FirewallRules: [{55D70BF8-B69E-4383-9DBD-5DDAE184AF2C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{B59856EE-2730-4BA3-A6A3-7706D01276A9}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{38D5C9D9-F929-4E5F-A825-88505B40D020}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{A6DBBA22-6142-4CFE-9337-CD00CDA05AAA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{DFD11C86-5677-40AC-9F74-5CB196614FD0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\MirrorMoonEP\MirrorMoonEP.exe
FirewallRules: [{0D89D298-C621-4B8E-8B77-0707155D90C5}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\MirrorMoonEP\MirrorMoonEP.exe
FirewallRules: [{32B71ABF-6407-4C2D-AF05-1539373410FB}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{5D34C076-2F47-4E36-9A2B-86CF9C4E1D99}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{CA215864-E941-4252-9F99-611613185968}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{3D5A399C-92CC-4674-999F-A107C24DDCE6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Transformers War for Cybertron\Binaries\TWFC.exe
FirewallRules: [{C5F0A863-E562-4C06-922D-ABF297E475A3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe
FirewallRules: [{BAA365E2-4144-4A3A-BB1F-B7C5BFF3F87B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe
FirewallRules: [TCP Query User{059D9639-EA80-43B0-8D79-52FE312E09BA}E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{F9F208C8-EDF9-482C-BDD7-EF702506272D}E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\win64\ue4editor.exe
FirewallRules: [TCP Query User{339D9CBD-25E2-4C96-8291-BE5E629F6780}E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [UDP Query User{B6FB4A1C-F8CE-478E-9ADD-7170C2DA6A8E}E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe] => (Allow) E:\program files\epic games\4.7\engine\binaries\dotnet\swarmagent.exe
FirewallRules: [TCP Query User{D910F1BF-E65E-483F-A5E7-5D64FABD22BD}C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe] => (Allow) C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe
FirewallRules: [UDP Query User{579443A7-538A-46CD-B1DE-ED9066214134}C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe] => (Allow) C:\users\admin\documents\unreal projects\shootergame\saved\stagedbuilds\windowsnoeditor\shootergame\binaries\win64\shootergame.exe
FirewallRules: [{08387549-513B-4A21-A16C-830A438ACE28}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{98A13DD3-F9EB-4878-A2D4-6C0774A6BD38}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{5E0B2291-DC1F-4637-B7DC-60420CB3698B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{AFDD4BA2-FD43-4C85-BBBB-F80043DB5979}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{FC13298F-AA2C-4A88-99C1-90955D35E1C2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{42BBF559-31B8-4868-8B6C-43F4108C6768}C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [UDP Query User{2B66BB28-93DD-4E91-9FC8-DA1FE57C86FA}C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\stardrop_prototype\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [{3E704B44-BAF9-4F6E-AA6A-BC33111F3A1B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{E387293B-88BD-420C-A14E-0B3A5DE61956}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{599BC358-4C79-40FF-A4C1-68AFAEAF4257}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{D1844C4E-51E1-4B04-926B-8F308CABE94E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [TCP Query User{1026A22C-293F-4658-8D98-427EE202447F}C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [UDP Query User{D5F90C4B-C35F-4C01-874E-2C45D51245E1}C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\admin\documents\unreal projects\nature\saved\stagedbuilds\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [TCP Query User{63573C47-C001-45A0-8761-3808EA0B44E5}C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe] => (Allow) C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{B504980F-0B73-42C8-A65B-8EC73071FE75}C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe] => (Allow) C:\users\admin\appdata\local\popcorn time offical\node-webkit\popcorn time.exe
FirewallRules: [{D5F7AA51-B44A-4937-88C2-DB42E50AA8C3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{1E365919-7210-425C-AC20-2C813253E995}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
==================== Event log errors: =========================

Application errors:
==================
Error: (04/30/2015 11:37:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/30/2015 11:36:18 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 169.254.182.47 for ServerName .

Error: (04/29/2015 03:17:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.17728 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 113c

Start Time: 01d0824c7b24793e

Termination Time: 4

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (04/29/2015 01:46:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/29/2015 01:44:35 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName .

Error: (04/29/2015 01:34:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\wbem\wmiprvse.exe; Description = ComboFix created restore point; Error = 0x8007043c).

Error: (04/29/2015 01:34:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007043c, This service cannot be started in Safe Mode
.


Operation:
Instantiating VSS server

Error: (04/29/2015 01:34:18 PM) (Source: VSS) (EventID: 18) (User: )
Description: Volume Shadow Copy Service error: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name IVssCoordinatorEx2 cannot be started during Safe Mode.
The Volume Shadow Copy service cannot start while in safe mode. [0x8007043c, This service cannot be started in Safe Mode
]


Operation:
Instantiating VSS server

Error: (04/29/2015 01:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/29/2015 01:21:11 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName .


System errors:
=============
Error: (04/30/2015 11:51:20 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 20.

Error: (04/30/2015 11:39:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/30/2015 11:39:08 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (04/30/2015 11:38:59 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Intel(R) Rapid Storage Technology service to connect.

Error: (04/29/2015 05:37:55 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (04/29/2015 01:47:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (04/29/2015 01:47:00 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (04/29/2015 01:43:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (04/29/2015 01:43:22 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (04/29/2015 01:43:22 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}


Microsoft Office Sessions:
=========================
Error: (04/30/2015 11:37:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/30/2015 11:36:18 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 169.254.182.47 for ServerName

Error: (04/29/2015 03:17:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE11.0.9600.17728113c01d0824c7b24793e4C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (04/29/2015 01:46:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/29/2015 01:44:35 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName

Error: (04/29/2015 01:34:19 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x8007043c

Error: (04/29/2015 01:34:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x8007043c, This service cannot be started in Safe Mode


Operation:
Instantiating VSS server

Error: (04/29/2015 01:34:18 PM) (Source: VSS) (EventID: 18) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x8007043c, This service cannot be started in Safe Mode


Operation:
Instantiating VSS server

Error: (04/29/2015 01:24:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/29/2015 01:21:11 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.14 for ServerName


CodeIntegrity Errors:
===================================
Date: 2015-04-29 13:41:46.624
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\your_name\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-04-29 13:41:46.608
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\your_name\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 27%
Total physical RAM: 16271.83 MB
Available physical RAM: 11803.81 MB
Total Pagefile: 32541.85 MB
Available Pagefile: 27145.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:467.49 GB) (Free:255.78 GB) NTFS
Drive d: (BXJG_SCN) (CDROM) (Total:3.87 GB) (Free:0 GB) UDF
Drive e: (New Volume) (Fixed) (Total:1395.3 GB) (Free:687.85 GB) NTFS
Drive f: (New Volume) (Fixed) (Total:1862.89 GB) (Free:513.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 1DDE34D6)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
 
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
 

Attachments

  • fixlist.txt
    29.8 KB · Views: 1
You must log in or register to reply here.

Similar threads

L
Solved Unknown spyware/ Monitoring/ Hijacking of my devices
Replies
15
Views
3K
Broni
Broni
Nicki
Solved Must have picked up something... some COVID computer variant???
Replies
9
Views
3K
Broni
Broni
E
Solved Svchost.exe launching multiple iexplore.exe - unknown cause
Replies
23
Views
3K
Broni
Broni

Latest posts

Back